$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft File: 6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft (raw, json) Hash identifier: 4PNkjOJzkCvwTE4t5k4MzX31/ldO9zPdkU4ij6IEZeA= Subject key identifier: 06:2E:93:E7:FD:1E:95:2B:C6:E7:52:B0:D5:2A:DC:07:F2:BC:FC:0E Authority key identifier: 6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD Certificate issuer: /CN=6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD Certificate serial: 5DFAE55D53B30BA0C3360A2D7CEBC4ABC83884F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft Manifest number: BE Signing time: Mon 21 Sep 2026 01:58:58 +0000 Manifest this update: Mon 21 Sep 2026 01:53:58 +0000 Manifest next update: Tue 22 Sep 2026 04:44:58 +0000 Files and hashes: 1: 3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa (hash: eGIvYDK8j1a468VtNW5nDUnb23Eu4VoycgMpA7/Jmsk=) 2: 6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl (hash: j5L3K1ze0OlhtstHFtX8jkq3EnizxxkhHLwpFuloxas=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fa:e5:5d:53:b3:0b:a0:c3:36:0a:2d:7c:eb:c4:ab:c8:38:84:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD Validity Not Before: Sep 21 01:53:58 2026 GMT Not After : Sep 22 04:44:58 2026 GMT Subject: CN=062E93E7FD1E952BC6E752B0D52ADC07F2BCFC0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:a5:12:1b:72:1a:05:93:b2:f9:4f:2d:b2: 03:ec:d0:09:1b:64:a5:11:a9:9a:07:4e:dc:f8:b9: fc:68:0a:f6:9c:75:7a:1c:cb:96:4d:b1:7d:60:2e: 0b:92:cc:44:6c:84:dd:07:67:22:ea:3b:bf:2e:b5: 04:1f:bb:72:ad:b8:3b:fc:d4:37:8a:23:42:16:73: fb:34:cc:50:7f:c4:c9:84:2f:e3:14:30:23:85:83: b2:b1:b4:ce:c1:b7:6f:a5:fc:83:ec:b7:a0:f2:f9: 4d:6c:83:6b:73:85:dc:b9:3a:53:eb:46:91:74:43: c7:98:2c:8f:78:b5:c1:de:9e:f1:a2:92:94:57:f1: ef:5a:32:6d:09:7e:e7:e7:47:6a:f6:50:5f:03:54: 0d:b7:16:15:de:40:a8:29:c1:00:b4:14:e0:95:75: 82:ec:d2:0a:42:1f:8d:9f:57:ec:f0:03:d5:f8:f7: a7:c0:fb:b2:fc:b1:e4:aa:f3:76:c3:ad:bf:64:e8: a2:05:34:9d:f3:69:c1:90:47:0b:55:ad:dc:5d:79: 2e:d2:bd:14:19:91:f5:85:92:55:82:5a:1c:01:37: 5c:bb:a5:64:d7:4b:f3:3d:fa:04:f0:b2:9b:61:53: 8a:ac:06:0e:43:7d:dc:4d:7f:36:cb:e1:d5:a6:2b: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2E:93:E7:FD:1E:95:2B:C6:E7:52:B0:D5:2A:DC:07:F2:BC:FC:0E X509v3 Authority Key Identifier: keyid:6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:11:81:46:1a:cf:51:e7:42:0f:1d:20:90:f1:16:5c:84:47: ff:6f:dc:08:89:85:5f:4c:33:f5:b7:ef:b1:0d:50:a0:59:15: 3d:41:2c:6d:84:91:87:a2:0d:01:1a:b7:d8:a0:3f:f2:43:fc: fa:a5:65:9d:df:4f:53:92:6f:fc:1b:86:32:06:f7:38:af:73: 42:5e:0f:66:60:01:a6:22:73:02:ff:ee:72:ce:bd:f3:ac:c0: d8:61:54:1f:00:52:13:0a:07:c8:2c:62:34:fb:f5:42:e7:58: f7:ae:87:22:6d:93:af:2e:4c:50:1a:78:ce:27:ec:76:ef:75: cd:44:2b:24:4f:90:c9:c9:b0:62:52:68:48:72:c9:fb:38:d7: 3b:47:43:ed:c0:ee:1a:f1:f2:1c:77:80:31:58:a7:f7:4f:55: ad:34:e0:cf:81:77:9c:57:d8:5a:19:1c:1b:f0:bf:f3:24:66: 98:ac:20:03:0a:fc:8e:8f:9f:08:c6:77:49:88:0d:f5:ba:d8: d4:fe:c9:77:21:cb:6a:aa:5e:5d:49:77:22:bd:24:62:c0:fb: d0:e6:4d:ba:87:fa:06:4d:75:9b:93:29:1c:3b:62:a6:9e:30: a4:92:9c:6a:09:f6:e5:62:bc:10:a9:c8:7f:5f:d1:0e:e2:a2: 2c:bb:02:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfrlXVOzC6DDNgotfOvEq8g4hPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY1MkI2RjU3QzhBNDFDOEQ0NzI5QTMyMTNBQ0E4Q0Q3 RjZGNDFGRDAeFw0yNjA5MjEwMTUzNThaFw0yNjA5MjIwNDQ0NThaMDMxMTAvBgNV BAMTKDA2MkU5M0U3RkQxRTk1MkJDNkU3NTJCMEQ1MkFEQzA3RjJCQ0ZDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ56USG3IaBZOy+U8tsgPs0Akb ZKURqZoHTtz4ufxoCvacdXocy5ZNsX1gLguSzERshN0HZyLqO78utQQfu3KtuDv8 1DeKI0IWc/s0zFB/xMmEL+MUMCOFg7KxtM7Bt2+l/IPst6Dy+U1sg2tzhdy5OlPr RpF0Q8eYLI94tcHenvGikpRX8e9aMm0JfufnR2r2UF8DVA23FhXeQKgpwQC0FOCV dYLs0gpCH42fV+zwA9X496fA+7L8seSq83bDrb9k6KIFNJ3zacGQRwtVrdxdeS7S vRQZkfWFklWCWhwBN1y7pWTXS/M9+gTwspthU4qsBg5DfdxNfzbL4dWmK26/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBi6T5/0elSvG51Kw1SrcB/K8/A4wHwYDVR0j BBgwFoAUb1K29XyKQcjUcpoyE6yozX9vQf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzEvNkY1MkI2RjU3 QzhBNDFDOEQ0NzI5QTMyMTNBQ0E4Q0Q3RjZGNDFGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjUyQjZGNTdDOEE0MUM4RDQ3MjlBMzIxM0FDQThDRDdGNkY0 MUZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzEvNkY1MkI2RjU3QzhBNDFDOEQ0NzI5QTMyMTNBQ0E4 Q0Q3RjZGNDFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABARgUYaz1HnQg8dIJDxFlyER/9v3AiJhV9M M/W377ENUKBZFT1BLG2EkYeiDQEat9igP/JD/PqlZZ3fT1OSb/wbhjIG9zivc0Je D2ZgAaYicwL/7nLOvfOswNhhVB8AUhMKB8gsYjT79ULnWPeuhyJtk68uTFAaeM4n 7Hbvdc1EKyRPkMnJsGJSaEhyyfs41ztHQ+3A7hrx8hx3gDFYp/dPVa004M+Bd5xX 2FoZHBvwv/MkZpisIAMK/I6PnwjGd0mIDfW62NT+yXchy2qqXl1JdyK9JGLA+9Dm TbqH+gZNdZuTKRw7YqaeMKSSnGoJ9uVivBCpyH9f0Q7ioiy7AuE= -----END CERTIFICATE-----Generated at Mon Sep 21 09:59:04 2026 by rpki-client