$ rpki-client -vvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: makXUjjHX1uu/NO66TcIsSGMd37tfCMjGhciFFA2lhg= Subject key identifier: 8D:39:29:1E:EC:57:AE:F9:23:7C:CF:4B:E7:DC:6A:F0:C1:DA:80:16 Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 1A8304CA7824BA2C8E8C6F2D7EEB8D1CF266DF2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:48:38 +0000 Manifest this update: Wed 17 Jun 2026 08:43:38 +0000 Manifest next update: Thu 18 Jun 2026 09:05:38 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) 2: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) 3: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: cLuJQjYOQ7vYhsGvQMjY9tHGqSf0IZoTVf49pwP0CG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:83:04:ca:78:24:ba:2c:8e:8c:6f:2d:7e:eb:8d:1c:f2:66:df:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: Jun 17 08:43:38 2026 GMT Not After : Jun 18 09:05:38 2026 GMT Subject: CN=8D39291EEC57AEF9237CCF4BE7DC6AF0C1DA8016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:86:e2:84:33:b6:92:30:fe:0b:0e:9a:12:81: 6c:87:42:c7:8d:2f:61:d7:7f:da:b9:aa:00:0e:85: 47:85:5c:8e:e3:af:56:8b:63:dd:d8:31:7e:f6:a1: dd:87:ee:24:7c:4a:7e:31:1d:6d:9b:3d:f0:fb:7b: 32:5c:f8:1f:3e:37:b2:d3:0a:ab:88:a4:c2:9b:28: a0:8f:7b:aa:34:8b:a1:65:34:93:ef:9b:98:a8:ca: e1:0d:73:e9:fd:39:a1:1f:37:ff:80:91:81:36:e3: d9:48:ae:50:74:8b:03:2a:d5:9d:87:1f:63:5d:f1: 39:fd:43:7a:31:a1:b0:e2:7c:68:bc:82:73:89:7a: b3:22:d4:98:69:7d:f4:0a:97:4e:b4:49:4c:a5:c9: 78:da:81:77:8c:80:df:64:12:26:a1:40:21:80:3c: b2:03:4c:b0:57:be:0b:ea:54:2b:18:4b:d9:41:33: b1:13:b8:4b:06:64:69:5e:f1:0c:89:58:a5:4d:a2: 73:54:22:21:8f:04:9c:4f:58:16:41:dc:96:25:c0: ca:1c:92:6e:10:d7:60:9b:eb:3d:6b:07:83:23:b9: cd:d7:15:da:41:2b:f0:40:e1:b7:61:7b:a1:8a:55: e3:05:c3:51:1c:7f:8a:09:b0:4d:22:87:97:94:79: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:39:29:1E:EC:57:AE:F9:23:7C:CF:4B:E7:DC:6A:F0:C1:DA:80:16 X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e3:85:f3:a7:80:4d:28:bc:b8:f4:7d:bb:ca:38:ad:6a:49: b8:fb:b5:6e:22:48:6a:3e:6d:1f:14:94:67:95:e2:e3:71:3d: 60:23:20:aa:81:79:fa:70:f8:bd:cb:9f:b2:e0:9c:93:0e:8c: 10:d3:c8:f4:b0:8e:48:5a:11:b6:9a:29:aa:c5:47:70:03:4a: 2d:cd:c5:d5:8b:73:1a:9c:74:b9:bd:df:ff:44:c8:d6:df:b9: 53:e9:67:51:17:5c:72:5c:31:03:3e:aa:22:27:7c:b7:bf:1a: 6a:dd:36:92:f5:ba:c6:08:23:b7:8d:cf:f3:05:a0:4b:76:02: ef:e1:1d:ac:82:f9:62:d9:56:5b:d1:2a:06:2c:71:e9:96:09: 83:0b:7e:a8:d0:9f:26:e3:f0:2a:9a:26:c6:06:25:e3:c0:45: a0:c5:7f:ed:56:23:7b:4c:05:e8:8c:04:98:fe:c5:aa:f5:2e: 29:32:c5:2a:df:4a:0a:6b:03:03:21:b8:5c:47:4f:1e:3c:83: 7c:68:b3:9a:2e:8d:84:fa:d5:c0:7e:a5:30:1e:79:d8:03:c5: 4d:a8:c7:26:ae:d4:a3:e7:3d:08:89:1d:5a:be:44:1e:44:25: c6:14:d1:6c:f2:7b:bc:1b:e6:08:7c:c1:af:37:17:e4:09:8c: 26:1a:09:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoMEyngkuiyOjG8tfuuNHPJm3yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjA2MTcwODQzMzhaFw0yNjA2MTgwOTA1MzhaMDMxMTAvBgNV BAMTKDhEMzkyOTFFRUM1N0FFRjkyMzdDQ0Y0QkU3REM2QUYwQzFEQTgwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDhuKEM7aSMP4LDpoSgWyHQseN L2HXf9q5qgAOhUeFXI7jr1aLY93YMX72od2H7iR8Sn4xHW2bPfD7ezJc+B8+N7LT CquIpMKbKKCPe6o0i6FlNJPvm5ioyuENc+n9OaEfN/+AkYE249lIrlB0iwMq1Z2H H2Nd8Tn9Q3oxobDifGi8gnOJerMi1JhpffQKl060SUylyXjagXeMgN9kEiahQCGA PLIDTLBXvgvqVCsYS9lBM7ETuEsGZGle8QyJWKVNonNUIiGPBJxPWBZB3JYlwMoc km4Q12Cb6z1rB4Mjuc3XFdpBK/BA4bdhe6GKVeMFw1Ecf4oJsE0ih5eUefvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjTkpHuxXrvkjfM9L59xq8MHagBYwHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/jhfOngE0ovLj0fbvKOK1qSbj7tW4iSGo+ bR8UlGeV4uNxPWAjIKqBefpw+L3Ln7LgnJMOjBDTyPSwjkhaEbaaKarFR3ADSi3N xdWLcxqcdLm93/9EyNbfuVPpZ1EXXHJcMQM+qiInfLe/GmrdNpL1usYII7eNz/MF oEt2Au/hHayC+WLZVlvRKgYscemWCYMLfqjQnybj8CqaJsYGJePARaDFf+1WI3tM BeiMBJj+xar1LikyxSrfSgprAwMhuFxHTx48g3xos5oujYT61cB+pTAeedgDxU2o xyau1KPnPQiJHVq+RB5EJcYU0Wzye7wb5gh8wa83F+QJjCYaCVw= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:48 2026 by rpki-client