$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft File: 69CE57F4984A7B332974000C0033734628A36A46.mft (raw, json) Hash identifier: 6i03xV41KJFY03tAknNa+sUdgSgp5S9iLTleBsSB9g8= Subject key identifier: D1:22:5F:19:D1:9C:DF:6E:A2:B9:42:C0:61:55:F4:D7:C7:E5:D0:FD Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 Certificate issuer: /CN=69CE57F4984A7B332974000C0033734628A36A46 Certificate serial: 0C35178EFCB1E1481185EC10AEB4912FBAC71B4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft Manifest number: 0243 Signing time: Thu 26 Mar 2026 10:32:33 +0000 Manifest this update: Thu 26 Mar 2026 10:27:33 +0000 Manifest next update: Sun 29 Mar 2026 13:58:33 +0000 Files and hashes: 1: 3130332e3231312e32362e302f32332d3233203d3e20313530313933.roa (hash: I5tBiXW53g+o5711q+c6sqmDZ0V8yGZ1wPd6GIxulEc=) 2: 3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (hash: p7oly61u2I9DIyxWJNTp5Y4E72pJPA3rw/vCpcCqXJg=) 3: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (hash: tDhS3e/QLZsQ3vBs7q3ofq7yiXbldQoFkAzqM7dBRFo=) 4: 69CE57F4984A7B332974000C0033734628A36A46.crl (hash: oU6KDzy2EN2Lsqkn67yNGZALLYflGyh0KbONMg1tSug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:35:17:8e:fc:b1:e1:48:11:85:ec:10:ae:b4:91:2f:ba:c7:1b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46 Validity Not Before: Mar 26 10:27:33 2026 GMT Not After : Mar 29 13:58:33 2026 GMT Subject: CN=D1225F19D19CDF6EA2B942C06155F4D7C7E5D0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:d0:8f:f6:22:2b:aa:33:56:23:76:c5:4f: 77:4a:62:e5:ba:c1:5b:02:92:9e:39:30:60:44:56: cf:a8:45:96:d0:8a:d3:68:8b:05:88:7a:7e:30:cb: 5f:6b:a9:38:06:7d:d7:56:df:83:ed:4f:73:64:b9: 8b:fa:13:1f:26:75:33:25:e4:20:fd:b4:46:42:5a: 1b:db:34:92:90:76:bb:d4:69:3e:b9:2d:45:4e:fe: fd:a2:53:3f:2a:89:fc:2e:54:cc:b8:a5:27:af:dd: 7d:c6:fb:18:e7:99:6f:b0:99:46:4a:b8:82:5e:6e: d2:3e:d3:5e:53:0c:88:7c:43:48:ad:1d:6e:b5:77: f2:20:d6:6f:cb:3c:54:85:d5:be:7a:47:e9:a2:b6: 1a:74:85:89:eb:4e:04:20:3d:39:63:20:df:d0:79: 02:91:00:f9:d7:e6:87:57:af:5f:4b:16:95:7a:cd: e9:d3:46:2c:db:98:4d:47:9e:b9:4d:8c:fd:45:52: c0:61:42:b2:e4:1a:25:2f:79:12:51:54:d6:ca:2a: 3f:5f:15:d7:f0:bd:e5:4a:bd:50:72:72:fb:bf:20: 2a:55:04:68:3f:02:af:5e:af:ab:52:9d:76:5f:1f: c4:24:a1:72:db:3e:1d:22:07:35:32:b0:6a:19:a8: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:5F:19:D1:9C:DF:6E:A2:B9:42:C0:61:55:F4:D7:C7:E5:D0:FD X509v3 Authority Key Identifier: keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:eb:f9:df:de:aa:26:ca:12:cb:c5:da:90:81:7f:0f:e9:df: 04:a2:37:9f:f2:06:70:af:e0:81:5b:62:3a:96:a4:e9:5b:4f: 2a:30:2d:b3:53:fb:16:e3:b4:94:22:7e:17:c1:b6:6f:35:22: 39:f9:33:46:04:11:46:95:6e:98:6f:98:f1:23:6a:be:75:d1: 1d:f6:7b:dd:40:d4:ae:ec:23:ce:49:cc:8e:01:75:db:c0:0d: ea:39:bf:ec:e5:81:e3:43:0f:5f:87:81:28:e3:5a:bf:43:cc: ee:af:29:45:5a:12:05:29:92:61:73:e1:c7:0c:ad:7c:15:10: 7d:70:b1:b9:f4:1e:8e:fa:d0:3d:71:b4:8f:41:07:47:65:d9: 77:46:ad:1d:eb:bb:e1:37:dd:43:57:db:65:db:d0:15:35:e7: d7:81:22:45:b9:fe:6e:31:26:be:04:f2:ae:d0:e8:ea:bc:1f: 04:ca:b3:63:4b:7a:ba:ed:9e:aa:da:08:23:5f:f7:0a:4b:c5: 21:a8:bd:77:2a:c2:ec:c3:58:6d:75:8f:7e:ca:6b:9c:75:8c: 4e:92:11:a3:f6:15:55:9c:87:55:c4:bc:63:fa:07:1e:4d:20: e9:03:7b:d5:33:ba:24:9c:88:1c:f1:0c:d3:65:87:c2:ca:f5: 6d:4c:a2:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDUXjvyx4UgRhewQrrSRL7rHG0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYy OEEzNkE0NjAeFw0yNjAzMjYxMDI3MzNaFw0yNjAzMjkxMzU4MzNaMDMxMTAvBgNV BAMTKEQxMjI1RjE5RDE5Q0RGNkVBMkI5NDJDMDYxNTVGNEQ3QzdFNUQwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3stCP9iIrqjNWI3bFT3dKYuW6 wVsCkp45MGBEVs+oRZbQitNoiwWIen4wy19rqTgGfddW34PtT3NkuYv6Ex8mdTMl 5CD9tEZCWhvbNJKQdrvUaT65LUVO/v2iUz8qifwuVMy4pSev3X3G+xjnmW+wmUZK uIJebtI+015TDIh8Q0itHW61d/Ig1m/LPFSF1b56R+mithp0hYnrTgQgPTljIN/Q eQKRAPnX5odXr19LFpV6zenTRizbmE1HnrlNjP1FUsBhQrLkGiUveRJRVNbKKj9f FdfwveVKvVBycvu/ICpVBGg/Aq9er6tSnXZfH8QkoXLbPh0iBzUysGoZqJVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SJfGdGc326iuULAYVX018fl0P0wHwYDVR0j BBgwFoAUac5X9JhKezMpdAAMADNzRiijakYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGQ2NmI2OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82OUNFNTdGNDk4 NEE3QjMzMjk3NDAwMEMwMDMzNzM0NjI4QTM2QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYyOEEz NkE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkNjZiNjktNzA3YS00ODMwLWEy ZDMtYWY2Y2EwZDE1YmNlLzAvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzcz NDYyOEEzNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrr+d/eqibKEsvF2pCBfw/p3wSiN5/yBnCv 4IFbYjqWpOlbTyowLbNT+xbjtJQifhfBtm81Ijn5M0YEEUaVbphvmPEjar510R32 e91A1K7sI85JzI4BddvADeo5v+zlgeNDD1+HgSjjWr9DzO6vKUVaEgUpkmFz4ccM rXwVEH1wsbn0Ho760D1xtI9BB0dl2XdGrR3ru+E33UNX22Xb0BU159eBIkW5/m4x Jr4E8q7Q6Oq8HwTKs2NLerrtnqraCCNf9wpLxSGovXcqwuzDWG11j37Ka5x1jE6S EaP2FVWch1XEvGP6Bx5NIOkDe9UzuiSciBzxDNNlh8LK9W1MoqQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:07 2026 by rpki-client