$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft File: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft (raw, json) Hash identifier: 9TzZL8jQu+XqG8Gr2Xsj7CAgeJJMwU9xD9eHlhH6ZPo= Subject key identifier: 39:28:15:E9:AB:47:6C:2C:06:91:41:7E:42:49:84:CA:EF:A1:42:5B Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5 Certificate issuer: /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5 Certificate serial: 57ADDB1499E23D07CEDB72ADBC58C42B2BF9485C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:08:10 +0000 Manifest this update: Wed 17 Jun 2026 00:03:10 +0000 Manifest next update: Thu 18 Jun 2026 01:20:10 +0000 Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: f/dM7QAxBhLE+nmzvOko9oggYTcGzBvx5hlqw5xdlCY=) 2: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 0SKGtnqhjPRa1mtjwBX9w2vC6HvZzxTKz3FtFPwDTT0=) 3: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl (hash: gwnHQv5DRvL1uGiJyZqCDa/aUcWxF3vuBh/QsphAxqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ad:db:14:99:e2:3d:07:ce:db:72:ad:bc:58:c4:2b:2b:f9:48:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5 Validity Not Before: Jun 17 00:03:10 2026 GMT Not After : Jun 18 01:20:10 2026 GMT Subject: CN=392815E9AB476C2C0691417E424984CAEFA1425B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:e0:c4:89:00:94:21:c2:04:6b:58:6e:ac: 27:88:cf:1e:d1:e8:de:91:62:ae:30:74:11:25:ef: fd:b1:91:d7:f9:b8:c2:1d:20:c7:52:ad:30:36:cf: ce:81:d3:0e:84:5b:c6:fe:a9:d7:7d:f5:cd:97:20: d4:84:d8:6f:e3:9e:df:58:7d:d2:48:48:2e:b5:ef: 83:b7:c8:10:ec:6e:1c:36:50:6a:dd:25:11:03:c8: f4:5c:1c:a2:3a:4a:dd:3a:9b:d2:bf:38:64:70:39: 6b:69:1e:d0:2f:3f:bb:2e:2b:2e:68:88:88:96:7d: 65:31:48:68:9c:ed:2a:5c:3f:81:05:aa:3a:02:fd: 96:62:24:cc:75:06:94:d1:ac:7f:03:cd:5c:2f:60: 33:67:02:de:09:81:39:48:79:51:fe:04:30:bb:c9: ae:ad:c3:11:b8:43:0c:39:dc:c0:cd:06:03:49:a1: 1d:50:aa:a1:68:82:f9:7e:9c:64:04:74:d6:3d:7d: bd:6e:8f:14:64:80:8a:db:f0:69:ce:20:f6:bc:40: fa:41:a7:8c:36:55:56:4f:65:78:bc:b0:52:74:a8: 62:0a:e2:22:50:ca:2b:7d:82:eb:4b:8e:fe:37:42: d8:5e:07:42:31:f7:97:1f:34:80:62:8e:74:c5:51: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:28:15:E9:AB:47:6C:2C:06:91:41:7E:42:49:84:CA:EF:A1:42:5B X509v3 Authority Key Identifier: keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6a:e3:42:2a:f9:3c:7d:72:a3:aa:86:e8:30:be:a4:b3:18: 45:bd:a6:d9:d0:bc:c6:4f:6f:1d:b8:18:e5:79:a2:4a:c3:87: 7d:4c:3f:88:f4:3d:af:3a:4d:ca:a7:dd:6a:30:2f:53:91:a1: bd:af:f3:32:5d:7a:a6:6a:92:cb:cf:d5:04:47:36:f4:00:90: 7f:1d:d7:57:53:f0:38:50:9c:1a:69:23:e4:b2:69:91:ce:36: 34:c6:66:76:37:7c:10:ff:d6:e5:0e:fb:68:6a:d2:ce:cf:68: 51:ab:53:79:75:be:a8:f1:77:30:9d:ba:f7:2a:26:ee:30:24: 10:e5:33:42:f9:91:8a:c2:e3:72:54:b5:4f:d0:7d:2d:f5:04: d2:9b:e6:6d:28:58:37:d5:d9:ff:6c:02:f7:d4:2f:0d:76:b5: c8:f4:4d:a6:3a:c0:24:50:e3:53:41:56:7e:90:a4:bc:4d:71: 65:f8:89:94:03:ed:d5:6a:32:a5:6f:ca:f1:0f:82:d1:66:d8: d2:fb:d1:8d:a3:25:00:62:e6:f6:64:30:20:75:dd:af:27:fa: 87:23:13:d6:d2:93:80:6c:31:3b:32:6c:28:48:51:e5:47:71: f3:4b:df:e0:10:f1:d7:32:3d:61:2c:e6:3e:6c:69:03:ee:8e: d2:79:7f:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV63bFJniPQfO23KtvFjEKyv5SFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkzRkM0MUMxRkVDQzdGQTI1NjRFOTAwMEJDRTNENjUz QTg1Q0RBNTAeFw0yNjA2MTcwMDAzMTBaFw0yNjA2MTgwMTIwMTBaMDMxMTAvBgNV BAMTKDM5MjgxNUU5QUI0NzZDMkMwNjkxNDE3RTQyNDk4NENBRUZBMTQyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYODEiQCUIcIEa1hurCeIzx7R 6N6RYq4wdBEl7/2xkdf5uMIdIMdSrTA2z86B0w6EW8b+qdd99c2XINSE2G/jnt9Y fdJISC6174O3yBDsbhw2UGrdJREDyPRcHKI6St06m9K/OGRwOWtpHtAvP7suKy5o iIiWfWUxSGic7SpcP4EFqjoC/ZZiJMx1BpTRrH8DzVwvYDNnAt4JgTlIeVH+BDC7 ya6twxG4Qww53MDNBgNJoR1QqqFogvl+nGQEdNY9fb1ujxRkgIrb8GnOIPa8QPpB p4w2VVZPZXi8sFJ0qGIK4iJQyit9gutLjv43QtheB0Ix95cfNIBijnTFUTRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSgV6atHbCwGkUF+QkmEyu+hQlswHwYDVR0j BBgwFoAUaT/EHB/sx/olZOkAC849ZTqFzaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM2YjU5N2MtOTU0Ny00YzFlLWFjODctM2E0MzRhMzAwYTY3LzAvNjkzRkM0MUMx RkVDQzdGQTI1NjRFOTAwMEJDRTNENjUzQTg1Q0RBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTNGQzQxQzFGRUNDN0ZBMjU2NEU5MDAwQkNFM0Q2NTNBODVD REE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvNjkzRkM0MUMxRkVDQzdGQTI1NjRFOTAwMEJDRTNE NjUzQTg1Q0RBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtq40Iq+Tx9cqOqhugwvqSzGEW9ptnQvMZP bx24GOV5okrDh31MP4j0Pa86Tcqn3WowL1ORob2v8zJdeqZqksvP1QRHNvQAkH8d 11dT8DhQnBppI+SyaZHONjTGZnY3fBD/1uUO+2hq0s7PaFGrU3l1vqjxdzCduvcq Ju4wJBDlM0L5kYrC43JUtU/QfS31BNKb5m0oWDfV2f9sAvfULw12tcj0TaY6wCRQ 41NBVn6QpLxNcWX4iZQD7dVqMqVvyvEPgtFm2NL70Y2jJQBi5vZkMCB13a8n+ocj E9bSk4BsMTsybChIUeVHcfNL3+AQ8dcyPWEs5j5saQPujtJ5f1s= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:28 2026 by rpki-client