$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json) Hash identifier: RKbEDml5V0Xs1/xFMZBjFK0AVJwph363TwU9fWHwnsM= Subject key identifier: 95:15:C7:31:C4:DD:B2:FB:32:16:E2:8A:67:AE:6D:8E:3F:A8:00:FF Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Certificate serial: 1BFFE5998FEE55E7DB8819C3AC216FB3B40CE4CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 10:13:44 +0000 Manifest this update: Wed 23 Sep 2026 10:08:44 +0000 Manifest next update: Thu 24 Sep 2026 10:43:44 +0000 Files and hashes: 1: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=) 2: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=) 3: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=) 4: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=) 5: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: KXIpWBv4r10irIY1iAeEwhmp22OaJhUfS414stf54+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ff:e5:99:8f:ee:55:e7:db:88:19:c3:ac:21:6f:b3:b4:0c:e4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Validity Not Before: Sep 23 10:08:44 2026 GMT Not After : Sep 24 10:43:44 2026 GMT Subject: CN=9515C731C4DDB2FB3216E28A67AE6D8E3FA800FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:8f:a7:8c:22:ce:1a:ea:f0:ae:97:e6:c2: 6d:0b:c8:b6:9e:ca:7b:13:69:bb:ac:cb:f9:45:da: 5b:95:c7:13:c6:9a:4b:d5:6a:02:4d:77:38:98:d3: 4b:d8:8c:d6:79:38:b0:1c:fc:a5:2b:3a:7a:56:95: 89:c2:91:c2:ed:87:c1:26:ed:ee:22:fe:c7:7d:52: 83:80:84:48:36:c1:6b:8f:d3:d9:5d:c7:7a:13:ee: c1:a7:db:6b:f3:ba:60:88:fc:b3:89:e9:fd:f7:9b: 5c:ed:be:54:09:b1:3e:99:66:6c:30:13:b3:e7:2c: ea:9b:e0:b2:99:74:6a:48:b8:17:3e:0e:96:ae:85: ed:58:41:59:1b:2c:40:9d:69:1e:b3:eb:6b:09:95: c9:ed:32:f3:ac:f8:a8:ef:c5:8c:27:32:29:d8:a8: 8d:9d:19:5d:63:69:71:23:7c:d4:a4:20:cd:a9:c2: dd:3c:82:a0:a7:5b:9f:c7:89:79:8b:0f:6e:af:63: 34:82:63:fd:03:19:5b:d2:5c:b1:0a:71:9c:2d:3a: 62:e5:1b:64:93:8f:17:46:d1:d7:f8:53:4e:80:17: 72:1f:2d:73:7d:b4:70:8b:cc:e4:18:2b:1b:90:c3: 33:a8:91:e3:d6:c3:39:43:1c:6c:24:de:d2:b6:c0: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:15:C7:31:C4:DD:B2:FB:32:16:E2:8A:67:AE:6D:8E:3F:A8:00:FF X509v3 Authority Key Identifier: keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ce:38:a7:25:6d:2e:bf:a8:33:d3:c8:a3:2d:42:8e:39:f3: 4f:47:25:26:8e:2e:e7:f5:98:30:ed:ef:d2:9b:52:c7:73:07: 45:c6:6a:e8:8d:d3:e9:78:92:32:24:3d:fc:a3:fc:c4:3f:ba: da:fa:e5:5e:e9:e5:61:f0:0e:5d:9f:b7:99:f4:ca:b5:b6:2c: 40:51:b8:40:6b:05:7b:28:d2:2b:c4:11:98:ae:15:d1:df:81: 45:3d:1f:66:35:6d:23:ec:72:93:86:45:ab:c9:a0:d1:f5:f9: 75:07:ff:50:b9:2e:9c:31:a1:f4:6a:92:04:2f:0a:fe:73:58: df:81:50:d4:d7:80:a5:fe:8f:5b:58:86:e8:b1:a3:66:35:ff: 48:a8:0c:d8:20:29:76:19:8f:0f:01:93:62:a4:72:9c:12:1b: 63:4b:e3:6b:86:28:c6:85:84:aa:f8:e0:74:d1:65:dd:e0:92: 36:4d:2d:a4:64:ea:cc:62:35:7c:67:bd:6c:48:44:e0:40:bd: f4:ad:ca:57:26:d0:0a:7a:61:2b:65:a2:f1:cb:93:73:58:76: 47:d3:b3:73:ef:0d:c2:07:cb:e1:a0:83:2e:54:9f:91:ea:d5: fe:20:dc:92:01:5a:e8:44:3e:40:4e:da:2c:0c:f6:6c:98:49: dc:c3:68:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG//lmY/uVefbiBnDrCFvs7QM5MwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVG MTg2MzYzQTAeFw0yNjA5MjMxMDA4NDRaFw0yNjA5MjQxMDQzNDRaMDMxMTAvBgNV BAMTKDk1MTVDNzMxQzREREIyRkIzMjE2RTI4QTY3QUU2RDhFM0ZBODAwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjGI+njCLOGurwrpfmwm0LyLae ynsTabusy/lF2luVxxPGmkvVagJNdziY00vYjNZ5OLAc/KUrOnpWlYnCkcLth8Em 7e4i/sd9UoOAhEg2wWuP09ldx3oT7sGn22vzumCI/LOJ6f33m1ztvlQJsT6ZZmww E7PnLOqb4LKZdGpIuBc+Dpauhe1YQVkbLECdaR6z62sJlcntMvOs+KjvxYwnMinY qI2dGV1jaXEjfNSkIM2pwt08gqCnW5/HiXmLD26vYzSCY/0DGVvSXLEKcZwtOmLl G2STjxdG0df4U06AF3IfLXN9tHCLzOQYKxuQwzOokePWwzlDHGwk3tK2wBuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRXHMcTdsvsyFuKKZ65tjj+oAP8wHwYDVR0j BBgwFoAUaXsMnjZ+k/QqZpXZj7ag9fGGNjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5NzNiZWItNjZiYS00OGJjLTkzNzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUz NjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVGMTg2MzYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTdCMEM5RTM2N0U5M0Y0MkE2Njk1RDk4RkI2QTBGNUYxODYz NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEw RjVGMTg2MzYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjOOKclbS6/qDPTyKMtQo45809HJSaOLuf1 mDDt79KbUsdzB0XGauiN0+l4kjIkPfyj/MQ/utr65V7p5WHwDl2ft5n0yrW2LEBR uEBrBXso0ivEEZiuFdHfgUU9H2Y1bSPscpOGRavJoNH1+XUH/1C5LpwxofRqkgQv Cv5zWN+BUNTXgKX+j1tYhuixo2Y1/0ioDNggKXYZjw8Bk2KkcpwSG2NL42uGKMaF hKr44HTRZd3gkjZNLaRk6sxiNXxnvWxIROBAvfStylcm0Ap6YStlovHLk3NYdkfT s3PvDcIHy+Gggy5Un5Hq1f4g3JIBWuhEPkBO2iwM9myYSdzDaGk= -----END CERTIFICATE-----Generated at Thu Sep 24 00:41:25 2026 by rpki-client