$ rpki-client -vvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: dhUXTW6ji4DtMqQPyhk6IyN88V9Vcczwkh816kyZOtw= Subject key identifier: A7:D2:62:67:F4:1B:67:F5:4E:D3:3A:1E:9D:B8:D3:A3:15:F9:85:ED Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 1E976225688AE07E48B6EC3A0F7861BDC67C1252 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:58:14 +0000 Manifest this update: Mon 20 Jul 2026 21:53:14 +0000 Manifest next update: Tue 21 Jul 2026 23:22:14 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) 2: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: aKXp7v7qI9qkqo+DZWTkvmUEByTz4YURWs4i9rPpJIQ=) 3: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:97:62:25:68:8a:e0:7e:48:b6:ec:3a:0f:78:61:bd:c6:7c:12:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: Jul 20 21:53:14 2026 GMT Not After : Jul 21 23:22:14 2026 GMT Subject: CN=A7D26267F41B67F54ED33A1E9DB8D3A315F985ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:99:0c:7d:ac:2d:28:6c:a8:9b:0e:f2:58: 79:e4:93:c4:72:6b:91:49:8c:6a:7b:3c:dc:b0:d8: 35:54:f9:3a:d2:a3:de:69:aa:dd:dd:42:66:ef:6f: 1d:53:e4:f8:2c:27:7e:cb:61:ab:82:57:9d:26:09: 5f:1d:e8:22:ac:6b:03:a5:89:e5:9e:1f:99:90:ca: 2f:54:9b:51:83:06:bd:14:75:e0:cf:cc:79:08:75: 38:06:95:f6:ad:48:5f:ff:48:fc:0e:96:0a:97:22: 68:82:cc:b0:0d:de:e7:41:60:aa:59:a4:15:01:c5: a7:be:8e:c4:61:c6:94:b5:76:ef:21:9e:b5:e2:ff: 18:1c:d2:39:32:fd:1b:55:ed:a8:c8:55:d4:b9:30: 64:6e:05:9a:35:ad:fa:5b:21:92:69:8a:90:c6:46: 2e:96:2b:23:9a:55:b0:b7:a3:37:79:1d:ad:25:44: d8:e7:e3:c9:53:09:56:b0:97:86:ff:dd:b5:02:31: 24:e8:07:b6:ce:c3:f4:15:69:0b:36:8d:f9:98:43: 11:8f:6c:63:18:ed:f2:f5:26:82:f3:99:6e:80:9d: ac:b9:f1:01:f8:fa:36:18:a7:c1:15:5f:43:db:dc: 7d:c4:5f:14:be:ff:d3:f7:56:32:e9:c8:bc:16:57: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D2:62:67:F4:1B:67:F5:4E:D3:3A:1E:9D:B8:D3:A3:15:F9:85:ED X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:ce:fb:f6:41:3b:a3:20:de:dc:25:d4:b7:1b:8f:e2:60:47: d6:f1:49:73:a6:e9:7d:d3:60:0a:fe:a0:f1:71:a4:4f:a1:2e: 2c:a9:91:f0:81:38:18:14:c1:aa:9b:0f:f6:f1:9c:f8:d8:36: 7c:ef:10:e9:22:db:73:17:dd:13:0e:b4:12:16:11:0c:0e:c0: 73:8f:25:e5:04:5d:5a:d6:4b:83:6a:fd:0c:b2:fd:11:f0:7d: b1:90:f6:a7:94:d3:34:96:a1:21:19:ae:60:23:d6:84:7c:5b: 6b:d4:e0:30:58:62:08:72:d4:69:6e:d7:3f:b3:b8:f7:a6:b3: c8:c2:b7:6e:5d:bf:21:f6:49:83:f2:91:83:6d:4a:36:44:10: 47:05:8e:9c:07:84:5e:57:1d:87:00:a0:77:54:08:a1:c8:be: 1a:d1:21:4a:22:40:fb:30:a7:b1:df:67:24:9d:78:06:5c:19: 56:d2:e4:e3:b0:93:ae:7e:f6:32:cf:1b:a9:dd:e1:a2:6d:dc: 32:4e:06:82:cd:3b:cf:b5:17:45:19:bc:92:07:96:75:38:4d: 5f:44:25:4c:8d:0b:10:9a:9b:c7:d2:47:72:c0:34:02:6c:d2: 02:e2:6f:83:b5:2a:80:29:a7:02:f2:66:df:19:97:aa:9a:4f: ee:25:0c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpdiJWiK4H5Ituw6D3hhvcZ8ElIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjA3MjAyMTUzMTRaFw0yNjA3MjEyMzIyMTRaMDMxMTAvBgNV BAMTKEE3RDI2MjY3RjQxQjY3RjU0RUQzM0ExRTlEQjhEM0EzMTVGOTg1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHpkMfawtKGyomw7yWHnkk8Ry a5FJjGp7PNyw2DVU+TrSo95pqt3dQmbvbx1T5PgsJ37LYauCV50mCV8d6CKsawOl ieWeH5mQyi9Um1GDBr0UdeDPzHkIdTgGlfatSF//SPwOlgqXImiCzLAN3udBYKpZ pBUBxae+jsRhxpS1du8hnrXi/xgc0jky/RtV7ajIVdS5MGRuBZo1rfpbIZJpipDG Ri6WKyOaVbC3ozd5Ha0lRNjn48lTCVawl4b/3bUCMSToB7bOw/QVaQs2jfmYQxGP bGMY7fL1JoLzmW6Anay58QH4+jYYp8EVX0Pb3H3EXxS+/9P3VjLpyLwWV9HTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9JiZ/QbZ/VO0zoenbjToxX5he0wHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANDO+/ZBO6Mg3twl1Lcbj+JgR9bxSXOm6X3T YAr+oPFxpE+hLiypkfCBOBgUwaqbD/bxnPjYNnzvEOki23MX3RMOtBIWEQwOwHOP JeUEXVrWS4Nq/Qyy/RHwfbGQ9qeU0zSWoSEZrmAj1oR8W2vU4DBYYghy1Glu1z+z uPems8jCt25dvyH2SYPykYNtSjZEEEcFjpwHhF5XHYcAoHdUCKHIvhrRIUoiQPsw p7HfZySdeAZcGVbS5OOwk65+9jLPG6nd4aJt3DJOBoLNO8+1F0UZvJIHlnU4TV9E JUyNCxCam8fSR3LANAJs0gLib4O1KoAppwLyZt8Zl6qaT+4lDH8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:51 2026 by rpki-client