$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: tT8KbU3NHy4yYSKvUKC1qkGm6OTOwk6AkxbMMZI0dRo= Subject key identifier: 15:85:A9:78:DF:B2:F0:EF:DC:E2:44:BE:6F:15:84:C4:D0:F1:7A:F6 Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 22A9C0E3A8C98EC0308C14C47C2A4103E232212B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: 45 Signing time: Mon 22 Jun 2026 03:11:40 +0000 Manifest this update: Mon 22 Jun 2026 03:06:40 +0000 Manifest next update: Tue 23 Jun 2026 04:01:40 +0000 Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) 2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: zQAQYJZ0/CcRTvE16Xhu/7rCv3O5igOqDM+j0WL578Y=) 3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Jun 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a9:c0:e3:a8:c9:8e:c0:30:8c:14:c4:7c:2a:41:03:e2:32:21:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: Jun 22 03:06:40 2026 GMT Not After : Jun 23 04:01:40 2026 GMT Subject: CN=1585A978DFB2F0EFDCE244BE6F1584C4D0F17AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:02:48:72:e0:65:99:3b:42:06:65:88:b2: 9f:e5:da:7f:7a:6e:ee:7f:90:f8:d5:90:27:5e:53: 04:42:2f:97:4d:ba:91:62:be:e4:84:87:1b:32:d0: 33:66:b9:45:be:83:31:ba:32:d8:e0:5c:e5:3a:4a: 8f:d1:03:6b:62:31:34:17:d2:28:85:fa:97:63:d9: 02:ff:1b:73:4e:84:78:30:c0:ca:a6:d0:7c:50:8a: f8:67:8f:ef:27:f6:e1:5f:e7:a9:9c:2d:6c:cb:61: 1e:13:3c:57:4d:29:f6:f7:14:e2:41:9f:e2:23:ce: 13:80:08:7f:7c:44:ff:08:b6:ae:1c:4f:17:81:d4: 9f:a5:8b:f9:67:db:a1:8d:67:98:93:a0:b1:db:a6: 71:5c:b3:47:13:3b:1c:a3:49:2d:7c:90:62:d4:f6: 65:b2:fd:4c:da:97:8c:0d:d9:b1:6f:c3:ae:7a:bd: c8:5a:41:5e:c5:bd:14:3c:a5:89:71:de:6e:4e:24: eb:49:52:6c:c5:6d:bb:8c:cc:c3:4d:f9:16:02:f6: 95:4c:94:16:23:d8:18:78:ae:69:e0:d1:07:26:e2: 12:52:07:01:55:62:69:29:ba:db:dc:fe:54:1c:44: 83:ef:6f:0c:ff:9a:bf:ad:86:af:e7:9a:82:2a:08: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:85:A9:78:DF:B2:F0:EF:DC:E2:44:BE:6F:15:84:C4:D0:F1:7A:F6 X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ae:54:08:78:f0:97:f1:e3:83:88:d4:da:26:3b:bc:b3:23: 89:27:ed:6c:a2:0f:9c:aa:12:ee:83:f6:58:04:3b:f2:13:7f: a6:72:48:4f:38:f0:ce:22:45:b4:5b:c4:a7:70:fd:19:a6:9c: f8:11:48:07:bd:6c:0d:0f:b6:52:60:1c:cc:90:76:5e:e0:55: 8f:b5:d6:51:72:4d:fc:eb:aa:ab:61:bc:c6:e0:85:63:d4:06: ae:66:b2:f7:e6:2b:be:75:ca:a0:9e:ee:cc:dc:e9:e3:f5:ab: f1:c7:b9:ca:a9:fd:2e:64:7f:ad:11:6b:92:b9:b5:41:bb:e4: a3:68:e7:78:d9:c5:d4:d2:a7:c1:60:f2:d6:50:fb:20:74:23: 0b:8e:b9:ef:68:ac:ab:6c:32:05:c4:ff:b9:1a:33:f3:7b:fb: 26:80:d2:b8:84:02:b7:5e:44:22:a4:40:ff:d9:04:53:44:de: ce:70:09:89:06:ff:d8:e6:17:51:2d:51:f7:ab:a2:7c:e7:d1: d3:e7:d4:d1:43:f1:fa:73:80:bb:00:36:1d:b5:55:8a:9e:ad: b0:dc:c1:b4:b8:c5:5e:8a:d3:71:f4:29:9f:4a:97:12:28:57: a1:9d:73:d0:11:6f:47:dc:3f:9e:87:1c:48:e1:4b:3f:a8:1c: f5:71:5e:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqnA46jJjsAwjBTEfCpBA+IyISswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA2MjIwMzA2NDBaFw0yNjA2MjMwNDAxNDBaMDMxMTAvBgNV BAMTKDE1ODVBOTc4REZCMkYwRUZEQ0UyNDRCRTZGMTU4NEM0RDBGMTdBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71AJIcuBlmTtCBmWIsp/l2n96 bu5/kPjVkCdeUwRCL5dNupFivuSEhxsy0DNmuUW+gzG6MtjgXOU6So/RA2tiMTQX 0iiF+pdj2QL/G3NOhHgwwMqm0HxQivhnj+8n9uFf56mcLWzLYR4TPFdNKfb3FOJB n+IjzhOACH98RP8Itq4cTxeB1J+li/ln26GNZ5iToLHbpnFcs0cTOxyjSS18kGLU 9mWy/Uzal4wN2bFvw656vchaQV7FvRQ8pYlx3m5OJOtJUmzFbbuMzMNN+RYC9pVM lBYj2Bh4rmng0Qcm4hJSBwFVYmkputvc/lQcRIPvbwz/mr+thq/nmoIqCIcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFYWpeN+y8O/c4kS+bxWExNDxevYwHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESuVAh48Jfx44OI1NomO7yzI4kn7WyiD5yq Eu6D9lgEO/ITf6ZySE848M4iRbRbxKdw/RmmnPgRSAe9bA0PtlJgHMyQdl7gVY+1 1lFyTfzrqqthvMbghWPUBq5msvfmK751yqCe7szc6eP1q/HHucqp/S5kf60Ra5K5 tUG75KNo53jZxdTSp8Fg8tZQ+yB0IwuOue9orKtsMgXE/7kaM/N7+yaA0riEArde RCKkQP/ZBFNE3s5wCYkG/9jmF1EtUferonzn0dPn1NFD8fpzgLsANh21VYqerbDc wbS4xV6K03H0KZ9KlxIoV6Gdc9ARb0fcP56HHEjhSz+oHPVxXhU= -----END CERTIFICATE-----Generated at Mon Jun 22 08:39:54 2026 by rpki-client