$ rpki-client -vvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft File: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft (raw, json) Hash identifier: dOg240D3ajt3Gxh0iZbdhiAU2qYwE1sYXDY5HlhR2Fs= Subject key identifier: 89:EC:D3:A2:BE:0F:5E:91:4F:7A:1E:76:6C:DD:F0:C3:24:CD:76:6E Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC Certificate issuer: /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Certificate serial: 16AD8DBFA5F60FCDFD366B48A8015256783E6A38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 01:27:37 +0000 Manifest this update: Tue 21 Jul 2026 01:22:37 +0000 Manifest next update: Wed 22 Jul 2026 05:00:37 +0000 Files and hashes: 1: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl (hash: D1Njq6PNK2ZRyli3YooT35wA4p3KU9FvExInuMG3UpQ=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ad:8d:bf:a5:f6:0f:cd:fd:36:6b:48:a8:01:52:56:78:3e:6a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Validity Not Before: Jul 21 01:22:37 2026 GMT Not After : Jul 22 05:00:37 2026 GMT Subject: CN=89ECD3A2BE0F5E914F7A1E766CDDF0C324CD766E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:e3:ad:a1:2c:5b:ff:46:7c:a1:77:59:50: 9e:5f:ac:80:80:de:aa:2d:57:c1:49:b8:2b:b8:d4: 8a:94:ca:77:64:df:4b:8e:d0:78:7c:ae:68:53:6d: d0:8b:f2:62:f4:e8:05:2b:e7:e6:58:75:c9:79:92: 40:e4:3b:5f:40:72:a6:7e:32:12:6a:ee:c3:6a:0c: 10:17:53:d6:13:64:80:17:2a:ab:dc:a1:d0:db:0f: 83:cb:86:47:90:9a:fb:3a:17:c6:7f:c0:4f:ae:0a: eb:08:5a:ee:12:ad:ab:4d:01:b8:f2:44:98:72:b1: f9:72:b4:cf:c7:6f:97:5e:6a:fd:83:64:53:bd:0d: ba:6f:17:d7:f3:ea:3d:e3:c3:2d:e3:4a:37:ca:88: 84:35:3e:6a:3d:3d:fa:ac:80:e6:46:59:81:10:c3: d4:71:51:6e:1e:6c:31:5a:98:af:f8:6f:1e:0d:2e: 28:62:a8:f0:f5:39:c2:e5:b4:ab:28:1c:64:6e:90: f6:39:78:30:60:a1:30:31:21:83:fa:30:9c:3c:29: 69:05:dd:62:eb:0c:8d:2c:74:4b:bf:22:99:df:e6: c5:43:91:49:67:cd:e9:55:e5:47:af:63:ed:1e:fa: 11:a4:78:12:4f:f4:fb:e6:9f:51:ab:b4:9e:0b:a6: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EC:D3:A2:BE:0F:5E:91:4F:7A:1E:76:6C:DD:F0:C3:24:CD:76:6E X509v3 Authority Key Identifier: keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:48:21:ca:fb:c4:24:20:98:d2:e6:6e:bb:68:bd:9e:41:e0: bc:5c:2c:f1:2c:35:07:b8:1d:e5:c2:d7:fe:81:2a:c6:e9:b6: aa:af:cd:8f:16:8d:70:3e:36:9f:ea:e1:9e:50:7a:ea:f6:11: f0:7c:66:57:e0:c1:6a:d6:7d:fa:60:5a:1b:be:b9:91:3c:b0: 06:34:c6:a9:e1:71:f5:3e:b0:90:c2:b3:71:d1:76:68:19:6c: 61:4d:ec:d2:30:c5:34:7e:00:66:7b:e5:14:66:e9:e5:48:98: da:83:f0:40:e5:51:59:b8:1f:7d:73:93:b7:31:eb:f9:aa:90: 6d:a2:34:93:9d:84:5a:ad:70:4c:75:2e:8c:df:9d:71:04:0a: 30:bc:1c:6f:64:15:0b:f8:b4:94:66:26:c2:e6:b7:af:0d:8e: 1d:6c:57:f6:fe:75:d8:e2:09:86:7c:e3:5f:af:80:ce:d9:3f: 36:56:e9:3c:59:a6:f5:b9:b8:a6:99:7e:bf:51:2e:bc:8e:8c: 8a:79:67:3e:f9:fd:10:60:82:9b:90:b1:44:94:1b:39:db:4f: 22:75:af:48:23:a8:07:23:66:06:0e:1d:02:66:16:c9:d2:77: dd:e3:80:ab:a7:4f:00:0a:78:0b:05:94:3f:b5:2c:44:0d:d3: 29:7c:f5:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFq2Nv6X2D839NmtIqAFSVng+ajgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMx RjBCNThFQzAeFw0yNjA3MjEwMTIyMzdaFw0yNjA3MjIwNTAwMzdaMDMxMTAvBgNV BAMTKDg5RUNEM0EyQkUwRjVFOTE0RjdBMUU3NjZDRERGMEMzMjRDRDc2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72eOtoSxb/0Z8oXdZUJ5frICA 3qotV8FJuCu41IqUyndk30uO0Hh8rmhTbdCL8mL06AUr5+ZYdcl5kkDkO19AcqZ+ MhJq7sNqDBAXU9YTZIAXKqvcodDbD4PLhkeQmvs6F8Z/wE+uCusIWu4SratNAbjy RJhysflytM/Hb5deav2DZFO9DbpvF9fz6j3jwy3jSjfKiIQ1Pmo9PfqsgOZGWYEQ w9RxUW4ebDFamK/4bx4NLihiqPD1OcLltKsoHGRukPY5eDBgoTAxIYP6MJw8KWkF 3WLrDI0sdEu/Ipnf5sVDkUlnzelV5UevY+0e+hGkeBJP9Pvmn1GrtJ4LpgETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiezTor4PXpFPeh52bN3wwyTNdm4wHwYDVR0j BBgwFoAUaRup0oupsgZ9p2Bv9LWtAx8LWOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVjMzIxZWItMTVmOC00NjQ2LWIwNTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4 QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMxRjBCNThFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTFCQTlEMjhCQTlCMjA2N0RBNzYwNkZGNEI1QUQwMzFGMEI1 OEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFE MDMxRjBCNThFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRIIcr7xCQgmNLmbrtovZ5B4LxcLPEsNQe4 HeXC1/6BKsbptqqvzY8WjXA+Np/q4Z5Qeur2EfB8ZlfgwWrWffpgWhu+uZE8sAY0 xqnhcfU+sJDCs3HRdmgZbGFN7NIwxTR+AGZ75RRm6eVImNqD8EDlUVm4H31zk7cx 6/mqkG2iNJOdhFqtcEx1LozfnXEECjC8HG9kFQv4tJRmJsLmt68Njh1sV/b+ddji CYZ841+vgM7ZPzZW6TxZpvW5uKaZfr9RLryOjIp5Zz75/RBggpuQsUSUGznbTyJ1 r0gjqAcjZgYOHQJmFsnSd93jgKunTwAKeAsFlD+1LEQN0yl89aw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:05 2026 by rpki-client