$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: P5PlGCxoRSFHwhRaH87VCiDIgCTP5WGCb3pdjSX9OZY= Subject key identifier: 2C:87:6B:7B:08:4D:20:E2:77:88:9D:0F:9E:26:26:AD:A8:6B:46:40 Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 30F5FD42458BDD99A5817D8A5E73301511521FA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:30:13 +0000 Manifest this update: Thu 17 Sep 2026 05:25:13 +0000 Manifest next update: Fri 18 Sep 2026 08:45:13 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) 2: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: Bf5K948pANNR8JGRazehUZYREzg53lyEyh3Jaqy3F7A=) 3: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f5:fd:42:45:8b:dd:99:a5:81:7d:8a:5e:73:30:15:11:52:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: Sep 17 05:25:13 2026 GMT Not After : Sep 18 08:45:13 2026 GMT Subject: CN=2C876B7B084D20E277889D0F9E2626ADA86B4640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:97:0f:c9:3e:a6:a7:98:d9:f0:59:43:96: 96:f1:0f:8a:55:44:ef:6e:8d:a9:58:f8:8e:49:9d: 04:92:6b:b8:de:96:af:54:4e:0d:32:a9:00:8d:fd: d0:a5:15:1a:d9:2b:0e:a2:87:ce:65:ad:21:0c:f5: 79:9f:d7:a1:08:1f:86:84:6f:d6:e3:2c:79:11:7a: b7:ab:bb:a9:63:6b:4c:21:b5:54:d7:db:02:91:ff: 51:e3:66:ec:51:38:0e:11:78:df:2d:59:73:39:3e: b0:f1:b3:6c:41:77:fc:3e:e3:ca:59:94:66:27:43: e3:ae:cd:18:ee:c4:79:0e:16:c3:67:9f:ba:7b:f5: 51:00:0b:3b:0c:00:c5:68:77:78:bb:93:c4:7e:d7: f1:59:bb:51:7d:ba:c6:91:73:85:1f:84:36:9e:be: e8:3d:d4:8b:82:5b:9f:a2:d3:5f:fe:f8:ab:51:b0: d1:88:23:78:e1:83:fc:e2:a9:dc:ed:4b:22:dc:2d: be:41:f1:41:af:3b:4d:aa:da:99:44:ed:9b:8f:4c: ee:d1:c0:d7:1e:94:a5:a9:38:cd:88:6e:e3:be:5d: 65:fc:22:15:9a:ed:84:06:5d:88:50:c5:5e:ca:ea: d0:81:bb:db:35:d0:42:15:b8:83:8d:93:e2:59:64: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:6B:7B:08:4D:20:E2:77:88:9D:0F:9E:26:26:AD:A8:6B:46:40 X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:fc:5d:77:12:0e:a1:55:30:a9:43:df:93:69:92:21:51:61: 1f:b1:4e:14:8e:76:08:7f:be:30:89:9f:84:46:ce:30:a2:d0: b5:ba:31:79:6f:c0:90:3f:ea:e9:c6:88:96:da:fa:f0:48:78: 72:e8:aa:9c:dc:9b:cd:27:dc:16:0e:e6:7f:73:db:9e:41:7b: a6:ac:22:d1:d3:2f:c9:80:6e:a0:bd:f1:d9:f3:0a:39:66:02: fa:6e:31:0d:d4:65:b5:32:20:19:df:d7:9c:1d:e4:06:d6:28: eb:9a:ee:19:fd:a2:1c:c3:0a:9d:09:ec:5f:5a:de:db:95:0e: e8:02:3a:e0:79:bb:08:0f:56:25:ec:6d:f3:90:a2:d7:5a:b5: a4:f8:ae:b5:76:7e:ee:1b:dc:ee:47:2b:fd:c0:c7:f9:97:a3: f1:b6:79:4d:62:f1:81:99:92:ba:87:18:1b:fe:6a:71:4e:6f: 7d:06:7a:88:76:97:b0:f6:3f:31:ac:0c:56:6b:26:57:76:bf: 0c:e3:b9:48:55:bf:a5:e5:7f:19:45:8a:19:5f:13:21:79:68: 8b:bb:ba:d7:63:5b:39:a7:f9:19:ec:19:ac:43:44:97:9a:4d: 67:b6:d3:3b:2d:95:d4:22:1b:2f:ec:2e:e9:01:c1:96:e0:6c: 60:f1:7a:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPX9QkWL3ZmlgX2KXnMwFRFSH6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjA5MTcwNTI1MTNaFw0yNjA5MTgwODQ1MTNaMDMxMTAvBgNV BAMTKDJDODc2QjdCMDg0RDIwRTI3Nzg4OUQwRjlFMjYyNkFEQTg2QjQ2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+JcPyT6mp5jZ8FlDlpbxD4pV RO9ujalY+I5JnQSSa7jelq9UTg0yqQCN/dClFRrZKw6ih85lrSEM9Xmf16EIH4aE b9bjLHkRereru6lja0whtVTX2wKR/1HjZuxROA4ReN8tWXM5PrDxs2xBd/w+48pZ lGYnQ+OuzRjuxHkOFsNnn7p79VEACzsMAMVod3i7k8R+1/FZu1F9usaRc4UfhDae vug91IuCW5+i01/++KtRsNGII3jhg/ziqdztSyLcLb5B8UGvO02q2plE7ZuPTO7R wNcelKWpOM2IbuO+XWX8IhWa7YQGXYhQxV7K6tCBu9s10EIVuIONk+JZZAqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULIdrewhNIOJ3iJ0PniYmrahrRkAwHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP8XXcSDqFVMKlD35NpkiFRYR+xThSOdgh/ vjCJn4RGzjCi0LW6MXlvwJA/6unGiJba+vBIeHLoqpzcm80n3BYO5n9z255Be6as ItHTL8mAbqC98dnzCjlmAvpuMQ3UZbUyIBnf15wd5AbWKOua7hn9ohzDCp0J7F9a 3tuVDugCOuB5uwgPViXsbfOQotdataT4rrV2fu4b3O5HK/3Ax/mXo/G2eU1i8YGZ krqHGBv+anFOb30Geoh2l7D2PzGsDFZrJld2vwzjuUhVv6XlfxlFihlfEyF5aIu7 utdjWzmn+RnsGaxDRJeaTWe20zstldQiGy/sLukBwZbgbGDxemY= -----END CERTIFICATE-----Generated at Thu Sep 17 09:24:04 2026 by rpki-client