$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft File: 69CE57F4984A7B332974000C0033734628A36A46.mft (raw, json) Hash identifier: E4DeSt1k/Pv7dmuK+l/faUqTCaOKpnR7GpD10VZwwsA= Subject key identifier: CD:88:F8:88:0B:D2:48:6C:12:62:63:58:AC:DE:09:55:BF:30:D5:F6 Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 Certificate issuer: /CN=69CE57F4984A7B332974000C0033734628A36A46 Certificate serial: 4D140B18BDA68CF94CA2464B88B19DCB45C5EF8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft Manifest number: 024D Signing time: Fri 17 Apr 2026 05:33:07 +0000 Manifest this update: Fri 17 Apr 2026 05:28:07 +0000 Manifest next update: Mon 20 Apr 2026 10:34:07 +0000 Files and hashes: 1: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (hash: tDhS3e/QLZsQ3vBs7q3ofq7yiXbldQoFkAzqM7dBRFo=) 2: 3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (hash: p7oly61u2I9DIyxWJNTp5Y4E72pJPA3rw/vCpcCqXJg=) 3: 69CE57F4984A7B332974000C0033734628A36A46.crl (hash: Xn4U44/477bzUVF6vD+873xfT4WO2O5LLXadPY1zw8g=) 4: 3130332e3231312e32362e302f32332d3233203d3e20313530313933.roa (hash: I5tBiXW53g+o5711q+c6sqmDZ0V8yGZ1wPd6GIxulEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:14:0b:18:bd:a6:8c:f9:4c:a2:46:4b:88:b1:9d:cb:45:c5:ef:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46 Validity Not Before: Apr 17 05:28:07 2026 GMT Not After : Apr 20 10:34:07 2026 GMT Subject: CN=CD88F8880BD2486C12626358ACDE0955BF30D5F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:95:7e:78:77:09:ae:8a:81:ed:98:56:8d: 1a:f8:2c:21:2d:3a:e0:8b:11:c2:78:6c:72:a8:4c: 37:68:b6:68:3b:5f:49:62:78:71:a0:4c:ca:d5:78: 73:9f:95:ee:08:2d:a1:e4:a9:dc:36:51:bc:26:26: 66:81:99:1a:b4:32:34:2d:7a:59:71:a6:90:9d:a8: 21:24:42:9f:18:8d:90:1a:7e:a7:49:9f:36:ae:30: ff:25:10:a8:a0:e3:f1:51:12:ad:61:06:94:b3:e1: 8f:80:54:5a:e1:dd:9a:4b:66:5c:b7:2e:af:66:9f: a6:07:2c:81:46:d6:c9:b3:31:94:ea:6b:ef:7a:98: 69:1c:bb:ea:da:d5:f3:8e:42:c3:10:e2:9f:38:f7: c1:4c:f3:54:dd:09:d3:bc:83:fa:a3:45:e5:7f:db: ba:02:8d:cf:c4:cd:e6:fb:06:d9:2b:da:f1:5e:43: 6e:aa:4a:bc:d2:fb:44:17:25:5b:ba:f1:5a:bd:b9: 4b:73:08:fe:63:b2:82:c4:0f:25:95:6c:d1:32:60: 60:52:a6:8a:23:be:fe:3a:ab:50:28:44:c0:3e:f7: cc:de:26:3b:77:30:2e:d4:bc:ed:0f:e0:a1:a3:03: 3a:d2:a8:69:b1:b6:0a:a8:fe:7b:a6:46:8a:c6:98: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:88:F8:88:0B:D2:48:6C:12:62:63:58:AC:DE:09:55:BF:30:D5:F6 X509v3 Authority Key Identifier: keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4a:1c:15:36:e3:09:6e:1c:07:08:9d:c8:07:ee:84:57:b7: 2e:18:bf:01:a0:52:5d:7f:e2:81:d9:89:73:53:dc:03:3e:07: d2:30:0d:61:88:9b:c9:61:c9:8a:3f:a5:d5:ca:6f:45:14:bf: 30:2c:b9:d0:96:48:db:c9:39:c1:ae:9f:9f:a6:a6:d2:85:f6: d8:10:84:53:bd:69:77:9e:b7:d4:ed:63:ba:2a:50:d9:0a:33: ea:1e:54:e4:6a:e4:74:b2:57:c5:85:43:61:a6:bc:64:4a:cc: d5:da:bb:67:94:3a:5e:33:1f:33:fe:55:7b:72:a7:03:78:5a: 24:95:ef:33:ac:47:69:d9:d0:13:2f:7e:7b:5e:30:b5:a9:c4: f6:05:d6:de:29:43:00:4a:97:64:74:dd:bc:4a:23:ec:da:06: 94:a9:21:56:69:df:b4:9f:0f:51:69:ed:c7:05:ed:cf:35:26: 26:c8:8b:0b:b9:39:18:a7:37:57:6d:45:8a:aa:b6:f8:e8:4a: 18:e1:e5:fc:79:95:74:1a:d9:65:01:d3:62:d7:e8:f3:fd:6d: 46:96:b9:95:bd:77:3d:0c:70:48:97:97:b2:38:96:ce:ac:1d: 3e:e8:92:e9:2e:43:cf:0a:a6:11:d1:a2:2b:90:66:05:44:b5: 5d:c8:25:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRQLGL2mjPlMokZLiLGdy0XF74owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYy OEEzNkE0NjAeFw0yNjA0MTcwNTI4MDdaFw0yNjA0MjAxMDM0MDdaMDMxMTAvBgNV BAMTKENEODhGODg4MEJEMjQ4NkMxMjYyNjM1OEFDREUwOTU1QkYzMEQ1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtZV+eHcJroqB7ZhWjRr4LCEt OuCLEcJ4bHKoTDdotmg7X0lieHGgTMrVeHOfle4ILaHkqdw2UbwmJmaBmRq0MjQt ellxppCdqCEkQp8YjZAafqdJnzauMP8lEKig4/FREq1hBpSz4Y+AVFrh3ZpLZly3 Lq9mn6YHLIFG1smzMZTqa+96mGkcu+ra1fOOQsMQ4p8498FM81TdCdO8g/qjReV/ 27oCjc/Ezeb7Btkr2vFeQ26qSrzS+0QXJVu68Vq9uUtzCP5jsoLEDyWVbNEyYGBS poojvv46q1AoRMA+98zeJjt3MC7UvO0P4KGjAzrSqGmxtgqo/numRorGmB8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYj4iAvSSGwSYmNYrN4JVb8w1fYwHwYDVR0j BBgwFoAUac5X9JhKezMpdAAMADNzRiijakYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGQ2NmI2OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82OUNFNTdGNDk4 NEE3QjMzMjk3NDAwMEMwMDMzNzM0NjI4QTM2QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYyOEEz NkE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkNjZiNjktNzA3YS00ODMwLWEy ZDMtYWY2Y2EwZDE1YmNlLzAvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzcz NDYyOEEzNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRKHBU24wluHAcIncgH7oRXty4YvwGgUl1/ 4oHZiXNT3AM+B9IwDWGIm8lhyYo/pdXKb0UUvzAsudCWSNvJOcGun5+mptKF9tgQ hFO9aXeet9TtY7oqUNkKM+oeVORq5HSyV8WFQ2GmvGRKzNXau2eUOl4zHzP+VXty pwN4WiSV7zOsR2nZ0BMvfnteMLWpxPYF1t4pQwBKl2R03bxKI+zaBpSpIVZp37Sf D1Fp7ccF7c81JibIiwu5ORinN1dtRYqqtvjoShjh5fx5lXQa2WUB02LX6PP9bUaW uZW9dz0McEiXl7I4ls6sHT7okukuQ88KphHRoiuQZgVEtV3IJUU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:22 2026 by rpki-client