$ rpki-client -vvvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft File: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft (raw, json) Hash identifier: QlkrdOjmWoTDWKD2Oxt+x3Yn/o6oKSx1Ze4Kb8P0xHs= Subject key identifier: E6:30:F0:A5:FD:4E:C5:DC:58:52:69:AC:9E:56:C8:95:8C:E0:6D:D1 Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 Certificate issuer: /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Certificate serial: 6EA8EE0840E6035D41AA502E091B8707209A58B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft Manifest number: BE Signing time: Tue 22 Sep 2026 01:28:16 +0000 Manifest this update: Tue 22 Sep 2026 01:23:16 +0000 Manifest next update: Wed 23 Sep 2026 03:18:16 +0000 Files and hashes: 1: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=) 2: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl (hash: NFqck7zJx6TJRiMUjUYb0VFxnoWPC4O+NiObTZ+9cqw=) 3: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: YUSL8MaAWMcSEFSDLAAA9feKMtSwIZRFYTLiujhrL28=) 4: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: mQKueKTh7A3uQ/utWkeUKce0jX8tikpIauTi7aYCX5o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a8:ee:08:40:e6:03:5d:41:aa:50:2e:09:1b:87:07:20:9a:58:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Validity Not Before: Sep 22 01:23:16 2026 GMT Not After : Sep 23 03:18:16 2026 GMT Subject: CN=E630F0A5FD4EC5DC585269AC9E56C8958CE06DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:e2:c5:b7:38:51:bb:05:d3:1b:49:f7:22: e5:96:75:f5:61:8d:62:7e:33:a2:55:c4:97:17:ed: b3:d0:93:58:65:50:e8:16:e4:68:b9:ec:11:68:5d: a4:42:3f:0e:0e:65:bc:be:21:46:4d:2e:61:75:bf: 46:24:b4:6a:46:96:65:52:71:c1:c4:ce:9d:f5:68: 1c:b9:ea:73:3f:dd:23:43:0c:e2:2d:91:b8:9d:2d: 77:02:ed:5a:cd:b4:6a:25:6f:3f:45:3b:f8:91:b1: 0e:f8:e2:46:ac:ed:fa:59:35:ab:06:cd:35:55:33: f5:db:18:2f:e7:5a:6d:c1:0d:f9:80:29:c9:35:45: 13:d0:5f:6a:4d:48:59:7a:cb:0a:c9:c9:4c:cf:8f: 57:ec:d5:e2:45:d8:18:b0:db:41:9e:e0:63:3b:9c: be:fa:16:b3:71:dc:74:f3:0d:47:dd:8e:4c:c1:49: ee:2e:8c:ad:0e:21:a9:9c:7a:83:6a:eb:c8:f9:3c: d9:9b:80:08:76:7b:4c:93:50:98:c6:d8:03:a7:7e: 72:e2:09:75:48:ab:8d:74:ee:ff:ab:b1:ab:b0:64: ea:33:99:bb:a9:8c:02:20:49:51:7a:3f:65:60:31: 1f:bb:d0:e7:7b:d2:d4:61:31:c7:53:8d:4e:10:00: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:30:F0:A5:FD:4E:C5:DC:58:52:69:AC:9E:56:C8:95:8C:E0:6D:D1 X509v3 Authority Key Identifier: keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:5b:14:a1:36:d7:85:fd:25:69:9d:45:01:8e:e4:dd:f2:c0: 39:82:19:ab:13:59:d6:86:e2:e4:80:04:d4:63:71:12:f1:f1: 37:5f:74:32:64:72:05:f3:34:c4:41:3d:09:45:1b:e3:23:c4: 2f:ae:73:49:56:2c:89:2d:71:60:a8:b6:ef:e8:e8:8e:42:bd: 47:98:c0:f3:1f:d8:8f:75:d4:45:9b:ae:14:99:ae:0a:f2:97: 8e:d7:16:5b:0e:33:18:74:96:10:bc:e0:01:b2:a8:9e:06:ae: 59:76:14:9b:03:23:2f:04:f5:4e:f1:ed:58:2f:05:85:ce:44: 6e:a0:74:54:33:b0:aa:b6:6e:22:b0:e3:2e:a4:ec:f8:89:12: cf:a0:b6:e3:bc:ee:dd:8c:10:20:28:d4:a5:fc:44:27:30:a7: 85:cf:e7:cc:f0:76:44:01:77:81:3f:ec:c8:73:29:ed:1a:19: 78:b8:bd:10:f1:e9:50:d8:28:97:62:fa:4d:4b:76:d2:ca:d9: 30:a9:cf:a7:36:09:99:63:40:03:a7:7d:a1:b8:6c:68:cf:ca: 53:df:b4:90:86:e5:8f:e4:09:97:11:c9:d4:a9:ad:ec:69:bf: 2b:f3:79:dd:8e:c2:00:a1:55:11:be:76:ce:89:ad:e8:c5:da: 20:0a:e1:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqjuCEDmA11BqlAuCRuHByCaWLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRF RUI5QTBBMDAeFw0yNjA5MjIwMTIzMTZaFw0yNjA5MjMwMzE4MTZaMDMxMTAvBgNV BAMTKEU2MzBGMEE1RkQ0RUM1REM1ODUyNjlBQzlFNTZDODk1OENFMDZERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VuLFtzhRuwXTG0n3IuWWdfVh jWJ+M6JVxJcX7bPQk1hlUOgW5Gi57BFoXaRCPw4OZby+IUZNLmF1v0YktGpGlmVS ccHEzp31aBy56nM/3SNDDOItkbidLXcC7VrNtGolbz9FO/iRsQ744kas7fpZNasG zTVVM/XbGC/nWm3BDfmAKck1RRPQX2pNSFl6ywrJyUzPj1fs1eJF2Biw20Ge4GM7 nL76FrNx3HTzDUfdjkzBSe4ujK0OIamceoNq68j5PNmbgAh2e0yTUJjG2AOnfnLi CXVIq4107v+rsauwZOozmbupjAIgSVF6P2VgMR+70Od70tRhMcdTjU4QAP/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5jDwpf1OxdxYUmmsnlbIlYzgbdEwHwYDVR0j BBgwFoAUxwb5AAjWKT5eNcexfdO0FO65oKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzVkNmVmZmYtODViMi00YWY0LTg5YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAw OEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRFRUI5QTBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzA2RjkwMDA4RDYyOTNFNUUzNUM3QjE3REQzQjQxNEVFQjlB MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0 MTRFRUI5QTBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdbFKE214X9JWmdRQGO5N3ywDmCGasTWdaG 4uSABNRjcRLx8TdfdDJkcgXzNMRBPQlFG+MjxC+uc0lWLIktcWCotu/o6I5CvUeY wPMf2I911EWbrhSZrgryl47XFlsOMxh0lhC84AGyqJ4Grll2FJsDIy8E9U7x7Vgv BYXORG6gdFQzsKq2biKw4y6k7PiJEs+gtuO87t2MECAo1KX8RCcwp4XP58zwdkQB d4E/7MhzKe0aGXi4vRDx6VDYKJdi+k1LdtLK2TCpz6c2CZljQAOnfaG4bGjPylPf tJCG5Y/kCZcRydSprexpvyvzed2OwgChVRG+ds6JrejF2iAK4Xg= -----END CERTIFICATE-----Generated at Tue Sep 22 18:45:02 2026 by rpki-client