$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: Yy1TA8OjSs51tIbu778LYyGL529SUUV6YACcGITV2d8= Subject key identifier: B9:F0:0D:4C:34:12:5D:32:8A:31:C7:DA:51:33:63:18:71:81:6D:BA Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 0A137AB835805DAF9BB69BEF6BCF3D18E6352E53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: 05 Signing time: Tue 05 May 2026 07:58:33 +0000 Manifest this update: Tue 05 May 2026 07:53:33 +0000 Manifest next update: Wed 06 May 2026 11:37:33 +0000 Files and hashes: 1: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) 2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: i/4IgRrfgX1Fdbr4z/foFqXGLOutucQvUML/QOBFmMY=) 3: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:13:7a:b8:35:80:5d:af:9b:b6:9b:ef:6b:cf:3d:18:e6:35:2e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: May 5 07:53:33 2026 GMT Not After : May 6 11:37:33 2026 GMT Subject: CN=B9F00D4C34125D328A31C7DA5133631871816DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:3d:0f:d9:e3:f2:3f:56:e7:af:68:c9:95: 76:2b:19:0b:35:85:f5:63:b3:b4:5b:ef:f1:ca:c5: b6:9c:b4:85:29:a0:1e:b0:3f:b2:da:48:f0:9e:81: 7d:58:57:9e:c4:61:02:65:a8:17:a1:c8:dd:fa:59: 7e:0a:56:f3:a5:f5:22:e2:d3:3d:c6:17:3b:61:ab: fd:3a:30:ba:bf:46:42:56:10:a5:99:cb:f3:d0:26: f7:97:58:da:b9:b6:e1:03:f5:84:5c:84:39:4b:22: 49:87:46:54:a1:c8:34:5c:b5:cc:db:0f:2f:b1:2c: 35:35:20:a2:8d:d0:6a:53:25:ce:79:b6:70:a8:dc: 30:bb:5c:da:c8:98:2c:52:e7:66:4d:5d:35:ec:63: d9:52:b1:07:a0:c2:1e:6e:cd:b9:78:0a:22:c8:36: 2b:30:41:7e:bf:90:51:9f:6e:f5:14:59:23:43:35: 0b:d9:3d:92:33:1a:8a:d9:8f:cc:c0:a0:4d:27:72: 3a:73:23:47:fd:e4:be:b5:f8:91:30:db:66:d4:07: 71:b4:4a:0e:70:1a:98:9a:88:03:67:3e:15:c8:95: 28:88:6a:ec:48:38:02:8d:7a:92:9d:f7:bb:01:69: 5c:d1:60:ff:3c:38:ef:e4:f3:27:d6:a9:f5:06:82: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F0:0D:4C:34:12:5D:32:8A:31:C7:DA:51:33:63:18:71:81:6D:BA X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5a:bc:a4:96:de:90:3e:9b:7b:f9:9f:be:6c:4f:07:de:04: a5:05:b0:07:85:92:ce:ee:1e:8d:be:89:06:15:f8:04:56:4f: b6:1b:c0:85:e3:0d:9d:f2:62:17:6e:5e:15:fe:ff:a9:23:8a: 6c:8c:4d:09:79:8b:47:e2:9c:2a:6c:88:1a:a3:52:bd:e3:a7: 5e:47:62:d7:0c:c5:5d:9c:d3:a9:31:3e:ac:ef:13:30:a9:a7: a2:5e:5a:0e:41:aa:fc:84:2b:34:c1:22:79:0d:1f:76:cd:24: 3d:5e:f0:56:3d:69:66:65:c5:6a:8c:91:0c:81:22:6b:2f:56: 32:ff:b6:53:0d:2d:14:41:52:90:5b:7e:5f:39:94:75:47:a1: 3f:7c:fc:f9:de:61:84:fa:40:09:a4:36:49:45:37:aa:4d:50: 56:c8:a5:f0:23:e2:d4:8b:2b:49:be:a1:a3:01:f0:a3:9d:ce: 43:01:1e:11:30:4a:c2:81:c1:c4:ad:9e:54:a5:df:25:9b:09: d2:69:25:d8:2c:f7:31:8c:47:f4:f1:49:5d:cc:27:70:a5:0f: 6a:45:01:ce:45:83:6f:1b:0d:09:43:7a:50:67:42:89:08:cb: cc:c3:a1:b6:7c:26:2a:52:c0:9e:68:00:64:9a:44:58:91:af: d9:65:3b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChN6uDWAXa+btpvva889GOY1LlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA1MDUwNzUzMzNaFw0yNjA1MDYxMTM3MzNaMDMxMTAvBgNV BAMTKEI5RjAwRDRDMzQxMjVEMzI4QTMxQzdEQTUxMzM2MzE4NzE4MTZEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7z0P2ePyP1bnr2jJlXYrGQs1 hfVjs7Rb7/HKxbactIUpoB6wP7LaSPCegX1YV57EYQJlqBehyN36WX4KVvOl9SLi 0z3GFzthq/06MLq/RkJWEKWZy/PQJveXWNq5tuED9YRchDlLIkmHRlShyDRctczb Dy+xLDU1IKKN0GpTJc55tnCo3DC7XNrImCxS52ZNXTXsY9lSsQegwh5uzbl4CiLI NiswQX6/kFGfbvUUWSNDNQvZPZIzGorZj8zAoE0ncjpzI0f95L61+JEw22bUB3G0 Sg5wGpiaiANnPhXIlSiIauxIOAKNepKd97sBaVzRYP88OO/k8yfWqfUGgiZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufANTDQSXTKKMcfaUTNjGHGBbbowHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNavKSW3pA+m3v5n75sTwfeBKUFsAeFks7u Ho2+iQYV+ARWT7YbwIXjDZ3yYhduXhX+/6kjimyMTQl5i0finCpsiBqjUr3jp15H YtcMxV2c06kxPqzvEzCpp6JeWg5BqvyEKzTBInkNH3bNJD1e8FY9aWZlxWqMkQyB ImsvVjL/tlMNLRRBUpBbfl85lHVHoT98/PneYYT6QAmkNklFN6pNUFbIpfAj4tSL K0m+oaMB8KOdzkMBHhEwSsKBwcStnlSl3yWbCdJpJdgs9zGMR/TxSV3MJ3ClD2pF Ac5Fg28bDQlDelBnQokIy8zDobZ8JipSwJ5oAGSaRFiRr9llO0U= -----END CERTIFICATE-----Generated at Tue May 5 17:52:56 2026 by rpki-client