$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json) Hash identifier: bhxYt2C9jVHwdNehhQo2iYer5x046jpsu0TdtTJ4wn8= Subject key identifier: E6:2B:B0:A1:76:F8:F8:D5:94:08:1F:67:EA:D7:67:2D:4B:79:FB:8E Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB Certificate serial: 2099686C7846D19D354D1B828AC8C19C8842FCB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 07:26:43 +0000 Manifest this update: Thu 03 Sep 2026 07:21:43 +0000 Manifest next update: Fri 04 Sep 2026 11:01:43 +0000 Files and hashes: 1: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: eYvP4+VEVhuepWg7yGSEpE1QOhXIbfCVC3R12RutH+4=) 2: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=) 3: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=) 4: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:99:68:6c:78:46:d1:9d:35:4d:1b:82:8a:c8:c1:9c:88:42:fc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB Validity Not Before: Sep 3 07:21:43 2026 GMT Not After : Sep 4 11:01:43 2026 GMT Subject: CN=E62BB0A176F8F8D594081F67EAD7672D4B79FB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:0e:62:83:a7:bc:09:7e:f7:1b:cb:7e:6d: fe:82:c0:7d:dd:80:4c:e8:6a:30:c7:00:03:5c:be: 53:0e:61:af:45:24:0d:33:f4:1a:d9:83:34:6d:f1: 3b:b9:e4:fa:f3:3e:53:73:7c:e1:c5:0a:7a:51:d8: e0:0a:af:4e:fb:2d:e7:a4:1c:5f:b2:48:ca:3d:f4: 4a:fb:14:06:0d:8a:dd:f7:15:84:f1:72:ce:1d:a9: 40:00:39:bb:e3:0b:76:ab:35:78:12:12:66:1c:66: 64:92:27:8e:54:47:7e:51:02:89:b2:c2:9f:b3:41: 11:99:41:bf:20:67:1f:89:34:e8:cc:70:30:c4:a4: 70:6a:47:b7:53:e0:72:a3:54:75:6d:b9:48:13:52: bc:06:35:66:09:84:44:f1:45:9a:d6:3a:7f:23:e0: aa:f9:fa:57:8e:93:8c:21:33:af:4a:e6:a6:d3:4a: 1c:71:7e:4a:e4:6a:7b:6c:a3:44:be:87:a9:3e:7f: 9b:05:93:70:e2:ad:fe:82:5b:fb:0f:70:2b:0f:9d: 12:4f:50:bf:c4:5a:7b:6b:9b:c3:33:5d:c3:91:97: 44:4f:f7:73:0c:b8:6b:9f:75:47:f1:c9:09:31:5d: 70:58:c2:98:c4:73:06:a0:66:c5:9f:88:ec:7e:f9: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2B:B0:A1:76:F8:F8:D5:94:08:1F:67:EA:D7:67:2D:4B:79:FB:8E X509v3 Authority Key Identifier: keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:94:8f:29:4f:7b:12:96:7c:2a:c8:71:d8:2d:8a:42:53:e4: 98:20:31:dd:ac:54:cc:73:e7:64:8d:e3:80:ba:b0:e5:f9:a8: 90:f5:fe:9c:ea:cf:6b:31:77:93:6c:8e:69:29:02:2f:1a:ad: 87:27:ae:9b:cb:c7:20:9b:81:90:f4:21:c3:c0:83:b9:5b:46: ec:57:7b:43:a8:b4:2c:68:b9:60:f3:14:55:66:70:dd:bc:d2: 19:87:c1:6f:94:65:0b:2d:cc:1f:3c:74:35:de:8e:06:f1:61: dd:2a:a3:05:4a:94:63:bc:bb:88:80:81:f0:cb:e1:ff:6f:76: e6:d1:63:c8:fa:1c:1e:73:3d:c1:e6:31:2b:51:0e:89:67:48: cb:51:0c:fe:ba:2b:ed:58:e8:d7:c4:ac:61:e1:66:ca:2e:b2: d1:d6:f8:4e:db:9c:4e:b3:f6:da:34:23:05:8a:d2:2c:ac:2e: 6d:b5:6f:2d:1b:40:de:c4:c4:c9:06:8f:fe:c8:e1:4a:13:9e: bb:15:94:58:e5:4e:fd:e8:f1:c8:93:96:f8:ee:d3:41:b9:d4: fd:05:b3:e2:ce:c8:26:7a:35:ef:8e:df:2f:f2:10:80:d9:97: a6:a7:0b:6f:b7:67:26:dc:6d:16:50:f3:7a:24:af:64:fd:bb: 65:6b:2b:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJlobHhG0Z01TRuCisjBnIhC/LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1 OTIwQjdDQjAeFw0yNjA5MDMwNzIxNDNaFw0yNjA5MDQxMTAxNDNaMDMxMTAvBgNV BAMTKEU2MkJCMEExNzZGOEY4RDU5NDA4MUY2N0VBRDc2NzJENEI3OUZCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK7w5ig6e8CX73G8t+bf6CwH3d gEzoajDHAANcvlMOYa9FJA0z9BrZgzRt8Tu55PrzPlNzfOHFCnpR2OAKr077Leek HF+ySMo99Er7FAYNit33FYTxcs4dqUAAObvjC3arNXgSEmYcZmSSJ45UR35RAomy wp+zQRGZQb8gZx+JNOjMcDDEpHBqR7dT4HKjVHVtuUgTUrwGNWYJhETxRZrWOn8j 4Kr5+leOk4whM69K5qbTShxxfkrkantso0S+h6k+f5sFk3Dirf6CW/sPcCsPnRJP UL/EWntrm8MzXcORl0RP93MMuGufdUfxyQkxXXBYwpjEcwagZsWfiOx++RKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5iuwoXb4+NWUCB9n6tdnLUt5+44wHwYDVR0j BBgwFoAUaYFemqFLsCqmIID/aM7tUlkgt8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0NmJkYWQtZjEzMC00OGE5LTg1MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFB MTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1OTIwQjdDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTgxNUU5QUExNEJCMDJBQTYyMDgwRkY2OENFRUQ1MjU5MjBC N0NCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVE NTI1OTIwQjdDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2UjylPexKWfCrIcdgtikJT5JggMd2sVMxz 52SN44C6sOX5qJD1/pzqz2sxd5NsjmkpAi8arYcnrpvLxyCbgZD0IcPAg7lbRuxX e0OotCxouWDzFFVmcN280hmHwW+UZQstzB88dDXejgbxYd0qowVKlGO8u4iAgfDL 4f9vdubRY8j6HB5zPcHmMStRDolnSMtRDP66K+1Y6NfErGHhZsoustHW+E7bnE6z 9to0IwWK0iysLm21by0bQN7ExMkGj/7I4UoTnrsVlFjlTv3o8ciTlvju00G51P0F s+LOyCZ6Ne+O3y/yEIDZl6anC2+3ZybcbRZQ83okr2T9u2VrKwQ= -----END CERTIFICATE-----Generated at Thu Sep 3 22:38:34 2026 by rpki-client