$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft File: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft (raw, json) Hash identifier: W8FI3u61coW6LjGrC6ABXkMpjEms4FnrFBV2+TjCuXg= Subject key identifier: 94:C1:98:72:FB:D1:FB:4A:CC:C6:6C:1B:38:58:E4:B8:6C:4C:8D:33 Authority key identifier: 63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC Certificate issuer: /CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC Certificate serial: 5080F9BB222B354984C37F69FE44AD2BD27F0529 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft Manifest number: BF Signing time: Tue 22 Sep 2026 11:35:52 +0000 Manifest this update: Tue 22 Sep 2026 11:30:52 +0000 Manifest next update: Wed 23 Sep 2026 12:22:52 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: C1l+SKZdvmsGoFL66tN6deMpQsnd5mLdq6lfMgLgcng=) 2: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl (hash: OyKY+dLBUhdK+NgjFQeOJMa72c8DwaFC4wX96ZHo/AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:80:f9:bb:22:2b:35:49:84:c3:7f:69:fe:44:ad:2b:d2:7f:05:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC Validity Not Before: Sep 22 11:30:52 2026 GMT Not After : Sep 23 12:22:52 2026 GMT Subject: CN=94C19872FBD1FB4ACCC66C1B3858E4B86C4C8D33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:3a:2e:d8:c7:59:78:7c:3c:26:1b:25:34: e2:3c:40:df:e4:3f:ea:c0:d3:78:4e:48:b2:48:ff: fe:6d:d4:16:d1:85:01:85:8a:04:c2:d2:a8:bf:8f: 60:5d:3b:57:f7:b3:bf:f0:26:6e:df:97:23:0c:7d: 23:77:a1:e9:56:e4:8f:0c:75:77:5e:e7:aa:06:2d: 30:17:0a:e0:f7:f8:20:b7:7c:72:e1:64:e5:11:3b: c1:30:c7:ea:bf:89:36:b0:db:ca:39:87:00:24:4a: b2:f5:e9:3d:1f:2d:d3:55:f4:b1:e5:c9:88:1f:66: 92:0b:0a:8d:60:03:bc:19:f8:cf:b1:f1:ef:5c:57: 1d:2a:cd:56:d0:80:96:62:d4:43:94:13:43:26:fc: 11:0e:9a:b8:b4:52:32:5b:0e:39:16:37:10:db:9b: af:6f:67:f4:9e:18:fa:b6:d0:9c:86:d1:60:1a:a4: 47:7f:34:99:81:f7:77:be:d5:59:a7:40:ad:c0:4e: 7b:b9:16:a5:6d:22:08:af:56:2c:c3:4f:03:93:8c: c6:2b:17:ff:4e:24:f0:f6:d0:62:9e:f8:90:3b:39: 30:19:3a:1f:0e:de:16:42:4d:91:36:36:46:67:a6: 9b:b5:ad:3d:f3:7e:e0:79:70:1f:ef:3d:bc:f8:d7: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C1:98:72:FB:D1:FB:4A:CC:C6:6C:1B:38:58:E4:B8:6C:4C:8D:33 X509v3 Authority Key Identifier: keyid:63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:81:86:c2:5d:a2:d1:04:77:9d:3b:a8:76:30:76:03:37:6f: 3a:48:3f:d5:9e:17:55:4f:4b:a3:f8:95:63:8c:7f:4a:ae:e7: 55:9e:1a:04:d8:08:63:32:ae:f1:f6:2b:a0:1f:43:a3:b3:dd: 03:0f:4e:78:16:8d:c7:ad:28:2e:9b:0f:bb:9b:b8:e3:37:e9: 38:24:75:39:83:27:75:39:e1:8d:81:3a:95:fa:81:1c:66:5c: 96:47:58:c8:d1:db:4d:42:b8:98:c9:cd:ac:91:bf:cc:65:e8: aa:25:23:93:8d:93:32:d7:db:b1:82:f4:04:3e:8a:8e:dc:e9: 86:d4:cb:e4:a8:29:d5:78:c5:e5:de:63:28:d5:2d:ef:9b:9f: 06:9f:c2:d2:ba:27:95:6b:ae:37:b3:20:d7:ed:b8:c9:f3:75: 75:c9:7c:bb:02:ca:51:82:c9:eb:03:02:b9:0c:e5:6b:64:b8: 02:4e:46:e5:63:98:ce:af:8e:11:09:3a:b8:3b:b4:32:6b:e7: 07:c3:ed:ae:ce:f3:e8:8d:92:b5:70:ca:8b:41:5c:34:4c:f6: 3c:9d:35:0d:ef:8c:51:94:33:64:df:ad:d2:80:a0:61:38:5f: ce:3d:84:88:6e:8c:40:84:f8:b1:63:22:02:bd:0e:0b:4a:2e: 48:1b:07:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUID5uyIrNUmEw39p/kStK9J/BSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0MEI4NUI4MTdFMDcxQ0ExMDg3MDgwREU4Q0NCOUVE ODlCQzlDQzAeFw0yNjA5MjIxMTMwNTJaFw0yNjA5MjMxMjIyNTJaMDMxMTAvBgNV BAMTKDk0QzE5ODcyRkJEMUZCNEFDQ0M2NkMxQjM4NThFNEI4NkM0QzhEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2Dou2MdZeHw8JhslNOI8QN/k P+rA03hOSLJI//5t1BbRhQGFigTC0qi/j2BdO1f3s7/wJm7flyMMfSN3oelW5I8M dXde56oGLTAXCuD3+CC3fHLhZOURO8Ewx+q/iTaw28o5hwAkSrL16T0fLdNV9LHl yYgfZpILCo1gA7wZ+M+x8e9cVx0qzVbQgJZi1EOUE0Mm/BEOmri0UjJbDjkWNxDb m69vZ/SeGPq20JyG0WAapEd/NJmB93e+1VmnQK3ATnu5FqVtIgivVizDTwOTjMYr F/9OJPD20GKe+JA7OTAZOh8O3hZCTZE2NkZnppu1rT3zfuB5cB/vPbz41wJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlMGYcvvR+0rMxmwbOFjkuGxMjTMwHwYDVR0j BBgwFoAUY0C4W4F+BxyhCHCA3ozLntibycwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJjZDljZWEtM2JmNC00YTljLWFlZTYtMDAzMzljMDY1NTBiLzAvNjM0MEI4NUI4 MTdFMDcxQ0ExMDg3MDgwREU4Q0NCOUVEODlCQzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzQwQjg1QjgxN0UwNzFDQTEwODcwODBERThDQ0I5RUQ4OUJD OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvNjM0MEI4NUI4MTdFMDcxQ0ExMDg3MDgwREU4Q0NC OUVEODlCQzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKBhsJdotEEd507qHYwdgM3bzpIP9WeF1VP S6P4lWOMf0qu51WeGgTYCGMyrvH2K6AfQ6Oz3QMPTngWjcetKC6bD7ubuOM36Tgk dTmDJ3U54Y2BOpX6gRxmXJZHWMjR201CuJjJzayRv8xl6KolI5ONkzLX27GC9AQ+ io7c6YbUy+SoKdV4xeXeYyjVLe+bnwafwtK6J5VrrjezINftuMnzdXXJfLsCylGC yesDArkM5WtkuAJORuVjmM6vjhEJOrg7tDJr5wfD7a7O8+iNkrVwyotBXDRM9jyd NQ3vjFGUM2TfrdKAoGE4X849hIhujECE+LFjIgK9DgtKLkgbB0Y= -----END CERTIFICATE-----Generated at Tue Sep 22 16:17:02 2026 by rpki-client