$ rpki-client -vvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft File: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft (raw, json) Hash identifier: dRy5EOdCLyjxG8YFcy+wgt68RSJWiYuvOmFZsRsNd04= Subject key identifier: 15:4B:00:6A:A6:8C:89:6D:F0:BE:F0:A8:53:98:64:68:8D:B9:AA:76 Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC Certificate issuer: /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Certificate serial: 51336F532BC2965A8B1EA887C6BE9DFA338C4BBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:30:32 +0000 Manifest this update: Tue 02 Jun 2026 08:25:32 +0000 Manifest next update: Wed 03 Jun 2026 11:55:32 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=) 2: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl (hash: QcqfhiFZIEznzoLx1627ZzjPe0JDYXtWiGsHb6ETh6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:33:6f:53:2b:c2:96:5a:8b:1e:a8:87:c6:be:9d:fa:33:8c:4b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Validity Not Before: Jun 2 08:25:32 2026 GMT Not After : Jun 3 11:55:32 2026 GMT Subject: CN=154B006AA68C896DF0BEF0A8539864688DB9AA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:2b:bf:c3:e0:2b:50:09:ef:c1:01:35:a6: 2f:97:a1:da:fc:17:3b:84:7c:fa:21:9a:53:a7:28: 83:71:48:36:94:33:e6:95:b3:83:4a:df:7a:40:4b: 25:0d:2b:e2:06:9a:71:86:ed:0a:b5:81:f3:80:3a: df:ab:96:fd:f0:e9:84:10:5a:fa:b1:5b:ac:84:b8: 92:3b:8d:46:68:48:90:a7:52:a0:b3:14:c2:54:0e: b9:0f:ec:3e:0b:90:04:41:f5:2f:00:1d:da:f8:46: e9:aa:01:1c:49:20:86:4f:e2:6a:bd:38:8e:29:7a: 22:57:82:66:44:1b:a6:c7:8d:7a:00:72:ba:7c:c1: 12:e1:de:a0:5c:27:1c:47:f2:df:2f:ed:4e:c1:49: e6:ec:7d:9b:f5:67:96:d0:46:a1:d2:6b:65:5a:68: 56:97:4b:43:bd:b5:cb:dc:f7:0c:cf:15:83:43:a7: 3d:42:32:31:8f:7f:ea:63:76:22:c9:26:b4:ed:43: 58:71:78:1e:92:6b:20:3e:4a:54:6b:61:78:aa:d7: 9e:8e:b6:94:a5:9e:f6:a7:1d:4e:e8:bf:06:c0:b1: 52:d4:7c:7e:82:e2:de:a2:5d:76:e2:26:e5:bf:83: 03:a3:d3:45:da:b9:e2:a6:f1:cf:f1:b6:a4:aa:cc: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4B:00:6A:A6:8C:89:6D:F0:BE:F0:A8:53:98:64:68:8D:B9:AA:76 X509v3 Authority Key Identifier: keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c6:a5:6c:6b:cd:a9:b4:cc:c4:f0:d4:a4:0d:e1:fd:7b:bd: 16:82:12:56:9c:33:dd:42:2f:b8:3f:65:10:b8:da:f1:e4:91: 94:9d:c1:e5:f0:dc:1b:8f:d2:7d:88:6d:c5:74:06:1b:62:71: 59:8a:0d:44:0b:6b:61:ad:8d:dd:bb:65:ad:a6:87:c7:32:c9: a2:7c:42:dd:98:63:7a:e3:a1:4b:0f:c0:c9:5c:75:69:bc:95: df:fd:6d:56:f0:34:c8:c7:48:41:5d:95:91:7b:c3:0b:ef:6a: a4:e0:4f:b8:48:05:15:8f:4f:64:a9:f2:1b:28:d0:6d:8d:22: 24:f3:76:c8:51:36:eb:aa:55:61:c2:6f:d7:b9:de:10:2c:79: 48:e1:15:ec:49:5d:02:08:2b:47:d0:56:5a:f2:3d:95:b3:58: 1f:f9:a3:cb:f7:c2:4d:64:d4:c7:ba:09:0b:dc:d8:1d:00:5a: f8:cd:a2:6e:f2:a4:73:97:f6:a8:15:81:80:70:36:cb:b0:03: d7:03:72:02:6b:3f:8e:63:35:3e:48:9b:cb:37:67:13:2b:74: 85:3d:6d:9b:66:29:04:d9:50:63:a6:c4:de:53:b8:cc:d1:20: d0:f9:da:26:c7:8d:10:4b:d2:b4:8c:48:a5:11:39:6d:24:40: bc:dc:e4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUTNvUyvCllqLHqiHxr6d+jOMS7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMx RjBCNThFQzAeFw0yNjA2MDIwODI1MzJaFw0yNjA2MDMxMTU1MzJaMDMxMTAvBgNV BAMTKDE1NEIwMDZBQTY4Qzg5NkRGMEJFRjBBODUzOTg2NDY4OERCOUFBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVyu/w+ArUAnvwQE1pi+Xodr8 FzuEfPohmlOnKINxSDaUM+aVs4NK33pASyUNK+IGmnGG7Qq1gfOAOt+rlv3w6YQQ WvqxW6yEuJI7jUZoSJCnUqCzFMJUDrkP7D4LkARB9S8AHdr4RumqARxJIIZP4mq9 OI4peiJXgmZEG6bHjXoAcrp8wRLh3qBcJxxH8t8v7U7BSebsfZv1Z5bQRqHSa2Va aFaXS0O9tcvc9wzPFYNDpz1CMjGPf+pjdiLJJrTtQ1hxeB6SayA+SlRrYXiq156O tpSlnvanHU7ovwbAsVLUfH6C4t6iXXbiJuW/gwOj00XaueKm8c/xtqSqzLChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUsAaqaMiW3wvvCoU5hkaI25qnYwHwYDVR0j BBgwFoAUaRup0oupsgZ9p2Bv9LWtAx8LWOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVjMzIxZWItMTVmOC00NjQ2LWIwNTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4 QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMxRjBCNThFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTFCQTlEMjhCQTlCMjA2N0RBNzYwNkZGNEI1QUQwMzFGMEI1 OEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFE MDMxRjBCNThFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjGpWxrzam0zMTw1KQN4f17vRaCElacM91C L7g/ZRC42vHkkZSdweXw3BuP0n2IbcV0BhticVmKDUQLa2Gtjd27Za2mh8cyyaJ8 Qt2YY3rjoUsPwMlcdWm8ld/9bVbwNMjHSEFdlZF7wwvvaqTgT7hIBRWPT2Sp8hso 0G2NIiTzdshRNuuqVWHCb9e53hAseUjhFexJXQIIK0fQVlryPZWzWB/5o8v3wk1k 1Me6CQvc2B0AWvjNom7ypHOX9qgVgYBwNsuwA9cDcgJrP45jNT5Im8s3ZxMrdIU9 bZtmKQTZUGOmxN5TuMzRIND52ibHjRBL0rSMSKUROW0kQLzc5Mg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:35 2026 by rpki-client