$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: UVv+whgZ8BAr5OJLnfCBUI591ABoZ0WinWzn+Ux0njs= Subject key identifier: 70:1D:73:EC:8F:A8:89:37:92:B1:A5:4A:C0:33:5F:8B:6E:0F:45:86 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 1ADE30FDB7D5DDBCB349E0E85F3507C720E20813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 023C Signing time: Mon 02 Mar 2026 12:51:58 +0000 Manifest this update: Mon 02 Mar 2026 12:46:58 +0000 Manifest next update: Thu 05 Mar 2026 23:57:58 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) 2: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) 3: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: MR9p69M0NoPde0XY5dJoNmPowLUWnv4AKWNgihp9tzc=) 4: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:de:30:fd:b7:d5:dd:bc:b3:49:e0:e8:5f:35:07:c7:20:e2:08:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Mar 2 12:46:58 2026 GMT Not After : Mar 5 23:57:58 2026 GMT Subject: CN=701D73EC8FA8893792B1A54AC0335F8B6E0F4586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:4a:c7:41:eb:a0:a0:b8:8a:cc:f1:7c:51: c3:1f:5e:98:56:ee:39:b2:0f:89:19:17:9a:2b:ea: 6b:4b:6d:09:df:0a:b3:01:04:1a:e4:85:c3:31:6c: dd:1d:ca:11:7b:fd:af:26:9c:86:78:04:81:a7:bf: 12:a2:be:fe:31:1f:51:90:9f:37:fc:4c:39:03:b2: 23:e2:06:5f:5e:19:56:7a:07:81:59:11:6f:8a:05: a7:cd:2d:53:fd:9e:c4:2b:64:5f:05:9a:99:a3:01: d5:4a:1c:de:24:f6:ea:15:76:1d:32:48:05:1e:2d: 41:ce:d7:5b:54:9e:c0:f3:03:2d:ba:56:a2:3d:35: f4:3d:3b:dc:db:40:f6:ad:86:df:9e:8d:6d:3f:ce: 3f:98:d7:84:ec:25:ad:39:8b:0a:45:44:9a:b5:bb: c5:96:8c:94:41:cf:e1:28:2e:1f:bb:04:e5:4f:a1: 86:1e:cf:1d:ea:60:65:3a:69:07:11:62:03:13:0c: d2:fa:97:f1:98:9b:af:8e:c2:cc:8f:17:80:a7:64: 13:c4:44:39:18:6b:c7:cc:ab:ce:63:97:23:91:5d: 21:05:81:bd:02:5f:e9:13:8d:a2:3d:fd:36:45:b2: 41:a8:ed:62:c9:21:26:29:c4:91:86:ef:ae:6c:7b: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1D:73:EC:8F:A8:89:37:92:B1:A5:4A:C0:33:5F:8B:6E:0F:45:86 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:dd:52:0b:62:45:b2:ec:f7:37:4d:78:68:09:5b:c7:1f:6f: eb:f7:ed:90:51:58:5e:6c:0f:7b:0d:1f:b8:96:a3:dd:01:94: 0a:15:31:ec:dd:a0:cf:6b:60:da:f7:07:3d:4e:b9:de:3a:6d: 0c:e3:98:77:37:c3:c4:1d:3a:46:16:b0:40:e1:12:8c:58:fd: 89:d8:b9:93:38:3a:a9:10:3b:b4:df:dc:7a:78:69:50:14:9c: f8:90:ba:95:07:f1:4a:de:f3:53:58:f5:31:db:26:5e:d6:23: 94:d9:b7:7d:98:cd:41:1f:bd:0d:a1:ea:d6:d4:f1:d6:c0:3a: 8b:97:25:7f:22:d4:bf:f7:d2:22:f4:a7:5a:4d:f6:49:bc:25: ac:d7:d3:3c:0f:66:59:45:27:93:41:97:85:b8:82:f4:c1:3e: 2b:8a:3f:3b:f3:81:f3:95:96:db:65:88:24:3f:03:8c:04:4f: b3:f1:dc:d6:04:6e:1d:a3:9b:20:ab:62:7f:1c:c6:66:17:b1: b2:8f:0f:35:51:3c:01:2b:7b:2c:a4:c1:5e:3a:fc:d7:47:30: ff:58:36:37:3f:88:c7:83:92:35:61:26:b8:a9:61:53:07:d5: df:fd:1c:21:56:b7:cb:82:81:bf:e0:e5:aa:f5:d6:b2:7b:18: 87:fc:b7:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGt4w/bfV3byzSeDoXzUHxyDiCBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNjAzMDIxMjQ2NThaFw0yNjAzMDUyMzU3NThaMDMxMTAvBgNV BAMTKDcwMUQ3M0VDOEZBODg5Mzc5MkIxQTU0QUMwMzM1RjhCNkUwRjQ1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFUrHQeugoLiKzPF8UcMfXphW 7jmyD4kZF5or6mtLbQnfCrMBBBrkhcMxbN0dyhF7/a8mnIZ4BIGnvxKivv4xH1GQ nzf8TDkDsiPiBl9eGVZ6B4FZEW+KBafNLVP9nsQrZF8FmpmjAdVKHN4k9uoVdh0y SAUeLUHO11tUnsDzAy26VqI9NfQ9O9zbQPatht+ejW0/zj+Y14TsJa05iwpFRJq1 u8WWjJRBz+EoLh+7BOVPoYYezx3qYGU6aQcRYgMTDNL6l/GYm6+OwsyPF4CnZBPE RDkYa8fMq85jlyORXSEFgb0CX+kTjaI9/TZFskGo7WLJISYpxJGG765sewCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcB1z7I+oiTeSsaVKwDNfi24PRYYwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHdUgtiRbLs9zdNeGgJW8cfb+v37ZBRWF5s D3sNH7iWo90BlAoVMezdoM9rYNr3Bz1Oud46bQzjmHc3w8QdOkYWsEDhEoxY/YnY uZM4OqkQO7Tf3Hp4aVAUnPiQupUH8Ure81NY9THbJl7WI5TZt32YzUEfvQ2h6tbU 8dbAOouXJX8i1L/30iL0p1pN9km8JazX0zwPZllFJ5NBl4W4gvTBPiuKPzvzgfOV lttliCQ/A4wET7Px3NYEbh2jmyCrYn8cxmYXsbKPDzVRPAEreyykwV46/NdHMP9Y Njc/iMeDkjVhJripYVMH1d/9HCFWt8uCgb/g5ar11rJ7GIf8t98= -----END CERTIFICATE-----Generated at Mon Mar 2 19:51:40 2026 by rpki-client