$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft File: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft (raw, json) Hash identifier: +yhfiK3qhdV0pN+o/4+utXX0ChpyKs/8p5349/FR4xI= Subject key identifier: F7:55:EB:D1:19:4D:42:A5:72:4E:4D:34:9B:7F:5A:E4:D0:0D:C9:6A Authority key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB Certificate issuer: /CN=A91862140000/serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB Certificate serial: 0BA22808C4E462D450BAAB182542DA028DC34B90 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft Manifest number: 13E7 Signing time: Mon 21 Sep 2026 03:48:21 +0000 Manifest this update: Mon 21 Sep 2026 03:43:21 +0000 Manifest next update: Tue 22 Sep 2026 04:28:21 +0000 Files and hashes: 1: 3137392e36352e3139322e302f31382d3234203d3e203435373030.roa (hash: vQ5Ek57nvyv8QSxJkPzmegP9NNy53tUJ+4K3JUiqzFY=) 2: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl (hash: NcPJLB3G26iZ+Qoe6C3BtrRfUH23C0FpI17W4emsZd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a2:28:08:c4:e4:62:d4:50:ba:ab:18:25:42:da:02:8d:c3:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB Validity Not Before: Sep 21 03:43:21 2026 GMT Not After : Sep 22 04:28:21 2026 GMT Subject: CN=F755EBD1194D42A5724E4D349B7F5AE4D00DC96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:35:c0:4b:68:a5:d9:4b:27:35:79:d8:9d: 2b:4c:6c:d0:19:67:8d:2e:2d:b1:f9:2e:4e:9c:1e: 3c:9c:51:fa:49:3d:d4:ae:bb:73:7c:1c:d2:b1:ff: 3a:ca:d1:e9:f0:3b:2f:2d:83:a5:1d:9a:ee:ac:43: 1b:83:a9:84:7e:ff:55:ac:2f:91:15:38:f9:04:c0: 27:69:e1:99:c6:31:b8:98:6c:ec:39:ef:05:da:38: 0a:f0:6d:b5:55:56:c4:6e:3e:c9:c8:a6:04:4e:5b: 73:a9:f5:28:6a:ce:7c:06:1c:5a:ba:a0:c9:4b:49: c6:cd:7e:86:2e:70:e9:57:14:c0:56:7f:6b:bc:32: df:9f:76:18:33:de:ca:d4:24:94:9c:08:96:45:51: 41:bb:69:bd:26:bf:d9:dc:2e:44:8e:4d:86:6b:03: f4:36:7e:34:33:7c:f7:68:bf:8c:da:fa:da:34:81: 76:09:79:a1:35:c1:38:7f:2f:55:a8:38:3a:af:a6: 55:5f:44:71:59:d2:74:88:15:57:07:01:c2:3a:bc: 2f:25:2f:12:9b:98:66:9b:f9:53:c1:ed:51:f3:8f: ab:c3:99:9a:19:79:db:99:8f:56:d1:5f:82:6c:77: e1:fa:d3:84:cb:0b:7f:1b:08:67:e3:41:b6:45:2d: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:55:EB:D1:19:4D:42:A5:72:4E:4D:34:9B:7F:5A:E4:D0:0D:C9:6A X509v3 Authority Key Identifier: keyid:06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:45:26:a4:1b:2f:d1:86:35:30:b0:5c:63:c6:19:31:30:28: 05:3d:93:ae:13:bf:61:eb:b2:0e:87:92:a5:bc:d7:22:a2:36: 3b:d8:69:9f:09:d1:10:4f:29:00:6c:a7:9e:73:e4:27:5a:70: 5a:e3:e6:dc:fa:6a:7f:5e:ab:84:a4:c7:38:ea:42:2f:3e:65: 92:9c:6b:f1:e8:58:39:a8:2f:f1:d2:e0:58:14:60:56:05:4e: 45:9e:44:6e:56:e5:71:af:be:e0:54:ff:2d:91:c5:9e:6a:f6: fb:5e:01:d1:20:c0:f9:bf:32:26:d0:d2:17:cb:bb:7f:a8:b2: 59:f2:8b:bf:06:09:bd:3f:60:46:c4:a6:05:97:99:86:71:4d: f9:6b:93:94:d5:95:fd:8a:76:86:18:45:44:c8:a9:00:3f:ff: 3a:5c:63:89:2d:21:b6:7f:f6:3a:71:65:65:51:da:83:6f:73: 7b:85:8d:2c:2b:45:43:03:35:69:2b:66:c9:22:d3:65:e2:80: a9:96:a6:23:2c:fe:8b:30:3d:4f:50:44:fa:67:74:8c:88:0d: a4:6d:3a:58:4a:d3:5b:34:db:77:58:8b:28:0d:81:0b:aa:79: da:12:cd:77:b9:8b:1e:13:fe:91:e9:45:16:60:52:72:f2:b6: 43:4e:13:12 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUC6IoCMTkYtRQuqsYJULaAo3DS5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygwNkY0QjJEQjg0 QjM4NzAyQjVGM0E5MkE3ODkyNTVEOUNGRUYzRUVCMB4XDTI2MDkyMTAzNDMyMVoX DTI2MDkyMjA0MjgyMVowMzExMC8GA1UEAxMoRjc1NUVCRDExOTRENDJBNTcyNEU0 RDM0OUI3RjVBRTREMDBEQzk2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMYNcBLaKXZSyc1edidK0xs0BlnjS4tsfkuTpwePJxR+kk91K67c3wc0rH/ OsrR6fA7Ly2DpR2a7qxDG4OphH7/VawvkRU4+QTAJ2nhmcYxuJhs7DnvBdo4CvBt tVVWxG4+ycimBE5bc6n1KGrOfAYcWrqgyUtJxs1+hi5w6VcUwFZ/a7wy3592GDPe ytQklJwIlkVRQbtpvSa/2dwuRI5NhmsD9DZ+NDN892i/jNr62jSBdgl5oTXBOH8v Vag4Oq+mVV9EcVnSdIgVVwcBwjq8LyUvEpuYZpv5U8HtUfOPq8OZmhl525mPVtFf gmx34frThMsLfxsIZ+NBtkUtyicCAwEAAaOCAgUwggIBMB0GA1UdDgQWBBT3VevR GU1CpXJOTTSbf1rk0A3JajAfBgNVHSMEGDAWgBQG9LLbhLOHArXzqSp4klXZz+8+ 6zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzIvMDZGNEIyREI4NEIzODcwMkI1 RjNBOTJBNzg5MjU1RDlDRkVGM0VFQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJF QTYxRDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvQnZTeTI0U3pod0sxODZrcWVKSlYy Y192UHVzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8yLzA2RjRCMkRCODRCMzg3 MDJCNUYzQTkyQTc4OTI1NUQ5Q0ZFRjNFRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaRSakGy/RhjUw sFxjxhkxMCgFPZOuE79h67IOh5KlvNciojY72GmfCdEQTykAbKeec+QnWnBa4+bc +mp/XquEpMc46kIvPmWSnGvx6Fg5qC/x0uBYFGBWBU5FnkRuVuVxr77gVP8tkcWe avb7XgHRIMD5vzIm0NIXy7t/qLJZ8ou/Bgm9P2BGxKYFl5mGcU35a5OU1ZX9inaG GEVEyKkAP/86XGOJLSG2f/Y6cWVlUdqDb3N7hY0sK0VDAzVpK2bJItNl4oCplqYj LP6LMD1PUET6Z3SMiA2kbTpYStNbNNt3WIsoDYELqnnaEs13uYseE/6R6UUWYFJy 8rZDThMS -----END CERTIFICATE-----Generated at Mon Sep 21 12:15:49 2026 by rpki-client