$ rpki-client -vvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: neUsVq6BVbbggOG2W6kfq/Ors+D4hMqKpa4+B7L294g= Subject key identifier: BA:18:9C:AF:4D:10:65:04:61:9B:19:48:F4:05:44:78:D9:93:4C:8E Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 7E4364F1045976B5DD09E8276848EF7348599606 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: 0F Signing time: Tue 12 May 2026 10:51:47 +0000 Manifest this update: Tue 12 May 2026 10:46:47 +0000 Manifest next update: Wed 13 May 2026 14:09:47 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) 2: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: L0ff8XAzsykgBf+xXLeCVdIRZKh4D0OjFR/8F3l5Z6U=) 3: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:43:64:f1:04:59:76:b5:dd:09:e8:27:68:48:ef:73:48:59:96:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: May 12 10:46:47 2026 GMT Not After : May 13 14:09:47 2026 GMT Subject: CN=BA189CAF4D106504619B1948F4054478D9934C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:54:db:53:59:ae:96:76:af:97:89:d1:d1:8e: aa:e9:1b:55:de:3e:22:04:db:99:ca:36:33:6d:5a: 18:99:c8:95:db:5e:ba:dc:fc:e5:9a:d1:22:c5:74: 68:1e:24:f7:3b:84:e1:67:ae:9f:ea:1f:d1:5f:1c: 34:95:3f:f6:a9:8b:37:98:58:10:5f:ed:8d:dc:ee: 1d:25:30:23:53:db:a6:41:50:4b:5c:1b:67:e1:7f: ef:69:c6:9f:db:65:27:d6:e5:76:fc:92:8d:e8:aa: 1a:f5:2b:5e:ff:ed:38:96:01:69:60:a9:0d:2a:01: a4:8f:7c:98:b2:15:64:a9:e5:f1:e5:c7:f7:fa:ce: 9c:c3:95:0b:94:be:59:b0:7d:c5:8d:30:fc:1b:d1: 3e:fb:b2:21:04:41:6d:0d:18:0a:45:eb:19:74:79: f9:3d:35:e4:a1:5e:61:4d:db:9a:04:cb:fb:bc:39: a9:27:e5:68:f0:db:39:6e:df:6b:0d:f1:98:0f:a1: 57:4c:84:47:e2:3b:45:86:fc:89:de:bb:7e:6f:8a: 7a:88:3c:c7:68:5b:33:3f:ee:b2:12:d2:89:3b:56: 1b:4f:8d:f4:45:d1:dd:99:cd:0a:28:a8:88:c1:a2: 7d:26:c7:b9:73:c9:9f:8b:0c:c5:1a:ba:06:26:c7: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:18:9C:AF:4D:10:65:04:61:9B:19:48:F4:05:44:78:D9:93:4C:8E X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:57:61:ff:df:79:39:b4:e9:47:db:cf:ac:d7:e2:a2:1a:5a: bf:06:9e:39:4a:73:0b:0e:a3:6f:7e:0f:88:b6:27:32:ab:a7: b9:0a:b4:2d:17:5b:e9:3a:42:12:43:64:62:12:14:97:ed:96: 60:62:d5:3c:03:74:d7:09:86:a7:05:be:67:d3:0e:34:e4:99: 52:d9:20:01:96:2f:5a:c8:74:01:e3:bb:0b:6c:10:5e:e4:3d: 7d:13:3f:0d:52:3d:76:93:2d:1e:ae:ff:18:c2:f3:a8:0a:02: de:f7:f3:c9:e9:03:a3:4a:1a:b1:29:c5:17:b2:d2:67:43:7e: f0:a9:57:5d:73:0e:fb:f4:22:3f:5c:d2:d2:3a:98:83:88:b5: 4e:89:37:54:fe:4c:2b:63:61:54:dc:e8:06:61:05:dd:ec:02: 20:56:5a:e7:91:ad:b9:80:b3:f6:09:0d:35:a6:70:40:fa:a3: cb:51:f0:6b:91:e3:0c:e2:6d:de:60:4a:e2:ac:e5:c6:38:f7: 14:df:85:20:77:10:84:ad:6a:e3:87:e8:5c:e0:5f:16:a0:e6: 0a:1a:97:00:f8:bc:ae:56:d3:9c:83:d5:b9:2f:45:bb:8b:c6: cd:41:5f:fa:24:15:9b:c3:03:27:9d:df:08:70:43:cb:35:8e: fd:cd:02:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkNk8QRZdrXdCegnaEjvc0hZlgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjA1MTIxMDQ2NDdaFw0yNjA1MTMxNDA5NDdaMDMxMTAvBgNV BAMTKEJBMTg5Q0FGNEQxMDY1MDQ2MTlCMTk0OEY0MDU0NDc4RDk5MzRDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrVNtTWa6Wdq+XidHRjqrpG1Xe PiIE25nKNjNtWhiZyJXbXrrc/OWa0SLFdGgeJPc7hOFnrp/qH9FfHDSVP/apizeY WBBf7Y3c7h0lMCNT26ZBUEtcG2fhf+9pxp/bZSfW5Xb8ko3oqhr1K17/7TiWAWlg qQ0qAaSPfJiyFWSp5fHlx/f6zpzDlQuUvlmwfcWNMPwb0T77siEEQW0NGApF6xl0 efk9NeShXmFN25oEy/u8Oakn5Wjw2zlu32sN8ZgPoVdMhEfiO0WG/Ineu35vinqI PMdoWzM/7rIS0ok7VhtPjfRF0d2ZzQooqIjBon0mx7lzyZ+LDMUaugYmx8yhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhicr00QZQRhmxlI9AVEeNmTTI4wHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFXYf/feTm06Ufbz6zX4qIaWr8GnjlKcwsO o29+D4i2JzKrp7kKtC0XW+k6QhJDZGISFJftlmBi1TwDdNcJhqcFvmfTDjTkmVLZ IAGWL1rIdAHjuwtsEF7kPX0TPw1SPXaTLR6u/xjC86gKAt7388npA6NKGrEpxRey 0mdDfvCpV11zDvv0Ij9c0tI6mIOItU6JN1T+TCtjYVTc6AZhBd3sAiBWWueRrbmA s/YJDTWmcED6o8tR8GuR4wzibd5gSuKs5cY49xTfhSB3EIStauOH6FzgXxag5goa lwD4vK5W05yD1bkvRbuLxs1BX/okFZvDAyed3whwQ8s1jv3NAlw= -----END CERTIFICATE-----Generated at Wed May 13 02:11:33 2026 by rpki-client