$ rpki-client -vvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft File: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft (raw, json) Hash identifier: RqLIJdh622qsiufxEiF6RVIOtv7vh4cYoiqVCZSXeJg= Subject key identifier: EA:D5:3C:19:61:4D:A9:BF:09:4A:31:B3:75:E1:7C:02:FC:96:E0:12 Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC Certificate issuer: /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Certificate serial: 406C760A39BB05F84C37037C236E391935C56A66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:35 +0000 Manifest this update: Tue 12 May 2026 19:25:35 +0000 Manifest next update: Wed 13 May 2026 22:50:35 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=) 2: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl (hash: U7FdV0xey5SuYa9Asr2iBEfuyskMLI7kMgSIJX7KOso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6c:76:0a:39:bb:05:f8:4c:37:03:7c:23:6e:39:19:35:c5:6a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Validity Not Before: May 12 19:25:35 2026 GMT Not After : May 13 22:50:35 2026 GMT Subject: CN=EAD53C19614DA9BF094A31B375E17C02FC96E012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:1d:66:ef:cb:a1:69:28:19:d8:00:f9:da: f0:1b:2c:98:87:dd:fa:01:38:22:bf:9d:4b:8f:8a: ff:28:69:f8:65:27:8f:a4:f4:a8:49:2c:8c:d0:85: 9e:c3:5b:12:eb:4a:6a:f3:95:52:7c:fc:be:00:36: 3e:6a:1d:92:54:78:a0:da:f5:d9:dd:9a:f0:20:4c: 19:fb:d6:cc:5b:66:c7:ad:38:25:9d:49:eb:bf:65: 99:6e:be:1d:25:01:20:c0:0c:25:0c:5d:97:69:72: d6:b8:f2:bb:84:0d:fa:8b:5c:73:4a:9e:73:c1:55: 36:3f:15:97:3e:fc:c7:5c:53:bb:0c:b1:10:73:92: 01:f9:4b:2f:db:a5:e9:2d:a4:12:de:de:e0:22:70: 46:75:8d:b9:f2:98:ea:fd:92:42:ff:52:e5:59:94: ca:cc:3a:dc:ec:c8:41:3d:7d:1d:0c:a4:b6:8a:0e: ab:24:11:c9:f3:ca:4c:79:62:87:4f:ba:85:65:e2: 5e:31:2f:98:c6:76:18:d1:41:48:21:b0:c9:63:fe: ed:8a:a5:6c:b1:93:64:1f:ab:4f:49:ff:dd:7f:d9: 79:8f:db:62:02:a3:cf:20:7b:eb:51:7d:54:9a:f1: aa:f3:f9:b5:43:0f:53:73:2f:19:bc:be:db:0d:37: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D5:3C:19:61:4D:A9:BF:09:4A:31:B3:75:E1:7C:02:FC:96:E0:12 X509v3 Authority Key Identifier: keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:09:4a:e0:0a:b7:1c:23:b9:6c:32:b8:d3:34:5d:6d:e9:6e: bd:2d:80:78:5d:6b:5b:a7:57:b7:75:d5:ca:36:9a:28:e3:a5: e9:1a:e9:20:1f:58:cd:ad:ae:2f:25:e7:96:9c:c3:29:e5:16: c6:17:9c:b6:85:08:7d:44:65:71:1c:40:50:1e:28:1d:2d:46: f6:92:73:69:89:95:d0:24:8b:a9:62:6b:03:81:b9:57:59:27: cb:cd:11:b2:7a:c6:fd:bd:a2:bf:c3:77:4f:1e:d3:91:30:8f: 3e:36:97:45:75:1f:d5:6f:b2:15:8f:bd:95:ec:d6:90:2a:d2: 02:66:d8:6d:c0:c6:0b:de:7c:85:36:d4:7b:29:3e:8f:31:41: 12:dd:16:c9:1b:7b:08:8d:0f:c7:3e:18:af:08:30:fa:58:22: 98:ff:59:ed:61:b7:90:5f:25:32:41:d1:a6:52:c1:31:08:6b: 24:23:cb:80:4e:5b:cb:f9:65:41:08:0c:dd:f6:49:08:ec:a2: dd:81:9a:7a:ce:aa:c6:46:61:62:d3:e5:48:12:7c:08:1b:17: 58:c5:98:2d:a0:4e:8d:c0:86:68:8a:24:fc:5d:e4:8a:af:bb: 8d:0a:2e:e8:3d:91:b7:af:b4:7d:08:c2:7b:50:86:2c:49:bc: 73:cd:dd:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGx2Cjm7BfhMNwN8I245GTXFamYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMx RjBCNThFQzAeFw0yNjA1MTIxOTI1MzVaFw0yNjA1MTMyMjUwMzVaMDMxMTAvBgNV BAMTKEVBRDUzQzE5NjE0REE5QkYwOTRBMzFCMzc1RTE3QzAyRkM5NkUwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtR1m78uhaSgZ2AD52vAbLJiH 3foBOCK/nUuPiv8oafhlJ4+k9KhJLIzQhZ7DWxLrSmrzlVJ8/L4ANj5qHZJUeKDa 9dndmvAgTBn71sxbZsetOCWdSeu/ZZluvh0lASDADCUMXZdpcta48ruEDfqLXHNK nnPBVTY/FZc+/MdcU7sMsRBzkgH5Sy/bpektpBLe3uAicEZ1jbnymOr9kkL/UuVZ lMrMOtzsyEE9fR0MpLaKDqskEcnzykx5YodPuoVl4l4xL5jGdhjRQUghsMlj/u2K pWyxk2Qfq09J/91/2XmP22ICo88ge+tRfVSa8arz+bVDD1NzLxm8vtsNN1K1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6tU8GWFNqb8JSjGzdeF8AvyW4BIwHwYDVR0j BBgwFoAUaRup0oupsgZ9p2Bv9LWtAx8LWOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVjMzIxZWItMTVmOC00NjQ2LWIwNTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4 QkE5QjIwNjdEQTc2MDZGRjRCNUFEMDMxRjBCNThFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTFCQTlEMjhCQTlCMjA2N0RBNzYwNkZGNEI1QUQwMzFGMEI1 OEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvNjkxQkE5RDI4QkE5QjIwNjdEQTc2MDZGRjRCNUFE MDMxRjBCNThFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcJSuAKtxwjuWwyuNM0XW3pbr0tgHhda1un V7d11co2mijjpeka6SAfWM2tri8l55acwynlFsYXnLaFCH1EZXEcQFAeKB0tRvaS c2mJldAki6liawOBuVdZJ8vNEbJ6xv29or/Dd08e05Ewjz42l0V1H9VvshWPvZXs 1pAq0gJm2G3AxgvefIU21HspPo8xQRLdFskbewiND8c+GK8IMPpYIpj/We1ht5Bf JTJB0aZSwTEIayQjy4BOW8v5ZUEIDN32SQjsot2BmnrOqsZGYWLT5UgSfAgbF1jF mC2gTo3AhmiKJPxd5Iqvu40KLug9kbevtH0IwntQhixJvHPN3RY= -----END CERTIFICATE-----Generated at Wed May 13 02:13:39 2026 by rpki-client