$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: OD3bS+N8Pn+ZknI9er+7vm+YtT9bO0LyraFN22ndGKQ= Subject key identifier: C9:34:33:88:A3:F9:09:EC:FF:9C:82:AC:D0:77:74:73:0B:C6:5E:12 Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 425B6C2D012F99D7B22AF51AC0D076A2230EAEB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 03:40:40 +0000 Manifest this update: Wed 23 Sep 2026 03:35:40 +0000 Manifest next update: Thu 24 Sep 2026 07:35:40 +0000 Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) 2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: He3iQx5havnj4Ly5GbuYZwFPnYYo8saBSo3z5Q5glOY=) 3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5b:6c:2d:01:2f:99:d7:b2:2a:f5:1a:c0:d0:76:a2:23:0e:ae:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: Sep 23 03:35:40 2026 GMT Not After : Sep 24 07:35:40 2026 GMT Subject: CN=C9343388A3F909ECFF9C82ACD07774730BC65E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:a1:89:8b:88:b1:4c:50:3b:6e:2e:5f:7f: 3a:eb:88:e0:92:1a:84:5d:d0:8d:ad:b6:d6:96:ca: a6:52:78:65:a7:99:f7:01:7c:24:63:70:42:25:96: a5:04:48:8f:41:fe:d4:45:99:3b:c1:0b:2d:a6:79: d0:ad:04:27:2a:88:78:b9:f9:dc:37:3e:98:82:2f: b9:7b:1d:67:89:5e:5a:42:a4:ec:6c:da:72:cc:73: 1f:ce:13:f1:d0:00:0f:7d:be:71:0d:68:3c:52:df: 2f:a2:82:df:b6:58:19:93:ee:ac:b3:b9:0a:c2:03: 5a:ea:9d:c0:b2:91:8e:ba:86:c9:6c:41:44:47:71: ba:f6:09:c1:dc:12:9c:8c:e8:dd:ce:40:7c:6f:16: b6:14:6d:59:5e:c3:28:c4:72:9e:21:f3:7c:5e:29: cf:9a:f3:3d:11:bc:3a:a3:cf:fc:21:e2:16:ed:db: b0:39:17:a8:65:cc:de:92:34:b1:c8:05:8c:6e:f8: bb:7f:b2:98:83:cc:27:f2:52:bc:1f:fe:14:81:89: 6e:98:6f:19:25:af:a6:df:cf:dd:1e:06:ea:4d:24: 48:b1:5f:02:0f:a2:3b:91:23:51:38:c4:06:23:cf: 5b:47:e3:6e:00:83:71:ff:04:27:e5:12:fa:79:55: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:33:88:A3:F9:09:EC:FF:9C:82:AC:D0:77:74:73:0B:C6:5E:12 X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:81:20:01:12:db:20:9f:53:fb:e0:25:ea:2a:9f:11:47:9c: 6e:99:33:c0:44:4a:74:2b:1f:5d:90:e8:31:b4:4c:83:55:96: 3d:b1:ea:7d:34:05:63:94:d1:42:6b:bb:8e:46:8e:e5:76:e9: ce:28:fa:45:a1:6a:f2:9a:d5:24:4f:b6:08:c6:3b:76:e3:3a: ff:66:5a:ff:d7:71:64:38:b5:1b:c9:5f:d9:ae:86:ae:fa:8f: af:c3:6c:0e:ba:f0:da:38:71:86:9f:b6:49:7b:76:f9:2a:1e: fa:8a:0a:5f:b0:0a:9d:fc:0d:28:99:04:cf:93:83:29:66:2d: 5e:f1:ae:97:3a:7a:90:61:32:65:2c:76:5c:92:27:96:05:e9: a6:11:60:66:08:90:df:99:96:69:92:6c:13:df:b1:7c:42:9f: 17:56:f1:56:96:ad:30:b0:11:a7:85:a9:99:9d:2e:51:be:58: 16:7a:f5:b1:84:23:66:8b:57:69:52:83:db:33:4e:db:57:76: ec:8e:9d:e0:61:5d:5f:36:d6:06:8d:1e:0b:51:32:b4:8c:0d: f8:5b:51:c9:46:e7:f9:bf:f4:ae:f8:b0:74:6c:f8:46:d8:83: 80:8b:9c:d1:6d:2f:2a:c4:03:8e:2b:46:4f:c2:8d:ff:8a:3f: 12:43:09:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQltsLQEvmdeyKvUawNB2oiMOrrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA5MjMwMzM1NDBaFw0yNjA5MjQwNzM1NDBaMDMxMTAvBgNV BAMTKEM5MzQzMzg4QTNGOTA5RUNGRjlDODJBQ0QwNzc3NDczMEJDNjVFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mqGJi4ixTFA7bi5ffzrriOCS GoRd0I2tttaWyqZSeGWnmfcBfCRjcEIllqUESI9B/tRFmTvBCy2medCtBCcqiHi5 +dw3PpiCL7l7HWeJXlpCpOxs2nLMcx/OE/HQAA99vnENaDxS3y+igt+2WBmT7qyz uQrCA1rqncCykY66hslsQURHcbr2CcHcEpyM6N3OQHxvFrYUbVlewyjEcp4h83xe Kc+a8z0RvDqjz/wh4hbt27A5F6hlzN6SNLHIBYxu+Lt/spiDzCfyUrwf/hSBiW6Y bxklr6bfz90eBupNJEixXwIPojuRI1E4xAYjz1tH424Ag3H/BCflEvp5Vc6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyTQziKP5Cez/nIKs0Hd0cwvGXhIwHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOBIAES2yCfU/vgJeoqnxFHnG6ZM8BESnQr H12Q6DG0TINVlj2x6n00BWOU0UJru45GjuV26c4o+kWhavKa1SRPtgjGO3bjOv9m Wv/XcWQ4tRvJX9muhq76j6/DbA668No4cYaftkl7dvkqHvqKCl+wCp38DSiZBM+T gylmLV7xrpc6epBhMmUsdlySJ5YF6aYRYGYIkN+ZlmmSbBPfsXxCnxdW8VaWrTCw EaeFqZmdLlG+WBZ69bGEI2aLV2lSg9szTttXduyOneBhXV821gaNHgtRMrSMDfhb UclG5/m/9K74sHRs+EbYg4CLnNFtLyrEA44rRk/Cjf+KPxJDCaU= -----END CERTIFICATE-----Generated at Wed Sep 23 08:07:51 2026 by rpki-client