$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: nwoPmeCSzFxfAFCj0i9oyUT9CG1kgtk4r+bx8YFOKRM= Subject key identifier: 22:B2:C1:16:5F:8A:D9:8A:D5:85:FC:B0:84:36:E3:0C:D7:D9:5D:EF Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 6433C1BB4CC0052348A34B5D8C4B7AE55BC6FE86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 17:24:30 +0000 Manifest this update: Mon 02 Nov 2026 17:19:30 +0000 Manifest next update: Tue 03 Nov 2026 20:52:30 +0000 Files and hashes: 1: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: U1NvCXYqiySfnoP3IIvUG8RYisi9hPF+duOIpM99XJg=) 2: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) 3: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:33:c1:bb:4c:c0:05:23:48:a3:4b:5d:8c:4b:7a:e5:5b:c6:fe:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: Nov 2 17:19:30 2026 GMT Not After : Nov 3 20:52:30 2026 GMT Subject: CN=22B2C1165F8AD98AD585FCB08436E30CD7D95DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:48:5f:26:56:29:1c:1e:b5:c1:81:3a:06: b6:bd:91:5c:a9:37:c4:32:0b:d0:d2:e2:52:ab:8f: ff:7f:e5:71:b2:bf:24:de:50:33:12:45:df:37:4c: 67:3a:00:d6:cd:c8:2c:cd:8c:c1:51:b4:a1:60:1e: ce:bc:2b:01:3d:9a:7c:8e:49:dc:8c:67:7e:03:e1: 54:ce:7c:4d:27:2d:f9:a0:8b:12:e7:1a:b2:46:c7: 0a:98:b5:08:35:4c:a0:32:95:ef:3a:0d:8f:a0:28: 31:03:66:74:8b:9e:2b:5c:16:98:8a:9e:73:62:15: 49:99:e8:83:94:b3:f1:7c:d3:d6:c7:af:bf:1f:45: bd:00:36:8c:74:a4:6f:45:22:6d:f7:99:87:01:25: c8:48:46:c0:76:be:10:c3:5d:1c:b9:bb:38:ab:ce: 37:46:6f:0e:87:28:84:9b:ad:8a:de:ee:c2:91:0a: 79:e9:56:fa:a0:f7:81:6a:13:72:22:3a:3d:9d:99: a2:51:b4:0c:e7:db:c7:81:ec:17:85:ac:70:96:a0: 96:0a:b7:f1:11:7b:ae:67:74:33:08:75:64:94:bd: 74:96:d9:51:ba:e6:2d:a9:64:fa:43:61:63:06:ef: 73:5a:14:d8:af:f4:10:7c:c2:23:75:53:2e:3c:ef: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:C1:16:5F:8A:D9:8A:D5:85:FC:B0:84:36:E3:0C:D7:D9:5D:EF X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b7:db:64:09:f1:2d:3e:9c:c8:90:cc:e5:a4:53:36:d9:a3: f1:82:85:56:66:bc:ce:14:db:75:e3:d2:fe:51:54:79:6a:e1: 06:dd:8b:d4:0f:76:1d:87:7c:85:ff:ac:e7:bc:50:28:db:58: f3:2d:90:4c:a3:be:ea:0b:6b:9b:42:be:9d:1d:6f:9a:1f:05: 7c:05:85:06:08:46:01:94:9f:89:9f:ef:ca:62:36:1a:48:dd: 98:2d:7c:05:27:60:aa:bd:6d:44:9f:1b:72:72:43:2f:25:3e: 00:15:cb:81:5c:9e:f9:02:d0:06:4f:40:df:fb:a5:d9:14:b6: e1:1c:07:4e:da:41:c0:6c:c8:fd:7c:bb:af:04:1a:5d:86:ed: 5e:32:5c:c5:c6:fa:a0:e8:45:d4:5c:01:73:44:87:30:fb:25: b3:fc:39:d8:96:60:14:4c:a9:b5:a3:ee:6f:fd:f4:c2:38:26: bf:7f:d9:af:d3:dd:57:56:92:13:c0:df:2a:72:32:b7:08:31: 95:82:94:c7:1f:da:34:b0:0d:cf:61:61:30:bf:5f:a4:4a:41: 36:28:b8:e3:2c:12:10:5a:c9:72:a8:fd:db:47:a5:51:e4:ad: 01:69:66:fc:f2:43:27:c1:42:99:27:39:07:f3:c4:92:9b:e8: 51:58:d1:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDPBu0zABSNIo0tdjEt65VvG/oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjExMDIxNzE5MzBaFw0yNjExMDMyMDUyMzBaMDMxMTAvBgNV BAMTKDIyQjJDMTE2NUY4QUQ5OEFENTg1RkNCMDg0MzZFMzBDRDdEOTVERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kEhfJlYpHB61wYE6Bra9kVyp N8QyC9DS4lKrj/9/5XGyvyTeUDMSRd83TGc6ANbNyCzNjMFRtKFgHs68KwE9mnyO SdyMZ34D4VTOfE0nLfmgixLnGrJGxwqYtQg1TKAyle86DY+gKDEDZnSLnitcFpiK nnNiFUmZ6IOUs/F809bHr78fRb0ANox0pG9FIm33mYcBJchIRsB2vhDDXRy5uzir zjdGbw6HKISbrYre7sKRCnnpVvqg94FqE3IiOj2dmaJRtAzn28eB7BeFrHCWoJYK t/ERe65ndDMIdWSUvXSW2VG65i2pZPpDYWMG73NaFNiv9BB8wiN1Uy48742xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIrLBFl+K2YrVhfywhDbjDNfZXe8wHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy322QJ8S0+nMiQzOWkUzbZo/GChVZmvM4U 23Xj0v5RVHlq4Qbdi9QPdh2HfIX/rOe8UCjbWPMtkEyjvuoLa5tCvp0db5ofBXwF hQYIRgGUn4mf78piNhpI3ZgtfAUnYKq9bUSfG3JyQy8lPgAVy4FcnvkC0AZPQN/7 pdkUtuEcB07aQcBsyP18u68EGl2G7V4yXMXG+qDoRdRcAXNEhzD7JbP8OdiWYBRM qbWj7m/99MI4Jr9/2a/T3VdWkhPA3ypyMrcIMZWClMcf2jSwDc9hYTC/X6RKQTYo uOMsEhBayXKo/dtHpVHkrQFpZvzyQyfBQpknOQfzxJKb6FFY0YI= -----END CERTIFICATE-----Generated at Mon Nov 2 22:31:47 2026 by rpki-client