$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft File: D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json) Hash identifier: tDcXyJpz5WEfbH80utUUwJVG2VHzOWtuXlEPfRAbbOU= Subject key identifier: D3:A0:E7:6C:0F:0D:32:16:E0:58:16:50:A7:87:AB:51:ED:09:AE:35 Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 076B5D8FAAEAD31FAEDCF0CECB4404ABBC578A1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 13:34:03 +0000 Manifest this update: Sun 02 Aug 2026 13:29:03 +0000 Manifest next update: Mon 03 Aug 2026 16:16:03 +0000 Files and hashes: 1: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=) 2: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: r+bjAmkqhNjG/ldzPYY0Nt0tcZ7u5caf2ELn4NzvOKc=) 3: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6b:5d:8f:aa:ea:d3:1f:ae:dc:f0:ce:cb:44:04:ab:bc:57:8a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: Aug 2 13:29:03 2026 GMT Not After : Aug 3 16:16:03 2026 GMT Subject: CN=D3A0E76C0F0D3216E0581650A787AB51ED09AE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:c5:ad:60:b1:fe:6e:a9:8a:8a:f4:82:5c: 85:0d:c1:c2:e7:06:43:17:ec:83:fb:d8:f5:ff:e2: d8:bd:06:23:42:c0:58:e2:a3:15:95:03:db:dd:37: 3e:12:5a:53:24:97:37:e5:38:40:22:30:e6:10:67: f9:07:ac:39:cf:de:7e:ea:e9:48:e0:46:e3:27:df: eb:12:51:bd:71:d1:a4:0d:9f:f6:4d:30:be:ba:4a: aa:80:84:3a:b1:f0:9a:51:58:7c:6b:95:1c:0a:8e: 62:c7:b2:0b:da:1a:4e:df:06:5a:b9:c4:55:1c:8b: 55:3c:cb:ba:e8:fd:ed:8a:d3:f6:36:9a:10:7f:3b: cc:37:cc:a7:27:4d:a0:6e:3a:57:56:c7:48:03:e9: 1b:a6:2a:0a:7c:92:0d:d2:e0:6d:8a:e4:13:2e:e7: 69:8d:aa:3a:dd:89:ef:91:df:2a:93:22:c9:88:65: 62:eb:99:d2:f6:c5:9f:b0:af:ae:66:4d:db:8a:ea: 3f:42:dd:e0:7b:41:b1:e7:15:ee:b3:76:73:3b:55: 3d:9d:71:6f:d0:bb:76:de:a5:25:84:7d:e4:85:3c: 35:d1:cb:64:ac:17:2a:75:a5:9e:50:cd:1f:ad:7f: 35:f2:41:63:c0:b6:e0:46:fc:f4:ea:29:0f:40:69: 02:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A0:E7:6C:0F:0D:32:16:E0:58:16:50:A7:87:AB:51:ED:09:AE:35 X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d6:c3:66:0e:4e:24:87:f7:c6:c6:2d:02:ed:67:02:a7:6a: 10:90:e2:07:31:9e:20:61:71:4c:83:50:d5:fd:fb:65:63:b1: 22:a8:25:ab:32:e0:48:00:43:b3:42:28:cc:8b:e2:fd:2d:49: 7c:26:2e:19:10:4f:37:f8:b9:fc:64:fb:22:2a:3d:4b:3d:d1: df:ea:ee:8a:82:67:a4:01:9f:65:ab:e5:13:2c:01:de:8c:24: e3:45:4a:cd:0e:ec:71:c4:05:fb:82:79:6d:cb:ab:95:cb:45: 17:7c:80:e3:49:60:78:69:a5:4b:aa:ac:73:12:7e:4f:ff:c9: 80:9a:97:b4:d6:5d:c3:18:15:b6:1f:dd:20:80:2b:e2:7b:c8: c5:be:5e:aa:00:7e:20:d6:d5:ad:ae:71:d1:a1:9f:44:45:f3: 04:0b:3a:8c:85:b0:cc:e6:6c:af:ad:3d:72:fe:06:a0:e3:8b: 4d:1f:8e:f1:95:5e:c5:6f:1e:0e:b4:f3:d4:dc:d0:32:65:f3: 15:91:3d:ca:1c:ac:20:ec:0a:cc:5a:d0:45:2c:9b:e9:66:2c: 67:b8:2f:ec:e9:e9:b2:5b:6d:59:43:ad:db:a5:d0:65:5b:27: f2:43:99:77:d5:54:89:8b:c5:dd:cb:96:29:1c:c7:55:19:1d: 2f:1f:e7:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2tdj6rq0x+u3PDOy0QEq7xXihowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjA4MDIxMzI5MDNaFw0yNjA4MDMxNjE2MDNaMDMxMTAvBgNV BAMTKEQzQTBFNzZDMEYwRDMyMTZFMDU4MTY1MEE3ODdBQjUxRUQwOUFFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/L8WtYLH+bqmKivSCXIUNwcLn BkMX7IP72PX/4ti9BiNCwFjioxWVA9vdNz4SWlMklzflOEAiMOYQZ/kHrDnP3n7q 6UjgRuMn3+sSUb1x0aQNn/ZNML66SqqAhDqx8JpRWHxrlRwKjmLHsgvaGk7fBlq5 xFUci1U8y7ro/e2K0/Y2mhB/O8w3zKcnTaBuOldWx0gD6RumKgp8kg3S4G2K5BMu 52mNqjrdie+R3yqTIsmIZWLrmdL2xZ+wr65mTduK6j9C3eB7QbHnFe6zdnM7VT2d cW/Qu3bepSWEfeSFPDXRy2SsFyp1pZ5QzR+tfzXyQWPAtuBG/PTqKQ9AaQJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU06DnbA8NMhbgWBZQp4erUe0JrjUwHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4 Mzg2QkZBOTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPWw2YOTiSH98bGLQLtZwKnahCQ4gcxniBh cUyDUNX9+2VjsSKoJasy4EgAQ7NCKMyL4v0tSXwmLhkQTzf4ufxk+yIqPUs90d/q 7oqCZ6QBn2Wr5RMsAd6MJONFSs0O7HHEBfuCeW3Lq5XLRRd8gONJYHhppUuqrHMS fk//yYCal7TWXcMYFbYf3SCAK+J7yMW+XqoAfiDW1a2ucdGhn0RF8wQLOoyFsMzm bK+tPXL+BqDji00fjvGVXsVvHg6089Tc0DJl8xWRPcocrCDsCsxa0EUsm+lmLGe4 L+zp6bJbbVlDrdul0GVbJ/JDmXfVVImLxd3Llikcx1UZHS8f56c= -----END CERTIFICATE-----Generated at Mon Aug 3 01:44:09 2026 by rpki-client