$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json) Hash identifier: WIZ4zxL55Hl7XcWdPR8X/EHEF8Yii4FPqUOIaUVysCI= Subject key identifier: EA:2B:5E:F9:C4:BC:99:1C:F3:D5:55:5E:AD:FF:5D:B7:6A:9B:B2:4D Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Certificate serial: 7BFD5087F8A53E01B614423A1362A0DC023358AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft Manifest number: B8 Signing time: Fri 18 Sep 2026 04:13:31 +0000 Manifest this update: Fri 18 Sep 2026 04:08:31 +0000 Manifest next update: Sat 19 Sep 2026 05:55:31 +0000 Files and hashes: 1: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: 2oxA9psB83KlcD1dLvtvUf4MXJ05iWbCGH1yr9NEAQM=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 05:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fd:50:87:f8:a5:3e:01:b6:14:42:3a:13:62:a0:dc:02:33:58:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Validity Not Before: Sep 18 04:08:31 2026 GMT Not After : Sep 19 05:55:31 2026 GMT Subject: CN=EA2B5EF9C4BC991CF3D5555EADFF5DB76A9BB24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:6b:5e:8c:14:e1:3e:3e:c8:40:64:a7:6d: 10:c3:76:65:29:42:d3:24:92:d4:6e:3a:94:7a:44: e9:21:da:f2:85:bf:7a:fc:d4:dc:94:93:22:ca:62: 64:33:ac:74:f7:b8:c8:b2:84:a5:ac:4a:fe:eb:fe: b3:02:2e:67:f0:4b:8a:1e:92:36:c3:46:59:a1:4d: f5:e9:52:59:58:0e:ca:28:d7:8d:97:7c:b6:32:37: cf:a1:0c:11:12:59:ec:67:82:55:45:4e:8b:be:7a: a0:7e:e1:64:f7:79:82:13:dd:e3:5e:a8:5f:55:1c: 3d:27:93:c4:b7:50:2e:42:bd:9b:68:39:38:16:bf: 7f:ca:2e:85:3c:83:77:5f:8b:a5:08:ca:97:03:19: 06:df:cc:18:78:47:d9:3b:a7:c4:70:a3:5a:72:46: 55:15:30:fa:9f:8b:5e:7b:e3:5d:b1:65:62:65:f0: 0b:5e:5c:87:a1:5b:6c:a8:05:44:e7:e7:16:b3:17: 52:ca:0f:28:d1:36:2d:d2:70:de:fd:2d:95:76:d0: 0f:92:c5:1c:02:88:a2:fb:55:fe:6e:3f:f6:33:ab: f4:fc:d4:c8:5e:e5:fa:10:68:89:90:34:4d:73:55: 32:73:14:ef:c6:a8:bb:10:36:98:4b:78:fb:9a:88: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2B:5E:F9:C4:BC:99:1C:F3:D5:55:5E:AD:FF:5D:B7:6A:9B:B2:4D X509v3 Authority Key Identifier: keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3b:c9:fe:b0:7a:8e:83:9c:1d:59:77:7e:e0:e7:43:0c:51: 7c:78:f3:f8:25:4e:0b:55:6d:dd:55:71:79:d6:7c:39:59:0e: d8:83:6e:95:7f:9c:f4:66:55:b1:55:b2:64:dc:67:24:18:e4: f5:a0:9e:20:33:b6:0b:46:dc:e8:eb:90:3e:4f:72:88:ea:80: e9:2f:aa:16:48:e7:5a:ca:af:d7:6d:9f:34:61:7c:06:c2:22: 86:d0:fe:ce:98:7f:f8:21:34:cd:e0:bd:4c:af:d2:40:ef:9f: ea:aa:9b:73:98:24:a5:cb:6e:10:f5:8f:5e:df:66:44:f8:0d: bc:38:83:09:60:3a:49:f4:56:e8:f6:37:4f:ac:4f:30:e7:7b: 2d:14:0b:f8:0a:3f:01:aa:14:26:bc:6a:e9:47:b2:d2:b7:d3: c0:e8:66:d9:bb:c5:fa:b5:2e:c4:37:5f:87:76:74:48:91:f3: 3e:ee:39:51:38:61:aa:49:94:8e:99:31:f5:cc:c5:47:4a:78: 2a:90:e9:3f:15:05:74:18:5d:d0:ae:27:41:fb:19:2b:66:6c: 64:56:e9:a3:b3:03:7d:a1:72:a0:3e:d6:51:53:e1:e8:f8:88: f0:63:16:d5:3b:93:41:72:76:da:ca:43:53:0e:7a:fa:37:82: 99:2d:d7:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/1Qh/ilPgG2FEI6E2Kg3AIzWK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3 QTBCNjhGQzAeFw0yNjA5MTgwNDA4MzFaFw0yNjA5MTkwNTU1MzFaMDMxMTAvBgNV BAMTKEVBMkI1RUY5QzRCQzk5MUNGM0Q1NTU1RUFERkY1REI3NkE5QkIyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeWtejBThPj7IQGSnbRDDdmUp QtMkktRuOpR6ROkh2vKFv3r81NyUkyLKYmQzrHT3uMiyhKWsSv7r/rMCLmfwS4oe kjbDRlmhTfXpUllYDsoo142XfLYyN8+hDBESWexnglVFTou+eqB+4WT3eYIT3eNe qF9VHD0nk8S3UC5CvZtoOTgWv3/KLoU8g3dfi6UIypcDGQbfzBh4R9k7p8Rwo1py RlUVMPqfi157412xZWJl8AteXIehW2yoBUTn5xazF1LKDyjRNi3ScN79LZV20A+S xRwCiKL7Vf5uP/Yzq/T81Mhe5foQaImQNE1zVTJzFO/GqLsQNphLePuaiGMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ite+cS8mRzz1VVerf9dt2qbsk0wHwYDVR0j BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0 OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2 MUE3QTBCNjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg7yf6weo6DnB1Zd37g50MMUXx48/glTgtV bd1VcXnWfDlZDtiDbpV/nPRmVbFVsmTcZyQY5PWgniAztgtG3OjrkD5PcojqgOkv qhZI51rKr9dtnzRhfAbCIobQ/s6Yf/ghNM3gvUyv0kDvn+qqm3OYJKXLbhD1j17f ZkT4Dbw4gwlgOkn0Vuj2N0+sTzDney0UC/gKPwGqFCa8aulHstK308DoZtm7xfq1 LsQ3X4d2dEiR8z7uOVE4YapJlI6ZMfXMxUdKeCqQ6T8VBXQYXdCuJ0H7GStmbGRW 6aOzA32hcqA+1lFT4ej4iPBjFtU7k0FydtrKQ1MOevo3gpkt1wg= -----END CERTIFICATE-----Generated at Fri Sep 18 21:14:58 2026 by rpki-client