$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft File: 6D157C9F12B387F14489E16709B7918837CC6D0D.mft (raw, json) Hash identifier: vOX1PxbKbhLOUyV+HXJqiELDXgu4dYX8deP6nhnLwMc= Subject key identifier: C6:C6:C4:7E:21:98:2A:63:C2:1B:DF:AD:86:9D:A7:11:16:5D:88:5C Authority key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D Certificate issuer: /CN=6D157C9F12B387F14489E16709B7918837CC6D0D Certificate serial: 71B7D929E699B462EEC9140CDE9D02008DEA2E1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft Manifest number: BE Signing time: Mon 21 Sep 2026 22:39:42 +0000 Manifest this update: Mon 21 Sep 2026 22:34:42 +0000 Manifest next update: Wed 23 Sep 2026 00:07:42 +0000 Files and hashes: 1: 6D157C9F12B387F14489E16709B7918837CC6D0D.crl (hash: K8gtgBZw82rqiniUGnLTLnGDNOniI2w6kk/m0NizQ8s=) 2: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: NlPuBH9s19urTN9l/ySJyKm6WWO9NdJomGBorLJ9CcM=) 3: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: Q1+ewmleGWvKt5GVutrjmiB3bltbmXv4+SV22bkfQSA=) 4: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: VkyPTF+RY+z/p6xoTjLQ0ZWN42gQ1j6IA9bwlr+r6r8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b7:d9:29:e6:99:b4:62:ee:c9:14:0c:de:9d:02:00:8d:ea:2e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D157C9F12B387F14489E16709B7918837CC6D0D Validity Not Before: Sep 21 22:34:42 2026 GMT Not After : Sep 23 00:07:42 2026 GMT Subject: CN=C6C6C47E21982A63C21BDFAD869DA711165D885C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:0e:7c:21:5d:e5:46:6d:88:ae:48:2c:37: f4:2a:5e:c2:f5:e5:7d:ff:01:80:df:f8:22:30:e5: c6:3a:3a:13:8d:96:45:24:a5:cf:56:2c:d4:5a:a4: be:44:00:ae:0f:49:a0:c9:0d:82:fc:00:f1:7b:dc: 75:ad:83:5c:12:1b:fb:fe:82:4b:f8:a1:7a:ae:02: 4a:c0:1d:53:e6:0c:d1:3c:87:47:08:46:fd:dc:62: 2f:45:26:c4:a3:8e:77:2c:c9:d7:e7:f5:fe:2d:00: a0:c9:14:cb:4f:d2:ed:cb:37:22:b6:57:e9:6c:05: ee:66:ad:26:1b:35:dc:7c:70:5c:f6:d5:f7:cc:06: 90:ef:65:6f:0f:3e:ce:fa:b0:a3:f2:a2:27:19:b8: bd:cb:1e:a3:e7:c8:66:3a:62:74:dd:47:4f:54:20: b4:34:10:3f:54:57:ba:83:d6:dc:0c:ad:c5:d9:29: 64:ac:66:57:3e:0c:ae:c0:b5:fb:c1:1f:ee:b2:c2: 8c:55:74:9f:0b:d8:22:52:b2:cc:df:4d:7e:39:d5: 8f:ca:dc:62:21:99:55:69:d6:04:06:7c:11:3e:4c: 24:30:c8:cc:51:51:2d:2d:a3:2c:d9:c0:c6:13:d9: 84:ea:ee:3a:e8:93:9d:c6:fb:aa:4a:68:58:53:35: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C6:C4:7E:21:98:2A:63:C2:1B:DF:AD:86:9D:A7:11:16:5D:88:5C X509v3 Authority Key Identifier: keyid:6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:53:41:a7:9d:97:f6:d9:b3:63:7d:bf:26:af:3a:09:8e:76: 53:8b:b3:1e:07:36:f2:09:ee:51:7f:85:10:16:92:3c:90:13: 9a:ad:a5:31:89:64:4f:fb:6d:f9:80:79:8c:a4:cd:e5:d8:e6: f4:d5:68:eb:f6:39:ef:45:65:b5:45:e1:fc:b2:5a:7b:e8:8b: 99:12:c2:71:e3:b7:a1:dd:e9:7f:b4:d5:59:fd:a7:34:9e:a4: 50:f0:63:2f:a0:ef:8f:ac:a3:31:dc:25:71:e3:f3:79:7b:2f: 2c:e9:79:10:73:84:e8:45:c5:4e:a9:76:52:fb:e6:92:3c:70: df:83:fb:fa:ad:3e:c9:7a:f8:94:20:d5:d8:10:67:ce:79:e6: 60:eb:d6:9d:8a:d3:a8:68:47:df:4d:2e:26:d8:53:1c:4e:a5: 06:83:c9:ce:a1:63:bd:04:cb:36:20:f7:6f:59:6f:fd:f6:f6: 86:e1:68:f1:8c:0e:da:b2:26:b0:91:77:1d:a2:cd:7b:4e:4e: 30:17:39:b3:49:d9:3f:2d:66:04:8c:33:a2:84:e1:5f:8f:90: 7f:8e:27:8f:f2:bf:dc:30:0b:0b:1a:21:cf:0f:c4:1b:af:b5: da:5a:1c:6a:10:71:c5:20:ff:4a:a4:36:22:62:6a:35:02:50: 89:61:2c:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbfZKeaZtGLuyRQM3p0CAI3qLhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkxODgz N0NDNkQwRDAeFw0yNjA5MjEyMjM0NDJaFw0yNjA5MjMwMDA3NDJaMDMxMTAvBgNV BAMTKEM2QzZDNDdFMjE5ODJBNjNDMjFCREZBRDg2OURBNzExMTY1RDg4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2g58IV3lRm2IrkgsN/QqXsL1 5X3/AYDf+CIw5cY6OhONlkUkpc9WLNRapL5EAK4PSaDJDYL8APF73HWtg1wSG/v+ gkv4oXquAkrAHVPmDNE8h0cIRv3cYi9FJsSjjncsydfn9f4tAKDJFMtP0u3LNyK2 V+lsBe5mrSYbNdx8cFz21ffMBpDvZW8PPs76sKPyoicZuL3LHqPnyGY6YnTdR09U ILQ0ED9UV7qD1twMrcXZKWSsZlc+DK7AtfvBH+6ywoxVdJ8L2CJSsszfTX451Y/K 3GIhmVVp1gQGfBE+TCQwyMxRUS0toyzZwMYT2YTq7jrok53G+6pKaFhTNZsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxsbEfiGYKmPCG9+thp2nERZdiFwwHwYDVR0j BBgwFoAUbRV8nxKzh/FEieFnCbeRiDfMbQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEyYmZlOWEtMzgyMy00NGU5LTk3YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYx MkIzODdGMTQ0ODlFMTY3MDlCNzkxODgzN0NDNkQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDE1N0M5RjEyQjM4N0YxNDQ4OUUxNjcwOUI3OTE4ODM3Q0M2 RDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkx ODgzN0NDNkQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRTQaedl/bZs2N9vyavOgmOdlOLsx4HNvIJ 7lF/hRAWkjyQE5qtpTGJZE/7bfmAeYykzeXY5vTVaOv2Oe9FZbVF4fyyWnvoi5kS wnHjt6Hd6X+01Vn9pzSepFDwYy+g74+sozHcJXHj83l7LyzpeRBzhOhFxU6pdlL7 5pI8cN+D+/qtPsl6+JQg1dgQZ8555mDr1p2K06hoR99NLibYUxxOpQaDyc6hY70E yzYg929Zb/329obhaPGMDtqyJrCRdx2izXtOTjAXObNJ2T8tZgSMM6KE4V+PkH+O J4/yv9wwCwsaIc8PxBuvtdpaHGoQccUg/0qkNiJiajUCUIlhLI0= -----END CERTIFICATE-----Generated at Tue Sep 22 13:33:55 2026 by rpki-client