$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft File: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json) Hash identifier: BmFwrjBURNz0YdpeIaeLmSE5is1kuQl0QFsbJrXsyao= Subject key identifier: EB:AB:D9:72:B5:38:BA:71:87:9F:4B:F8:E4:18:15:1B:A2:BA:1F:3A Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 4254538A190CFD523F7C2C4760FDEAEE5700609B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft Manifest number: BF Signing time: Mon 21 Sep 2026 01:02:47 +0000 Manifest this update: Mon 21 Sep 2026 00:57:47 +0000 Manifest next update: Tue 22 Sep 2026 01:58:47 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=) 2: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=) 3: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=) 4: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=) 5: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: Czc88UKT7f2qD8vJuhN7/sqy0j5g1GegQGGMaWtgn3U=) 6: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=) 7: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=) 8: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=) 9: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:54:53:8a:19:0c:fd:52:3f:7c:2c:47:60:fd:ea:ee:57:00:60:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: Sep 21 00:57:47 2026 GMT Not After : Sep 22 01:58:47 2026 GMT Subject: CN=EBABD972B538BA71879F4BF8E418151BA2BA1F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0b:d8:31:4c:2e:93:f7:c8:2c:90:4c:25:55: d8:c4:b4:cc:06:26:53:61:ec:08:05:86:47:e1:a9: 60:0a:94:0d:5e:7f:e0:80:00:cc:ff:af:35:4a:d9: f6:c3:f9:cf:25:05:51:2e:07:d9:fb:94:6e:6b:ba: ee:cb:60:75:c5:eb:06:26:f6:c3:a5:7a:5d:17:28: 54:aa:49:26:ee:91:42:6d:b8:23:8f:c3:ec:77:da: d8:b0:15:b6:9a:46:08:59:c4:44:1a:82:48:83:39: b6:0c:4c:2c:63:f9:85:ed:fe:b0:88:35:4d:e2:15: 7c:95:80:a5:1f:81:de:3d:b3:2e:41:3e:ed:96:d3: 7d:be:1f:83:fe:90:ca:6f:d1:fe:96:fe:a7:e7:92: 7f:9a:15:5a:8e:dc:8d:19:42:40:2d:b8:db:f1:2f: ac:8e:95:f8:75:e0:80:69:d4:88:d2:e8:aa:a7:8c: c8:44:e8:8e:96:3d:c6:38:65:f5:f7:c2:eb:0e:5a: 29:37:24:64:ec:ad:3f:de:4c:f2:fd:a4:1a:d5:32: 93:37:8e:37:0b:91:00:79:21:bf:21:68:10:ed:a5: 25:84:06:1e:cd:86:54:fd:91:86:f4:56:72:72:77: a6:53:d1:af:6d:b4:ab:39:ad:5e:97:50:2c:43:82: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AB:D9:72:B5:38:BA:71:87:9F:4B:F8:E4:18:15:1B:A2:BA:1F:3A X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:26:89:04:f1:f7:92:19:ed:9e:96:d7:fc:48:d3:45:5c:a6: 22:e2:3c:82:6e:db:a1:8c:c3:dd:cc:c7:de:7c:b1:12:10:fc: 2d:99:b9:4f:97:51:38:ed:8c:2f:dc:d7:b2:c0:50:c4:ac:84: 07:aa:7d:90:41:5c:94:13:97:90:80:bc:de:ae:dd:3e:1b:21: c8:2e:09:25:ce:17:98:a9:6b:80:b7:c8:d0:27:6d:57:64:6c: 2e:98:a8:76:58:f4:65:33:71:fa:b3:91:2a:6e:db:4c:45:c9: ed:cd:5c:25:4d:e4:e5:2c:f1:ee:3a:28:25:04:52:de:31:17: 51:c6:e5:ca:42:b9:2f:51:61:d1:0f:8f:0f:d2:ae:50:7d:de: 83:16:aa:aa:d3:3b:43:5f:46:d4:11:a5:52:1a:88:6f:ce:81: 28:64:6e:11:98:02:cf:0c:31:6b:9c:d7:e1:61:bc:5f:2d:6d: 94:16:93:eb:7c:b9:75:da:c9:3e:4c:f7:5e:56:98:8e:fa:48: 8c:05:5c:05:f4:a4:2b:30:22:f4:f9:b2:e9:4a:08:be:d4:26: 2a:e6:46:9d:d4:51:6f:cc:e3:73:d0:e6:d8:26:9a:52:28:9a: ad:6f:36:d8:43:dd:c4:6a:d1:2d:78:f2:bc:37:4d:7b:b8:7f: 8f:a9:94:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlRTihkM/VI/fCxHYP3q7lcAYJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjA5MjEwMDU3NDdaFw0yNjA5MjIwMTU4NDdaMDMxMTAvBgNV BAMTKEVCQUJEOTcyQjUzOEJBNzE4NzlGNEJGOEU0MTgxNTFCQTJCQTFGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtC9gxTC6T98gskEwlVdjEtMwG JlNh7AgFhkfhqWAKlA1ef+CAAMz/rzVK2fbD+c8lBVEuB9n7lG5ruu7LYHXF6wYm 9sOlel0XKFSqSSbukUJtuCOPw+x32tiwFbaaRghZxEQagkiDObYMTCxj+YXt/rCI NU3iFXyVgKUfgd49sy5BPu2W032+H4P+kMpv0f6W/qfnkn+aFVqO3I0ZQkAtuNvx L6yOlfh14IBp1IjS6KqnjMhE6I6WPcY4ZfX3wusOWik3JGTsrT/eTPL9pBrVMpM3 jjcLkQB5Ib8haBDtpSWEBh7NhlT9kYb0VnJyd6ZT0a9ttKs5rV6XUCxDgopxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU66vZcrU4unGHn0v45BgVG6K6HzowHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0Yx RjY5NzlFRTdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkmiQTx95IZ7Z6W1/xI00VcpiLiPIJu26GM w93Mx958sRIQ/C2ZuU+XUTjtjC/c17LAUMSshAeqfZBBXJQTl5CAvN6u3T4bIcgu CSXOF5ipa4C3yNAnbVdkbC6YqHZY9GUzcfqzkSpu20xFye3NXCVN5OUs8e46KCUE Ut4xF1HG5cpCuS9RYdEPjw/SrlB93oMWqqrTO0NfRtQRpVIaiG/OgShkbhGYAs8M MWuc1+FhvF8tbZQWk+t8uXXayT5M915WmI76SIwFXAX0pCswIvT5sulKCL7UJirm Rp3UUW/M43PQ5tgmmlIomq1vNthD3cRq0S148rw3TXu4f4+plGA= -----END CERTIFICATE-----Generated at Mon Sep 21 04:54:18 2026 by rpki-client