$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json) Hash identifier: +qwDJh8AchqfJD3rfX8hp8l1gEWiHmG649H8ig5+aZM= Subject key identifier: DA:DD:D8:AA:53:77:8A:49:C6:76:C0:A5:CB:36:53:E6:15:71:09:49 Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB Certificate serial: 291D5562217469BC7BCC4A8E24F791DD6F4F1F00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:45:19 +0000 Manifest this update: Wed 23 Sep 2026 19:40:19 +0000 Manifest next update: Thu 24 Sep 2026 21:41:19 +0000 Files and hashes: 1: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: NtRFmudiOt3MVNAYa6Aw/wqRiBBG902Y3mjPXax39+s=) 2: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=) 3: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=) 4: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1d:55:62:21:74:69:bc:7b:cc:4a:8e:24:f7:91:dd:6f:4f:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB Validity Not Before: Sep 23 19:40:19 2026 GMT Not After : Sep 24 21:41:19 2026 GMT Subject: CN=DADDD8AA53778A49C676C0A5CB3653E615710949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:1e:ce:34:16:fc:e1:fd:62:ac:3a:d8:ba: 0e:17:6f:14:24:5f:e0:03:a4:5a:e7:4c:31:7c:f8: 22:4f:a4:79:f0:dc:cf:5e:5f:5c:40:cf:f1:7c:8f: b3:f6:70:8f:06:eb:39:63:8f:ac:4a:ca:31:c7:83: c0:fe:59:d4:31:33:77:4e:d1:5c:55:70:5a:08:6d: 62:c8:91:fa:c9:8e:fe:0d:9f:64:5e:f4:6d:9a:eb: a5:97:0b:bc:6e:be:6a:82:09:90:07:8f:9e:50:33: 34:37:16:41:50:9d:18:9a:04:2c:45:05:2a:04:85: 5f:4d:78:e3:78:aa:e7:4d:10:4b:67:93:e8:33:cd: 5c:3f:ee:d5:07:0a:b4:1c:c0:76:70:76:38:95:c5: ce:3e:27:cb:5a:18:1b:63:a0:b7:e0:96:40:bc:12: 86:f7:4d:fd:b4:af:8e:33:69:51:ea:10:22:33:2f: 13:9e:9a:12:d9:d2:a6:b0:41:19:4e:55:5d:47:53: 24:6e:24:00:bf:bd:2c:2c:9b:7a:75:1f:f5:b2:00: 1d:d7:7e:51:e4:e4:0e:46:41:50:3e:ac:5c:be:46: cd:fb:9a:aa:b3:8b:86:6f:dc:95:4f:04:e2:85:a0: 2e:ac:ae:97:dc:bc:63:ac:dc:30:24:6e:ad:d2:a1: 7f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DD:D8:AA:53:77:8A:49:C6:76:C0:A5:CB:36:53:E6:15:71:09:49 X509v3 Authority Key Identifier: keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:54:82:cc:3c:61:fc:3e:cc:6f:45:72:87:58:8e:18:ff:2e: b7:ae:96:15:bc:84:be:07:4b:8e:9e:73:d4:ff:9f:50:5b:73: e2:8d:9a:cb:cd:97:71:96:0c:81:1c:d7:1b:35:f3:9b:a3:c1: 2c:1c:be:e2:03:6c:84:ca:54:3d:6f:61:56:26:d1:0e:83:ef: d5:eb:11:5a:91:fb:e3:6f:c1:30:6a:69:30:fa:e1:3a:56:27: 49:20:95:ee:34:b9:0d:23:e6:88:dc:9c:4e:51:a3:a5:e9:66: b2:4c:2e:0b:5b:8b:1e:8c:36:c0:e4:6f:62:92:85:46:ef:d0: ef:9b:04:b2:3f:41:54:72:d7:72:74:25:13:4e:0f:d6:5d:c2: 65:8c:b5:c7:e5:e7:04:66:2f:d3:c7:71:32:f2:39:97:72:0b: 9b:91:ba:c0:cc:63:e4:68:64:0c:ec:2a:01:f1:d3:65:b3:33: 6c:0f:91:54:7a:2d:9f:36:56:e9:a5:99:18:15:1f:92:97:78: 83:85:ec:ee:36:d3:3b:e0:86:b6:a8:1c:25:99:7a:71:2a:88: 30:ea:a7:e0:39:b8:aa:99:2a:92:99:91:29:48:74:14:31:28: 52:b6:70:64:31:76:02:76:4c:07:96:86:08:5c:89:f0:9c:9c: 1a:37:2a:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKR1VYiF0abx7zEqOJPeR3W9PHwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1 OTIwQjdDQjAeFw0yNjA5MjMxOTQwMTlaFw0yNjA5MjQyMTQxMTlaMDMxMTAvBgNV BAMTKERBREREOEFBNTM3NzhBNDlDNjc2QzBBNUNCMzY1M0U2MTU3MTA5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQB7ONBb84f1irDrYug4XbxQk X+ADpFrnTDF8+CJPpHnw3M9eX1xAz/F8j7P2cI8G6zljj6xKyjHHg8D+WdQxM3dO 0VxVcFoIbWLIkfrJjv4Nn2Re9G2a66WXC7xuvmqCCZAHj55QMzQ3FkFQnRiaBCxF BSoEhV9NeON4qudNEEtnk+gzzVw/7tUHCrQcwHZwdjiVxc4+J8taGBtjoLfglkC8 Eob3Tf20r44zaVHqECIzLxOemhLZ0qawQRlOVV1HUyRuJAC/vSwsm3p1H/WyAB3X flHk5A5GQVA+rFy+Rs37mqqzi4Zv3JVPBOKFoC6srpfcvGOs3DAkbq3SoX8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2t3YqlN3iknGdsClyzZT5hVxCUkwHwYDVR0j BBgwFoAUaYFemqFLsCqmIID/aM7tUlkgt8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0NmJkYWQtZjEzMC00OGE5LTg1MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFB MTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1OTIwQjdDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTgxNUU5QUExNEJCMDJBQTYyMDgwRkY2OENFRUQ1MjU5MjBC N0NCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVE NTI1OTIwQjdDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtUgsw8Yfw+zG9FcodYjhj/LreulhW8hL4H S46ec9T/n1Bbc+KNmsvNl3GWDIEc1xs185ujwSwcvuIDbITKVD1vYVYm0Q6D79Xr EVqR++NvwTBqaTD64TpWJ0kgle40uQ0j5ojcnE5Ro6XpZrJMLgtbix6MNsDkb2KS hUbv0O+bBLI/QVRy13J0JRNOD9ZdwmWMtcfl5wRmL9PHcTLyOZdyC5uRusDMY+Ro ZAzsKgHx02WzM2wPkVR6LZ82VumlmRgVH5KXeIOF7O420zvghraoHCWZenEqiDDq p+A5uKqZKpKZkSlIdBQxKFK2cGQxdgJ2TAeWhghcifCcnBo3KsA= -----END CERTIFICATE-----Generated at Thu Sep 24 05:00:56 2026 by rpki-client