$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json) Hash identifier: UzeXV+c7EOeU79sB6jroYctkrQ7ivNDlZO/5yqmm4TY= Subject key identifier: E2:92:91:BB:DE:BA:B0:23:BC:EC:BE:22:C3:CA:D1:BD:B2:CD:A4:04 Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Certificate serial: 16269A39E853F6995E3C1E4AC79EDCCADE663F00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 17:05:10 +0000 Manifest this update: Sat 13 Jun 2026 17:00:10 +0000 Manifest next update: Sun 14 Jun 2026 20:38:10 +0000 Files and hashes: 1: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=) 2: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=) 3: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=) 4: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=) 5: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: uYZ4oqx6cYThP1v88bDRoNQcEB2pPldeV17rLMpoE9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:26:9a:39:e8:53:f6:99:5e:3c:1e:4a:c7:9e:dc:ca:de:66:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Validity Not Before: Jun 13 17:00:10 2026 GMT Not After : Jun 14 20:38:10 2026 GMT Subject: CN=E29291BBDEBAB023BCECBE22C3CAD1BDB2CDA404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:73:4b:f9:f5:89:c4:46:40:1c:ce:24:93: 48:0f:63:f4:f7:8d:0c:f2:63:3e:08:f4:47:f7:f7: f0:56:7c:4c:6b:f9:a3:17:00:9a:6b:ff:e6:9e:e0: 18:61:d6:b9:59:25:81:d8:a9:22:47:78:47:06:76: c4:57:8e:22:da:42:75:d8:81:a3:14:41:df:3d:b0: ef:14:af:7a:59:06:9a:2f:c1:c5:eb:fd:cb:c1:54: 3c:a8:cb:b1:60:08:44:cd:c5:96:5f:c7:72:59:42: b2:c3:fc:1c:3d:d9:9d:9c:18:bc:93:7b:f3:30:82: 27:da:39:5d:51:3b:a5:1b:6a:c8:8d:3b:ea:a2:78: d5:22:96:f8:cf:60:11:79:cd:87:b0:c7:3c:25:c1: d6:49:fd:2c:21:af:02:87:58:fc:aa:8c:f1:c6:09: b4:99:2d:f3:9c:62:01:d4:ae:33:3e:63:bd:5e:5c: 43:43:c3:ba:f7:24:2f:2a:25:16:39:71:7f:ef:24: 0e:29:d1:22:66:f7:06:76:9e:52:08:1f:33:e6:fb: a2:de:fa:42:c7:7a:ed:1f:a4:02:06:3f:15:9e:cd: 05:40:ee:50:d2:f7:e0:77:51:da:37:23:e1:10:d7: 6b:f4:90:b9:12:89:34:9f:cc:85:7b:78:5c:85:5f: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:91:BB:DE:BA:B0:23:BC:EC:BE:22:C3:CA:D1:BD:B2:CD:A4:04 X509v3 Authority Key Identifier: keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3d:40:6a:21:b2:e3:41:e4:23:48:d6:2b:c7:d2:85:28:18: c5:5d:05:1c:34:64:be:59:bf:c5:59:c6:6f:a3:22:3f:0e:52: cd:94:fc:0e:72:21:d1:fe:fb:54:99:63:89:2e:6b:cd:a8:d7: bb:8b:4b:10:d4:2e:07:14:1b:64:53:0d:ec:a5:90:f3:92:cb: 79:7d:54:90:af:04:d2:35:1f:a1:de:fe:9c:c5:85:92:f9:fb: cd:27:df:8e:43:57:ff:b8:fd:29:8c:66:05:41:16:da:95:01: 31:09:8c:18:ca:3c:28:4b:9a:87:b9:32:df:26:a2:37:69:55: 70:37:c3:cc:35:34:58:31:07:25:5f:dc:cf:64:1f:d9:ea:74: 26:ef:b1:ec:ef:40:41:28:fa:95:cd:49:db:2f:4f:1f:6e:c6: 2e:ce:2e:68:d2:f1:8a:66:97:e7:6a:d9:ab:45:73:13:43:61: 1a:b3:dc:3e:e4:e2:aa:f5:82:b3:a8:13:fd:1c:3b:8e:7d:f9: 3d:c7:d9:cd:82:ef:82:fa:2e:b3:b5:60:4f:4d:19:2e:e2:7c: 0f:c5:9c:ec:7f:5c:da:10:b8:41:ae:1e:da:65:a9:b5:f5:d8: 84:37:f6:17:de:9c:39:1e:69:f3:17:74:03:09:15:03:46:b9: c9:fb:e9:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiaaOehT9plePB5Kx57cyt5mPwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVG MTg2MzYzQTAeFw0yNjA2MTMxNzAwMTBaFw0yNjA2MTQyMDM4MTBaMDMxMTAvBgNV BAMTKEUyOTI5MUJCREVCQUIwMjNCQ0VDQkUyMkMzQ0FEMUJEQjJDREE0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR13NL+fWJxEZAHM4kk0gPY/T3 jQzyYz4I9Ef39/BWfExr+aMXAJpr/+ae4Bhh1rlZJYHYqSJHeEcGdsRXjiLaQnXY gaMUQd89sO8Ur3pZBpovwcXr/cvBVDyoy7FgCETNxZZfx3JZQrLD/Bw92Z2cGLyT e/MwgifaOV1RO6UbasiNO+qieNUilvjPYBF5zYewxzwlwdZJ/SwhrwKHWPyqjPHG CbSZLfOcYgHUrjM+Y71eXENDw7r3JC8qJRY5cX/vJA4p0SJm9wZ2nlIIHzPm+6Le +kLHeu0fpAIGPxWezQVA7lDS9+B3Udo3I+EQ12v0kLkSiTSfzIV7eFyFX0P3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pKRu966sCO87L4iw8rRvbLNpAQwHwYDVR0j BBgwFoAUaXsMnjZ+k/QqZpXZj7ag9fGGNjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5NzNiZWItNjZiYS00OGJjLTkzNzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUz NjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVGMTg2MzYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTdCMEM5RTM2N0U5M0Y0MkE2Njk1RDk4RkI2QTBGNUYxODYz NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEw RjVGMTg2MzYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHU9QGohsuNB5CNI1ivH0oUoGMVdBRw0ZL5Z v8VZxm+jIj8OUs2U/A5yIdH++1SZY4kua82o17uLSxDULgcUG2RTDeylkPOSy3l9 VJCvBNI1H6He/pzFhZL5+80n345DV/+4/SmMZgVBFtqVATEJjBjKPChLmoe5Mt8m ojdpVXA3w8w1NFgxByVf3M9kH9nqdCbvsezvQEEo+pXNSdsvTx9uxi7OLmjS8Ypm l+dq2atFcxNDYRqz3D7k4qr1grOoE/0cO459+T3H2c2C74L6LrO1YE9NGS7ifA/F nOx/XNoQuEGuHtplqbX12IQ39hfenDkeafMXdAMJFQNGucn76bU= -----END CERTIFICATE-----Generated at Sat Jun 13 21:52:22 2026 by rpki-client