$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: J3+TI+N/OZ7d0OI0WWqscxlMidnvZ6OzT3ofyN6DkiY= Subject key identifier: 4A:F1:C0:33:76:E3:E2:69:F5:EC:D9:80:9F:CC:6A:9B:2B:0E:F4:07 Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 62751E2A28FDD0519A7656E5B360FBE5A9354033 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:07:17 +0000 Manifest this update: Thu 23 Jul 2026 14:02:17 +0000 Manifest next update: Fri 24 Jul 2026 15:24:17 +0000 Files and hashes: 1: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) 2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: hoIO3B/kKRZh3dYG1wo8V09QH8ACeHg2ScJTxkTh1DU=) 3: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:75:1e:2a:28:fd:d0:51:9a:76:56:e5:b3:60:fb:e5:a9:35:40:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: Jul 23 14:02:17 2026 GMT Not After : Jul 24 15:24:17 2026 GMT Subject: CN=4AF1C03376E3E269F5ECD9809FCC6A9B2B0EF407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:b4:96:32:79:21:e6:da:a7:41:89:fa:c8: 42:16:77:f7:1e:04:6f:a0:48:69:e2:49:16:4a:d0: 3d:8c:4a:6e:c3:0f:da:28:15:e5:e1:0c:a5:96:51: 11:95:56:7d:bb:23:2e:49:76:b2:4a:09:99:9d:83: 66:5b:9d:fb:74:0f:80:4c:a4:9b:4b:b2:70:ff:43: e4:55:37:44:db:7f:4a:9e:8a:bd:f0:3d:47:40:2f: 08:cf:d0:23:a3:c2:f8:f6:71:ee:13:9a:1a:94:42: 6a:ca:75:7e:15:4e:68:20:4b:ff:e3:e2:2f:c5:cc: 6f:94:55:84:ca:89:74:14:33:99:07:21:ff:55:3a: 96:c2:d7:08:20:8c:04:a6:cf:e7:52:cd:d1:6a:9d: d4:a7:3a:5d:8f:2c:8c:0c:11:8c:81:27:53:cb:5c: 61:ea:1c:48:4a:ef:d4:e8:5b:56:de:fc:93:ff:5a: b7:6e:88:b3:ec:61:cd:22:ab:91:c3:23:0b:66:9d: ca:e1:4c:2c:f7:62:61:a8:96:2e:76:d1:c6:07:6d: 3e:76:68:66:c2:2e:75:00:59:c7:c7:7b:2d:01:ca: f3:46:7d:fa:d1:9a:72:19:33:b9:67:7e:5f:01:27: d0:74:7a:2f:b0:90:dc:4f:25:bf:af:08:0a:49:c8: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F1:C0:33:76:E3:E2:69:F5:EC:D9:80:9F:CC:6A:9B:2B:0E:F4:07 X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:30:3e:f1:23:79:c7:2e:26:24:f8:bb:52:11:da:d7:23:9d: ea:1a:24:fd:38:6a:7a:d8:4c:c0:e9:7a:ac:74:ec:6d:5d:f4: c7:2d:47:0d:af:25:f9:6a:f1:e2:6f:3d:0c:86:d3:e5:31:55: 78:66:8b:0d:36:4b:b6:81:ac:6e:3a:98:5c:92:2a:d0:02:d2: 61:77:f9:58:d1:8d:63:4d:0c:33:95:93:b5:59:0c:69:18:e9: f5:a2:d4:dc:fb:cb:0e:c5:71:0b:a6:b0:b0:f6:aa:74:e9:15: 67:5c:e7:3e:1d:07:87:7c:50:e6:91:d7:71:e7:c5:11:91:c0: f9:29:4e:d7:df:65:2b:13:d3:de:23:34:b4:7c:0f:6e:34:d9: ed:56:7b:1e:20:8b:9f:1b:ee:e1:ff:d6:ff:5c:6b:64:3f:05: 66:65:1b:55:6d:d2:77:d1:ff:16:5b:c9:9d:94:42:80:35:c2: 60:fb:30:2a:40:4d:12:ce:74:b1:ad:1d:3c:07:f4:3f:e3:b8: fe:f5:95:20:2b:c9:18:f3:42:70:26:03:4d:54:89:bf:bc:f6: 64:d3:7c:14:86:48:75:5b:f7:46:92:5b:77:19:5a:07:01:4c: d3:04:9e:c3:c0:df:a1:dc:82:7e:f9:6f:90:43:f3:a1:a2:6a: 27:22:c9:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnUeKij90FGadlbls2D75ak1QDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA3MjMxNDAyMTdaFw0yNjA3MjQxNTI0MTdaMDMxMTAvBgNV BAMTKDRBRjFDMDMzNzZFM0UyNjlGNUVDRDk4MDlGQ0M2QTlCMkIwRUY0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTHLSWMnkh5tqnQYn6yEIWd/ce BG+gSGniSRZK0D2MSm7DD9ooFeXhDKWWURGVVn27Iy5JdrJKCZmdg2Zbnft0D4BM pJtLsnD/Q+RVN0Tbf0qeir3wPUdALwjP0COjwvj2ce4TmhqUQmrKdX4VTmggS//j 4i/FzG+UVYTKiXQUM5kHIf9VOpbC1wggjASmz+dSzdFqndSnOl2PLIwMEYyBJ1PL XGHqHEhK79ToW1be/JP/WrduiLPsYc0iq5HDIwtmncrhTCz3YmGoli520cYHbT52 aGbCLnUAWcfHey0ByvNGffrRmnIZM7lnfl8BJ9B0ei+wkNxPJb+vCApJyBBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSvHAM3bj4mn17NmAn8xqmysO9AcwHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcwPvEjeccuJiT4u1IR2tcjneoaJP04anrY TMDpeqx07G1d9MctRw2vJflq8eJvPQyG0+UxVXhmiw02S7aBrG46mFySKtAC0mF3 +VjRjWNNDDOVk7VZDGkY6fWi1Nz7yw7FcQumsLD2qnTpFWdc5z4dB4d8UOaR13Hn xRGRwPkpTtffZSsT094jNLR8D2402e1Wex4gi58b7uH/1v9ca2Q/BWZlG1Vt0nfR /xZbyZ2UQoA1wmD7MCpATRLOdLGtHTwH9D/juP71lSAryRjzQnAmA01Uib+89mTT fBSGSHVb90aSW3cZWgcBTNMEnsPA36Hcgn75b5BD86GiaiciyQs= -----END CERTIFICATE-----Generated at Fri Jul 24 08:23:39 2026 by rpki-client