$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: o88D3bp2s5qUw8MSKoCTLUObFC59FXgI0W8oYKRdT2s= Subject key identifier: ED:3A:70:5A:81:CA:9A:70:80:2B:B3:16:3A:DC:09:B5:02:85:C5:94 Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 6F2EBA40C4B7842481980491D911D75E9F76A14C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:39:32 +0000 Manifest this update: Mon 21 Sep 2026 18:34:32 +0000 Manifest next update: Tue 22 Sep 2026 20:57:32 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) 2: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) 3: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: 7mFE2Yf4IhZptjiLiFU1Efj8J8RCeEVZPrL65f8BPc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2e:ba:40:c4:b7:84:24:81:98:04:91:d9:11:d7:5e:9f:76:a1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: Sep 21 18:34:32 2026 GMT Not After : Sep 22 20:57:32 2026 GMT Subject: CN=ED3A705A81CA9A70802BB3163ADC09B50285C594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:e1:aa:cb:d8:ef:a7:7b:24:1d:89:a7:f2: 23:54:4d:3a:e2:47:c5:02:1d:a4:5e:a9:d6:0a:f3: 7c:4c:8d:47:e0:c5:db:f1:40:ef:37:4e:cc:dc:32: 74:e2:a8:cb:15:cc:ce:d7:fe:70:ab:ef:84:9e:09: f5:85:bb:75:f3:61:83:60:3c:4b:ad:b6:9c:69:7b: f4:89:4f:25:14:f2:b3:94:e4:48:df:76:b4:32:2d: 36:ef:0f:77:33:d6:8f:5f:7c:01:80:1d:2f:11:bf: 74:12:c7:59:e1:40:8e:74:40:94:8c:88:84:ad:dc: db:cf:f6:03:28:f6:f2:ba:bd:e0:84:8b:44:db:7f: 4c:b5:59:13:8f:19:1e:69:9e:a4:d1:07:45:f6:9c: 97:49:96:0e:86:61:bd:87:86:f3:f9:d3:d8:e2:47: 41:ea:0c:b1:d5:69:4b:cc:c1:38:f9:8a:a0:69:6f: 5f:b2:31:16:de:73:d8:2e:cd:ac:fc:e4:16:12:9c: a3:a7:5c:b3:06:bb:11:ad:fd:3b:55:c0:db:db:82: f9:15:a0:4b:78:5f:84:d3:07:2e:31:6a:c9:97:96: 2a:8b:07:87:9c:92:67:68:ac:50:62:85:bf:0f:2a: 8a:27:d2:d8:d7:53:37:13:64:97:48:c5:8c:6c:a8: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3A:70:5A:81:CA:9A:70:80:2B:B3:16:3A:DC:09:B5:02:85:C5:94 X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9a:0b:d4:1e:98:d6:ac:e3:c6:66:b2:1f:56:ea:d0:be:81: e2:ab:25:94:30:84:11:da:9e:0a:59:a6:18:4c:cf:5f:6f:9a: 33:95:7c:a6:2c:bf:60:e9:9c:44:ab:ff:34:80:a7:ee:45:a9: 29:60:a5:3f:08:3c:85:44:16:2c:47:ea:b1:76:27:b3:9d:2c: 28:35:f0:8f:a3:bc:bc:66:54:02:4c:65:7c:0a:be:fa:95:79: 8e:ea:f8:ca:92:48:90:64:a0:3c:9a:db:c3:29:c1:2b:d4:78: d6:14:07:38:d9:ef:aa:0f:89:8e:e7:71:de:2e:61:24:d3:d4: 12:42:61:83:ab:71:a0:75:58:99:d8:22:07:fb:49:7d:90:7c: 6b:bd:ee:ea:4c:08:5a:08:87:45:e8:96:45:bb:30:71:f9:e9: be:46:f3:ac:47:30:1f:95:97:52:9c:ee:04:4e:7a:7b:d4:d6: b2:53:0d:f7:4a:28:29:fd:78:37:c9:ed:e3:b9:ec:c8:2a:97: a3:7e:f5:e6:0e:fa:b8:59:05:27:43:d0:50:9d:ae:a8:6d:1a: 66:db:69:1b:d0:33:e2:a8:71:26:b6:47:5c:50:e2:b9:6b:78: 72:b5:24:5c:0a:68:b4:f0:55:b0:1c:80:ed:ec:22:50:7c:ea: 05:9b:42:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUby66QMS3hCSBmASR2RHXXp92oUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjA5MjExODM0MzJaFw0yNjA5MjIyMDU3MzJaMDMxMTAvBgNV BAMTKEVEM0E3MDVBODFDQTlBNzA4MDJCQjMxNjNBREMwOUI1MDI4NUM1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbOGqy9jvp3skHYmn8iNUTTri R8UCHaReqdYK83xMjUfgxdvxQO83TszcMnTiqMsVzM7X/nCr74SeCfWFu3XzYYNg PEuttpxpe/SJTyUU8rOU5EjfdrQyLTbvD3cz1o9ffAGAHS8Rv3QSx1nhQI50QJSM iISt3NvP9gMo9vK6veCEi0Tbf0y1WROPGR5pnqTRB0X2nJdJlg6GYb2HhvP509ji R0HqDLHVaUvMwTj5iqBpb1+yMRbec9guzaz85BYSnKOnXLMGuxGt/TtVwNvbgvkV oEt4X4TTBy4xasmXliqLB4eckmdorFBihb8PKoon0tjXUzcTZJdIxYxsqLD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7TpwWoHKmnCAK7MWOtwJtQKFxZQwHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaaC9QemNas48Zmsh9W6tC+geKrJZQwhBHa ngpZphhMz19vmjOVfKYsv2DpnESr/zSAp+5FqSlgpT8IPIVEFixH6rF2J7OdLCg1 8I+jvLxmVAJMZXwKvvqVeY7q+MqSSJBkoDya28MpwSvUeNYUBzjZ76oPiY7ncd4u YSTT1BJCYYOrcaB1WJnYIgf7SX2QfGu97upMCFoIh0XolkW7MHH56b5G86xHMB+V l1Kc7gROenvU1rJTDfdKKCn9eDfJ7eO57Mgql6N+9eYO+rhZBSdD0FCdrqhtGmbb aRvQM+KocSa2R1xQ4rlreHK1JFwKaLTwVbAcgO3sIlB86gWbQvM= -----END CERTIFICATE-----Generated at Tue Sep 22 10:43:46 2026 by rpki-client