$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json) Hash identifier: E/LfwR+kkO+vLRUCsuG/g1YY0OqklkSUsY/J/31Wcdw= Subject key identifier: E5:A6:87:39:6C:77:A1:78:4B:64:EB:29:34:1D:DC:F2:31:56:AA:C9 Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB Certificate serial: 49D867875886F0648CFDE92EC303E86E859A2DF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 05:22:54 +0000 Manifest this update: Sun 25 Oct 2026 05:17:54 +0000 Manifest next update: Mon 26 Oct 2026 08:03:54 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=) 2: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: Nakctom+xIRCNPOl8ug6JEzvd37HXcY9Op/M3yKhvHQ=) 3: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=) 4: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d8:67:87:58:86:f0:64:8c:fd:e9:2e:c3:03:e8:6e:85:9a:2d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB Validity Not Before: Oct 25 05:17:54 2026 GMT Not After : Oct 26 08:03:54 2026 GMT Subject: CN=E5A687396C77A1784B64EB29341DDCF23156AAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:a4:b7:cd:d9:09:95:e3:63:f0:51:8f:7b: 30:68:b8:5d:9c:d8:f1:da:74:cd:09:51:2b:87:af: a9:24:15:af:9b:e2:ea:d3:22:c0:b2:47:45:dc:8b: 2d:6b:a5:6d:db:3b:8d:c9:fb:96:c8:63:e3:87:23: 3f:b6:e8:b5:b4:c8:4c:3d:a0:a4:5a:67:82:05:1b: a8:21:5b:11:4b:99:e2:e9:d4:0d:04:4f:4a:a4:6d: 9b:0a:fe:bd:0e:fa:07:ab:9a:a1:5b:01:b0:0e:07: ba:96:92:85:f1:c3:e6:0a:11:17:e6:e3:f6:c5:41: 26:1b:95:dc:de:85:32:ad:0c:4f:2e:44:b9:df:d2: 6f:82:21:30:10:13:58:0a:2f:af:d7:19:7f:7a:6e: a5:6b:d3:64:55:21:0f:ff:5a:db:06:ef:95:d1:a9: 19:6d:92:9f:5d:67:01:68:a8:25:2e:07:65:16:0d: 80:44:6f:1e:c5:c7:ba:2e:79:64:fa:93:b8:5a:4d: d4:96:9a:eb:9d:b1:c0:de:13:29:96:c0:06:7b:16: 3d:de:f3:0f:36:e2:fe:3f:30:84:c2:75:57:0f:2c: e8:7a:48:18:53:06:4a:be:3f:9c:66:95:6c:db:a0: 2d:b3:5e:fa:f3:f0:25:05:69:b1:34:44:a7:db:3b: cc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A6:87:39:6C:77:A1:78:4B:64:EB:29:34:1D:DC:F2:31:56:AA:C9 X509v3 Authority Key Identifier: keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ae:38:a1:59:42:2b:c4:4a:20:86:88:17:9e:11:81:82:97: 8c:97:48:19:a1:19:e1:d3:af:a2:41:b6:3c:0f:88:8e:88:84: 99:3d:3e:75:4c:e0:df:56:96:eb:03:a9:f4:20:02:c0:41:28: df:7b:83:d7:83:70:ae:fb:dd:7a:32:5a:aa:ec:8a:62:f7:09: 10:6e:0b:bf:89:f5:a9:d7:11:e8:cc:f9:dc:3d:ef:26:f4:4a: cf:25:1e:cf:89:e2:da:49:64:3e:5a:92:3f:b3:23:07:ac:9d: 08:44:82:da:77:93:cf:a8:fb:23:fb:77:63:9c:70:33:d0:58: 14:9a:bd:55:b1:b9:1e:65:84:7e:40:b1:ee:c9:b4:c2:83:91: aa:be:d7:0a:12:48:68:da:66:d7:40:e3:07:b5:bc:79:b9:8e: 96:88:1d:16:4e:f6:db:00:a8:e3:32:b7:a9:7d:18:a6:c7:2c: 09:d2:df:4c:08:e9:24:dc:c6:59:e9:7b:58:39:85:b7:73:1a: 28:3f:e2:89:7f:f4:90:bb:3d:a7:f5:88:67:5c:7f:b3:5b:c1: b2:dd:89:cb:9e:b0:b2:79:2b:05:ea:b9:5f:61:7b:9f:34:9d: a1:5c:ba:67:e7:6b:11:25:de:c2:35:07:4f:30:50:26:58:6c: fd:19:3c:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdhnh1iG8GSM/ekuwwPoboWaLfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1 OTIwQjdDQjAeFw0yNjEwMjUwNTE3NTRaFw0yNjEwMjYwODAzNTRaMDMxMTAvBgNV BAMTKEU1QTY4NzM5NkM3N0ExNzg0QjY0RUIyOTM0MUREQ0YyMzE1NkFBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq6S3zdkJleNj8FGPezBouF2c 2PHadM0JUSuHr6kkFa+b4urTIsCyR0Xciy1rpW3bO43J+5bIY+OHIz+26LW0yEw9 oKRaZ4IFG6ghWxFLmeLp1A0ET0qkbZsK/r0O+germqFbAbAOB7qWkoXxw+YKERfm 4/bFQSYbldzehTKtDE8uRLnf0m+CITAQE1gKL6/XGX96bqVr02RVIQ//WtsG75XR qRltkp9dZwFoqCUuB2UWDYBEbx7Fx7oueWT6k7haTdSWmuudscDeEymWwAZ7Fj3e 8w824v4/MITCdVcPLOh6SBhTBkq+P5xmlWzboC2zXvrz8CUFabE0RKfbO8xtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5aaHOWx3oXhLZOspNB3c8jFWqskwHwYDVR0j BBgwFoAUaYFemqFLsCqmIID/aM7tUlkgt8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0NmJkYWQtZjEzMC00OGE5LTg1MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFB MTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1OTIwQjdDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTgxNUU5QUExNEJCMDJBQTYyMDgwRkY2OENFRUQ1MjU5MjBC N0NCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVE NTI1OTIwQjdDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImuOKFZQivESiCGiBeeEYGCl4yXSBmhGeHT r6JBtjwPiI6IhJk9PnVM4N9WlusDqfQgAsBBKN97g9eDcK773XoyWqrsimL3CRBu C7+J9anXEejM+dw97yb0Ss8lHs+J4tpJZD5akj+zIwesnQhEgtp3k8+o+yP7d2Oc cDPQWBSavVWxuR5lhH5Ase7JtMKDkaq+1woSSGjaZtdA4we1vHm5jpaIHRZO9tsA qOMyt6l9GKbHLAnS30wI6STcxlnpe1g5hbdzGig/4ol/9JC7Paf1iGdcf7NbwbLd icuesLJ5KwXquV9he580naFcumfnaxEl3sI1B08wUCZYbP0ZPPk= -----END CERTIFICATE-----Generated at Sun Oct 25 19:51:25 2026 by rpki-client