$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft File: 6F45041EB7929E02B86768C39A786F570301BD76.mft (raw, json) Hash identifier: Uv8WWLIRwcFYHRasvv4xyIOO0PfK6hAuJJOLuqg/WY8= Subject key identifier: 01:40:A9:74:98:19:E1:46:39:3D:DE:2E:4E:EA:0F:89:A7:F2:BD:0A Authority key identifier: 6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76 Certificate issuer: /CN=6F45041EB7929E02B86768C39A786F570301BD76 Certificate serial: 2394ECDE72A5D405811F4752022CA30DD7B0C235 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:33:40 +0000 Manifest this update: Sun 20 Sep 2026 21:28:40 +0000 Manifest next update: Mon 21 Sep 2026 22:29:40 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: MoKOK1axg8ykdgPvCQ12UuAuHp6wG4DqBfh3f87ints=) 2: 6F45041EB7929E02B86768C39A786F570301BD76.crl (hash: 2QX50LktizL6aMfI2NNJrt8hL4uQ84CJCaFD3x77TqM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:94:ec:de:72:a5:d4:05:81:1f:47:52:02:2c:a3:0d:d7:b0:c2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F45041EB7929E02B86768C39A786F570301BD76 Validity Not Before: Sep 20 21:28:40 2026 GMT Not After : Sep 21 22:29:40 2026 GMT Subject: CN=0140A9749819E146393DDE2E4EEA0F89A7F2BD0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:81:1d:20:09:e9:90:ef:2d:33:45:87:3f: 96:ba:40:ca:12:1a:b2:60:f3:07:ff:ef:a5:68:73: 4e:99:cd:16:93:f8:f1:1e:c2:34:c4:75:42:63:f4: 97:f0:b6:96:e4:42:7c:64:b8:3c:ca:e2:6b:9f:4e: f6:b8:f0:4a:bc:d6:42:6b:93:5f:18:8a:56:8c:18: a2:0a:33:6f:0e:c7:ae:e7:d7:e2:75:ca:5d:54:1f: 25:4e:47:65:72:e3:7c:05:4f:ae:cf:d7:f1:f0:38: b8:1c:23:ad:46:62:a5:d7:c4:c3:5e:cc:fd:8b:ba: 7b:e1:93:44:a7:6f:27:49:b1:62:34:e7:fb:55:a5: ed:09:c9:6a:7b:2a:d0:26:04:e4:12:fd:b8:1d:09: 67:fb:08:fb:41:98:1d:f3:16:fa:08:e7:94:f6:3a: be:0d:36:52:b3:35:8f:6e:1f:9f:c6:74:fd:b9:45: 75:e5:83:0b:dd:6e:59:13:f8:4d:c8:2c:9c:af:71: 99:d1:b7:86:86:86:c7:2a:e4:e5:48:69:99:02:9a: 9f:8e:a7:9f:93:73:ed:b7:c7:f4:a9:cd:d2:26:f8: ec:06:ff:aa:7b:6f:3c:77:0b:8b:87:aa:6e:4d:92: 15:e0:46:8c:a7:04:af:95:61:08:02:e8:41:85:92: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:40:A9:74:98:19:E1:46:39:3D:DE:2E:4E:EA:0F:89:A7:F2:BD:0A X509v3 Authority Key Identifier: keyid:6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0c:ae:ad:56:28:fd:3a:e3:d9:10:2c:70:38:c0:ad:dc:e3: 2e:bf:18:59:94:4f:21:9c:8f:32:d9:90:5c:9a:b6:5f:e2:70: cb:0c:6a:6d:72:23:e7:34:6f:98:ca:7f:ab:f8:8a:00:9f:98: b5:7f:84:9c:b7:32:c5:e4:f0:4e:b0:1c:da:14:82:41:c8:2b: af:90:92:64:61:a1:0b:ef:fb:9c:11:62:eb:2d:78:cc:8e:f6: 0f:b9:0d:4d:81:7f:32:85:89:17:3c:9a:21:07:9e:90:b0:08: 64:8c:99:43:16:f6:40:0e:60:b0:73:2b:8e:3d:7e:d3:39:7b: e1:c5:36:c4:6c:e7:f4:a6:3c:c6:7f:f6:28:68:5c:f5:bc:a4: 82:c1:b8:40:78:8e:0f:ed:0b:c6:83:35:25:be:01:fe:28:85: 63:4e:43:25:86:36:f8:d8:d7:df:89:55:91:0e:cb:5e:9c:27: 64:b1:35:b8:47:16:7d:e6:5d:72:8f:1d:58:64:51:4f:9d:18: a9:76:6d:9e:6d:ee:f0:d0:7e:d5:d4:68:d2:b1:bf:9c:ae:37: de:05:e1:d9:f2:eb:88:bc:a4:64:3c:d2:63:a6:0f:c1:e9:35: ac:86:4e:b9:b8:68:21:ad:59:c1:1c:93:bc:5c:3f:a5:05:b0: f3:b5:cd:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5Ts3nKl1AWBH0dSAiyjDdewwjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0NTA0MUVCNzkyOUUwMkI4Njc2OEMzOUE3ODZGNTcw MzAxQkQ3NjAeFw0yNjA5MjAyMTI4NDBaFw0yNjA5MjEyMjI5NDBaMDMxMTAvBgNV BAMTKDAxNDBBOTc0OTgxOUUxNDYzOTNEREUyRTRFRUEwRjg5QTdGMkJEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLf4EdIAnpkO8tM0WHP5a6QMoS GrJg8wf/76Voc06ZzRaT+PEewjTEdUJj9JfwtpbkQnxkuDzK4mufTva48Eq81kJr k18YilaMGKIKM28Ox67n1+J1yl1UHyVOR2Vy43wFT67P1/HwOLgcI61GYqXXxMNe zP2Lunvhk0SnbydJsWI05/tVpe0JyWp7KtAmBOQS/bgdCWf7CPtBmB3zFvoI55T2 Or4NNlKzNY9uH5/GdP25RXXlgwvdblkT+E3ILJyvcZnRt4aGhscq5OVIaZkCmp+O p5+Tc+23x/SpzdIm+OwG/6p7bzx3C4uHqm5NkhXgRoynBK+VYQgC6EGFki4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAUCpdJgZ4UY5Pd4uTuoPiafyvQowHwYDVR0j BBgwFoAUb0UEHreSngK4Z2jDmnhvVwMBvXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBhODU5MGUtZTRkYy00NDE2LWE2ZmEtZmI3OGQ2ZGQxMmQ3LzAvNkY0NTA0MUVC NzkyOUUwMkI4Njc2OEMzOUE3ODZGNTcwMzAxQkQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RjQ1MDQxRUI3OTI5RTAyQjg2NzY4QzM5QTc4NkY1NzAzMDFC RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNkY0NTA0MUVCNzkyOUUwMkI4Njc2OEMzOUE3ODZG NTcwMzAxQkQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0Mrq1WKP0649kQLHA4wK3c4y6/GFmUTyGc jzLZkFyatl/icMsMam1yI+c0b5jKf6v4igCfmLV/hJy3MsXk8E6wHNoUgkHIK6+Q kmRhoQvv+5wRYusteMyO9g+5DU2BfzKFiRc8miEHnpCwCGSMmUMW9kAOYLBzK449 ftM5e+HFNsRs5/SmPMZ/9ihoXPW8pILBuEB4jg/tC8aDNSW+Af4ohWNOQyWGNvjY 19+JVZEOy16cJ2SxNbhHFn3mXXKPHVhkUU+dGKl2bZ5t7vDQftXUaNKxv5yuN94F 4dny64i8pGQ80mOmD8HpNayGTrm4aCGtWcEck7xcP6UFsPO1zWg= -----END CERTIFICATE-----Generated at Mon Sep 21 10:55:54 2026 by rpki-client