$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json) Hash identifier: 54WLh+if8LIbSI8Ie54yLpS8szQK1MImo8+ipOEv6B0= Subject key identifier: 8D:B5:AA:5E:19:93:71:43:16:58:C3:A3:AC:50:E2:97:48:A1:5D:5F Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Certificate serial: 1B74F3569D47A665ECF45A60BD8B3B1870782AED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:39 +0000 Manifest this update: Tue 12 May 2026 19:56:39 +0000 Manifest next update: Wed 13 May 2026 20:06:39 +0000 Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=) 2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: wA1sY++oQJ9Q9K8ZU4pLrA0hewhUTwiAB8ZhRupRR7U=) 3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:74:f3:56:9d:47:a6:65:ec:f4:5a:60:bd:8b:3b:18:70:78:2a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200 Validity Not Before: May 12 19:56:39 2026 GMT Not After : May 13 20:06:39 2026 GMT Subject: CN=8DB5AA5E199371431658C3A3AC50E29748A15D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2f:ca:a9:be:a5:cc:e5:49:6a:b2:8a:4f:02: 34:df:34:0b:a6:00:51:10:a3:67:a7:87:b6:6d:dd: 90:86:1c:92:0a:54:13:b8:d4:45:af:4c:fc:bd:89: a8:d3:cf:ce:b5:92:37:1f:76:51:63:97:60:47:6e: 93:fa:2c:5f:9d:d2:cc:9a:30:39:3d:e2:81:d0:89: 4c:3f:cb:72:b4:4d:06:0c:f0:a1:0c:1b:5b:e2:6e: 3e:ae:a9:0e:d2:87:60:ee:a7:88:ae:22:77:d6:55: 13:50:9f:7a:f3:60:69:7b:ef:cd:4c:9d:63:96:45: 17:d2:a4:e1:d1:91:18:97:8f:fe:0c:fd:99:b1:2a: 4c:0c:a5:5e:68:f6:3a:b3:1d:0d:33:61:b4:75:36: 18:87:ed:52:49:15:70:87:0d:49:ab:3e:e6:76:d5: 09:93:0a:29:3c:6f:5f:43:05:9b:24:7a:06:91:12: a1:33:b6:0d:69:64:00:87:12:2b:c4:5e:48:01:33: 6d:c4:90:64:05:64:10:88:2e:dd:5e:1b:b4:f8:b7: 3b:e4:e1:11:68:51:60:d1:b4:2a:1c:e7:04:7c:42: aa:1f:55:4b:24:7a:3e:fc:4e:2b:3d:b8:62:f3:c3: 56:d8:ac:c3:9e:8c:d9:84:d5:3b:7d:6e:d3:09:53: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B5:AA:5E:19:93:71:43:16:58:C3:A3:AC:50:E2:97:48:A1:5D:5F X509v3 Authority Key Identifier: keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:e5:94:d3:99:d4:d7:3c:7f:c1:0e:48:2f:2b:91:d9:37: b0:7a:9a:ca:e9:6d:db:e7:05:0d:81:d5:1b:24:83:86:20:3b: f6:d2:58:1e:30:48:ca:b0:76:23:c6:f2:1a:5a:c0:59:78:a5: ba:c0:a8:98:cc:e1:e7:10:be:c6:aa:80:16:a7:ce:23:f8:91: cf:2d:fa:25:73:a3:a5:70:e4:9f:f2:cb:c8:0d:6f:69:e3:69: 3d:54:b7:e3:24:ed:8e:43:9a:12:a8:6c:b0:3e:ae:0f:ab:e2: 2a:3e:5e:7b:d8:33:19:e8:a4:54:9c:bd:ef:5c:a6:5c:79:89: d7:fd:51:1d:8b:43:b4:b6:16:81:b4:ba:90:e5:86:7b:fb:1c: 38:c2:c0:5c:0b:1d:30:d6:aa:05:3d:7a:59:d7:d5:9c:68:48: 70:38:db:e3:3f:fd:22:49:4e:ac:43:5d:7e:6b:93:ac:23:bb: 9d:13:98:c3:b7:09:4e:f7:48:f7:4d:2c:8a:16:19:00:26:c1: 35:5e:9b:bb:99:09:55:5d:d1:6a:ca:75:52:77:5f:5b:f4:10: 01:c7:34:58:30:e0:fb:fa:5e:f7:37:54:29:8a:c8:ca:61:b2: c0:04:07:21:f8:45:74:e7:89:95:a7:4b:d0:a3:e2:37:99:89: e5:e5:5e:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3TzVp1HpmXs9FpgvYs7GHB4Ku0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDky QkE0QzIwMDAeFw0yNjA1MTIxOTU2MzlaFw0yNjA1MTMyMDA2MzlaMDMxMTAvBgNV BAMTKDhEQjVBQTVFMTk5MzcxNDMxNjU4QzNBM0FDNTBFMjk3NDhBMTVENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0L8qpvqXM5UlqsopPAjTfNAum AFEQo2enh7Zt3ZCGHJIKVBO41EWvTPy9iajTz861kjcfdlFjl2BHbpP6LF+d0sya MDk94oHQiUw/y3K0TQYM8KEMG1vibj6uqQ7Sh2Dup4iuInfWVRNQn3rzYGl7781M nWOWRRfSpOHRkRiXj/4M/ZmxKkwMpV5o9jqzHQ0zYbR1NhiH7VJJFXCHDUmrPuZ2 1QmTCik8b19DBZskegaREqEztg1pZACHEivEXkgBM23EkGQFZBCILt1eG7T4tzvk 4RFoUWDRtCoc5wR8QqofVUskej78Tis9uGLzw1bYrMOejNmE1Tt9btMJU7sDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjbWqXhmTcUMWWMOjrFDil0ihXV8wHwYDVR0j BBgwFoAUtpqY8pfFodS1b6/ElJBrSSukwgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0MDZjZGItMTc5MS00NzhkLTlkMjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5 N0M1QTFENEI1NkZBRkM0OTQ5MDZCNDkyQkE0QzIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjlBOThGMjk3QzVBMUQ0QjU2RkFGQzQ5NDkwNkI0OTJCQTRD MjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvQjY5QTk4RjI5N0M1QTFENEI1NkZBRkM0OTQ5MDZC NDkyQkE0QzIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpg5ZTTmdTXPH/BDkgvK5HZN7B6msrpbdvn BQ2B1Rskg4YgO/bSWB4wSMqwdiPG8hpawFl4pbrAqJjM4ecQvsaqgBanziP4kc8t +iVzo6Vw5J/yy8gNb2njaT1Ut+Mk7Y5DmhKobLA+rg+r4io+XnvYMxnopFScve9c plx5idf9UR2LQ7S2FoG0upDlhnv7HDjCwFwLHTDWqgU9elnX1ZxoSHA42+M//SJJ TqxDXX5rk6wju50TmMO3CU73SPdNLIoWGQAmwTVem7uZCVVd0WrKdVJ3X1v0EAHH NFgw4Pv6Xvc3VCmKyMphssAEByH4RXTniZWnS9Cj4jeZieXlXsA= -----END CERTIFICATE-----Generated at Wed May 13 04:03:16 2026 by rpki-client