$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft File: 6B995520DD42E2AA6306A898618C472D1D5E4417.mft (raw, json) Hash identifier: HhQ2yrlObf/MT+3YPXCiz6wu+ThJOji5G1J9TBLO11o= Subject key identifier: 3E:31:20:B9:59:41:51:C0:21:7F:35:3B:F6:42:71:E4:C3:D4:23:0B Authority key identifier: 6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 Certificate issuer: /CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Certificate serial: 5C05B157EF2A2F011997BA0424F130C3AEB7620F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:10:28 +0000 Manifest this update: Mon 21 Sep 2026 07:05:28 +0000 Manifest next update: Tue 22 Sep 2026 09:05:28 +0000 Files and hashes: 1: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: RIdJ/cXYXoiLhfv+EGFjwti65Zd3wn1vdkd4IsQmrxo=) 2: 6B995520DD42E2AA6306A898618C472D1D5E4417.crl (hash: SOTuYiCWI0DA/XeTkRnelCUs8XKN7xZJXKnSUOwIidk=) 3: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: XXmEikeW7+xMma0RK8ROxLTllOgfRUh6Qpdpx7HKJyc=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: EocJEXTX0mSSr7fMVzkhuxkZ+TwRT9I+6KSMP/66yxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:05:b1:57:ef:2a:2f:01:19:97:ba:04:24:f1:30:c3:ae:b7:62:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Validity Not Before: Sep 21 07:05:28 2026 GMT Not After : Sep 22 09:05:28 2026 GMT Subject: CN=3E3120B9594151C0217F353BF64271E4C3D4230B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:62:1d:9d:db:bd:c2:ba:1d:71:c9:b0:aa: 40:ed:cc:07:e4:f4:b9:d6:90:0c:05:74:cc:c2:e2: 26:ce:14:ad:ab:10:b6:be:1e:7d:c9:6a:4d:33:47: ac:ee:de:c6:df:19:81:ad:d4:9b:9e:9d:8d:f0:45: 33:26:ad:32:af:c3:a6:4f:06:9f:f7:fe:66:46:d2: e7:db:e5:b4:48:ab:e4:5d:2e:2f:72:3b:77:86:f3: 30:f3:d6:85:aa:a2:db:7c:b6:fe:91:6f:a7:f8:89: a9:bd:7d:ea:c6:1c:d5:e0:d4:92:fc:31:ce:77:a2: 9b:e6:6c:8d:df:04:0a:75:4a:fc:b7:9e:58:22:72: 99:39:6c:22:37:d5:c0:9e:9b:1e:a7:e9:89:6f:0a: 15:42:2e:59:75:64:a7:8d:af:7b:b9:5a:20:a1:24: 2e:80:31:17:8c:e9:78:bc:c3:1f:54:9a:16:97:5f: 43:e5:7d:58:19:eb:19:23:e2:d1:40:91:24:7f:2d: d0:c5:ab:51:92:c6:6d:51:6d:d1:a2:96:a2:7a:94: f7:34:af:54:4e:9e:20:98:37:cd:fa:74:76:28:da: 34:d2:fd:b0:5a:86:f7:13:2f:44:d6:a5:3e:f9:40: be:99:85:60:14:24:87:a6:da:03:b0:ca:5b:c1:66: d7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:31:20:B9:59:41:51:C0:21:7F:35:3B:F6:42:71:E4:C3:D4:23:0B X509v3 Authority Key Identifier: keyid:6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a7:03:1a:f0:10:d6:c8:26:05:02:f5:5c:b0:fd:2d:de:a3: 24:77:03:50:44:28:a8:dc:d5:5d:6b:39:28:db:5b:0a:d8:fb: 07:7b:ed:fe:6d:2a:61:5c:ea:89:15:1d:84:de:b8:0f:76:09: 2e:35:e4:cf:a2:57:06:f8:0a:3e:93:a2:9b:66:6a:29:81:7f: e5:8b:f2:0b:aa:d9:9b:42:ed:12:5b:f6:51:40:91:b2:f7:a8: d1:23:f5:eb:dc:c7:67:a1:6f:52:87:29:fb:6d:4d:dc:af:91: 4d:11:1b:e3:77:00:08:d3:04:56:5a:fe:8f:92:ba:28:4b:b6: 68:5a:25:9d:8b:55:89:91:12:24:58:13:db:33:a1:87:6f:f1: 9b:2b:4f:56:3e:c4:c9:c1:b6:d4:da:ba:6b:1f:54:c5:20:a7: 2a:84:e2:a6:4e:e0:16:7e:3a:7d:30:aa:49:a0:a6:8c:84:53: c0:e5:80:bd:18:ab:23:8f:ae:b5:c1:3a:af:27:91:01:a9:0e: ca:34:38:58:0b:ea:0e:8d:fb:6b:3e:cb:30:3d:61:71:44:12: 3e:7f:cb:71:af:2c:6d:3c:9e:27:81:ce:2b:4b:b2:11:50:cf: 5c:87:ab:0c:73:b7:4a:6b:4d:ea:41:0d:7d:38:33:a1:49:53: b9:19:8d:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAWxV+8qLwEZl7oEJPEww663Yg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQx RDVFNDQxNzAeFw0yNjA5MjEwNzA1MjhaFw0yNjA5MjIwOTA1MjhaMDMxMTAvBgNV BAMTKDNFMzEyMEI5NTk0MTUxQzAyMTdGMzUzQkY2NDI3MUU0QzNENDIzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nmIdndu9wrodccmwqkDtzAfk 9LnWkAwFdMzC4ibOFK2rELa+Hn3Jak0zR6zu3sbfGYGt1JuenY3wRTMmrTKvw6ZP Bp/3/mZG0ufb5bRIq+RdLi9yO3eG8zDz1oWqott8tv6Rb6f4iam9ferGHNXg1JL8 Mc53opvmbI3fBAp1Svy3nlgicpk5bCI31cCemx6n6YlvChVCLll1ZKeNr3u5WiCh JC6AMReM6Xi8wx9UmhaXX0PlfVgZ6xkj4tFAkSR/LdDFq1GSxm1RbdGilqJ6lPc0 r1ROniCYN836dHYo2jTS/bBahvcTL0TWpT75QL6ZhWAUJIem2gOwylvBZtd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjEguVlBUcAhfzU79kJx5MPUIwswHwYDVR0j BBgwFoAUa5lVIN1C4qpjBqiYYYxHLR1eRBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkZDRjY2ItNDJlMy00YjcyLTkxOTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBE RDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQxRDVFNDQxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Qjk5NTUyMERENDJFMkFBNjMwNkE4OTg2MThDNDcyRDFENUU0 NDE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3 MkQxRDVFNDQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCnAxrwENbIJgUC9Vyw/S3eoyR3A1BEKKjc 1V1rOSjbWwrY+wd77f5tKmFc6okVHYTeuA92CS415M+iVwb4Cj6ToptmaimBf+WL 8guq2ZtC7RJb9lFAkbL3qNEj9evcx2ehb1KHKfttTdyvkU0RG+N3AAjTBFZa/o+S uihLtmhaJZ2LVYmREiRYE9szoYdv8ZsrT1Y+xMnBttTaumsfVMUgpyqE4qZO4BZ+ On0wqkmgpoyEU8DlgL0YqyOPrrXBOq8nkQGpDso0OFgL6g6N+2s+yzA9YXFEEj5/ y3GvLG08nieBzitLshFQz1yHqwxzt0prTepBDX04M6FJU7kZjdA= -----END CERTIFICATE-----Generated at Mon Sep 21 14:22:15 2026 by rpki-client