$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json) Hash identifier: nHrcVJy7i/mALWnCFf8AXDG4vHrxri5mtUUbBM4//sE= Subject key identifier: B1:8D:00:0B:75:47:C3:1D:CA:BA:F7:52:A0:66:D3:56:71:DB:0C:11 Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Certificate serial: 4F08AA0D80D772C9FD3468F1406BBCB6B76FEE97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:56:30 +0000 Manifest this update: Mon 21 Sep 2026 07:51:30 +0000 Manifest next update: Tue 22 Sep 2026 08:19:30 +0000 Files and hashes: 1: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=) 2: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=) 3: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=) 4: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=) 5: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: 1GA09ELb0Uo9Im3Fa540MiOaRv97/dR8T4fwVv8v1SQ=) 6: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:08:aa:0d:80:d7:72:c9:fd:34:68:f1:40:6b:bc:b6:b7:6f:ee:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Validity Not Before: Sep 21 07:51:30 2026 GMT Not After : Sep 22 08:19:30 2026 GMT Subject: CN=B18D000B7547C31DCABAF752A066D35671DB0C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:26:dc:a3:41:fe:80:bd:1e:fd:5f:33:bc: a1:cd:6c:da:76:c9:b4:16:8b:71:97:37:33:79:b0: 26:30:63:e8:9f:37:ee:5b:fa:fd:7f:a9:6e:14:12: b1:42:68:a7:ec:7c:b6:b0:30:be:3f:1b:db:56:aa: 46:95:74:85:f5:60:5d:c0:38:31:21:9c:e9:00:39: f1:ef:58:73:e6:98:e2:b3:ae:4d:54:0c:8f:97:18: f9:c6:ec:a4:ea:07:d0:10:2a:a6:ce:9a:af:b3:e1: be:88:e1:ca:08:94:49:c0:ae:59:53:39:0b:54:cf: 0c:e3:2b:07:29:7d:12:5e:5f:6c:7e:11:06:81:a8: 37:fd:5c:37:b9:e8:ea:b0:4c:0e:b0:f5:34:c0:fc: 7b:0c:ee:b7:35:d2:90:56:1b:ef:40:0f:b6:32:e7: 2d:ac:ce:57:76:1b:76:80:ac:26:6e:1e:2c:d9:e4: 71:3b:89:57:7e:0f:0e:b0:af:9d:5c:00:58:5e:7a: 9a:02:22:e4:37:55:4b:c4:64:ef:c1:61:bd:f0:84: 88:c0:9d:2f:e0:47:9d:c3:7d:56:1f:d8:37:91:cf: ee:4f:4c:58:ad:c7:64:d5:f9:15:ef:ac:1f:39:75: c7:c8:a8:4d:3e:49:2b:80:10:55:bc:3c:27:50:30: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8D:00:0B:75:47:C3:1D:CA:BA:F7:52:A0:66:D3:56:71:DB:0C:11 X509v3 Authority Key Identifier: keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:94:56:e1:d0:7e:37:f0:23:ad:e5:a8:3f:18:db:53:65:3a: 8c:75:2f:cc:a2:d6:6e:65:7b:b8:e3:1b:df:43:b2:2d:21:d5: a2:47:1f:3d:a7:35:a4:d3:fb:4c:34:56:f4:c5:b2:cb:ae:96: fa:7b:7b:ac:fb:72:6e:76:53:7c:10:0b:ca:39:ae:30:e4:9b: 21:6d:c4:ff:85:6f:16:17:1a:6e:2a:04:d8:01:0a:d5:6e:37: c7:cb:3b:39:73:73:12:fa:68:7c:b4:36:1c:9c:b1:f7:91:dd: 76:29:f0:f4:99:7a:6a:bf:63:3e:05:27:0b:d6:57:66:da:87: d9:69:d3:88:f0:e5:91:d1:06:35:0e:bf:2e:66:bc:1f:df:da: 81:ad:73:7a:f6:d0:df:f1:e5:21:57:eb:56:46:92:7f:e6:b4: 60:79:02:12:1e:24:f8:5d:94:75:af:85:52:96:e2:16:16:d4: 1f:df:5b:f9:22:c0:ca:82:8f:f0:e5:02:cc:a0:f1:41:aa:ce: 2b:78:ef:be:8c:23:ac:33:9e:1e:e2:89:e4:e1:40:76:4e:da: a8:02:dd:b4:24:f8:63:3a:f0:ab:7d:ef:3f:55:99:a6:2b:e6: c8:a1:d2:e2:48:e4:10:fd:6c:1d:92:dc:64:96:d9:f9:db:2b: c0:27:05:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwiqDYDXcsn9NGjxQGu8trdv7pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQxQUQw NEFERjE3OTAeFw0yNjA5MjEwNzUxMzBaFw0yNjA5MjIwODE5MzBaMDMxMTAvBgNV BAMTKEIxOEQwMDBCNzU0N0MzMURDQUJBRjc1MkEwNjZEMzU2NzFEQjBDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCSbco0H+gL0e/V8zvKHNbNp2 ybQWi3GXNzN5sCYwY+ifN+5b+v1/qW4UErFCaKfsfLawML4/G9tWqkaVdIX1YF3A ODEhnOkAOfHvWHPmmOKzrk1UDI+XGPnG7KTqB9AQKqbOmq+z4b6I4coIlEnArllT OQtUzwzjKwcpfRJeX2x+EQaBqDf9XDe56OqwTA6w9TTA/HsM7rc10pBWG+9AD7Yy 5y2szld2G3aArCZuHizZ5HE7iVd+Dw6wr51cAFheepoCIuQ3VUvEZO/BYb3whIjA nS/gR53DfVYf2DeRz+5PTFitx2TV+RXvrB85dcfIqE0+SSuAEFW8PCdQMAppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsY0AC3VHwx3KuvdSoGbTVnHbDBEwHwYDVR0j BBgwFoAU2226NGqPgj6mI/1RYE3RrQSt8XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwY2U3MzMtNzdmNC00ZTFkLWI1ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2 QThGODIzRUE2MjNGRDUxNjA0REQxQUQwNEFERjE3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjZEQkEzNDZBOEY4MjNFQTYyM0ZENTE2MDRERDFBRDA0QURG MTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQx QUQwNEFERjE3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeUVuHQfjfwI63lqD8Y21NlOox1L8yi1m5l e7jjG99Dsi0h1aJHHz2nNaTT+0w0VvTFssuulvp7e6z7cm52U3wQC8o5rjDkmyFt xP+FbxYXGm4qBNgBCtVuN8fLOzlzcxL6aHy0NhycsfeR3XYp8PSZemq/Yz4FJwvW V2bah9lp04jw5ZHRBjUOvy5mvB/f2oGtc3r20N/x5SFX61ZGkn/mtGB5AhIeJPhd lHWvhVKW4hYW1B/fW/kiwMqCj/DlAsyg8UGqzit4776MI6wznh7iieThQHZO2qgC 3bQk+GM68Kt97z9VmaYr5sih0uJI5BD9bB2S3GSW2fnbK8AnBYk= -----END CERTIFICATE-----Generated at Mon Sep 21 12:17:20 2026 by rpki-client