$ rpki-client -vvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft File: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft (raw, json) Hash identifier: 2TWQ+UBY1iC5MJF5gOSRi7sOx4hEdcp4mWc191gqPTU= Subject key identifier: D5:E3:17:6F:F4:B7:47:F3:FF:0F:A8:10:AC:A2:86:E5:A4:A7:B8:F9 Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC Certificate issuer: /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Certificate serial: 0D8B06799879274D749DDA8D9014BB761C15C7DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:44:15 +0000 Manifest this update: Tue 16 Jun 2026 20:39:15 +0000 Manifest next update: Thu 18 Jun 2026 00:35:15 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=) 2: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl (hash: f1Rh7jR+gQdCH9qkJ8+z7StJWHTAPHbVHzr4V+BP/8w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8b:06:79:98:79:27:4d:74:9d:da:8d:90:14:bb:76:1c:15:c7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Validity Not Before: Jun 16 20:39:15 2026 GMT Not After : Jun 18 00:35:15 2026 GMT Subject: CN=D5E3176FF4B747F3FF0FA810ACA286E5A4A7B8F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:3b:f4:74:c6:ca:6b:0c:69:24:f0:16:d0: 3d:31:97:6d:f5:70:83:02:c8:dd:7b:75:fd:61:a6: d4:e5:68:c4:fc:ad:05:24:a3:33:98:89:d4:45:d2: f0:48:b0:f7:a4:ac:d0:b6:2b:2b:e7:a3:89:ee:7d: c5:ee:54:57:90:0c:d6:ae:36:a0:5c:23:d3:b9:04: 92:4e:2f:38:6a:5d:77:63:3e:bd:e6:e9:b7:e8:a0: 8e:c6:6d:d3:97:08:b7:49:85:6f:93:aa:e8:d1:27: a0:b4:6f:83:ff:7c:7b:60:7d:3a:68:b3:df:10:90: 37:5a:1c:80:50:fd:89:45:d5:09:63:ad:48:15:ce: 61:22:c9:a3:bb:e2:a2:0f:76:16:f9:d9:20:25:70: ff:46:89:13:e0:ae:64:ca:75:c0:47:18:8e:02:6f: 55:e7:dc:bf:58:78:73:a7:af:0c:29:61:92:fd:5e: 30:9f:03:35:2a:d7:78:c8:bc:8e:75:b5:3e:d0:3e: b9:e4:c7:1d:d0:ba:d2:45:07:13:0d:7a:4c:eb:1e: d2:a1:50:c9:bf:34:dd:cd:d5:27:61:3d:82:10:5d: 26:54:9b:a4:93:3d:22:f7:7f:d7:44:62:b8:56:8d: e4:91:d9:55:e4:a4:d4:67:f8:57:66:07:27:ce:f8: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E3:17:6F:F4:B7:47:F3:FF:0F:A8:10:AC:A2:86:E5:A4:A7:B8:F9 X509v3 Authority Key Identifier: keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:63:dc:74:29:3f:e6:37:2c:b9:be:fb:fd:6c:d2:2f:c0:5d: d9:15:90:84:54:cc:a4:b9:56:ca:86:e4:42:eb:bc:4c:f2:33: 0a:73:53:27:ca:72:ec:e2:23:96:ff:77:88:86:dd:d0:2a:b4: e9:54:19:3f:a1:62:c7:84:c0:af:a3:6b:f0:0e:bb:74:2d:7b: f8:a1:f0:0d:fe:03:d0:97:e6:60:d2:a6:b6:fb:a6:50:95:f0: 77:77:83:6e:0c:a6:c0:1a:80:43:61:9e:07:d0:3e:2d:e9:e8: e1:39:c7:b3:19:6f:44:7c:fa:80:31:4a:a5:65:0b:9c:c6:fa: ec:d0:b3:ca:1b:0c:a8:67:8f:33:2b:43:10:ce:d7:4f:6e:70: af:e2:d6:dd:7e:3b:59:58:db:90:de:74:86:bd:98:9e:34:82: b8:aa:13:d7:a2:09:9e:35:7f:17:f8:ab:d3:35:1a:a3:d9:dd: fe:5d:58:ef:80:4e:57:3d:c1:d9:7d:77:71:81:cb:17:d2:12: cf:49:da:aa:35:1e:53:45:75:d3:aa:3c:86:f7:32:90:4b:50: 0e:93:97:01:d3:83:6c:6e:a7:b3:21:50:d1:85:ad:01:18:81: 0f:37:21:d2:80:67:dc:30:a8:8d:41:0f:04:bf:ed:3f:f2:ce: d2:ea:fe:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYsGeZh5J010ndqNkBS7dhwVx98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMx RjBCNThFQzAeFw0yNjA2MTYyMDM5MTVaFw0yNjA2MTgwMDM1MTVaMDMxMTAvBgNV BAMTKEQ1RTMxNzZGRjRCNzQ3RjNGRjBGQTgxMEFDQTI4NkU1QTRBN0I4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1zv0dMbKawxpJPAW0D0xl231 cIMCyN17df1hptTlaMT8rQUkozOYidRF0vBIsPekrNC2Kyvno4nufcXuVFeQDNau NqBcI9O5BJJOLzhqXXdjPr3m6bfooI7GbdOXCLdJhW+TqujRJ6C0b4P/fHtgfTpo s98QkDdaHIBQ/YlF1QljrUgVzmEiyaO74qIPdhb52SAlcP9GiRPgrmTKdcBHGI4C b1Xn3L9YeHOnrwwpYZL9XjCfAzUq13jIvI51tT7QPrnkxx3QutJFBxMNekzrHtKh UMm/NN3N1SdhPYIQXSZUm6STPSL3f9dEYrhWjeSR2VXkpNRn+FdmByfO+B3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1eMXb/S3R/P/D6gQrKKG5aSnuPkwHwYDVR0j BBgwFoAUaRup0oupsgZ9p2Bv9LWtAx8LWOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVjMzIxZWItMTVmOC00NjQ2LWIwNTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4 QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMxRjBCNThFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTFCQTlEMjhCQTlCMjA2N0RBNzYwNkZGNEI1QUQwMzFGMEI1 OEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFE MDMxRjBCNThFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNj3HQpP+Y3LLm++/1s0i/AXdkVkIRUzKS5 VsqG5ELrvEzyMwpzUyfKcuziI5b/d4iG3dAqtOlUGT+hYseEwK+ja/AOu3Qte/ih 8A3+A9CX5mDSprb7plCV8Hd3g24MpsAagENhngfQPi3p6OE5x7MZb0R8+oAxSqVl C5zG+uzQs8obDKhnjzMrQxDO109ucK/i1t1+O1lY25DedIa9mJ40griqE9eiCZ41 fxf4q9M1GqPZ3f5dWO+ATlc9wdl9d3GByxfSEs9J2qo1HlNFddOqPIb3MpBLUA6T lwHTg2xup7MhUNGFrQEYgQ83IdKAZ9wwqI1BDwS/7T/yztLq/tA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:47 2026 by rpki-client