$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft File: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft (raw, json) Hash identifier: YizF0rsu8//ggTLVGW65IpOhVBPjlzM6Ote/noL09F4= Subject key identifier: D7:3C:42:89:CC:4E:05:6B:9A:89:05:41:7E:B9:27:41:AD:FC:4A:A6 Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC Certificate issuer: /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Certificate serial: 2CAE00860018F323E6E9AA76C3881F1CF08277D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:13:45 +0000 Manifest this update: Thu 17 Sep 2026 04:08:45 +0000 Manifest next update: Fri 18 Sep 2026 07:30:45 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=) 2: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl (hash: D3wn+5nd2N/WTRjJ+mKeImTnwTpwpgbuEVHH3x08flE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ae:00:86:00:18:f3:23:e6:e9:aa:76:c3:88:1f:1c:f0:82:77:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Validity Not Before: Sep 17 04:08:45 2026 GMT Not After : Sep 18 07:30:45 2026 GMT Subject: CN=D73C4289CC4E056B9A8905417EB92741ADFC4AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:be:7c:e3:c8:95:f8:8b:ed:1a:ac:44:fd: 72:b7:c1:40:9f:29:cf:45:8b:1e:4a:98:34:07:c6: df:83:e4:c9:fa:d1:1e:36:0f:a4:58:30:45:50:3d: 4e:7a:9f:5e:3e:75:fd:ba:72:b7:61:8b:8b:88:ef: f5:87:14:c5:f2:d8:39:9c:24:4b:00:0a:f0:5a:9a: c7:e4:e5:05:6d:f8:f9:b8:5c:62:37:7b:85:38:ef: 7d:38:53:18:cb:62:b8:52:c6:20:b9:67:84:e4:a4: 34:1a:b3:19:66:b3:7d:e6:79:3e:dc:b1:d7:c4:95: fd:b7:9e:1a:be:1e:30:b4:b1:3c:84:63:7a:ba:8b: 61:8e:27:07:c9:cd:fc:fc:ae:6f:d2:d5:29:22:65: fe:82:d3:d6:c3:32:bb:79:9e:f6:76:14:29:5d:47: 47:a5:96:0c:9c:f5:01:09:c9:99:c8:59:8b:24:73: 02:d2:57:31:ca:76:3a:98:5f:a8:a7:a0:ef:ee:08: c1:ce:24:24:3d:9a:07:5c:5b:83:e5:72:aa:b1:b8: 8a:f4:b3:7f:03:94:2a:5e:a3:e7:df:97:3d:39:da: 2f:b4:e4:42:da:1a:de:1c:8c:5c:21:aa:f2:3b:89: 00:ea:6d:2c:85:e8:15:67:9c:d1:66:22:35:97:74: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3C:42:89:CC:4E:05:6B:9A:89:05:41:7E:B9:27:41:AD:FC:4A:A6 X509v3 Authority Key Identifier: keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b2:df:c1:e6:ea:18:26:b3:03:ba:1a:b7:bf:af:25:b8:fa: c0:28:9c:56:2e:e4:01:10:54:41:9e:1d:3d:75:a0:11:61:3b: 4e:ea:7b:ed:e5:6e:5a:d5:b4:e2:df:6e:c2:53:70:ed:67:de: b4:8e:00:d1:9b:a4:83:74:98:c1:0a:7c:f3:d7:01:2f:68:b0: c4:1c:54:81:88:8c:75:dd:52:60:68:93:a5:de:51:3c:62:fc: 85:05:75:64:cc:27:78:51:64:c6:d3:b6:96:5a:91:b4:fd:e2: 56:49:57:2d:71:08:7f:3b:31:f0:7a:36:17:34:2d:b8:08:49: 62:de:95:48:34:e4:94:80:ac:06:43:25:1c:2e:6c:f7:e9:77: ab:91:7f:ad:c8:c6:f5:28:79:a6:65:e4:21:41:72:81:db:b9: eb:c6:1f:24:93:0f:b7:5a:31:b4:68:7f:07:a1:e8:c2:9d:50: 27:12:6a:c6:53:d7:ea:e9:43:c6:6c:02:c0:ed:5b:ea:58:33: bc:33:f6:4b:2f:4f:66:dd:3b:e5:05:e9:57:6f:77:35:02:ab: 83:e9:5f:31:a2:a9:8d:e6:d2:37:72:d0:3b:aa:ae:8d:44:d3: 07:02:b4:29:99:43:f5:67:c0:f3:0e:be:12:9a:6b:28:be:8f: 80:fe:b2:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULK4AhgAY8yPm6ap2w4gfHPCCd9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMx RjBCNThFQzAeFw0yNjA5MTcwNDA4NDVaFw0yNjA5MTgwNzMwNDVaMDMxMTAvBgNV BAMTKEQ3M0M0Mjg5Q0M0RTA1NkI5QTg5MDU0MTdFQjkyNzQxQURGQzRBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDzb5848iV+IvtGqxE/XK3wUCf Kc9Fix5KmDQHxt+D5Mn60R42D6RYMEVQPU56n14+df26crdhi4uI7/WHFMXy2Dmc JEsACvBamsfk5QVt+Pm4XGI3e4U47304UxjLYrhSxiC5Z4TkpDQasxlms33meT7c sdfElf23nhq+HjC0sTyEY3q6i2GOJwfJzfz8rm/S1SkiZf6C09bDMrt5nvZ2FCld R0ellgyc9QEJyZnIWYskcwLSVzHKdjqYX6inoO/uCMHOJCQ9mgdcW4PlcqqxuIr0 s38DlCpeo+fflz052i+05ELaGt4cjFwhqvI7iQDqbSyF6BVnnNFmIjWXdE+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zxCicxOBWuaiQVBfrknQa38SqYwHwYDVR0j BBgwFoAUaRup0oupsgZ9p2Bv9LWtAx8LWOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVjMzIxZWItMTVmOC00NjQ2LWIwNTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4 QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMxRjBCNThFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTFCQTlEMjhCQTlCMjA2N0RBNzYwNkZGNEI1QUQwMzFGMEI1 OEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFE MDMxRjBCNThFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWy38Hm6hgmswO6Gre/ryW4+sAonFYu5AEQ VEGeHT11oBFhO07qe+3lblrVtOLfbsJTcO1n3rSOANGbpIN0mMEKfPPXAS9osMQc VIGIjHXdUmBok6XeUTxi/IUFdWTMJ3hRZMbTtpZakbT94lZJVy1xCH87MfB6Nhc0 LbgISWLelUg05JSArAZDJRwubPfpd6uRf63IxvUoeaZl5CFBcoHbuevGHySTD7da MbRofweh6MKdUCcSasZT1+rpQ8ZsAsDtW+pYM7wz9ksvT2bdO+UF6VdvdzUCq4Pp XzGiqY3m0jdy0Duqro1E0wcCtCmZQ/VnwPMOvhKaayi+j4D+sus= -----END CERTIFICATE-----Generated at Thu Sep 17 11:36:30 2026 by rpki-client