$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: VoUJCKu/IltaZpk8wBSLavkKSSEUHP1iZsSoKvG7LAA= Subject key identifier: 30:EB:9D:31:FF:B6:7F:D9:F7:81:DA:7D:83:9D:A8:4F:03:F3:CA:48 Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 3F72EE6C5270C87848C5032BD552CF2CEB17B65C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: 94 Signing time: Thu 20 Aug 2026 10:10:20 +0000 Manifest this update: Thu 20 Aug 2026 10:05:20 +0000 Manifest next update: Fri 21 Aug 2026 13:26:20 +0000 Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) 2: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) 3: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: N7LQqQOhPuncO5Vv65R9qlQSWqjg+Pa6P5VIN7Dqh8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:72:ee:6c:52:70:c8:78:48:c5:03:2b:d5:52:cf:2c:eb:17:b6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: Aug 20 10:05:20 2026 GMT Not After : Aug 21 13:26:20 2026 GMT Subject: CN=30EB9D31FFB67FD9F781DA7D839DA84F03F3CA48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d1:5d:02:fc:ca:c7:c8:a8:4e:3b:1e:a6:1d: 96:b9:33:73:0c:d5:8e:a8:17:9f:8d:54:3e:af:df: db:2a:d8:2b:75:d0:6e:21:1e:dc:37:bf:db:70:7a: 60:44:6f:8f:98:4a:55:2e:e1:a2:00:8e:b8:51:32: 78:00:cc:5e:f5:34:c0:95:4f:7c:21:ac:d5:82:7c: 18:46:9c:08:11:79:aa:b7:6c:ca:99:ea:5f:7a:f0: 3e:52:2d:1d:9a:53:af:37:5f:f0:ce:d5:2c:af:9c: b6:2b:bd:85:1c:c9:13:ae:83:01:f6:e4:0a:f1:51: 99:15:a4:5c:2d:f4:bb:2c:3e:f5:bc:ca:29:2d:4a: 68:bc:41:b4:47:ca:98:cf:a6:fc:c3:10:08:ac:f8: 31:21:62:39:8a:cd:f3:0c:de:12:00:d4:27:9d:f9: ac:9a:ba:b5:72:79:88:c3:a9:73:01:a4:e8:6e:ad: 3b:e8:04:5f:98:7c:4c:52:00:e1:b3:bb:2d:ed:b5: 28:18:b1:a9:30:2e:34:1e:27:be:5d:fa:00:e7:6f: d1:2a:e5:2c:bf:57:19:56:15:2c:ce:80:45:0a:26: 70:69:f7:de:23:ec:e3:eb:7b:4d:b2:12:5d:12:d1: 00:cc:8d:02:47:92:86:b2:7f:4b:92:49:b8:ce:68: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EB:9D:31:FF:B6:7F:D9:F7:81:DA:7D:83:9D:A8:4F:03:F3:CA:48 X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c3:f9:10:d3:6e:37:e6:d3:9f:ec:d0:48:94:39:2e:89:cc: 24:c9:a5:36:91:71:77:a5:d9:6a:5c:67:a2:60:b2:91:52:9d: c6:3b:8f:ad:86:6b:53:5e:aa:ec:3a:39:6b:b1:df:52:79:cc: 72:1d:ee:81:81:73:86:67:f0:d3:7a:47:3b:ff:dd:a0:63:ad: f5:71:7d:e5:37:cf:68:0d:75:d1:b7:57:2e:0a:00:e6:72:3d: b1:3b:96:b3:0b:0d:b3:80:be:a8:44:f0:cc:21:e0:d6:9c:6e: 96:65:30:e9:0c:e3:7e:62:cd:51:16:7d:fb:a8:0b:e5:72:76: 17:c8:5e:27:3f:c7:fd:b6:fa:8d:38:50:02:a6:64:c0:de:e8: da:cc:02:e7:b5:25:4e:49:d6:99:05:46:09:98:cd:f7:2e:51: 8d:2c:b8:b8:4a:0d:26:b9:e3:be:38:2a:65:5c:c5:a5:eb:9d: 70:d7:0d:ac:ce:29:e5:bb:2a:f3:8b:2b:a3:95:8c:9a:62:5b: 56:4e:1b:be:a6:22:54:60:c0:ea:62:18:28:ff:98:f7:35:43: 06:f8:18:7b:34:9f:8d:93:d6:b0:de:81:c6:5e:6b:38:a3:01: 49:b3:58:ef:d6:f8:41:ce:f3:8c:06:55:da:61:f6:7f:8d:f2: 27:cc:5a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3LubFJwyHhIxQMr1VLPLOsXtlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA4MjAxMDA1MjBaFw0yNjA4MjExMzI2MjBaMDMxMTAvBgNV BAMTKDMwRUI5RDMxRkZCNjdGRDlGNzgxREE3RDgzOURBODRGMDNGM0NBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0V0C/MrHyKhOOx6mHZa5M3MM 1Y6oF5+NVD6v39sq2Ct10G4hHtw3v9twemBEb4+YSlUu4aIAjrhRMngAzF71NMCV T3whrNWCfBhGnAgReaq3bMqZ6l968D5SLR2aU683X/DO1SyvnLYrvYUcyROugwH2 5ArxUZkVpFwt9LssPvW8yiktSmi8QbRHypjPpvzDEAis+DEhYjmKzfMM3hIA1Ced +ayaurVyeYjDqXMBpOhurTvoBF+YfExSAOGzuy3ttSgYsakwLjQeJ75d+gDnb9Eq 5Sy/VxlWFSzOgEUKJnBp994j7OPre02yEl0S0QDMjQJHkoayf0uSSbjOaDN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOudMf+2f9n3gdp9g52oTwPzykgwHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfD+RDTbjfm05/s0EiUOS6JzCTJpTaRcXel 2WpcZ6JgspFSncY7j62Ga1Nequw6OWux31J5zHId7oGBc4Zn8NN6Rzv/3aBjrfVx feU3z2gNddG3Vy4KAOZyPbE7lrMLDbOAvqhE8Mwh4NacbpZlMOkM435izVEWffuo C+VydhfIXic/x/22+o04UAKmZMDe6NrMAue1JU5J1pkFRgmYzfcuUY0suLhKDSa5 4744KmVcxaXrnXDXDazOKeW7KvOLK6OVjJpiW1ZOG76mIlRgwOpiGCj/mPc1Qwb4 GHs0n42T1rDegcZeazijAUmzWO/W+EHO84wGVdph9n+N8ifMWs0= -----END CERTIFICATE-----Generated at Thu Aug 20 13:16:46 2026 by rpki-client