$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: jlkdnowAToFHf0Tw4walgEWk/AgUS0Ut9XVWvvV1uAI= Subject key identifier: 79:76:46:0D:7C:7C:95:94:26:74:CD:18:EC:5B:38:B6:D4:43:12:75 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 263E353DF7D62C6FE00A1BCBB749D389244DE645 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 0246 Signing time: Wed 25 Mar 2026 16:02:00 +0000 Manifest this update: Wed 25 Mar 2026 15:57:00 +0000 Manifest next update: Sat 28 Mar 2026 21:24:00 +0000 Files and hashes: 1: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) 2: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) 3: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: eNqIvACUDO4BwIABwsyNEqU2udbOVOhxSSovdZmU2Wg=) 4: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3e:35:3d:f7:d6:2c:6f:e0:0a:1b:cb:b7:49:d3:89:24:4d:e6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Mar 25 15:57:00 2026 GMT Not After : Mar 28 21:24:00 2026 GMT Subject: CN=7976460D7C7C95942674CD18EC5B38B6D4431275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:0d:92:68:15:0c:99:5b:2f:68:05:f5:1b: 34:5b:4c:50:0f:be:69:12:9d:30:3a:d7:2d:7c:50: 54:46:51:46:4c:02:dc:a7:c2:97:c3:ee:91:f9:15: a5:df:28:86:6c:56:7c:9b:0d:f7:d8:5b:6e:c8:d7: 98:5a:12:cf:b7:5b:5e:54:1a:41:47:1b:ec:26:c1: a0:ac:6a:df:5c:b4:6e:db:1b:ce:83:83:2b:08:23: a1:45:cc:f7:36:4c:9f:aa:df:3b:c9:6a:a2:5a:0f: e4:91:22:dd:02:bd:97:e2:98:8d:a5:de:fa:fd:84: fe:7a:3e:5a:42:d5:3f:ff:71:93:f4:e4:08:f5:b7: 3b:c2:e4:d5:74:2d:77:0d:be:4a:fe:4c:37:5c:11: 19:38:18:cf:4e:10:c2:70:22:d0:ff:54:62:40:a4: f9:3f:cb:a5:c0:a2:07:1d:f5:1c:68:36:0f:c4:c3: 13:d0:07:28:20:0b:ea:a8:1e:0e:32:41:e7:6b:ca: eb:b3:b4:84:38:1d:19:a7:f4:3f:34:bd:78:ff:1e: f5:15:e2:74:b2:88:50:a7:6f:27:bb:c8:45:f9:9e: 0c:9e:46:f1:2d:5a:e7:da:2e:e5:c0:52:ea:2c:05: 14:08:50:ae:13:08:13:4a:33:14:ac:e1:8f:f6:86: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:46:0D:7C:7C:95:94:26:74:CD:18:EC:5B:38:B6:D4:43:12:75 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f2:35:be:a8:39:c6:8d:f0:cc:3f:ac:02:0b:11:68:3c:58: 97:78:d6:75:61:56:91:b4:23:f3:a0:7c:27:7f:aa:39:21:f1: 10:24:70:89:91:47:3d:a8:cd:35:ff:a3:3a:cc:84:c1:eb:4c: 6a:db:be:63:d1:a6:bb:b2:66:46:1b:6f:31:c4:f2:7f:06:6b: 71:e0:57:d9:51:e2:52:ef:77:73:c2:34:de:ae:50:57:20:3e: db:3b:97:a3:e2:d6:c0:bb:2c:03:74:94:4c:87:d8:2c:e1:af: 7d:e3:73:2a:91:06:96:a5:3c:58:3c:10:a4:fc:9a:c1:f7:35: a6:d4:b4:04:14:b5:b7:82:ad:f6:4c:0a:4c:0b:55:37:09:c7: 97:08:4c:bd:24:28:06:35:96:c1:a2:e0:dd:3f:f4:bf:ec:97: 7e:80:83:e9:85:09:68:a4:a2:a6:a2:82:0c:01:ab:61:85:4e: 13:44:de:5f:96:d5:03:df:67:6e:4b:15:0c:12:97:4a:08:36: 57:1d:9b:57:58:3c:75:8b:38:81:2e:20:df:54:47:d0:a7:ad: 7f:b2:c8:e5:4d:46:2f:a5:79:ae:51:d3:0d:82:8d:ee:17:8d: de:d5:71:76:f9:0b:da:f4:48:cd:56:ac:06:b0:3c:94:22:6a: 14:23:cf:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJj41PffWLG/gChvLt0nTiSRN5kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNjAzMjUxNTU3MDBaFw0yNjAzMjgyMTI0MDBaMDMxMTAvBgNV BAMTKDc5NzY0NjBEN0M3Qzk1OTQyNjc0Q0QxOEVDNUIzOEI2RDQ0MzEyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwA2SaBUMmVsvaAX1GzRbTFAP vmkSnTA61y18UFRGUUZMAtynwpfD7pH5FaXfKIZsVnybDffYW27I15haEs+3W15U GkFHG+wmwaCsat9ctG7bG86DgysII6FFzPc2TJ+q3zvJaqJaD+SRIt0CvZfimI2l 3vr9hP56PlpC1T//cZP05Aj1tzvC5NV0LXcNvkr+TDdcERk4GM9OEMJwItD/VGJA pPk/y6XAogcd9RxoNg/EwxPQByggC+qoHg4yQedryuuztIQ4HRmn9D80vXj/HvUV 4nSyiFCnbye7yEX5ngyeRvEtWufaLuXAUuosBRQIUK4TCBNKMxSs4Y/2huSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeXZGDXx8lZQmdM0Y7Fs4ttRDEnUwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbyNb6oOcaN8Mw/rAILEWg8WJd41nVhVpG0 I/OgfCd/qjkh8RAkcImRRz2ozTX/ozrMhMHrTGrbvmPRpruyZkYbbzHE8n8Ga3Hg V9lR4lLvd3PCNN6uUFcgPts7l6Pi1sC7LAN0lEyH2Czhr33jcyqRBpalPFg8EKT8 msH3NabUtAQUtbeCrfZMCkwLVTcJx5cITL0kKAY1lsGi4N0/9L/sl36Ag+mFCWik oqaiggwBq2GFThNE3l+W1QPfZ25LFQwSl0oINlcdm1dYPHWLOIEuIN9UR9CnrX+y yOVNRi+lea5R0w2Cje4Xjd7VcXb5C9r0SM1WrAawPJQiahQjzws= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:40 2026 by rpki-client