$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: W5U9zz73Z8srLTCB1l8EeT+S0PnWwPpA3AwLk9NtbsI= Subject key identifier: 50:D3:D3:91:F8:A3:78:57:6B:4F:0E:5D:7C:D8:76:A1:7F:DD:63:A0 Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 690E84989FD201786B1214660089BE37F82DE995 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 07:41:08 +0000 Manifest this update: Tue 22 Sep 2026 07:36:08 +0000 Manifest next update: Wed 23 Sep 2026 11:40:08 +0000 Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) 2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: VSr3EchGAUwtLa4QgKeqe5xisBuwXq51XqDUwpPBfmE=) 3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0e:84:98:9f:d2:01:78:6b:12:14:66:00:89:be:37:f8:2d:e9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: Sep 22 07:36:08 2026 GMT Not After : Sep 23 11:40:08 2026 GMT Subject: CN=50D3D391F8A378576B4F0E5D7CD876A17FDD63A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:26:ae:25:fe:34:f6:d4:97:a3:c5:a9:04: 1a:20:5c:ee:e6:d6:eb:91:6b:51:c5:57:f9:f0:74: 81:b6:d3:3a:1f:8f:c5:95:12:55:09:ff:7f:33:01: fe:95:7d:22:18:72:cf:18:cb:42:da:ed:52:80:4c: 06:36:2e:fa:22:5f:4d:b7:1b:2f:9d:78:b6:15:c9: 89:7b:d5:f2:45:40:d5:97:7d:d2:c0:25:18:03:cc: 55:e8:92:71:f7:71:2b:84:12:5c:d6:e2:89:30:28: 00:5a:e9:0a:6d:1c:83:c0:83:13:aa:f5:ea:e4:21: af:72:1b:2d:64:6a:c8:10:78:a9:51:b8:cc:2b:91: 41:80:65:e9:a3:45:8c:7a:16:dd:17:e7:83:ad:3a: fb:6f:6c:6e:ea:2d:3b:9f:58:25:3c:ff:44:c1:98: 27:ee:c2:17:50:fe:ae:b8:15:40:72:ff:6a:ca:ca: 51:2c:36:b9:79:09:de:16:44:ca:f3:03:75:e9:e5: ad:1b:d0:4e:cd:20:82:92:f1:f2:bf:b6:3a:c9:f1: 24:23:1c:66:1a:5e:5f:45:05:d3:ff:0c:22:d5:89: 21:49:a1:61:94:86:56:53:92:16:52:5b:b5:a9:7c: 95:83:e5:d6:e1:7d:db:62:bf:19:1f:95:38:a2:87: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:D3:91:F8:A3:78:57:6B:4F:0E:5D:7C:D8:76:A1:7F:DD:63:A0 X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cc:7c:67:1f:96:13:00:3e:c2:e0:eb:cc:7d:fc:87:e8:64: 5c:28:d1:8e:e1:3b:e2:31:d2:9a:b3:03:21:fd:ea:96:05:3b: a1:f8:75:4b:81:af:10:ff:1a:d6:ff:20:3e:08:20:ba:5f:d7: 62:f2:f3:42:ba:f5:9f:2c:15:82:fd:71:17:7c:b6:dc:b5:ba: 1b:f1:9f:5e:fc:43:bd:94:ac:49:9a:6d:29:9a:b5:a9:0a:e9: 9a:d4:71:d5:ed:fe:c1:54:69:81:d5:ea:d4:49:c0:da:0c:55: 25:38:61:e7:fd:94:ea:f7:b5:58:7c:f7:0b:8c:6a:74:a6:52: 89:71:5d:e3:f4:0f:d6:4e:a4:c5:2b:cb:b7:c0:fe:bf:23:c4: 62:ef:19:88:e5:d2:ef:23:c5:00:ac:c9:ca:c9:7c:91:ce:e3: 5f:5d:cc:d9:cb:5b:62:58:3d:bf:82:84:23:cc:b2:5e:5c:b9: 38:77:a4:40:01:51:6b:64:1f:20:75:18:87:ce:dd:6b:73:7a: a7:7b:98:fb:ce:16:64:78:40:67:e7:09:d7:3a:8e:46:9d:33: b2:2a:14:62:61:03:ed:87:7d:3d:70:3b:11:d0:3a:f3:bf:e6: b5:86:ea:63:ef:75:e9:7e:d3:ef:fd:2f:69:54:38:36:ae:4b: 90:c4:8f:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQ6EmJ/SAXhrEhRmAIm+N/gt6ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA5MjIwNzM2MDhaFw0yNjA5MjMxMTQwMDhaMDMxMTAvBgNV BAMTKDUwRDNEMzkxRjhBMzc4NTc2QjRGMEU1RDdDRDg3NkExN0ZERDYzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4CauJf409tSXo8WpBBogXO7m 1uuRa1HFV/nwdIG20zofj8WVElUJ/38zAf6VfSIYcs8Yy0La7VKATAY2LvoiX023 Gy+deLYVyYl71fJFQNWXfdLAJRgDzFXoknH3cSuEElzW4okwKABa6QptHIPAgxOq 9erkIa9yGy1kasgQeKlRuMwrkUGAZemjRYx6Ft0X54OtOvtvbG7qLTufWCU8/0TB mCfuwhdQ/q64FUBy/2rKylEsNrl5Cd4WRMrzA3Xp5a0b0E7NIIKS8fK/tjrJ8SQj HGYaXl9FBdP/DCLViSFJoWGUhlZTkhZSW7WpfJWD5dbhfdtivxkflTiihxetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUNPTkfijeFdrTw5dfNh2oX/dY6AwHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/MfGcflhMAPsLg68x9/IfoZFwo0Y7hO+Ix 0pqzAyH96pYFO6H4dUuBrxD/Gtb/ID4IILpf12Ly80K69Z8sFYL9cRd8tty1uhvx n178Q72UrEmabSmatakK6ZrUcdXt/sFUaYHV6tRJwNoMVSU4Yef9lOr3tVh89wuM anSmUolxXeP0D9ZOpMUry7fA/r8jxGLvGYjl0u8jxQCsycrJfJHO419dzNnLW2JY Pb+ChCPMsl5cuTh3pEABUWtkHyB1GIfO3Wtzeqd7mPvOFmR4QGfnCdc6jkadM7Iq FGJhA+2HfT1wOxHQOvO/5rWG6mPvdel+0+/9L2lUODauS5DEj3s= -----END CERTIFICATE-----Generated at Tue Sep 22 21:59:57 2026 by rpki-client