$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: jU5c+fI43GJWBDpg4yvyKSiSmI2ncN6uIDpNA/zMIRQ= Subject key identifier: F6:26:AF:A8:70:5E:88:1E:F7:29:58:FD:B5:15:F9:B4:6B:DC:9E:65 Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 03FFFD6FECF3ABB475FF4E9DD0A1C15A5F5431CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:09:08 +0000 Manifest this update: Mon 21 Sep 2026 22:04:08 +0000 Manifest next update: Tue 22 Sep 2026 22:09:08 +0000 Files and hashes: 1: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: FecpNnsSN1on0GeOm2HmCGRwA0ko4zx9lhWQE4Q8l60=) 2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ff:fd:6f:ec:f3:ab:b4:75:ff:4e:9d:d0:a1:c1:5a:5f:54:31:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: Sep 21 22:04:08 2026 GMT Not After : Sep 22 22:09:08 2026 GMT Subject: CN=F626AFA8705E881EF72958FDB515F9B46BDC9E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:48:2c:69:9e:8f:ca:3b:88:d2:e6:67:82: 6d:0c:7e:e2:96:9d:7e:5b:f7:dc:7c:13:b9:fd:01: 67:f7:99:f8:75:97:26:0c:77:13:39:8c:89:46:d0: 38:54:0f:70:81:dc:d6:0d:39:62:95:15:ba:1c:f1: 92:0b:d0:ac:93:cf:72:11:1b:e4:83:38:a2:7e:c1: 22:4b:5c:3e:3d:08:5e:df:e1:4a:b4:36:51:aa:a7: 9e:5e:bf:0b:f6:60:b8:71:49:59:a6:75:9f:8f:6e: a1:c3:8a:e8:6a:46:eb:23:0a:9b:8e:cc:b3:76:0f: 51:e8:82:2c:9c:fb:94:16:14:e2:04:71:30:72:0f: 51:cd:00:25:ee:d7:94:7e:9f:30:e8:78:3c:85:fd: eb:e8:3a:0e:1a:f3:db:02:a6:8e:bc:5c:04:cf:c3: 64:0b:d2:1c:87:50:5c:83:d3:ed:9d:af:6b:99:b0: e7:93:54:bf:75:7a:34:bf:c4:09:0d:29:d1:12:f5: 02:24:a2:40:3a:19:60:21:7f:18:40:9d:bd:52:f1: 22:48:b2:fa:bd:ab:4e:0c:69:f0:a4:5c:38:22:3d: 40:d8:ce:42:19:e6:76:e1:ff:86:6d:16:78:5e:52: 7a:76:9a:55:44:7c:a4:1a:7f:5f:2b:d0:9a:18:ce: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:26:AF:A8:70:5E:88:1E:F7:29:58:FD:B5:15:F9:B4:6B:DC:9E:65 X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:44:cf:7f:b2:53:db:80:40:a3:58:c1:85:9a:b5:40:33: cf:06:c7:56:e4:e7:55:4f:3e:f5:21:b1:58:79:d0:39:1a:bd: 52:ac:0e:47:4a:0a:03:a7:2c:75:fa:7a:25:d9:a4:29:bc:a0: 40:5a:61:60:13:39:3a:ba:89:73:0f:b5:6f:e4:14:ec:18:33: bf:c6:f8:32:79:ea:b7:39:f2:61:ae:d8:b4:bc:36:89:ef:ee: 7c:b8:20:c5:fd:16:a5:45:6b:3e:14:ed:8b:bb:8f:39:ac:52: f3:76:35:57:84:f7:13:39:a5:95:d9:ec:dc:ba:13:dc:9e:18: 47:8a:66:0f:0e:45:a3:4b:a7:9c:cc:67:3e:15:97:df:d8:f4: 7b:f3:a0:0d:ff:76:20:7b:b3:29:35:4a:04:0c:8c:10:e0:cb: fa:d3:80:5a:a5:6b:86:90:80:2c:d8:db:2d:58:f0:69:bd:db: 33:57:42:8e:99:f4:9e:39:17:94:cc:27:a9:56:44:29:b8:39: 1e:8d:a1:e9:7d:d5:dd:bd:49:78:59:16:91:f8:54:0d:df:8a: 07:0d:0d:08:0e:13:d6:84:79:b0:8f:9b:03:8c:ac:54:50:2f: b4:78:e0:a3:5e:d5:ed:b3:54:b9:5f:08:74:64:07:bc:79:de: 92:8c:af:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA//9b+zzq7R1/06d0KHBWl9UMc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjA5MjEyMjA0MDhaFw0yNjA5MjIyMjA5MDhaMDMxMTAvBgNV BAMTKEY2MjZBRkE4NzA1RTg4MUVGNzI5NThGREI1MTVGOUI0NkJEQzlFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJg0gsaZ6PyjuI0uZngm0MfuKW nX5b99x8E7n9AWf3mfh1lyYMdxM5jIlG0DhUD3CB3NYNOWKVFboc8ZIL0KyTz3IR G+SDOKJ+wSJLXD49CF7f4Uq0NlGqp55evwv2YLhxSVmmdZ+PbqHDiuhqRusjCpuO zLN2D1Hogiyc+5QWFOIEcTByD1HNACXu15R+nzDoeDyF/evoOg4a89sCpo68XATP w2QL0hyHUFyD0+2dr2uZsOeTVL91ejS/xAkNKdES9QIkokA6GWAhfxhAnb1S8SJI svq9q04MafCkXDgiPUDYzkIZ5nbh/4ZtFnheUnp2mlVEfKQaf18r0JoYzqmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9iavqHBeiB73KVj9tRX5tGvcnmUwHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpLRM9/slPbgECjWMGFmrVAM88Gx1bk51VP PvUhsVh50DkavVKsDkdKCgOnLHX6eiXZpCm8oEBaYWATOTq6iXMPtW/kFOwYM7/G +DJ56rc58mGu2LS8Nonv7ny4IMX9FqVFaz4U7Yu7jzmsUvN2NVeE9xM5pZXZ7Ny6 E9yeGEeKZg8ORaNLp5zMZz4Vl9/Y9HvzoA3/diB7syk1SgQMjBDgy/rTgFqla4aQ gCzY2y1Y8Gm92zNXQo6Z9J45F5TMJ6lWRCm4OR6Noel91d29SXhZFpH4VA3figcN DQgOE9aEebCPmwOMrFRQL7R44KNe1e2zVLlfCHRkB7x53pKMrwc= -----END CERTIFICATE-----Generated at Tue Sep 22 07:11:20 2026 by rpki-client