$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: NEDLwmohCXEdXfgUrStrNUkPAO7Sw6KJpixiEg9kpoY= Subject key identifier: 3B:7C:4A:9D:3A:A3:48:2B:A9:BE:B7:D8:D4:A2:3C:B6:EE:FE:0E:41 Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 014819DDE1CEA2C0236691F67FC76DFB891465B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 19:40:55 +0000 Manifest this update: Tue 28 Jul 2026 19:35:55 +0000 Manifest next update: Wed 29 Jul 2026 22:55:55 +0000 Files and hashes: 1: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) 2: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) 3: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: h4u0aOu+8m5pTSLxVcMejudDmxifoiwJy224OzbDWuk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:48:19:dd:e1:ce:a2:c0:23:66:91:f6:7f:c7:6d:fb:89:14:65:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: Jul 28 19:35:55 2026 GMT Not After : Jul 29 22:55:55 2026 GMT Subject: CN=3B7C4A9D3AA3482BA9BEB7D8D4A23CB6EEFE0E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8a:e2:c0:6f:70:d7:d4:6b:e2:5c:cf:c5:64: 5f:1e:1f:80:ec:ee:42:7a:e4:fc:d6:e6:21:71:12: 00:16:ab:61:70:ea:a4:45:bf:86:9b:a9:4d:c2:46: 94:d6:ec:99:9e:8a:21:66:49:ce:25:ee:90:ea:99: fc:f7:a3:ee:04:c3:0e:aa:1a:1e:6d:66:13:c6:c3: 87:53:c3:25:f4:31:96:d1:77:09:79:87:d0:2f:e7: c6:eb:34:a9:ad:54:43:e3:32:f3:c0:49:5c:2a:7c: 70:82:1f:fb:70:f6:62:88:a8:68:99:bb:a0:21:e4: b6:56:a3:44:05:68:74:b0:27:bc:d4:87:db:ca:8b: 40:4f:b8:fd:d0:f2:0d:9d:2f:5e:2f:ff:a8:70:c0: e7:10:89:49:4a:2d:73:a7:08:07:95:b5:d8:2b:f1: 5b:b0:8d:6b:08:50:ec:31:cb:0d:d8:82:74:cc:2b: c1:93:dc:53:f1:d3:d6:54:a7:c1:de:b5:b3:ee:3e: 37:41:79:a9:63:68:b1:8e:6d:d5:e5:ec:a6:bd:34: 5c:96:f6:68:b7:37:c5:41:da:ec:bb:ee:69:d7:cf: 39:b8:bd:56:92:40:93:8e:92:4b:12:88:38:18:d6: c4:60:fb:31:4d:5d:03:f7:d6:6f:cc:77:ef:4b:16: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7C:4A:9D:3A:A3:48:2B:A9:BE:B7:D8:D4:A2:3C:B6:EE:FE:0E:41 X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:dd:ce:a2:b4:ee:58:ea:5d:a2:bf:57:3e:f2:11:1c:95:b6: 98:cb:3e:da:47:45:06:62:6a:94:b6:bc:87:a4:7a:67:62:21: 78:0c:2c:c9:0d:a1:64:3b:16:a1:f0:4f:88:4d:94:25:4f:fc: bf:98:a4:3d:ba:bb:af:69:9d:f6:df:a8:5d:85:d9:b6:91:0a: d2:7e:3d:9c:95:04:72:50:2a:e6:af:9e:e2:ac:9b:b6:ba:b1: 49:eb:c4:87:8d:97:9c:e3:31:ea:71:8a:27:b1:2c:37:9f:b0: d7:2e:aa:24:c8:eb:ea:6d:d6:67:4a:6b:0e:c9:35:39:f4:5c: 60:df:1e:aa:f7:20:bb:bc:55:00:6c:e3:2b:94:5a:e4:02:20: 33:ab:74:a5:e7:1c:a9:b8:f8:2d:3a:b8:bd:57:b5:77:4f:7f: e5:06:61:1e:e5:9c:4f:58:73:fb:42:7f:f4:93:a6:38:77:ae: 53:d9:7a:d2:0d:22:7d:9a:c3:3e:48:3c:d2:11:a0:40:e3:8b: 66:3d:41:dd:b0:09:a6:98:32:14:1f:ea:75:b9:56:7b:0c:60: 86:35:d3:54:90:7e:11:98:df:1c:aa:b8:bb:1d:a7:dc:56:3c: 6b:a1:57:a4:12:87:08:59:43:c9:15:93:a6:ac:e1:03:87:55: e2:b4:95:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUgZ3eHOosAjZpH2f8dt+4kUZbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA3MjgxOTM1NTVaFw0yNjA3MjkyMjU1NTVaMDMxMTAvBgNV BAMTKDNCN0M0QTlEM0FBMzQ4MkJBOUJFQjdEOEQ0QTIzQ0I2RUVGRTBFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHiuLAb3DX1GviXM/FZF8eH4Ds 7kJ65PzW5iFxEgAWq2Fw6qRFv4abqU3CRpTW7JmeiiFmSc4l7pDqmfz3o+4Eww6q Gh5tZhPGw4dTwyX0MZbRdwl5h9Av58brNKmtVEPjMvPASVwqfHCCH/tw9mKIqGiZ u6Ah5LZWo0QFaHSwJ7zUh9vKi0BPuP3Q8g2dL14v/6hwwOcQiUlKLXOnCAeVtdgr 8VuwjWsIUOwxyw3YgnTMK8GT3FPx09ZUp8HetbPuPjdBealjaLGObdXl7Ka9NFyW 9mi3N8VB2uy77mnXzzm4vVaSQJOOkksSiDgY1sRg+zFNXQP31m/Md+9LFvBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO3xKnTqjSCupvrfY1KI8tu7+DkEwHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXdzqK07ljqXaK/Vz7yERyVtpjLPtpHRQZi apS2vIekemdiIXgMLMkNoWQ7FqHwT4hNlCVP/L+YpD26u69pnfbfqF2F2baRCtJ+ PZyVBHJQKuavnuKsm7a6sUnrxIeNl5zjMepxiiexLDefsNcuqiTI6+pt1mdKaw7J NTn0XGDfHqr3ILu8VQBs4yuUWuQCIDOrdKXnHKm4+C06uL1XtXdPf+UGYR7lnE9Y c/tCf/STpjh3rlPZetINIn2awz5IPNIRoEDji2Y9Qd2wCaaYMhQf6nW5VnsMYIY1 01SQfhGY3xyquLsdp9xWPGuhV6QShwhZQ8kVk6as4QOHVeK0lRI= -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:25 2026 by rpki-client