$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft File: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft (raw, json) Hash identifier: ldZGkMhQRhEG361mnEZatnxj28Xfr3HxjbIhu5/xI7I= Subject key identifier: 06:01:01:20:5A:39:1A:11:9B:02:90:DB:BF:C2:15:46:DC:26:06:8A Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5 Certificate issuer: /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5 Certificate serial: 3DE095E49BDB6021783AC5A26D4E597E05F8BE1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:54:32 +0000 Manifest this update: Wed 23 Sep 2026 14:49:32 +0000 Manifest next update: Thu 24 Sep 2026 15:38:32 +0000 Files and hashes: 1: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl (hash: zIaJuqwu/1p3DNwcEZE74NrkAvnVtZ/0so7A69eVca0=) 2: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 0SKGtnqhjPRa1mtjwBX9w2vC6HvZzxTKz3FtFPwDTT0=) 3: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: f/dM7QAxBhLE+nmzvOko9oggYTcGzBvx5hlqw5xdlCY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e0:95:e4:9b:db:60:21:78:3a:c5:a2:6d:4e:59:7e:05:f8:be:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5 Validity Not Before: Sep 23 14:49:32 2026 GMT Not After : Sep 24 15:38:32 2026 GMT Subject: CN=060101205A391A119B0290DBBFC21546DC26068A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:84:f0:af:65:91:0d:b8:42:a6:3a:cb:83: 3a:1c:4f:08:e9:45:cf:1a:8b:6c:dc:e7:af:c1:65: 83:d3:54:40:dd:34:15:8b:4f:ae:0e:d2:17:af:8b: 07:44:bf:fd:03:97:3f:b4:cc:68:e0:71:cb:30:cf: 19:af:b3:30:1e:09:b1:72:f4:c2:44:f9:12:6f:43: 7a:4b:16:55:89:99:f3:e3:02:a2:b7:83:39:41:b6: 81:32:82:bf:b1:c4:6e:94:df:cd:e2:48:ff:03:8d: 25:69:e2:1d:20:ff:63:8e:1a:b4:db:df:e3:0f:29: 80:d1:ca:1e:f5:19:5f:62:65:5c:d3:43:66:de:94: 2b:02:90:8e:4a:d6:41:54:00:98:f6:45:21:7a:4d: 84:2a:05:7a:75:b4:50:8a:3d:81:d1:76:14:97:42: d9:39:8f:a5:b9:72:30:89:0b:40:d0:b1:0d:a8:77: de:ac:47:51:fa:7a:35:cf:d9:7a:2d:47:25:4d:66: 88:d6:ea:f1:1e:90:c8:54:2c:af:57:22:e2:3d:1f: eb:28:40:dc:d6:d0:d5:ae:34:90:02:89:01:1a:a9: 80:09:89:63:83:7b:4f:f8:53:f5:f0:9e:89:24:b7: dd:e1:cb:91:ea:a6:9e:db:f3:2f:66:e5:5f:af:02: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:01:20:5A:39:1A:11:9B:02:90:DB:BF:C2:15:46:DC:26:06:8A X509v3 Authority Key Identifier: keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ea:16:20:1f:a3:80:6f:07:e5:2c:0a:c7:09:91:b2:4e:e7: eb:38:a7:d7:6e:b3:bd:63:18:07:44:7e:73:37:c9:82:5e:07: 6c:8c:58:88:2a:d5:a8:82:fc:27:20:23:49:6a:c4:66:1c:c0: f6:fd:e0:34:c5:31:80:68:07:5d:db:c4:72:8a:93:0a:aa:c0: c5:22:a2:d5:90:00:18:df:6e:c9:dd:64:c6:2d:24:63:3c:49: f9:d0:55:5a:ef:c1:e1:29:59:06:86:9c:b7:f3:0c:32:21:87: b5:20:c8:84:13:3b:7d:1d:b0:34:01:34:ad:b8:2f:32:70:c1: 33:a7:65:05:2c:74:59:b1:b8:17:cb:5e:f4:60:a0:b6:9c:ca: d3:2b:b8:94:23:cb:62:4b:3b:c0:e7:52:86:9d:f5:4a:f6:ef: aa:d3:71:4f:19:c5:88:2e:76:46:48:7c:80:1f:42:82:e0:cc: 0e:8b:d4:37:e0:56:fb:2e:8d:04:82:42:ac:a6:c1:7d:eb:23: 28:fb:02:d6:33:29:74:0d:ef:3e:c6:36:2b:07:af:7e:74:e1: 67:3f:1a:df:6f:9a:90:cb:7c:6a:8e:8c:2c:24:a2:53:8a:9b: 65:be:2c:d4:08:74:e1:f0:81:8c:4a:ef:c5:d3:5b:70:37:53: 3b:f3:b5:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPeCV5JvbYCF4OsWibU5ZfgX4vhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkzRkM0MUMxRkVDQzdGQTI1NjRFOTAwMEJDRTNENjUz QTg1Q0RBNTAeFw0yNjA5MjMxNDQ5MzJaFw0yNjA5MjQxNTM4MzJaMDMxMTAvBgNV BAMTKDA2MDEwMTIwNUEzOTFBMTE5QjAyOTBEQkJGQzIxNTQ2REMyNjA2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjy4Twr2WRDbhCpjrLgzocTwjp Rc8ai2zc56/BZYPTVEDdNBWLT64O0heviwdEv/0Dlz+0zGjgccswzxmvszAeCbFy 9MJE+RJvQ3pLFlWJmfPjAqK3gzlBtoEygr+xxG6U383iSP8DjSVp4h0g/2OOGrTb 3+MPKYDRyh71GV9iZVzTQ2belCsCkI5K1kFUAJj2RSF6TYQqBXp1tFCKPYHRdhSX Qtk5j6W5cjCJC0DQsQ2od96sR1H6ejXP2XotRyVNZojW6vEekMhULK9XIuI9H+so QNzW0NWuNJACiQEaqYAJiWODe0/4U/Xwnokkt93hy5Hqpp7b8y9m5V+vAuX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBgEBIFo5GhGbApDbv8IVRtwmBoowHwYDVR0j BBgwFoAUaT/EHB/sx/olZOkAC849ZTqFzaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM2YjU5N2MtOTU0Ny00YzFlLWFjODctM2E0MzRhMzAwYTY3LzAvNjkzRkM0MUMx RkVDQzdGQTI1NjRFOTAwMEJDRTNENjUzQTg1Q0RBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTNGQzQxQzFGRUNDN0ZBMjU2NEU5MDAwQkNFM0Q2NTNBODVD REE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvNjkzRkM0MUMxRkVDQzdGQTI1NjRFOTAwMEJDRTNE NjUzQTg1Q0RBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPqFiAfo4BvB+UsCscJkbJO5+s4p9dus71j GAdEfnM3yYJeB2yMWIgq1aiC/CcgI0lqxGYcwPb94DTFMYBoB13bxHKKkwqqwMUi otWQABjfbsndZMYtJGM8SfnQVVrvweEpWQaGnLfzDDIhh7UgyIQTO30dsDQBNK24 LzJwwTOnZQUsdFmxuBfLXvRgoLacytMruJQjy2JLO8DnUoad9Ur276rTcU8ZxYgu dkZIfIAfQoLgzA6L1DfgVvsujQSCQqymwX3rIyj7AtYzKXQN7z7GNisHr3504Wc/ Gt9vmpDLfGqOjCwkolOKm2W+LNQIdOHwgYxK78XTW3A3Uzvztdw= -----END CERTIFICATE-----Generated at Thu Sep 24 10:24:47 2026 by rpki-client