$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft File: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft (raw, json) Hash identifier: 1lNkCXtODsWeWWXTaZ07hLOVCxWYeZYwjFUCWOM7MHA= Subject key identifier: 13:BA:DD:46:28:BC:47:92:5B:B1:9E:5D:A2:D0:69:E1:8D:DA:71:47 Authority key identifier: 26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 Certificate issuer: /CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Certificate serial: 0739933FE734255E9B154CFBD2F601B7297C2A93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:06:25 +0000 Manifest this update: Tue 16 Jun 2026 14:01:25 +0000 Manifest next update: Wed 17 Jun 2026 18:01:25 +0000 Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: 2FI3DRw6poz7+/6DZetNhGhzUS2lCGKW4XFdtiSijVE=) 2: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl (hash: bEFIUP44HRR4/zcUJlFjNTP+mAMf+2Rw8KTbltp0TxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:39:93:3f:e7:34:25:5e:9b:15:4c:fb:d2:f6:01:b7:29:7c:2a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Validity Not Before: Jun 16 14:01:25 2026 GMT Not After : Jun 17 18:01:25 2026 GMT Subject: CN=13BADD4628BC47925BB19E5DA2D069E18DDA7147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:55:af:97:b3:69:5d:45:69:a8:1c:16:55:83: 42:65:12:26:90:78:1b:f7:84:41:89:6d:e2:7b:29: 71:de:e1:d4:1f:a5:c7:55:48:58:6d:76:59:4e:cf: d8:0c:74:33:44:9a:77:c3:ca:c4:ac:99:3c:4d:4d: 79:67:02:f0:7f:38:50:12:69:41:9f:5d:30:52:bb: 79:d4:70:f9:e2:74:a1:c5:1b:bb:b3:de:f3:b8:9a: 3c:0e:cd:5c:29:d6:74:c6:30:82:6c:c6:e6:db:b5: cc:71:6b:21:e4:23:2f:0d:24:c1:7d:d5:07:f1:a6: 8d:a0:bf:d4:7f:33:42:1c:c5:0d:ed:ab:cc:95:2d: 02:8e:8c:d3:54:cc:b0:61:ef:cd:b4:0c:c7:bb:74: 85:d4:5a:ec:cc:9d:d4:8c:83:c1:a4:d5:9b:4d:77: 55:1e:0c:f1:16:cb:bd:3a:af:bb:d1:d3:21:a5:eb: 2e:dd:87:84:36:51:02:fe:92:f0:07:44:ae:e8:25: 68:34:f9:e5:2d:78:e6:20:6a:bf:88:53:28:37:19: ff:d5:58:0e:4d:20:17:d6:4d:25:81:6f:09:f8:be: 36:8f:f4:f0:6d:af:27:c5:b0:64:95:ea:a7:3d:85: 70:6d:16:79:e7:d6:f1:4a:8e:11:90:05:cd:2f:48: 0b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BA:DD:46:28:BC:47:92:5B:B1:9E:5D:A2:D0:69:E1:8D:DA:71:47 X509v3 Authority Key Identifier: keyid:26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2e:0d:d6:78:96:c4:bc:15:79:76:c6:6d:89:97:1c:9e:e2: 27:e6:45:f1:71:ec:6c:05:dd:56:21:50:b6:e3:a9:4b:ca:4d: 56:ea:f5:f8:46:6e:0a:e7:ba:28:4c:8a:08:ff:2a:b3:8f:cb: 5b:f0:36:83:9d:37:1e:91:1d:38:0f:1f:44:a8:60:54:0d:81: c0:48:9a:91:c0:ef:71:d0:47:f7:dc:39:93:bb:f6:e3:28:69: 19:06:ce:85:30:1f:d6:72:96:ba:3f:80:7e:61:d3:f4:2d:68: cf:53:99:5e:18:10:b2:b0:01:4b:b0:5c:fa:31:4d:42:30:9c: 86:7a:2b:e8:3b:b5:e4:8f:0a:ff:09:00:33:fd:fd:fc:07:a9: 2f:ec:94:38:43:cb:18:f7:54:30:26:f0:13:34:85:5c:1b:4f: 1d:cf:19:c5:c6:27:09:a4:4a:dd:6c:87:28:11:f6:a4:ef:1a: 97:e9:d4:6e:f0:83:63:0a:d9:71:b4:f2:6e:c5:56:d1:85:1a: fe:52:10:0a:7f:07:c6:e6:be:e4:66:5d:d2:52:77:2d:39:c9: bb:1b:b2:40:0d:64:19:74:93:43:6c:4a:e0:f1:46:3b:55:d2: c5:4e:97:10:0d:ff:06:6f:bc:39:c0:8c:ba:dc:ce:52:bc:da: dd:7f:5f:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzmTP+c0JV6bFUz70vYBtyl8KpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRB OENCODg3MDAeFw0yNjA2MTYxNDAxMjVaFw0yNjA2MTcxODAxMjVaMDMxMTAvBgNV BAMTKDEzQkFERDQ2MjhCQzQ3OTI1QkIxOUU1REEyRDA2OUUxOEREQTcxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiVa+Xs2ldRWmoHBZVg0JlEiaQ eBv3hEGJbeJ7KXHe4dQfpcdVSFhtdllOz9gMdDNEmnfDysSsmTxNTXlnAvB/OFAS aUGfXTBSu3nUcPnidKHFG7uz3vO4mjwOzVwp1nTGMIJsxubbtcxxayHkIy8NJMF9 1Qfxpo2gv9R/M0IcxQ3tq8yVLQKOjNNUzLBh7820DMe7dIXUWuzMndSMg8Gk1ZtN d1UeDPEWy706r7vR0yGl6y7dh4Q2UQL+kvAHRK7oJWg0+eUteOYgar+IUyg3Gf/V WA5NIBfWTSWBbwn4vjaP9PBtryfFsGSV6qc9hXBtFnnn1vFKjhGQBc0vSAs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE7rdRii8R5JbsZ5dotBp4Y3acUcwHwYDVR0j BBgwFoAUJpXFhwoCXvLl1Xrq4GAZFKjLiHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkNTcyMDEtN2UyZi00OWJiLTk0MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcw QTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRBOENCODg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjk1QzU4NzBBMDI1RUYyRTVENTdBRUFFMDYwMTkxNEE4Q0I4 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5 MTRBOENCODg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAguDdZ4lsS8FXl2xm2Jlxye4ifmRfFx7GwF 3VYhULbjqUvKTVbq9fhGbgrnuihMigj/KrOPy1vwNoOdNx6RHTgPH0SoYFQNgcBI mpHA73HQR/fcOZO79uMoaRkGzoUwH9Zylro/gH5h0/QtaM9TmV4YELKwAUuwXPox TUIwnIZ6K+g7teSPCv8JADP9/fwHqS/slDhDyxj3VDAm8BM0hVwbTx3PGcXGJwmk St1shygR9qTvGpfp1G7wg2MK2XG08m7FVtGFGv5SEAp/B8bmvuRmXdJSdy05ybsb skANZBl0k0NsSuDxRjtV0sVOlxAN/wZvvDnAjLrczlK82t1/Xx0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:49 2026 by rpki-client