$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: 2Y9TfBhtGsgu/Lf+2hcXOKrUqPagSo5XESq4br/DZrQ= Subject key identifier: E1:B5:3D:3C:31:65:E7:19:7B:9D:6A:8A:04:6D:D7:CB:76:D0:A6:BD Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 1D8253FEE8D58B9A72B1FF2C31A29FF6A7699387 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:57:42 +0000 Manifest this update: Mon 21 Sep 2026 00:52:42 +0000 Manifest next update: Tue 22 Sep 2026 04:41:42 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 3: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: 9IHLFYUV1drxR2/zQ5wMwQX7pC2J9VCNULHk0c7vJGs=) 4: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) 5: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:82:53:fe:e8:d5:8b:9a:72:b1:ff:2c:31:a2:9f:f6:a7:69:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Sep 21 00:52:42 2026 GMT Not After : Sep 22 04:41:42 2026 GMT Subject: CN=E1B53D3C3165E7197B9D6A8A046DD7CB76D0A6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:e7:97:bc:9a:58:52:b8:4a:26:c7:a2:ae: 24:37:71:28:62:98:0e:ad:47:d1:b9:29:44:5e:28: 93:40:af:37:09:bc:ae:4a:0e:0c:99:2a:0c:f2:06: a3:9b:ba:a9:7c:68:a2:68:c9:59:8a:9d:25:80:7f: 0a:26:56:98:8f:ee:a1:9e:72:25:1f:6a:79:72:d0: 41:94:00:f1:f2:10:00:0a:f3:a0:d0:ca:f0:be:e4: b7:dd:97:5a:06:6c:24:a2:36:f7:ab:58:fc:b5:8c: 90:62:72:9f:c4:a1:cf:96:20:e7:31:ea:6d:5a:cb: 1b:4a:e8:e8:26:f9:57:6b:ea:52:4a:99:81:0d:cf: 0e:78:30:f2:ef:13:be:df:6e:05:2c:10:87:1a:c3: f5:20:4e:13:85:a4:51:aa:9e:09:dc:d9:9f:49:05: 31:b2:e2:26:71:ca:06:40:77:28:aa:9a:d1:2d:0f: 26:2b:8d:54:a2:19:2b:76:0d:40:a2:b0:7f:24:2a: 92:32:53:d6:f7:e3:4e:29:12:ab:4b:52:47:bc:c6: 7c:5b:b5:7a:d0:9b:f0:9d:c3:6a:24:00:30:14:49: ad:66:e7:09:c6:d5:21:7a:d5:79:df:8b:d9:c5:06: de:fd:48:9b:15:ee:dd:39:45:20:99:b5:bd:e1:f0: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B5:3D:3C:31:65:E7:19:7B:9D:6A:8A:04:6D:D7:CB:76:D0:A6:BD X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ef:b8:29:34:56:8d:aa:66:18:fb:5f:31:e6:55:3a:ad:c8: 1d:12:fe:ce:b3:86:c3:2d:af:e7:91:f6:f4:b5:6a:60:df:5f: d6:37:0a:e3:89:75:69:36:d9:90:96:4d:4b:af:e4:4c:f4:2e: a5:d8:f1:cb:2d:fa:1f:41:ea:e5:57:9f:36:95:4a:08:b2:67: c1:cd:88:1e:60:51:74:65:7d:a6:f6:b9:b4:89:bc:0c:d3:3c: 5d:82:67:a0:8c:c6:2e:11:c7:a6:e8:e4:58:7b:6c:38:9c:79: 2e:29:21:84:6c:35:ec:aa:f3:aa:b9:39:94:bd:cb:c6:5f:44: 47:de:27:ce:f5:83:d7:0a:d5:a1:53:1e:ea:1b:8c:52:95:10: 7a:ec:73:e3:e4:a3:cd:69:a5:fa:af:1f:78:86:d7:aa:80:6a: 9f:b6:b2:ab:d7:44:43:c4:64:1a:82:23:1d:ff:e7:fd:62:c0: a4:8b:2d:dd:da:85:cd:c1:1e:85:f1:7c:45:1e:2c:bc:98:3f: 57:65:ae:3d:90:a8:a4:7e:8c:d3:2d:63:65:53:c9:94:16:dd: c7:3e:22:f7:23:c2:e7:0b:94:f8:54:11:09:00:0f:70:27:f3: 06:a8:ae:89:a6:2a:1c:67:d4:50:96:0a:1b:38:9f:de:e4:91: 8b:5e:3d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYJT/ujVi5pysf8sMaKf9qdpk4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA5MjEwMDUyNDJaFw0yNjA5MjIwNDQxNDJaMDMxMTAvBgNV BAMTKEUxQjUzRDNDMzE2NUU3MTk3QjlENkE4QTA0NkREN0NCNzZEMEE2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8eeXvJpYUrhKJseiriQ3cShi mA6tR9G5KUReKJNArzcJvK5KDgyZKgzyBqObuql8aKJoyVmKnSWAfwomVpiP7qGe ciUfanly0EGUAPHyEAAK86DQyvC+5Lfdl1oGbCSiNverWPy1jJBicp/Eoc+WIOcx 6m1ayxtK6Ogm+Vdr6lJKmYENzw54MPLvE77fbgUsEIcaw/UgThOFpFGqngnc2Z9J BTGy4iZxygZAdyiqmtEtDyYrjVSiGSt2DUCisH8kKpIyU9b3404pEqtLUke8xnxb tXrQm/Cdw2okADAUSa1m5wnG1SF61Xnfi9nFBt79SJsV7t05RSCZtb3h8Oi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bU9PDFl5xl7nWqKBG3Xy3bQpr0wHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbvuCk0Vo2qZhj7XzHmVTqtyB0S/s6zhsMt r+eR9vS1amDfX9Y3CuOJdWk22ZCWTUuv5Ez0LqXY8cst+h9B6uVXnzaVSgiyZ8HN iB5gUXRlfab2ubSJvAzTPF2CZ6CMxi4Rx6bo5Fh7bDiceS4pIYRsNeyq86q5OZS9 y8ZfREfeJ871g9cK1aFTHuobjFKVEHrsc+Pko81ppfqvH3iG16qAap+2sqvXREPE ZBqCIx3/5/1iwKSLLd3ahc3BHoXxfEUeLLyYP1dlrj2QqKR+jNMtY2VTyZQW3cc+ IvcjwucLlPhUEQkAD3An8waorommKhxn1FCWChs4n97kkYtePVA= -----END CERTIFICATE-----Generated at Mon Sep 21 10:39:50 2026 by rpki-client