$ rpki-client -vvvf rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft File: 6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft (raw, json) Hash identifier: 4wXrzpjEo2lIqU7TVxPQUkUpmclVzUzci1HdD3Ucwps= Subject key identifier: 5D:00:CE:F1:81:9D:9D:DC:3D:D2:25:EF:93:85:A4:65:9C:86:E2:C7 Authority key identifier: 6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA Certificate issuer: /CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA Certificate serial: 08AEDB59EAEC599200C43C8E791CBF4C3C9B8427 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft Manifest number: BD Signing time: Tue 22 Sep 2026 01:53:48 +0000 Manifest this update: Tue 22 Sep 2026 01:48:48 +0000 Manifest next update: Wed 23 Sep 2026 02:44:48 +0000 Files and hashes: 1: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: r55de0MlwnHcxztoQUvETv5/95di0cZyECnWwdFgdeM=) 2: 6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl (hash: YiZWV1prKOT48skvUjM85pYA6PSwaxBX8RsugDel0Vk=) 3: 3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa (hash: m73H0GlDEx00LFI1u2mNj74knbcvjFcFaVPie75MSDI=) 4: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: ualI/pM4NT2Wg3gKd9xAdl1JUbAVFMa5CRAfQUjYzdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ae:db:59:ea:ec:59:92:00:c4:3c:8e:79:1c:bf:4c:3c:9b:84:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA Validity Not Before: Sep 22 01:48:48 2026 GMT Not After : Sep 23 02:44:48 2026 GMT Subject: CN=5D00CEF1819D9DDC3DD225EF9385A4659C86E2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:6c:9a:e2:49:27:7e:7e:b8:65:92:72:d0: a1:59:6e:58:96:cc:3c:6a:4a:e2:6e:55:33:e0:ea: 3a:c7:71:83:86:e8:74:a5:ee:d8:bf:9b:9b:48:81: 6d:33:fa:d3:6c:f5:a3:23:82:e6:3e:5d:8e:84:da: c0:bc:5b:5e:9a:3d:d9:2d:b6:25:7f:7c:d2:d5:b1: b1:64:36:44:33:42:11:1c:7d:e0:41:19:d2:7a:17: 92:ac:8d:d2:7d:39:a3:c5:ac:15:f0:c8:b7:ab:66: 0d:e7:9d:fc:d7:d1:a4:27:55:f3:d5:a3:17:5a:85: 18:85:39:e6:ab:25:d7:96:b2:57:61:68:1e:56:c2: ce:40:e5:70:ca:45:7b:4f:1b:91:ec:d8:7c:d4:bd: 73:e0:b3:b7:ac:74:9a:27:34:c1:dc:fb:82:5f:7c: 4a:4f:53:6b:51:2f:04:13:02:9a:d3:83:bb:89:39: 75:54:fe:3f:4f:af:d6:ca:f3:c7:5e:6b:01:8d:c7: 06:95:e2:60:d3:ea:25:2f:a6:7f:ff:d5:6f:13:38: ce:ea:e2:67:3d:49:8d:a8:d0:04:1c:ea:0f:62:35: 8c:2a:f3:28:b8:32:fe:8b:11:1e:5a:d5:e6:65:c1: 3b:ac:e8:c9:e9:52:6e:68:88:ac:c0:97:eb:17:80: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:00:CE:F1:81:9D:9D:DC:3D:D2:25:EF:93:85:A4:65:9C:86:E2:C7 X509v3 Authority Key Identifier: keyid:6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:55:23:fb:8c:39:75:b0:9c:ab:e9:85:95:8f:6a:9b:83:f9: 64:56:1b:f9:d2:41:dc:0e:85:db:78:d6:ae:cc:92:fa:55:af: 58:8f:9c:ae:1f:f8:2a:87:49:4b:0e:6a:8e:48:42:8e:cc:a5: 5b:ac:61:68:2c:fa:d0:91:08:4e:d4:46:1f:dd:42:e7:ba:7c: 6c:9d:c7:51:78:5d:45:e6:10:46:63:8c:87:31:f9:e0:5e:fc: 56:28:98:e8:ac:f6:0e:1d:ab:74:79:f4:16:c6:3b:15:6b:97: a4:60:da:ae:81:2f:f3:71:48:05:6c:51:56:16:db:a1:8d:e0: 75:85:35:eb:bd:e4:ae:19:45:23:2f:a6:44:bf:d4:23:03:e8: ec:05:be:b0:c3:fc:3b:62:e2:a2:7c:1f:1f:54:14:c9:43:b2: 35:5b:4f:9b:72:5b:7f:21:67:95:d4:2e:f5:7d:28:fa:7b:8a: aa:ae:9e:98:56:24:f0:74:f9:cb:4b:90:9b:60:f6:a1:80:d4: b0:14:0a:d4:d5:fa:74:4e:a0:24:75:86:5d:25:53:3c:a2:10: 3f:b6:d5:7d:d2:5d:f3:fe:01:91:f1:38:0c:d3:f9:eb:52:ca: 41:a9:8e:f0:74:1a:2e:f5:c6:e3:d3:38:ff:cc:a1:4d:12:93: ca:b9:88:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCK7bWersWZIAxDyOeRy/TDybhCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCM0MxM0NGQzAyQTUxQUNGMTU3OTA1RUU2NTc5NEZC MDdCQThGQTAeFw0yNjA5MjIwMTQ4NDhaFw0yNjA5MjMwMjQ0NDhaMDMxMTAvBgNV BAMTKDVEMDBDRUYxODE5RDlEREMzREQyMjVFRjkzODVBNDY1OUM4NkUyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNmya4kknfn64ZZJy0KFZbliW zDxqSuJuVTPg6jrHcYOG6HSl7ti/m5tIgW0z+tNs9aMjguY+XY6E2sC8W16aPdkt tiV/fNLVsbFkNkQzQhEcfeBBGdJ6F5KsjdJ9OaPFrBXwyLerZg3nnfzX0aQnVfPV oxdahRiFOearJdeWsldhaB5Wws5A5XDKRXtPG5Hs2HzUvXPgs7esdJonNMHc+4Jf fEpPU2tRLwQTAprTg7uJOXVU/j9Pr9bK88deawGNxwaV4mDT6iUvpn//1W8TOM7q 4mc9SY2o0AQc6g9iNYwq8yi4Mv6LER5a1eZlwTus6MnpUm5oiKzAl+sXgE2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQDO8YGdndw90iXvk4WkZZyG4scwHwYDVR0j BBgwFoAUb7PBPPwCpRrPFXkF7mV5T7B7qPowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdkMjAzMWItMjc2MS00YzM2LWI2OTAtNWI2OWQxNTY5YmFlLzAvNkZCM0MxM0NG QzAyQTUxQUNGMTU3OTA1RUU2NTc5NEZCMDdCQThGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIzQzEzQ0ZDMDJBNTFBQ0YxNTc5MDVFRTY1Nzk0RkIwN0JB OEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2 OTAtNWI2OWQxNTY5YmFlLzAvNkZCM0MxM0NGQzAyQTUxQUNGMTU3OTA1RUU2NTc5 NEZCMDdCQThGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1VI/uMOXWwnKvphZWPapuD+WRWG/nSQdwO hdt41q7MkvpVr1iPnK4f+CqHSUsOao5IQo7MpVusYWgs+tCRCE7URh/dQue6fGyd x1F4XUXmEEZjjIcx+eBe/FYomOis9g4dq3R59BbGOxVrl6Rg2q6BL/NxSAVsUVYW 26GN4HWFNeu95K4ZRSMvpkS/1CMD6OwFvrDD/Dti4qJ8Hx9UFMlDsjVbT5tyW38h Z5XULvV9KPp7iqqunphWJPB0+ctLkJtg9qGA1LAUCtTV+nROoCR1hl0lUzyiED+2 1X3SXfP+AZHxOAzT+etSykGpjvB0Gi71xuPTOP/MoU0Sk8q5iBI= -----END CERTIFICATE-----Generated at Tue Sep 22 10:40:44 2026 by rpki-client