$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: SWm8PS0TIAhR6vHFnlWqpw5JkSxC1GbY7OWgi6P0dbk= Subject key identifier: FB:71:E9:1E:7A:9C:05:1F:A5:37:B5:5B:67:C6:49:DB:D0:72:31:17 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 5EFD2E170281D6D1689389D88C0F55D74A53C1A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 0250 Signing time: Fri 17 Apr 2026 07:41:59 +0000 Manifest this update: Fri 17 Apr 2026 07:36:59 +0000 Manifest next update: Mon 20 Apr 2026 17:42:59 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) 2: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) 3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) 4: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: pbFBncZruX4itplnIM2yBZDJtyiuw9DhjW0QrTQvAIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fd:2e:17:02:81:d6:d1:68:93:89:d8:8c:0f:55:d7:4a:53:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Apr 17 07:36:59 2026 GMT Not After : Apr 20 17:42:59 2026 GMT Subject: CN=FB71E91E7A9C051FA537B55B67C649DBD0723117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:4b:36:63:85:fa:05:ee:28:38:ae:c6:6a: c3:94:0e:f3:63:8f:85:ae:ca:08:aa:6e:ae:6b:83: c0:6d:c4:dd:25:16:59:5a:ad:ec:ab:8d:ae:f4:8c: 5d:aa:62:a4:d5:e3:1a:21:a9:d1:6f:58:e9:1c:59: b9:97:df:c2:4d:28:21:30:15:33:89:b8:2f:83:0e: 63:38:48:3e:8b:d8:bf:ce:1f:38:83:86:ff:df:52: 1a:0d:df:98:04:30:74:01:5b:38:95:35:c9:29:71: 2a:1c:c1:83:27:16:3e:56:db:bc:70:7b:dd:4d:ca: b3:40:d8:eb:77:54:39:2b:2d:01:51:56:96:67:13: 00:32:ba:0e:1b:29:ed:46:31:0a:e5:33:b2:66:63: 93:8b:89:a3:08:0d:f8:9c:23:90:f0:e8:dc:32:f9: 7e:4d:97:bb:92:0e:31:8d:e5:04:24:80:62:a3:ad: bb:1e:84:aa:3b:fa:1e:6f:fd:f3:84:5a:77:33:f0: c5:7b:c6:0b:93:ba:b3:b1:b4:23:52:38:d7:76:14: a5:f0:3f:f4:08:01:4e:4e:08:98:9b:c2:c3:bc:39: d5:99:86:92:8b:e1:4f:5c:ec:a1:95:bc:1b:06:c0: 6a:30:53:06:05:29:a2:cb:89:32:0d:1f:f1:1b:f7: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:71:E9:1E:7A:9C:05:1F:A5:37:B5:5B:67:C6:49:DB:D0:72:31:17 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:33:19:f1:a5:ce:2e:c5:50:0d:e5:73:32:29:84:ff:c6:45: 2a:67:12:91:1f:1c:ee:f9:23:bf:d4:15:ea:cc:e3:58:b2:bc: 3e:e9:eb:22:18:70:7b:34:f6:a5:5a:06:3f:d3:4f:ad:98:4e: a0:9d:dd:b9:ed:73:51:87:ac:16:39:ac:59:2a:66:df:8e:eb: cb:54:5e:50:a5:7d:c8:10:62:9f:0e:6b:8a:da:fb:f6:a4:d4: a4:1a:a1:b4:be:f2:c2:33:02:cc:5f:ce:ee:b0:47:90:6b:1c: 34:bb:4e:47:07:c8:60:e7:4c:45:23:0b:78:1a:f1:46:9e:6b: f6:22:fd:f4:d3:d4:7c:c3:de:dd:7d:55:81:a1:1a:cb:8b:c7: df:2c:18:4b:a6:5d:b6:90:2c:82:01:c0:92:3b:23:02:55:22: a9:5d:0a:b1:86:30:91:b2:96:3c:02:78:51:89:6f:49:88:6e: cb:84:3a:af:97:11:db:ba:84:40:31:14:e7:63:76:f4:b5:cb: 0f:46:32:70:2b:09:76:ab:79:58:c2:92:cd:a3:dd:db:e5:a6: 5a:d0:55:0f:95:81:f0:9e:e3:13:f6:aa:d2:80:b5:1c:e4:88: dc:20:85:41:cc:fa:c9:a1:2a:48:1a:49:d9:5b:09:f1:22:f0: 51:f8:5e:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXv0uFwKB1tFok4nYjA9V10pTwaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNjA0MTcwNzM2NTlaFw0yNjA0MjAxNzQyNTlaMDMxMTAvBgNV BAMTKEZCNzFFOTFFN0E5QzA1MUZBNTM3QjU1QjY3QzY0OURCRDA3MjMxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd1Es2Y4X6Be4oOK7GasOUDvNj j4Wuygiqbq5rg8BtxN0lFllareyrja70jF2qYqTV4xohqdFvWOkcWbmX38JNKCEw FTOJuC+DDmM4SD6L2L/OHziDhv/fUhoN35gEMHQBWziVNckpcSocwYMnFj5W27xw e91NyrNA2Ot3VDkrLQFRVpZnEwAyug4bKe1GMQrlM7JmY5OLiaMIDficI5Dw6Nwy +X5Nl7uSDjGN5QQkgGKjrbsehKo7+h5v/fOEWncz8MV7xguTurOxtCNSONd2FKXw P/QIAU5OCJibwsO8OdWZhpKL4U9c7KGVvBsGwGowUwYFKaLLiTINH/Eb9zmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+3HpHnqcBR+lN7VbZ8ZJ29ByMRcwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUzGfGlzi7FUA3lczIphP/GRSpnEpEfHO75 I7/UFerM41iyvD7p6yIYcHs09qVaBj/TT62YTqCd3bntc1GHrBY5rFkqZt+O68tU XlClfcgQYp8Oa4ra+/ak1KQaobS+8sIzAsxfzu6wR5BrHDS7TkcHyGDnTEUjC3ga 8Uaea/Yi/fTT1HzD3t19VYGhGsuLx98sGEumXbaQLIIBwJI7IwJVIqldCrGGMJGy ljwCeFGJb0mIbsuEOq+XEdu6hEAxFOdjdvS1yw9GMnArCXareVjCks2j3dvlplrQ VQ+VgfCe4xP2qtKAtRzkiNwghUHM+smhKkgaSdlbCfEi8FH4Xn0= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:04 2026 by rpki-client