$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft File: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft (raw, json) Hash identifier: mj9fkKULWooKaw+qKDAUVwjSTFmNzSTwMqeD6Lg/3vM= Subject key identifier: CE:25:60:02:36:CD:87:CC:05:94:DA:3B:93:2F:88:A4:07:90:A8:CC Authority key identifier: 6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 Certificate issuer: /CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Certificate serial: 42E81CE25903CA49486FEAC48236E14D610D5CDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:34:42 +0000 Manifest this update: Mon 21 Sep 2026 02:29:42 +0000 Manifest next update: Tue 22 Sep 2026 05:37:42 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: /9mhE8hilLMkdKj/KGoukj1sKVJz3HgKOnytnAx8zSY=) 2: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl (hash: goc9YWihfeu5l6Jh935tlP25iRdFgbZPMyaNL2ylmtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e8:1c:e2:59:03:ca:49:48:6f:ea:c4:82:36:e1:4d:61:0d:5c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Validity Not Before: Sep 21 02:29:42 2026 GMT Not After : Sep 22 05:37:42 2026 GMT Subject: CN=CE25600236CD87CC0594DA3B932F88A40790A8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:99:16:91:4b:e7:3d:41:46:6c:41:7a:4f: e6:8a:dd:6e:bb:81:c5:8e:71:b2:46:dc:c5:f7:bc: 8c:1f:c3:0e:08:65:f4:8c:de:6a:86:03:ae:4e:1f: f8:d5:a1:94:d9:77:0b:58:e2:f9:08:ab:2c:2d:65: 88:64:99:a3:3d:07:b4:f6:67:6d:b4:90:10:3b:e9: ef:e8:20:6c:11:c3:4c:db:a0:b8:e8:84:49:b7:32: 11:bd:a3:7f:e7:3f:6d:bd:cd:f0:2b:a6:35:88:ca: 81:2f:84:02:9a:e7:d0:b4:6a:42:c5:91:b4:ff:24: 62:a0:61:aa:1d:ae:d1:1c:13:e7:66:d5:a1:b4:d7: 60:a9:d4:88:fa:e6:23:5e:10:c8:a8:64:4a:54:30: ba:c0:ca:6b:08:3d:b8:af:7b:dd:66:1c:5e:12:81: 9d:1f:90:73:4b:f5:eb:19:be:39:2f:30:e9:14:fe: 5c:bf:e0:91:e7:4a:3e:3a:81:4a:a9:14:a4:43:c2: a7:21:64:e7:8d:73:50:17:e1:1a:a6:9c:f8:ac:08: b3:75:01:7e:34:f6:51:42:16:95:d4:22:90:32:a1: 7e:b6:b0:09:de:39:c1:cb:f8:b8:ca:b8:7e:f2:38: 05:11:ed:b1:ce:6d:66:f9:d9:da:20:c6:da:ef:89: 07:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:60:02:36:CD:87:CC:05:94:DA:3B:93:2F:88:A4:07:90:A8:CC X509v3 Authority Key Identifier: keyid:6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0b:2c:3e:ff:f4:e0:4d:d3:5e:c7:10:21:f5:f3:ed:13:89: 90:14:a5:81:b8:4a:e3:a0:ae:59:3c:91:a0:42:81:4a:cc:b1: 49:62:1c:cc:71:eb:d9:93:5f:ae:79:28:97:3d:f5:1c:61:6f: 85:c1:8b:08:f7:c6:dd:0c:36:2c:49:2b:ad:51:b5:fb:5b:71: 32:ab:25:2c:b2:f4:95:fa:8b:16:9e:99:82:74:5c:8e:d7:d0: 22:5d:f5:ea:49:ac:6f:a7:1e:68:e7:ea:1d:16:61:ad:0b:7c: 34:76:b3:e3:4b:fc:8f:42:2d:56:c7:e5:30:b4:fb:0b:6e:42: f4:b0:3b:8d:98:e9:ad:1b:81:7f:b1:39:55:ff:ba:67:41:0e: 94:7f:b0:b2:6f:72:62:9b:6f:0c:ee:5b:f4:cf:d8:e9:1d:9c: 24:56:22:8e:af:ff:f9:8c:f3:9e:69:9c:38:ff:9e:22:ff:09: 01:95:ab:f1:62:d2:97:7e:c3:aa:da:eb:a0:18:48:aa:29:50: f0:49:7f:70:cd:d4:aa:f2:bc:55:a9:57:8f:e0:2d:2a:81:7e: 78:f3:5e:38:df:c9:a7:2d:4a:44:75:7a:fb:fb:12:ad:6c:c6: 9e:7e:7e:e2:17:e0:d1:7c:30:06:61:f7:3c:6a:84:a9:a9:6c: 70:97:f1:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQugc4lkDyklIb+rEgjbhTWENXN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZD N0NCRDQ5NzAeFw0yNjA5MjEwMjI5NDJaFw0yNjA5MjIwNTM3NDJaMDMxMTAvBgNV BAMTKENFMjU2MDAyMzZDRDg3Q0MwNTk0REEzQjkzMkY4OEE0MDc5MEE4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPJkWkUvnPUFGbEF6T+aK3W67 gcWOcbJG3MX3vIwfww4IZfSM3mqGA65OH/jVoZTZdwtY4vkIqywtZYhkmaM9B7T2 Z220kBA76e/oIGwRw0zboLjohEm3MhG9o3/nP229zfArpjWIyoEvhAKa59C0akLF kbT/JGKgYaodrtEcE+dm1aG012Cp1Ij65iNeEMioZEpUMLrAymsIPbive91mHF4S gZ0fkHNL9esZvjkvMOkU/ly/4JHnSj46gUqpFKRDwqchZOeNc1AX4RqmnPisCLN1 AX409lFCFpXUIpAyoX62sAneOcHL+LjKuH7yOAUR7bHObWb52dogxtrviQfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziVgAjbNh8wFlNo7ky+IpAeQqMwwHwYDVR0j BBgwFoAUahOHEqHSyDj4Y6e4gu1/1sfL1JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiMWFiN2YtZTQ1MS00MGQxLTliNzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJB MUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZDN0NCRDQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QTEzODcxMkExRDJDODM4Rjg2M0E3Qjg4MkVEN0ZENkM3Q0JE NDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdG RDZDN0NCRDQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8LLD7/9OBN017HECH18+0TiZAUpYG4SuOg rlk8kaBCgUrMsUliHMxx69mTX655KJc99Rxhb4XBiwj3xt0MNixJK61RtftbcTKr JSyy9JX6ixaemYJ0XI7X0CJd9epJrG+nHmjn6h0WYa0LfDR2s+NL/I9CLVbH5TC0 +wtuQvSwO42Y6a0bgX+xOVX/umdBDpR/sLJvcmKbbwzuW/TP2OkdnCRWIo6v//mM 855pnDj/niL/CQGVq/Fi0pd+w6ra66AYSKopUPBJf3DN1KryvFWpV4/gLSqBfnjz XjjfyactSkR1evv7Eq1sxp5+fuIX4NF8MAZh9zxqhKmpbHCX8Ws= -----END CERTIFICATE-----Generated at Mon Sep 21 23:26:38 2026 by rpki-client