$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: AmtDZ22rpZUKRNkgHKnXQIvq776HVi8/XOtvte0YkUI= Subject key identifier: 41:AC:3D:BD:7D:0C:9F:57:F0:F1:45:73:25:A9:8D:EE:72:29:42:5A Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 3F6613382175BD70313AE97D8F7A4611C2219571 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: 010E Signing time: Wed 25 Mar 2026 12:32:16 +0000 Manifest this update: Wed 25 Mar 2026 12:27:16 +0000 Manifest next update: Sat 28 Mar 2026 21:45:16 +0000 Files and hashes: 1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: /dDYkcloSlQBaI5E2wwVlRjXSHasx933jZYEOhkbUWo=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:66:13:38:21:75:bd:70:31:3a:e9:7d:8f:7a:46:11:c2:21:95:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Mar 25 12:27:16 2026 GMT Not After : Mar 28 21:45:16 2026 GMT Subject: CN=41AC3DBD7D0C9F57F0F1457325A98DEE7229425A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:42:dd:3c:72:18:17:70:fa:3d:1c:6e:56: 9b:81:5b:f4:7c:35:75:41:b1:32:97:21:39:3b:64: 00:9e:88:40:d4:11:ba:27:29:c4:40:c4:b1:07:57: ec:65:19:e1:b5:79:34:ed:3b:1e:8c:75:00:ca:24: 9a:67:02:85:c0:bc:82:2a:dd:f0:c5:e9:73:22:97: 45:39:2c:35:5a:4f:b4:77:b1:d3:d2:4b:26:8c:90: ed:f8:df:9b:96:e2:65:a2:ff:bb:dc:d1:4d:e8:a5: bb:7a:07:ff:52:98:19:f6:60:15:39:33:fb:d6:a8: b2:40:7b:8f:38:be:20:3b:c2:46:b3:6e:5d:49:be: 00:d6:86:73:eb:34:11:b4:11:47:a2:26:31:0f:9c: 19:89:aa:b3:cc:7c:66:bd:50:ab:ee:64:e4:89:6b: 68:50:f7:9f:53:86:51:3a:9b:c2:2b:8e:6c:d0:fd: 65:8c:5e:6c:60:6f:75:83:1e:73:98:1a:d8:68:f2: 5b:2f:59:cf:b4:12:a2:c0:d8:19:43:54:1e:d2:c2: 50:7a:35:4c:5b:42:bc:85:df:4e:5c:4f:8d:40:70: f3:ff:a5:3d:f4:d2:65:8f:18:b6:1b:86:63:26:02: 49:8e:36:65:78:a9:b3:8d:9f:3a:8e:b4:12:ff:24: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AC:3D:BD:7D:0C:9F:57:F0:F1:45:73:25:A9:8D:EE:72:29:42:5A X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:82:95:20:a5:35:99:16:cd:99:ce:5f:71:9e:46:e7:2a:f4: b9:a3:13:00:32:36:e1:0f:1c:b0:4f:b6:02:dc:e6:c2:68:40: 33:76:0f:73:a6:bb:f1:f3:a3:3b:df:5a:0b:78:78:2e:3d:b3: de:20:92:a3:b2:4b:78:d2:99:94:ba:ad:48:d7:b7:0a:14:d1: 7d:ff:88:cb:23:e5:6d:83:09:df:c3:02:80:d1:16:7d:41:bb: a5:33:b3:c1:7b:36:e3:f4:96:72:09:38:22:54:a6:60:45:9d: 5b:38:cf:14:0a:e3:a1:67:a7:03:24:da:4e:15:83:8b:a3:df: b4:ac:b8:c4:c3:36:bc:35:e0:ad:cf:fd:f8:8e:fa:d4:77:56: f1:2f:d6:f3:41:e4:7b:56:1c:61:88:52:56:97:f4:67:e4:4e: d0:bb:57:42:46:a7:e2:bf:94:07:27:13:e3:2b:3e:c6:9c:1e: a4:df:fe:02:6c:29:29:44:12:ce:c5:97:1a:19:a7:24:ae:a4: 38:1c:ec:43:99:f4:a4:fe:32:89:89:36:09:47:63:b0:e4:4f: 07:62:af:f0:62:c5:34:a5:4c:82:2c:61:4e:11:74:6b:ec:34: e4:26:61:f0:a3:24:b7:3d:c6:d2:52:47:8a:50:75:5b:cc:0e: 85:a4:b4:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2YTOCF1vXAxOul9j3pGEcIhlXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNjAzMjUxMjI3MTZaFw0yNjAzMjgyMTQ1MTZaMDMxMTAvBgNV BAMTKDQxQUMzREJEN0QwQzlGNTdGMEYxNDU3MzI1QTk4REVFNzIyOTQyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8ELdPHIYF3D6PRxuVpuBW/R8 NXVBsTKXITk7ZACeiEDUEbonKcRAxLEHV+xlGeG1eTTtOx6MdQDKJJpnAoXAvIIq 3fDF6XMil0U5LDVaT7R3sdPSSyaMkO3435uW4mWi/7vc0U3opbt6B/9SmBn2YBU5 M/vWqLJAe484viA7wkazbl1JvgDWhnPrNBG0EUeiJjEPnBmJqrPMfGa9UKvuZOSJ a2hQ959ThlE6m8IrjmzQ/WWMXmxgb3WDHnOYGtho8lsvWc+0EqLA2BlDVB7SwlB6 NUxbQryF305cT41AcPP/pT300mWPGLYbhmMmAkmONmV4qbONnzqOtBL/JP+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQaw9vX0Mn1fw8UVzJamN7nIpQlowHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGClSClNZkWzZnOX3GeRucq9LmjEwAyNuEP HLBPtgLc5sJoQDN2D3Omu/HzozvfWgt4eC49s94gkqOyS3jSmZS6rUjXtwoU0X3/ iMsj5W2DCd/DAoDRFn1Bu6Uzs8F7NuP0lnIJOCJUpmBFnVs4zxQK46FnpwMk2k4V g4uj37SsuMTDNrw14K3P/fiO+tR3VvEv1vNB5HtWHGGIUlaX9GfkTtC7V0JGp+K/ lAcnE+MrPsacHqTf/gJsKSlEEs7FlxoZpySupDgc7EOZ9KT+MomJNglHY7DkTwdi r/BixTSlTIIsYU4RdGvsNOQmYfCjJLc9xtJSR4pQdVvMDoWktPY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:51 2026 by rpki-client