$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft File: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft (raw, json) Hash identifier: DP3EoM83NmTxqAbpBuTb+leLkJFFpPNbsDNrtmGi2zY= Subject key identifier: 7C:BF:A8:7E:0F:DF:B9:47:01:4D:31:32:8F:91:7A:8C:68:B7:C9:19 Authority key identifier: B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 Certificate issuer: /CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Certificate serial: 61050A4D2A9D7E3428594715E561678D7D7FAE76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:53:08 +0000 Manifest this update: Wed 23 Sep 2026 21:48:08 +0000 Manifest next update: Thu 24 Sep 2026 22:51:08 +0000 Files and hashes: 1: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 8e9FrxOA/xN95Yot7Ymznk0AodzlekAylsbbF3Artc4=) 2: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: XBc3ZVVKXIlCbURfHv+y5tJpz8Y5k76pERxRfF4D1As=) 3: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl (hash: QljrWEXc0jFp0LA+oJPYHahhIZL4s/kV7/4VsEPkV1Y=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: v0xv6ts8xNGmfAQ65ctkAG3Fqvb6dUvN83XOnaYe2GA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:05:0a:4d:2a:9d:7e:34:28:59:47:15:e5:61:67:8d:7d:7f:ae:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Validity Not Before: Sep 23 21:48:08 2026 GMT Not After : Sep 24 22:51:08 2026 GMT Subject: CN=7CBFA87E0FDFB947014D31328F917A8C68B7C919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:92:8f:83:f1:9e:cc:dd:d1:0d:da:dd:62: d7:f0:9a:1e:b2:a1:36:17:e2:5f:fc:8e:19:b0:0c: 32:f4:61:d3:2d:fc:a7:52:7a:98:13:d9:10:2b:c0: da:73:97:a4:dd:50:36:b9:b7:40:df:e5:16:53:5c: 92:f0:13:b5:5e:b3:19:f9:bb:ea:a2:04:55:25:00: f9:cc:76:96:77:1f:b8:ff:b3:73:e2:31:62:ca:58: 37:23:af:1b:bd:33:1f:f7:4e:3b:f0:fa:bc:0a:ff: bd:0d:a4:c5:13:49:41:cb:dd:74:6b:3e:1b:ff:6f: 19:f8:ad:f0:b2:df:93:00:ca:8d:d8:d3:fc:85:a7: 5b:d9:6c:3c:54:45:19:57:3e:ad:b8:4b:1f:b6:e6: bb:3d:cc:fd:8a:24:8f:db:ea:b0:b3:fa:70:9e:8b: e5:d9:2c:28:2f:90:c7:a7:42:46:e5:0a:af:42:25: 40:6a:86:5e:fe:85:56:2a:fe:95:4d:f2:a5:6f:e1: ae:c9:eb:25:c9:e6:39:5c:b9:d5:27:72:ba:6c:c2: 9f:b6:ab:bd:53:62:c1:d6:21:63:21:4d:7e:a0:2b: a9:d9:68:24:54:db:52:0f:09:57:d4:f2:83:c0:46: 2c:12:55:6b:c0:88:4d:f4:25:ab:4b:80:40:11:77: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BF:A8:7E:0F:DF:B9:47:01:4D:31:32:8F:91:7A:8C:68:B7:C9:19 X509v3 Authority Key Identifier: keyid:B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:81:32:ee:59:ee:9e:b0:94:40:8c:5b:7e:a5:22:f8:c7:32: 90:62:ee:8f:d8:fd:a6:23:ad:db:91:a0:76:02:09:4d:b3:7c: 38:06:d8:29:65:c7:b9:21:a5:a8:46:71:78:4c:7a:78:ee:c9: fc:3f:aa:f8:78:fa:58:4f:b1:05:dd:b5:88:3b:c5:ed:fb:ee: 08:3f:1e:b5:ad:66:d3:7f:9f:87:58:d0:8f:ec:d2:c1:38:0d: dd:71:f8:7e:e5:3b:8f:1d:f2:dc:d0:f4:c6:17:09:75:56:45: 70:51:d1:22:94:cd:a6:bf:04:58:f0:2c:1e:b7:74:65:b9:a5: be:ae:2d:7a:85:df:bf:51:e6:d4:59:79:85:c4:ef:7e:6a:d6: b3:97:19:90:69:47:4f:83:14:70:b4:10:fd:2b:01:6e:87:dd: 4e:c8:34:92:bd:f3:01:08:1a:b7:b5:df:f4:43:be:a4:0c:ed: 3a:e5:f8:06:58:b9:ba:31:b2:f5:35:23:6c:c2:c5:e1:e4:55: 52:9d:b7:e6:10:a3:4b:71:42:86:c9:0e:ca:75:f8:cc:f2:9e: 2e:86:21:e6:16:1b:3a:a3:12:ed:be:3b:2e:8a:5f:fe:3e:8d: 15:22:bb:fa:66:20:0a:79:6b:84:26:76:97:18:b8:59:3c:75: a0:db:75:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQUKTSqdfjQoWUcV5WFnjX1/rnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5 NkIzMDEwODAeFw0yNjA5MjMyMTQ4MDhaFw0yNjA5MjQyMjUxMDhaMDMxMTAvBgNV BAMTKDdDQkZBODdFMEZERkI5NDcwMTREMzEzMjhGOTE3QThDNjhCN0M5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/v5KPg/GezN3RDdrdYtfwmh6y oTYX4l/8jhmwDDL0YdMt/KdSepgT2RArwNpzl6TdUDa5t0Df5RZTXJLwE7Vesxn5 u+qiBFUlAPnMdpZ3H7j/s3PiMWLKWDcjrxu9Mx/3Tjvw+rwK/70NpMUTSUHL3XRr Phv/bxn4rfCy35MAyo3Y0/yFp1vZbDxURRlXPq24Sx+25rs9zP2KJI/b6rCz+nCe i+XZLCgvkMenQkblCq9CJUBqhl7+hVYq/pVN8qVv4a7J6yXJ5jlcudUncrpswp+2 q71TYsHWIWMhTX6gK6nZaCRU21IPCVfU8oPARiwSVWvAiE30JatLgEARdzTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfL+ofg/fuUcBTTEyj5F6jGi3yRkwHwYDVR0j BBgwFoAUtvgQ8ik8v9vD1vqpKIjpx5azAQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY2NTk5MDQtMzcwMi00Nzk3LWJkMWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIy OTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5NkIzMDEwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkY4MTBGMjI5M0NCRkRCQzNENkZBQTkyODg4RTlDNzk2QjMw MTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5 Qzc5NkIzMDEwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeBMu5Z7p6wlECMW36lIvjHMpBi7o/Y/aYj rduRoHYCCU2zfDgG2Cllx7khpahGcXhMenjuyfw/qvh4+lhPsQXdtYg7xe377gg/ HrWtZtN/n4dY0I/s0sE4Dd1x+H7lO48d8tzQ9MYXCXVWRXBR0SKUzaa/BFjwLB63 dGW5pb6uLXqF379R5tRZeYXE735q1rOXGZBpR0+DFHC0EP0rAW6H3U7INJK98wEI Gre13/RDvqQM7Trl+AZYuboxsvU1I2zCxeHkVVKdt+YQo0txQobJDsp1+Mzyni6G IeYWGzqjEu2+Oy6KX/4+jRUiu/pmIAp5a4QmdpcYuFk8daDbdQI= -----END CERTIFICATE-----Generated at Thu Sep 24 06:49:38 2026 by rpki-client