$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json) Hash identifier: 0hYeQsiCV3FPM6o/LS0Gv4o295j1q05UV0hWkHNmeoY= Subject key identifier: 38:18:AE:52:28:DB:A9:C5:57:00:CD:12:2F:1B:A5:EA:3D:70:46:95 Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Certificate serial: 5F9EC74D3F1F2D5D96A49DC24B6989875DED82A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:46:08 +0000 Manifest this update: Tue 22 Sep 2026 03:41:08 +0000 Manifest next update: Wed 23 Sep 2026 05:09:08 +0000 Files and hashes: 1: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=) 2: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: +NOkbR0x8DjIr4VWisZ3oBHScw/goM0b7krGm1UFwYU=) 3: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=) 4: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9e:c7:4d:3f:1f:2d:5d:96:a4:9d:c2:4b:69:89:87:5d:ed:82:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Validity Not Before: Sep 22 03:41:08 2026 GMT Not After : Sep 23 05:09:08 2026 GMT Subject: CN=3818AE5228DBA9C55700CD122F1BA5EA3D704695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:25:c5:4e:98:f1:23:24:a5:10:3d:fc:fa: 8e:38:01:9c:b2:0f:5a:f0:1a:19:23:53:7d:47:f7: 04:37:91:ab:b2:ff:09:8d:47:81:5a:71:e1:cc:81: a7:3b:e2:a0:50:21:f1:26:2b:44:85:7a:4f:10:88: fa:60:42:f9:31:b9:95:0b:17:40:6c:b0:75:52:e6: 82:2e:4f:7d:9a:ff:e5:6c:de:e5:60:6f:27:e4:2f: 8c:f5:5a:3e:d3:f2:82:bd:14:e6:f6:d8:54:b7:8f: 63:ec:2c:a8:f6:8b:4f:9f:2e:c0:1a:d2:2b:7f:37: 09:01:cd:28:81:71:18:2d:0d:e1:77:f0:80:bf:9d: 8c:37:f8:09:02:57:62:de:4a:12:0c:20:98:a2:c3: e9:00:6c:fe:7e:c8:88:6b:3c:4d:5a:9e:36:be:26: 0f:69:11:62:98:07:1c:4e:9f:f0:5e:66:63:25:93: 0f:49:e8:4e:9c:82:79:ee:71:e8:3c:09:86:a9:8e: 68:1c:cd:c7:44:c1:5b:bd:8d:fe:c0:25:a8:20:05: 99:db:d9:aa:d6:59:bd:a4:50:51:d5:58:ab:79:13: 59:1d:91:22:09:5b:ea:34:d6:f2:8f:36:50:6e:81: c3:12:6a:65:17:54:85:88:7c:78:02:3f:4c:92:da: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:AE:52:28:DB:A9:C5:57:00:CD:12:2F:1B:A5:EA:3D:70:46:95 X509v3 Authority Key Identifier: keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2f:e3:21:4c:30:a4:6b:54:06:a8:a5:1c:4f:44:97:16:ac: 96:a6:8e:1d:78:c5:03:40:00:b6:22:63:3b:65:6d:56:94:01: 4a:37:4e:98:7e:5e:ee:4c:a1:35:8c:df:76:41:e9:08:84:a6: 05:a8:83:a2:2f:98:6d:ec:dc:0c:1e:40:15:01:41:c0:a7:96: 08:ce:47:65:ba:67:52:fd:a4:84:0b:19:bd:69:6d:09:86:72: 8d:e3:eb:4a:2e:46:b6:b6:60:af:69:43:83:fc:aa:7c:d0:05: 3a:61:54:a9:27:8f:99:9c:6d:40:01:0c:0f:3b:79:04:61:6b: 0f:78:be:db:57:e0:41:6b:bd:4b:af:1c:0d:f3:87:39:8b:52: dd:31:69:b5:38:78:4e:7d:31:58:87:59:11:2a:6d:44:02:f7: 70:ac:83:8a:ad:35:2a:ed:69:64:69:52:03:3c:26:fc:f1:2f: 4b:d5:52:6c:0a:11:3c:82:f7:75:60:0d:83:39:10:cf:2c:2b: ca:6e:4a:9f:3b:53:e7:26:45:51:f8:3f:88:d4:51:24:5f:1f: 92:38:98:b5:f9:7f:d1:25:43:fc:f8:cb:29:84:b8:8e:49:86: 90:62:09:52:05:f1:ae:64:47:21:64:99:5b:0b:57:00:f9:05: 77:a5:05:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX57HTT8fLV2WpJ3CS2mJh13tgqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5NTFG OTk1MDc5QTAeFw0yNjA5MjIwMzQxMDhaFw0yNjA5MjMwNTA5MDhaMDMxMTAvBgNV BAMTKDM4MThBRTUyMjhEQkE5QzU1NzAwQ0QxMjJGMUJBNUVBM0Q3MDQ2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6iXFTpjxIySlED38+o44AZyy D1rwGhkjU31H9wQ3kauy/wmNR4FaceHMgac74qBQIfEmK0SFek8QiPpgQvkxuZUL F0BssHVS5oIuT32a/+Vs3uVgbyfkL4z1Wj7T8oK9FOb22FS3j2PsLKj2i0+fLsAa 0it/NwkBzSiBcRgtDeF38IC/nYw3+AkCV2LeShIMIJiiw+kAbP5+yIhrPE1anja+ Jg9pEWKYBxxOn/BeZmMlkw9J6E6cgnnuceg8CYapjmgczcdEwVu9jf7AJaggBZnb 2arWWb2kUFHVWKt5E1kdkSIJW+o01vKPNlBugcMSamUXVIWIfHgCP0yS2jXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOBiuUijbqcVXAM0SLxul6j1wRpUwHwYDVR0j BBgwFoAUbCHzcfzt0t4prpFLNT9pUfmVB5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVlYzZjZjgtOTY1NS00Mzc5LWJmMzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFG Q0VERDJERTI5QUU5MTRCMzUzRjY5NTFGOTk1MDc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzIxRjM3MUZDRUREMkRFMjlBRTkxNEIzNTNGNjk1MUY5OTUw NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5 NTFGOTk1MDc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIv4yFMMKRrVAaopRxPRJcWrJamjh14xQNA ALYiYztlbVaUAUo3Tph+Xu5MoTWM33ZB6QiEpgWog6IvmG3s3AweQBUBQcCnlgjO R2W6Z1L9pIQLGb1pbQmGco3j60ouRra2YK9pQ4P8qnzQBTphVKknj5mcbUABDA87 eQRhaw94vttX4EFrvUuvHA3zhzmLUt0xabU4eE59MViHWREqbUQC93Csg4qtNSrt aWRpUgM8JvzxL0vVUmwKETyC93VgDYM5EM8sK8puSp87U+cmRVH4P4jUUSRfH5I4 mLX5f9ElQ/z4yymEuI5JhpBiCVIF8a5kRyFkmVsLVwD5BXelBVQ= -----END CERTIFICATE-----Generated at Tue Sep 22 20:29:24 2026 by rpki-client