$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft File: D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json) Hash identifier: HN2mjVkS8lFW2r4SrbifYAh/nf+WHrU5LzybW3keQOg= Subject key identifier: 8F:36:39:1E:B0:4B:34:48:62:6E:27:11:79:4B:24:7C:9F:82:BC:18 Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 60EAF38175D738805933CEBC0F771B7826C617F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 01:43:13 +0000 Manifest this update: Wed 29 Jul 2026 01:38:13 +0000 Manifest next update: Thu 30 Jul 2026 04:08:13 +0000 Files and hashes: 1: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: y3y6jgZW5crZn3IJvEvBuJLfjBgU7Ss8833mN8g9q8E=) 2: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=) 3: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ea:f3:81:75:d7:38:80:59:33:ce:bc:0f:77:1b:78:26:c6:17:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: Jul 29 01:38:13 2026 GMT Not After : Jul 30 04:08:13 2026 GMT Subject: CN=8F36391EB04B3448626E2711794B247C9F82BC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:ad:eb:46:73:a9:6f:e8:54:b4:8c:24:f8: 93:15:54:36:75:87:93:2b:38:fd:d1:f6:9e:f2:80: 66:fe:23:71:94:13:44:dc:83:8d:4e:28:15:62:87: f8:ea:4b:27:ac:56:7a:09:b9:11:63:a5:3f:80:64: 41:2e:fc:b8:79:f0:31:93:41:bc:ee:98:81:c3:bf: ee:db:78:17:8a:ae:d0:47:5f:9c:e7:99:fd:3a:b5: cf:5c:48:2d:dd:46:07:67:be:8f:88:03:c2:f2:22: 99:1d:bd:01:a6:04:ac:26:8a:88:e2:e4:56:58:09: d6:2d:d1:3e:4a:fb:17:a0:fe:cb:d7:2a:60:c2:b1: 36:1e:b8:d6:34:ba:28:f4:f8:44:82:8c:0f:7e:9b: 99:74:6f:bd:42:91:53:9b:de:86:67:fc:03:ff:d3: 11:c1:26:ca:4e:d4:04:1d:a9:c8:89:ff:2c:e4:a8: 8f:8c:8f:f1:17:8d:c9:83:2a:99:46:db:5b:e4:8b: 33:12:9b:16:75:a4:d6:44:af:1e:2f:8b:50:6b:9e: e8:b7:b0:95:5e:ad:f2:b6:c5:96:74:97:08:5f:50: ee:3c:f7:68:ab:7b:42:e5:ea:d1:93:96:ae:60:10: 2e:ec:8c:e0:78:0a:8c:32:05:72:cc:71:f7:ac:3c: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:39:1E:B0:4B:34:48:62:6E:27:11:79:4B:24:7C:9F:82:BC:18 X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fe:98:34:db:13:ec:d4:4c:64:5c:44:85:3c:1c:58:d5:64: 9c:6c:a6:c0:dc:d5:ba:60:49:2d:2b:59:7c:ac:cc:85:02:0a: 68:b9:a9:4b:61:52:87:be:26:a9:41:92:76:f2:90:02:94:18: 88:44:71:c0:3e:83:34:22:f2:c5:f6:bd:d3:06:15:7c:c6:49: d9:cb:be:e1:50:38:2a:bb:2f:39:c0:cc:3a:fb:3b:8b:4d:d9: 80:5d:16:ae:2a:1f:27:ab:d7:28:89:bd:cf:72:d4:8c:fa:3c: 36:28:73:2d:7a:0f:ed:64:3d:b6:c2:38:12:c7:72:45:46:0e: 9f:c9:91:39:37:1d:38:d0:c7:c3:7b:3c:6f:b8:59:e1:e9:48: 41:6e:0d:b2:07:e6:81:b7:b4:0f:e0:1d:c1:19:b5:2d:eb:e1: 40:d3:81:2e:d8:a1:1f:72:3e:c3:64:58:f3:1b:ba:e6:e4:d3: d2:c0:17:f3:0d:be:2e:f6:2a:47:f4:b2:8a:5b:ed:25:c6:51: ca:ec:d6:f9:f7:e8:94:a0:79:dd:cb:39:32:4b:f4:fd:64:70: 56:41:10:c0:ea:8c:c2:ab:e5:95:b0:61:15:e6:02:c9:e8:8d: b2:48:03:06:db:dc:5c:00:e5:c5:23:21:f4:7b:61:26:80:ee: 3e:09:1b:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOrzgXXXOIBZM868D3cbeCbGF/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjA3MjkwMTM4MTNaFw0yNjA3MzAwNDA4MTNaMDMxMTAvBgNV BAMTKDhGMzYzOTFFQjA0QjM0NDg2MjZFMjcxMTc5NEIyNDdDOUY4MkJDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3K3rRnOpb+hUtIwk+JMVVDZ1 h5MrOP3R9p7ygGb+I3GUE0Tcg41OKBVih/jqSyesVnoJuRFjpT+AZEEu/Lh58DGT QbzumIHDv+7beBeKrtBHX5znmf06tc9cSC3dRgdnvo+IA8LyIpkdvQGmBKwmioji 5FZYCdYt0T5K+xeg/svXKmDCsTYeuNY0uij0+ESCjA9+m5l0b71CkVOb3oZn/AP/ 0xHBJspO1AQdqciJ/yzkqI+Mj/EXjcmDKplG21vkizMSmxZ1pNZErx4vi1Brnui3 sJVerfK2xZZ0lwhfUO4892ire0Ll6tGTlq5gEC7sjOB4CowyBXLMcfesPLftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzY5HrBLNEhibicReUskfJ+CvBgwHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4 Mzg2QkZBOTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACb+mDTbE+zUTGRcRIU8HFjVZJxspsDc1bpg SS0rWXyszIUCCmi5qUthUoe+JqlBknbykAKUGIhEccA+gzQi8sX2vdMGFXzGSdnL vuFQOCq7LznAzDr7O4tN2YBdFq4qHyer1yiJvc9y1Iz6PDYocy16D+1kPbbCOBLH ckVGDp/JkTk3HTjQx8N7PG+4WeHpSEFuDbIH5oG3tA/gHcEZtS3r4UDTgS7YoR9y PsNkWPMbuubk09LAF/MNvi72Kkf0sopb7SXGUcrs1vn36JSged3LOTJL9P1kcFZB EMDqjMKr5ZWwYRXmAsnojbJIAwbb3FwA5cUjIfR7YSaA7j4JG28= -----END CERTIFICATE-----Generated at Wed Jul 29 13:10:24 2026 by rpki-client