$ rpki-client -vvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft File: 0689842E4B56026FA506540CDEFB7A076C36BFE8.mft (raw, json) Hash identifier: cdf1ECF2cVvgwXwmrHrUINBcJIcRfaUP9CNyjTJieqQ= Subject key identifier: 4E:41:D3:65:3F:FF:E9:D0:64:CD:83:5E:9C:F7:DA:E7:1A:14:0B:FA Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Certificate serial: 64E3FBAAF7DA03E6833DB3FF666C4A376BB2D48A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:45:16 +0000 Manifest this update: Thu 23 Jul 2026 20:40:16 +0000 Manifest next update: Fri 24 Jul 2026 22:53:16 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: FzvgoTD2ojksQohHHe47CIol6XB+LJVt5AigSuBeY6I=) 2: 0689842E4B56026FA506540CDEFB7A076C36BFE8.crl (hash: KlL92UNrilpjZqKFFc9qBZTXsM/ic7uSE02OclOe8qY=) 3: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e3:fb:aa:f7:da:03:e6:83:3d:b3:ff:66:6c:4a:37:6b:b2:d4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8 Validity Not Before: Jul 23 20:40:16 2026 GMT Not After : Jul 24 22:53:16 2026 GMT Subject: CN=4E41D3653FFFE9D064CD835E9CF7DAE71A140BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:ab:58:22:09:02:4f:a0:d9:34:3a:c6:db: 25:9d:d4:9b:a7:36:f7:be:0c:06:ee:2f:d4:f3:47: 1b:e3:55:81:57:41:8a:ea:1d:54:7a:57:e2:c7:ad: e0:e3:94:5d:70:4a:a9:d7:ad:cd:30:a3:eb:5a:ee: 65:56:f2:f4:6a:4c:68:c4:24:f6:fb:75:df:46:89: de:11:3f:87:a1:1e:da:c3:b8:4d:f1:32:4b:66:f6: 55:b5:67:9e:03:ae:6c:bd:a7:db:37:c9:c4:f6:c5: e7:55:b5:7c:b2:79:0b:ee:89:be:f1:15:85:e3:04: 24:c2:34:87:88:61:83:86:61:ac:dc:6d:7f:c3:0a: e6:17:3e:00:36:eb:09:a5:56:22:60:67:9d:e0:ad: c6:d2:2e:a7:4d:0d:1d:1b:25:ea:bc:d4:3d:52:f2: 8b:ec:d8:ac:d9:c0:1a:7a:15:5f:11:e3:e8:ff:4e: b3:f9:c1:06:1e:7f:a0:e9:fd:06:a4:57:fc:30:fa: 76:81:fc:93:8f:64:00:86:85:18:37:e0:e7:a9:23: 1c:67:55:6c:25:47:bd:af:2f:5a:6f:c1:26:3e:07: 22:6c:7f:9d:c8:46:55:c5:b6:43:55:e1:a7:af:f9: 1c:68:6d:bb:2a:63:c8:79:f1:97:5b:1b:74:f3:cb: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:41:D3:65:3F:FF:E9:D0:64:CD:83:5E:9C:F7:DA:E7:1A:14:0B:FA X509v3 Authority Key Identifier: keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:d9:b3:74:06:4d:72:8d:4f:dc:80:b6:2f:72:39:c1:e2:92: 26:37:d8:82:8c:e2:ba:4d:19:8e:ef:05:7f:56:a2:f7:2a:f8: 3f:63:7f:be:6d:85:50:62:6e:d4:1b:77:93:cb:76:ea:29:82: 66:f4:48:aa:93:79:6c:7d:d5:83:2f:d1:4b:11:c6:7e:4b:97: 75:e8:4b:24:9f:b4:6f:04:dc:79:57:90:9d:6f:e3:1c:10:78: 0a:4f:40:bc:2f:4c:9b:8e:b1:c5:86:2d:9c:b6:7a:fd:d1:62: 93:93:7b:82:7f:88:08:2d:17:52:3f:ca:fe:c7:57:43:01:eb: fd:75:04:01:ad:a2:93:88:40:77:0b:2b:28:d9:fa:f5:44:8f: 82:99:a9:8b:0b:02:71:09:01:e9:93:1e:ce:b0:f8:cd:9c:fc: 7d:50:8d:22:de:09:58:60:45:f4:de:7a:eb:6d:40:a7:b5:ba: ae:52:52:63:cc:1e:ee:dc:75:05:9b:e0:ad:73:52:2f:75:18: 76:01:ab:fb:d5:14:8a:c2:d6:17:ab:38:3b:e3:82:5d:9d:c6: 47:25:86:1f:e1:8c:83:67:12:be:40:6b:e9:24:53:0f:ef:d5: c6:95:40:3a:fd:13:a4:29:df:89:fb:c2:ec:9a:a6:5a:2f:b4: c1:d3:48:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOP7qvfaA+aDPbP/ZmxKN2uy1IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2 QzM2QkZFODAeFw0yNjA3MjMyMDQwMTZaFw0yNjA3MjQyMjUzMTZaMDMxMTAvBgNV BAMTKDRFNDFEMzY1M0ZGRkU5RDA2NENEODM1RTlDRjdEQUU3MUExNDBCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflatYIgkCT6DZNDrG2yWd1Jun Nve+DAbuL9TzRxvjVYFXQYrqHVR6V+LHreDjlF1wSqnXrc0wo+ta7mVW8vRqTGjE JPb7dd9Gid4RP4ehHtrDuE3xMktm9lW1Z54Drmy9p9s3ycT2xedVtXyyeQvuib7x FYXjBCTCNIeIYYOGYazcbX/DCuYXPgA26wmlViJgZ53grcbSLqdNDR0bJeq81D1S 8ovs2KzZwBp6FV8R4+j/TrP5wQYef6Dp/QakV/ww+naB/JOPZACGhRg34OepIxxn VWwlR72vL1pvwSY+ByJsf53IRlXFtkNV4aev+RxobbsqY8h58ZdbG3Tzy1AVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkHTZT//6dBkzYNenPfa5xoUC/owHwYDVR0j BBgwFoAUBomELktWAm+lBlQM3vt6B2w2v+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJlNjRiMGQtNjQ2Yy00Y2VjLTk0MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0 QjU2MDI2RkE1MDY1NDBDREVGQjdBMDc2QzM2QkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjg5ODQyRTRCNTYwMjZGQTUwNjU0MENERUZCN0EwNzZDMzZC RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvMDY4OTg0MkU0QjU2MDI2RkE1MDY1NDBDREVGQjdB MDc2QzM2QkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvZs3QGTXKNT9yAti9yOcHikiY32IKM4rpN GY7vBX9Wovcq+D9jf75thVBibtQbd5PLduopgmb0SKqTeWx91YMv0UsRxn5Ll3Xo SySftG8E3HlXkJ1v4xwQeApPQLwvTJuOscWGLZy2ev3RYpOTe4J/iAgtF1I/yv7H V0MB6/11BAGtopOIQHcLKyjZ+vVEj4KZqYsLAnEJAemTHs6w+M2c/H1QjSLeCVhg RfTeeuttQKe1uq5SUmPMHu7cdQWb4K1zUi91GHYBq/vVFIrC1herODvjgl2dxkcl hh/hjINnEr5Aa+kkUw/v1caVQDr9E6Qp34n7wuyaplovtMHTSFQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:36:33 2026 by rpki-client