$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft File: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft (raw, json) Hash identifier: /K+PSvtbSxOwPqPawJ+MjaQ1Ue+H2wfOkeQ2uhAFJqY= Subject key identifier: 85:1E:51:13:E5:A8:0D:04:80:EB:B3:6E:A3:A5:50:75:A3:AB:4C:F6 Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5 Certificate issuer: /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5 Certificate serial: 2BB699234BD0062E486408EE9D913605B9DE73D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:21:45 +0000 Manifest this update: Fri 19 Jun 2026 21:16:45 +0000 Manifest next update: Sat 20 Jun 2026 22:45:45 +0000 Files and hashes: 1: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl (hash: RvFYraqS7jhmSt9gy6kwvIOkslaDyYzfULBNyL4fPlw=) 2: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: f/dM7QAxBhLE+nmzvOko9oggYTcGzBvx5hlqw5xdlCY=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 0SKGtnqhjPRa1mtjwBX9w2vC6HvZzxTKz3FtFPwDTT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b6:99:23:4b:d0:06:2e:48:64:08:ee:9d:91:36:05:b9:de:73:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5 Validity Not Before: Jun 19 21:16:45 2026 GMT Not After : Jun 20 22:45:45 2026 GMT Subject: CN=851E5113E5A80D0480EBB36EA3A55075A3AB4CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:b2:66:ec:08:dc:81:26:27:5c:bb:50:a0: b9:8a:fe:22:66:7f:8b:9f:a5:84:84:cd:5d:27:e7: bc:23:fb:bc:28:fc:c5:ce:f7:40:d9:65:1f:63:51: fe:8a:c0:61:cd:6a:e9:dc:cd:54:7e:c4:ef:c8:c5: e7:03:17:bf:8d:ef:01:50:eb:eb:20:54:fc:7f:33: ff:1b:07:14:1f:3c:13:d0:b9:69:de:ec:c9:86:3d: 53:9a:49:e2:0d:21:a8:64:2e:1f:8e:17:6e:ed:f9: ab:cf:93:9f:10:d0:f0:ee:c7:9b:f2:9b:23:26:e1: 62:f2:22:1e:81:f4:fd:df:83:00:dd:13:76:ff:70: b0:f7:ee:f2:5e:43:c7:63:8d:b8:a0:8c:d5:ad:f5: 32:9d:fe:43:ab:70:fd:c3:73:ca:90:e9:75:3a:f3: f7:c9:b6:bb:70:9b:56:81:40:90:02:57:a0:c5:aa: 80:22:d2:78:0b:5d:cc:66:3b:1b:d2:1c:18:90:96: a6:d3:ae:a4:73:41:a1:4b:b7:29:50:a0:ce:72:18: 17:25:50:5d:25:6b:b0:ce:d7:b5:79:78:1e:77:53: eb:ba:a6:cf:39:00:22:b5:84:b9:03:2b:0b:81:73: 15:7d:60:ab:90:ec:8d:f6:81:f9:d0:97:74:8c:36: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1E:51:13:E5:A8:0D:04:80:EB:B3:6E:A3:A5:50:75:A3:AB:4C:F6 X509v3 Authority Key Identifier: keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d3:02:a7:04:70:60:6a:33:ef:92:6f:ac:2c:44:9d:f7:7f: b7:15:50:f4:d5:b5:05:af:aa:13:f0:8a:3d:e8:f1:47:24:58: 7f:d6:29:7a:67:2a:4a:03:bd:d3:68:52:88:d9:7c:8a:38:82: f6:d3:77:fb:1b:f6:d0:24:b5:89:8c:0c:29:f0:2c:e5:c1:ca: 23:86:32:19:6b:57:8d:20:61:47:7e:ab:12:5e:d2:cf:57:f9: 73:68:dc:e3:eb:60:f6:f5:b7:77:14:72:b7:3b:34:72:71:ff: 40:45:33:16:44:91:15:92:01:f4:40:2f:32:14:6d:7c:4b:ab: 90:74:27:83:f3:0c:7d:47:c4:23:c5:f2:1f:6e:cd:89:ac:76: c8:f6:0f:6c:72:3e:e2:63:7a:ab:5d:ea:92:b5:e2:aa:6d:ae: 4f:3d:5e:17:91:ac:e0:f7:ce:f2:0b:dd:32:42:0e:bf:7b:9f: 8a:e3:45:7e:39:77:30:37:c6:0f:c4:d7:ee:d9:1e:ee:78:5e: ff:f4:fa:74:a7:1f:97:84:85:ab:41:a1:36:89:e8:73:36:ca: 2d:3f:4a:ec:7e:d0:88:03:b7:4c:f0:61:6e:6c:4c:d7:75:67: 96:b6:a5:e9:9f:01:7b:2e:97:1b:e2:dd:57:54:29:58:ed:ff: 45:18:bc:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7aZI0vQBi5IZAjunZE2Bbnec9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkzRkM0MUMxRkVDQzdGQTI1NjRFOTAwMEJDRTNENjUz QTg1Q0RBNTAeFw0yNjA2MTkyMTE2NDVaFw0yNjA2MjAyMjQ1NDVaMDMxMTAvBgNV BAMTKDg1MUU1MTEzRTVBODBEMDQ4MEVCQjM2RUEzQTU1MDc1QTNBQjRDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0rJm7AjcgSYnXLtQoLmK/iJm f4ufpYSEzV0n57wj+7wo/MXO90DZZR9jUf6KwGHNaunczVR+xO/IxecDF7+N7wFQ 6+sgVPx/M/8bBxQfPBPQuWne7MmGPVOaSeINIahkLh+OF27t+avPk58Q0PDux5vy myMm4WLyIh6B9P3fgwDdE3b/cLD37vJeQ8djjbigjNWt9TKd/kOrcP3Dc8qQ6XU6 8/fJtrtwm1aBQJACV6DFqoAi0ngLXcxmOxvSHBiQlqbTrqRzQaFLtylQoM5yGBcl UF0la7DO17V5eB53U+u6ps85ACK1hLkDKwuBcxV9YKuQ7I32gfnQl3SMNlEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhR5RE+WoDQSA67Nuo6VQdaOrTPYwHwYDVR0j BBgwFoAUaT/EHB/sx/olZOkAC849ZTqFzaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM2YjU5N2MtOTU0Ny00YzFlLWFjODctM2E0MzRhMzAwYTY3LzAvNjkzRkM0MUMx RkVDQzdGQTI1NjRFOTAwMEJDRTNENjUzQTg1Q0RBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTNGQzQxQzFGRUNDN0ZBMjU2NEU5MDAwQkNFM0Q2NTNBODVD REE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvNjkzRkM0MUMxRkVDQzdGQTI1NjRFOTAwMEJDRTNE NjUzQTg1Q0RBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHTAqcEcGBqM++Sb6wsRJ33f7cVUPTVtQWv qhPwij3o8UckWH/WKXpnKkoDvdNoUojZfIo4gvbTd/sb9tAktYmMDCnwLOXByiOG MhlrV40gYUd+qxJe0s9X+XNo3OPrYPb1t3cUcrc7NHJx/0BFMxZEkRWSAfRALzIU bXxLq5B0J4PzDH1HxCPF8h9uzYmsdsj2D2xyPuJjeqtd6pK14qptrk89XheRrOD3 zvIL3TJCDr97n4rjRX45dzA3xg/E1+7ZHu54Xv/0+nSnH5eEhatBoTaJ6HM2yi0/ Sux+0IgDt0zwYW5sTNd1Z5a2pemfAXsulxvi3VdUKVjt/0UYvLg= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:02 2026 by rpki-client