$ rpki-client -vvvf rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft File: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft (raw, json) Hash identifier: w8rdtfG//IF1sGOqqM/BA16W4i86Sul1kbinJVO1YjI= Subject key identifier: FF:6D:F5:FF:60:23:15:BD:9F:A4:BE:CA:44:37:E0:66:AB:E2:3A:3B Authority key identifier: 00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 Certificate issuer: /CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Certificate serial: 35D2DD5E984D709502837E1CA8DE7EAF05133BD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft Manifest number: BF Signing time: Mon 21 Sep 2026 18:54:49 +0000 Manifest this update: Mon 21 Sep 2026 18:49:49 +0000 Manifest next update: Tue 22 Sep 2026 19:49:49 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: Q/80xzITob9EDyGUauN9lSkFfskt31UxgEkyUCmZLOE=) 2: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl (hash: tUwvqtxaLvcAuVyIjADlwrxxFmQSCPBOWsSsMIgrLK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d2:dd:5e:98:4d:70:95:02:83:7e:1c:a8:de:7e:af:05:13:3b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Validity Not Before: Sep 21 18:49:49 2026 GMT Not After : Sep 22 19:49:49 2026 GMT Subject: CN=FF6DF5FF602315BD9FA4BECA4437E066ABE23A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:fa:31:b2:fa:8b:bd:45:e7:dc:d5:eb:74: 9f:06:69:ff:f6:f9:af:32:41:39:50:4a:ce:89:60: 1c:13:91:54:71:e1:51:b4:46:68:42:a6:f1:fb:b6: ab:4f:fc:d1:cd:ec:ae:12:37:1b:d9:35:7f:b2:38: 78:bf:e6:9f:bd:60:03:7d:4b:6c:03:0b:7a:7a:31: b7:49:4d:79:57:68:de:27:00:98:f2:32:30:ad:64: 5b:80:fc:eb:1c:46:35:ec:2d:ea:59:2a:d5:5b:a8: e7:43:a9:17:09:72:a0:5c:3d:12:a7:f9:ee:27:78: 9d:6a:0b:27:be:cf:db:57:06:4b:4d:3c:da:3b:a5: 10:b2:37:d5:0f:91:28:4a:b1:9c:bc:59:77:f2:79: 2b:eb:08:b9:9b:3e:83:37:57:95:9d:42:6d:a9:16: 5b:19:ed:b5:22:91:d7:b7:36:d5:01:24:24:02:f4: a6:09:0f:55:ae:58:ed:c1:54:a3:c1:3d:f7:5e:f8: 1a:5e:f4:95:15:80:2f:af:fd:71:8c:73:31:8a:e4: eb:16:07:44:49:f2:37:be:92:4e:7f:8d:de:a6:78: fb:87:9a:fc:97:42:fb:8c:8e:30:b7:a8:89:3a:4f: b4:b9:5c:f4:79:aa:cd:68:5e:06:43:e5:40:37:bb: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6D:F5:FF:60:23:15:BD:9F:A4:BE:CA:44:37:E0:66:AB:E2:3A:3B X509v3 Authority Key Identifier: keyid:00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4a:3d:a2:51:66:b9:1a:f7:e5:12:76:c3:45:35:f9:61:15: 43:02:23:d5:21:4c:6f:2b:ba:b0:8b:e8:82:19:b7:fe:46:f1: 57:f6:af:1f:31:0a:41:d7:8e:fd:6b:d5:2b:5a:01:d8:db:e6: 8f:7d:17:c6:71:f9:10:f5:08:cd:d9:05:bd:f3:90:1a:c2:7f: c0:03:d7:04:88:6b:13:e3:ef:4a:81:0d:19:11:f2:71:85:db: 0a:d5:0d:5f:6d:a0:6c:d2:8b:4c:e8:65:c4:4b:ab:0d:e5:52: 58:8a:a6:59:c8:28:e4:50:b7:3a:40:9c:0a:d2:08:ec:03:d6: 6d:3c:3c:56:bb:3e:27:b2:bc:0d:3e:21:32:df:ea:54:11:68: f3:b3:31:ea:69:8d:99:eb:0b:bd:b7:ac:2f:31:ef:16:7e:b8: 4b:69:ae:f5:fd:aa:a0:7e:8a:4f:12:21:c8:8d:a7:39:19:3f: a5:4b:1a:6b:d6:f5:52:15:8a:67:39:8d:6f:57:f6:4d:4f:a5: 88:93:e3:d2:7f:17:09:32:dc:9f:a4:18:fe:29:e1:1e:89:54: c4:db:2a:7a:6a:a0:18:98:33:a5:d5:45:32:10:5e:8b:a4:8d: 5a:4b:5a:23:59:c7:cb:e8:62:e0:4b:e2:e4:df:c0:60:a1:ed: 6d:9d:0d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdLdXphNcJUCg34cqN5+rwUTO9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBB MkY0RDlFODAeFw0yNjA5MjExODQ5NDlaFw0yNjA5MjIxOTQ5NDlaMDMxMTAvBgNV BAMTKEZGNkRGNUZGNjAyMzE1QkQ5RkE0QkVDQTQ0MzdFMDY2QUJFMjNBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahfoxsvqLvUXn3NXrdJ8Gaf/2 +a8yQTlQSs6JYBwTkVRx4VG0RmhCpvH7tqtP/NHN7K4SNxvZNX+yOHi/5p+9YAN9 S2wDC3p6MbdJTXlXaN4nAJjyMjCtZFuA/OscRjXsLepZKtVbqOdDqRcJcqBcPRKn +e4neJ1qCye+z9tXBktNPNo7pRCyN9UPkShKsZy8WXfyeSvrCLmbPoM3V5WdQm2p FlsZ7bUikde3NtUBJCQC9KYJD1WuWO3BVKPBPfde+Bpe9JUVgC+v/XGMczGK5OsW B0RJ8je+kk5/jd6mePuHmvyXQvuMjjC3qIk6T7S5XPR5qs1oXgZD5UA3u7AbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/231/2AjFb2fpL7KRDfgZqviOjswHwYDVR0j BBgwFoAUAGuOhbb865lK0Aum5k6vIKL02egwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM3NTA2YzUtNWVmMS00Mjk0LTg5MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVC NkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBBMkY0RDlFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDZCOEU4NUI2RkNFQjk5NEFEMDBCQTZFNjRFQUYyMEEyRjRE OUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFG MjBBMkY0RDlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1KPaJRZrka9+USdsNFNflhFUMCI9UhTG8r urCL6IIZt/5G8Vf2rx8xCkHXjv1r1StaAdjb5o99F8Zx+RD1CM3ZBb3zkBrCf8AD 1wSIaxPj70qBDRkR8nGF2wrVDV9toGzSi0zoZcRLqw3lUliKplnIKORQtzpAnArS COwD1m08PFa7PieyvA0+ITLf6lQRaPOzMeppjZnrC723rC8x7xZ+uEtprvX9qqB+ ik8SIciNpzkZP6VLGmvW9VIVimc5jW9X9k1PpYiT49J/Fwky3J+kGP4p4R6JVMTb KnpqoBiYM6XVRTIQXoukjVpLWiNZx8voYuBL4uTfwGCh7W2dDRE= -----END CERTIFICATE-----Generated at Tue Sep 22 10:57:40 2026 by rpki-client