$ rpki-client -vvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: +jZTYykVr+8jaWjrIVa53vKQA7qhnTCmcBLiRQ8sU4Q= Subject key identifier: 66:46:55:5B:FA:69:D4:DC:B3:47:AA:7E:4F:1C:AD:4B:F6:0B:0C:31 Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 7C03E5ED78FE07921E43B846535A56EFC534D56F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:27:17 +0000 Manifest this update: Tue 02 Jun 2026 18:22:17 +0000 Manifest next update: Wed 03 Jun 2026 20:46:17 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) 2: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) 3: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: Ygu7CarXTsIC8iOe9H6RZftMImV3jVo1b63hUDPs8Dw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:03:e5:ed:78:fe:07:92:1e:43:b8:46:53:5a:56:ef:c5:34:d5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: Jun 2 18:22:17 2026 GMT Not After : Jun 3 20:46:17 2026 GMT Subject: CN=6646555BFA69D4DCB347AA7E4F1CAD4BF60B0C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:13:d9:2e:36:8a:48:ae:8b:e9:4d:b7:71: 42:d6:11:49:04:81:0f:5d:e9:5e:fe:ec:ae:43:d3: 64:f0:9b:44:d5:f7:af:4f:ee:f6:ce:d4:c6:91:85: 17:9c:5e:ee:2c:35:bb:08:8f:5b:a4:b1:2a:b7:d4: 0b:b2:39:5b:5a:1b:e7:52:08:19:81:e9:95:d1:99: 31:64:51:17:33:18:ac:8e:82:66:ab:d4:68:11:ad: 94:5f:b9:dc:aa:20:48:9b:1a:ab:0a:41:4e:07:b9: ce:2a:aa:5e:33:3c:62:f9:41:97:02:36:9e:1d:a6: cc:ba:02:20:f3:37:5c:e8:d5:68:9e:ba:f7:a8:55: 7d:3d:48:9d:10:a1:91:5f:8b:3a:cd:10:42:e5:39: 82:e4:ad:39:b5:bc:e1:34:af:1c:ef:73:72:eb:7a: 74:0d:ac:80:b6:d2:9b:0f:a6:4b:5f:9f:c0:be:a6: e2:ed:db:f7:0f:3c:01:05:c0:66:80:d1:e3:4f:29: 59:bc:c9:cd:d1:90:e3:af:27:c0:5f:f4:aa:61:0a: 82:d7:66:b6:2b:b4:41:46:80:82:bb:3b:93:05:12: 2c:37:e8:59:10:52:1d:5e:ee:c4:63:89:93:f0:ab: 6b:7a:3e:8d:b3:4e:11:bd:c5:fa:0c:1d:b2:b3:85: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:46:55:5B:FA:69:D4:DC:B3:47:AA:7E:4F:1C:AD:4B:F6:0B:0C:31 X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ca:67:49:b9:f6:66:60:c6:05:5c:72:6b:5f:fc:56:5e:e5: 24:13:22:dd:85:5a:20:af:f7:04:ea:c2:ac:29:28:af:49:3b: 0b:5c:ec:cc:eb:6a:0d:33:00:b0:ae:d9:63:3d:d3:4e:ce:27: b0:05:67:cb:04:b2:95:a6:5d:f6:27:15:98:4d:fe:9f:ee:03: 24:13:c3:67:a3:95:1f:86:fc:2a:71:cd:24:68:91:1e:b5:66: 9d:09:4f:6d:17:b3:2f:24:e3:ed:3a:cb:55:5b:4f:2f:3d:f8: 24:2a:40:07:46:bb:28:58:25:f2:6f:34:34:12:3c:30:54:85: f3:ad:1d:80:e2:03:05:0d:90:a8:dd:d3:d5:88:a5:39:7b:9b: 6f:ed:1e:05:2f:de:97:d4:62:ab:0c:aa:41:9b:c2:0a:f9:b4: e5:35:2f:6e:f4:6c:7d:bf:0d:c0:80:72:8e:d4:8e:f9:5a:1a: 21:df:87:a9:41:d7:a3:f5:b0:35:6d:23:fe:4c:3b:65:ab:a0: 0b:7c:bb:80:02:fe:50:fe:a7:78:1c:ee:97:d6:9e:c8:e7:38: 31:5e:b4:a2:88:c8:85:4d:2d:df:5f:f9:56:87:0a:3e:89:d8: 01:b2:72:9f:48:03:c8:46:b5:c6:9c:67:d7:d2:08:6f:0c:4f: d1:38:8c:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAPl7Xj+B5IeQ7hGU1pW78U01W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjA2MDIxODIyMTdaFw0yNjA2MDMyMDQ2MTdaMDMxMTAvBgNV BAMTKDY2NDY1NTVCRkE2OUQ0RENCMzQ3QUE3RTRGMUNBRDRCRjYwQjBDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBBPZLjaKSK6L6U23cULWEUkE gQ9d6V7+7K5D02Twm0TV969P7vbO1MaRhRecXu4sNbsIj1uksSq31AuyOVtaG+dS CBmB6ZXRmTFkURczGKyOgmar1GgRrZRfudyqIEibGqsKQU4Huc4qql4zPGL5QZcC Np4dpsy6AiDzN1zo1WieuveoVX09SJ0QoZFfizrNEELlOYLkrTm1vOE0rxzvc3Lr enQNrIC20psPpktfn8C+puLt2/cPPAEFwGaA0eNPKVm8yc3RkOOvJ8Bf9KphCoLX ZrYrtEFGgIK7O5MFEiw36FkQUh1e7sRjiZPwq2t6Po2zThG9xfoMHbKzheiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZkZVW/pp1NyzR6p+TxytS/YLDDEwHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3KZ0m59mZgxgVccmtf/FZe5SQTIt2FWiCv 9wTqwqwpKK9JOwtc7Mzrag0zALCu2WM9007OJ7AFZ8sEspWmXfYnFZhN/p/uAyQT w2ejlR+G/CpxzSRokR61Zp0JT20Xsy8k4+06y1VbTy89+CQqQAdGuyhYJfJvNDQS PDBUhfOtHYDiAwUNkKjd09WIpTl7m2/tHgUv3pfUYqsMqkGbwgr5tOU1L270bH2/ DcCAco7UjvlaGiHfh6lB16P1sDVtI/5MO2WroAt8u4AC/lD+p3gc7pfWnsjnODFe tKKIyIVNLd9f+VaHCj6J2AGycp9IA8hGtcacZ9fSCG8MT9E4jGQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:07 2026 by rpki-client