$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: Aj/LmPNYyVDoJany9RC/PTcn3OvSR/3EpOl3TcyAmEQ= Subject key identifier: 7B:67:8C:DD:A4:A1:5E:55:61:49:76:50:A1:89:51:B0:9F:BA:EA:28 Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 2A5426A2D1C017FA0BCD4D02D87F2E77AB27C573 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: DD Signing time: Wed 14 Oct 2026 08:00:28 +0000 Manifest this update: Wed 14 Oct 2026 07:55:28 +0000 Manifest next update: Thu 15 Oct 2026 11:59:28 +0000 Files and hashes: 1: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) 2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: /6YeBMk+6TU4H1W/7h6A8NOdx650urg6FVLPhKbJlF0=) 3: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 06:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:54:26:a2:d1:c0:17:fa:0b:cd:4d:02:d8:7f:2e:77:ab:27:c5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: Oct 14 07:55:28 2026 GMT Not After : Oct 15 11:59:28 2026 GMT Subject: CN=7B678CDDA4A15E5561497650A18951B09FBAEA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:99:e3:9e:11:e1:41:76:e6:53:84:5c:c1:c1: a1:4a:c4:00:d0:0c:f5:b9:08:ac:cf:01:2d:3f:b0: bc:53:1b:b8:95:0b:df:87:a9:2d:99:4a:b1:c2:8f: ee:1c:ee:7e:b0:97:93:82:db:75:c1:f9:eb:e3:7e: 00:72:29:9f:57:5c:99:71:14:36:c5:5b:34:4b:70: ec:5f:08:e8:2e:f9:fd:61:af:90:52:12:dd:61:bc: 14:55:dd:e4:55:8b:bc:4a:d1:c6:5b:80:a3:19:8c: 2e:59:6e:da:53:1a:b0:b7:f0:84:0c:7d:aa:2a:a0: 37:fe:49:3a:ab:d6:b9:1a:de:6b:2b:8c:a4:65:fb: 20:2a:be:f5:b9:2b:c2:2c:ee:ae:43:be:89:71:ba: cc:07:1d:e4:1e:3e:6c:e7:22:2a:9b:bb:88:36:5b: a5:a8:c2:17:1e:06:21:eb:82:06:27:49:12:90:aa: cd:b3:0a:4e:83:1d:93:e2:53:71:cd:c6:b8:2b:3b: dc:49:dc:69:67:93:08:c6:fe:69:d5:6d:fe:ac:d0: 2c:b9:bf:a8:7f:44:0d:31:6e:07:66:64:99:d1:01: 92:b5:da:f6:73:54:35:1b:83:d9:9f:ba:ba:7f:8d: c9:6a:21:94:df:0d:94:31:7d:7c:f7:18:cf:c3:7a: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:67:8C:DD:A4:A1:5E:55:61:49:76:50:A1:89:51:B0:9F:BA:EA:28 X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:18:8b:36:7b:19:a8:28:e4:ae:5f:22:f4:f6:e4:40:7e:5b: 09:41:95:a2:ca:a3:db:eb:42:13:b0:36:31:e2:4c:c2:19:5f: ed:d3:78:40:ba:8d:5e:96:4b:0c:f9:fd:fa:0a:7d:d2:d0:a0: 1f:a1:41:45:8d:ed:cc:e0:4e:2d:64:a5:35:c5:79:fb:f8:8f: 8d:53:b8:ae:fa:61:39:50:72:7e:20:25:58:a2:19:9d:1b:f0: 9d:36:2e:8a:0c:9c:ce:ff:95:a7:bb:f9:b8:00:36:66:12:f4: ab:b6:51:1d:5b:7b:7b:29:eb:e1:7a:fa:e6:5f:9a:50:fb:24: a8:3f:b5:67:4b:f9:3e:ea:6b:96:b0:d1:ba:f4:ec:70:58:25: a5:4e:c4:d7:b6:74:6a:6c:0c:60:74:00:81:a3:ff:21:38:c1: 6e:e1:1e:fa:9f:e8:15:85:94:1d:04:3f:4e:00:54:2b:8f:f0: bf:bc:73:a9:46:75:d2:6a:d0:f1:1b:67:b0:ca:77:9a:50:01: df:4d:05:86:3e:55:86:2f:09:9c:2d:f3:7b:34:cf:0f:9c:0c: 93:59:eb:95:1d:27:b4:3b:5d:65:cb:42:93:5b:ef:97:90:94: f2:51:98:d0:88:75:57:93:54:db:7d:8a:e2:c5:7d:22:19:95: 0c:86:50:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlQmotHAF/oLzU0C2H8ud6snxXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjEwMTQwNzU1MjhaFw0yNjEwMTUxMTU5MjhaMDMxMTAvBgNV BAMTKDdCNjc4Q0REQTRBMTVFNTU2MTQ5NzY1MEExODk1MUIwOUZCQUVBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6meOeEeFBduZThFzBwaFKxADQ DPW5CKzPAS0/sLxTG7iVC9+HqS2ZSrHCj+4c7n6wl5OC23XB+evjfgByKZ9XXJlx FDbFWzRLcOxfCOgu+f1hr5BSEt1hvBRV3eRVi7xK0cZbgKMZjC5ZbtpTGrC38IQM faoqoDf+STqr1rka3msrjKRl+yAqvvW5K8Is7q5DvolxuswHHeQePmznIiqbu4g2 W6WowhceBiHrggYnSRKQqs2zCk6DHZPiU3HNxrgrO9xJ3GlnkwjG/mnVbf6s0Cy5 v6h/RA0xbgdmZJnRAZK12vZzVDUbg9mfurp/jclqIZTfDZQxfXz3GM/DenzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2eM3aShXlVhSXZQoYlRsJ+66igwHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIYizZ7Gago5K5fIvT25EB+WwlBlaLKo9vr QhOwNjHiTMIZX+3TeEC6jV6WSwz5/foKfdLQoB+hQUWN7czgTi1kpTXFefv4j41T uK76YTlQcn4gJViiGZ0b8J02LooMnM7/lae7+bgANmYS9Ku2UR1be3sp6+F6+uZf mlD7JKg/tWdL+T7qa5aw0br07HBYJaVOxNe2dGpsDGB0AIGj/yE4wW7hHvqf6BWF lB0EP04AVCuP8L+8c6lGddJq0PEbZ7DKd5pQAd9NBYY+VYYvCZwt83s0zw+cDJNZ 65UdJ7Q7XWXLQpNb75eQlPJRmNCIdVeTVNt9iuLFfSIZlQyGUFk= -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:15 2026 by rpki-client