$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json) Hash identifier: Xk3nBZY5cEeZOuTRCxOZcRd/OelRevCHCmh+gm1E+3s= Subject key identifier: 2B:08:3A:B3:A7:70:BE:5E:E1:53:73:CB:2A:DB:72:5C:16:DC:2A:F4 Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Certificate serial: 7E43C44734B9904239459D633ADE94B848AFC1FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft Manifest number: BA Signing time: Thu 17 Sep 2026 10:36:41 +0000 Manifest this update: Thu 17 Sep 2026 10:31:41 +0000 Manifest next update: Fri 18 Sep 2026 11:07:41 +0000 Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=) 2: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=) 3: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=) 4: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: 1wgwchBU+UYIHLhm2WwmSd+9yEOrSeeDwCCbTS+evA4=) 5: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:43:c4:47:34:b9:90:42:39:45:9d:63:3a:de:94:b8:48:af:c1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Validity Not Before: Sep 17 10:31:41 2026 GMT Not After : Sep 18 11:07:41 2026 GMT Subject: CN=2B083AB3A770BE5EE15373CB2ADB725C16DC2AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:9f:8f:87:5f:1c:9e:ed:6a:85:05:6d:16: c0:00:02:68:36:11:e5:b7:e0:33:ce:18:0f:fa:15: 00:7c:4d:d3:80:24:30:f3:d2:0f:48:be:bd:1d:81: c0:ec:49:0d:f7:22:0b:74:58:87:16:31:ee:fe:d1: 12:d3:a5:79:7a:ab:a7:6f:5b:a5:a4:61:f4:d3:73: ee:5a:a2:8b:aa:71:87:5f:ff:89:38:44:2d:64:2b: ad:8a:87:13:a8:05:e3:30:03:ce:5e:e1:4d:e5:bc: 58:24:12:d5:58:ee:c3:53:c1:b6:cb:7f:a9:36:62: 22:76:18:1e:7b:93:30:02:9e:0c:d5:f8:6e:aa:85: 74:ed:a4:34:ab:f3:39:01:fd:7e:f5:62:94:a7:c3: 25:8e:ea:ff:25:cf:07:02:d9:f6:ff:1f:de:0e:18: c6:1a:77:fc:54:bd:f0:e7:10:97:b0:88:28:8d:73: 50:4d:d4:2f:d4:58:f7:9a:65:4b:08:3e:9f:4a:74: 81:96:50:26:c7:31:a5:3c:bd:a4:73:66:31:b1:a3: 9b:7c:01:87:52:24:e1:f5:ae:6d:f6:bb:10:0c:61: 1a:76:52:2d:7a:8a:6d:45:13:40:4d:34:0d:f0:29: e3:36:d4:41:66:e4:a2:16:53:90:0a:7d:13:e9:ba: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:08:3A:B3:A7:70:BE:5E:E1:53:73:CB:2A:DB:72:5C:16:DC:2A:F4 X509v3 Authority Key Identifier: keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:33:dd:6d:55:1e:37:b5:10:80:1c:4f:b9:50:f2:6d:c0:d6: 43:70:49:d9:a4:77:7c:a9:fe:24:fa:1d:20:99:97:b5:46:2b: 95:97:b7:53:ca:81:7c:b3:10:cf:7f:c1:00:a3:9e:db:89:0a: b6:e3:0e:be:a8:dc:38:27:2a:a7:6c:b1:a0:d1:18:6c:3c:f6: bc:ff:93:b1:de:e6:97:dc:2b:c1:01:52:b9:b1:c2:97:98:b0: e4:5c:ae:85:d7:d6:c6:45:62:5d:ed:0e:58:59:fd:9f:c8:31: c3:48:87:8a:17:d9:f9:ef:dc:d5:95:53:b5:55:3c:79:e5:90: 8d:c5:d6:32:d6:36:52:18:d3:28:a8:81:9c:52:d3:0d:bf:19: 87:26:4b:1f:2d:5f:56:fd:39:d2:cc:24:76:8d:2d:e1:2f:cd: 27:89:f0:3a:54:94:64:b0:58:af:38:cd:e7:b3:34:24:51:88: 56:f1:58:19:6a:0e:72:e4:37:a3:8a:e6:dc:6d:19:bc:df:b0: 9e:63:71:a3:fd:76:4f:09:20:47:66:14:57:5d:ec:2b:5f:6e: 3a:ed:da:49:8c:2c:96:39:30:85:86:be:3b:c8:6f:5d:a2:43: c0:c6:22:39:97:4e:4f:66:88:ce:b9:a2:76:ef:ee:95:ec:36: 99:2a:5f:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkPERzS5kEI5RZ1jOt6UuEivwf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVG MTg2MzYzQTAeFw0yNjA5MTcxMDMxNDFaFw0yNjA5MTgxMTA3NDFaMDMxMTAvBgNV BAMTKDJCMDgzQUIzQTc3MEJFNUVFMTUzNzNDQjJBREI3MjVDMTZEQzJBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO7p+Ph18cnu1qhQVtFsAAAmg2 EeW34DPOGA/6FQB8TdOAJDDz0g9Ivr0dgcDsSQ33Igt0WIcWMe7+0RLTpXl6q6dv W6WkYfTTc+5aoouqcYdf/4k4RC1kK62KhxOoBeMwA85e4U3lvFgkEtVY7sNTwbbL f6k2YiJ2GB57kzACngzV+G6qhXTtpDSr8zkB/X71YpSnwyWO6v8lzwcC2fb/H94O GMYad/xUvfDnEJewiCiNc1BN1C/UWPeaZUsIPp9KdIGWUCbHMaU8vaRzZjGxo5t8 AYdSJOH1rm32uxAMYRp2Ui16im1FE0BNNA3wKeM21EFm5KIWU5AKfRPpumTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwg6s6dwvl7hU3PLKttyXBbcKvQwHwYDVR0j BBgwFoAUaXsMnjZ+k/QqZpXZj7ag9fGGNjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5NzNiZWItNjZiYS00OGJjLTkzNzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUz NjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVGMTg2MzYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTdCMEM5RTM2N0U5M0Y0MkE2Njk1RDk4RkI2QTBGNUYxODYz NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEw RjVGMTg2MzYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAz3W1VHje1EIAcT7lQ8m3A1kNwSdmkd3yp /iT6HSCZl7VGK5WXt1PKgXyzEM9/wQCjntuJCrbjDr6o3DgnKqdssaDRGGw89rz/ k7He5pfcK8EBUrmxwpeYsORcroXX1sZFYl3tDlhZ/Z/IMcNIh4oX2fnv3NWVU7VV PHnlkI3F1jLWNlIY0yiogZxS0w2/GYcmSx8tX1b9OdLMJHaNLeEvzSeJ8DpUlGSw WK84zeezNCRRiFbxWBlqDnLkN6OK5txtGbzfsJ5jcaP9dk8JIEdmFFdd7Ctfbjrt 2kmMLJY5MIWGvjvIb12iQ8DGIjmXTk9miM65onbv7pXsNpkqX9U= -----END CERTIFICATE-----Generated at Thu Sep 17 14:31:01 2026 by rpki-client