$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft File: 6D8C2202C602D4BCB9586F638744BA643908A389.mft (raw, json) Hash identifier: UcClRo/8ip3Y0OIHerFrhbDkFLXvd20WZwVcPJIAhtg= Subject key identifier: 1E:9C:53:A1:CF:FB:3E:2E:A5:05:D2:13:2F:78:65:5B:FB:0A:BF:4A Authority key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 Certificate issuer: /CN=6D8C2202C602D4BCB9586F638744BA643908A389 Certificate serial: 20611D7BBD95B47C2846E7758E7EABBE3D7DF0BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft Manifest number: BE Signing time: Tue 22 Sep 2026 08:11:45 +0000 Manifest this update: Tue 22 Sep 2026 08:06:45 +0000 Manifest next update: Wed 23 Sep 2026 10:15:45 +0000 Files and hashes: 1: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: b7wBGbC9SNhjzw8V9K2lv7CY6SFtdKxPdtK4cOG4BhI=) 2: 6D8C2202C602D4BCB9586F638744BA643908A389.crl (hash: 9A5BtwEO4+fWU8CTR6N3hcOSXs6niyuY+J2Cu0Ah44g=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: m+uFtZihUm3fWV/iOrWY8zLaQsNI9BmUlq7mnOF09qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:61:1d:7b:bd:95:b4:7c:28:46:e7:75:8e:7e:ab:be:3d:7d:f0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D8C2202C602D4BCB9586F638744BA643908A389 Validity Not Before: Sep 22 08:06:45 2026 GMT Not After : Sep 23 10:15:45 2026 GMT Subject: CN=1E9C53A1CFFB3E2EA505D2132F78655BFB0ABF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:8c:89:01:b4:cf:fd:bd:b1:dc:4f:48:aa: eb:77:e0:9d:b2:52:cb:d5:a0:01:ef:b3:8f:10:88: 22:84:69:e1:42:b4:6c:31:5a:85:ca:8d:27:c4:23: a8:ac:6c:16:2b:91:c9:0f:e2:cf:cb:f2:42:d4:8f: 2c:b5:54:63:1b:8f:91:84:c4:1d:3e:02:b2:0e:b7: dd:51:2f:b6:25:db:cf:9e:6d:c1:7b:65:33:e5:6e: e9:af:36:8c:a2:b9:87:73:07:cd:d2:50:8c:42:82: 0f:11:c7:1b:56:7d:6e:31:5f:08:e0:84:01:a3:ee: 9c:da:2b:b0:45:4b:14:a6:99:91:96:15:88:8b:12: 89:0c:fd:07:04:40:c2:61:05:87:72:6e:37:df:0b: 0a:bf:76:93:ce:a3:87:de:0c:b4:bc:1e:e9:fc:b7: de:90:6d:80:87:ce:cb:ae:4c:64:8d:fc:bb:87:23: 25:80:37:38:46:e0:a7:de:29:bf:b5:66:ca:ee:9a: d5:dc:32:14:cc:e5:22:9d:e0:70:88:02:cd:0b:99: d0:3e:e5:6b:6e:a5:6e:e5:22:61:a7:cd:0d:da:11: 4e:68:54:9a:4b:6f:11:ee:5e:da:d4:17:e7:51:2b: 3e:5f:b7:9b:9c:a8:de:6e:fe:ce:cb:1f:34:eb:1b: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9C:53:A1:CF:FB:3E:2E:A5:05:D2:13:2F:78:65:5B:FB:0A:BF:4A X509v3 Authority Key Identifier: keyid:6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f8:93:b5:52:1b:18:ec:8e:33:41:0f:93:d5:0f:d3:1b:5e: 5c:db:05:80:52:77:fc:b1:38:e6:90:1c:62:4e:70:3b:61:a0: ac:e9:4a:81:f5:a6:71:64:17:d2:79:93:33:7d:42:f6:ac:5d: 5d:01:52:b1:fc:9b:74:dc:d4:c5:0b:1f:9b:23:29:5f:96:30: 0f:0a:27:46:b5:f5:71:1a:48:3e:97:c2:2a:11:18:60:b1:e2: fd:a6:75:9c:a0:47:88:3b:40:e3:ad:a5:9a:af:9f:ac:3c:b8: 73:11:ef:1e:12:14:8a:1f:99:a2:38:a7:f8:72:a3:32:ad:39: 1c:84:56:9f:b0:14:56:0d:70:2b:c0:4c:1b:d7:53:63:6e:b9: 3d:db:c1:66:c8:1f:12:8e:15:06:91:19:a7:58:56:07:89:34: 60:1f:50:be:8e:8b:59:45:f1:d4:26:40:0d:5f:41:35:48:3c: 7e:37:d1:be:22:90:ae:89:82:bf:b0:4d:23:c7:6e:59:55:a8: 13:95:4d:a8:1a:d8:90:fc:0d:9b:0e:30:6b:78:67:e9:07:90: 40:a5:e8:f2:e7:a0:bb:df:0b:ae:90:70:a0:04:b5:22:43:e0: f4:36:bd:a2:e0:bc:84:58:39:cd:71:3f:41:9d:e5:9e:b6:fe: 9b:0e:3a:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGEde72VtHwoRud1jn6rvj198L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ4QzIyMDJDNjAyRDRCQ0I5NTg2RjYzODc0NEJBNjQz OTA4QTM4OTAeFw0yNjA5MjIwODA2NDVaFw0yNjA5MjMxMDE1NDVaMDMxMTAvBgNV BAMTKDFFOUM1M0ExQ0ZGQjNFMkVBNTA1RDIxMzJGNzg2NTVCRkIwQUJGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMXoyJAbTP/b2x3E9Iqut34J2y UsvVoAHvs48QiCKEaeFCtGwxWoXKjSfEI6isbBYrkckP4s/L8kLUjyy1VGMbj5GE xB0+ArIOt91RL7Yl28+ebcF7ZTPlbumvNoyiuYdzB83SUIxCgg8RxxtWfW4xXwjg hAGj7pzaK7BFSxSmmZGWFYiLEokM/QcEQMJhBYdybjffCwq/dpPOo4feDLS8Hun8 t96QbYCHzsuuTGSN/LuHIyWANzhG4KfeKb+1ZsrumtXcMhTM5SKd4HCIAs0LmdA+ 5WtupW7lImGnzQ3aEU5oVJpLbxHuXtrUF+dRKz5ft5ucqN5u/s7LHzTrG7dfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpxToc/7Pi6lBdITL3hlW/sKv0owHwYDVR0j BBgwFoAUbYwiAsYC1Ly5WG9jh0S6ZDkIo4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFlZTM3NjUtMGFiYi00YmEzLWEwMGQtY2JjZWM4Mzk5OTI4LzAvNkQ4QzIyMDJD NjAyRDRCQ0I5NTg2RjYzODc0NEJBNjQzOTA4QTM4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDhDMjIwMkM2MDJENEJDQjk1ODZGNjM4NzQ0QkE2NDM5MDhB Mzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNkQ4QzIyMDJDNjAyRDRCQ0I5NTg2RjYzODc0NEJB NjQzOTA4QTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL4k7VSGxjsjjNBD5PVD9MbXlzbBYBSd/yx OOaQHGJOcDthoKzpSoH1pnFkF9J5kzN9QvasXV0BUrH8m3Tc1MULH5sjKV+WMA8K J0a19XEaSD6XwioRGGCx4v2mdZygR4g7QOOtpZqvn6w8uHMR7x4SFIofmaI4p/hy ozKtORyEVp+wFFYNcCvATBvXU2NuuT3bwWbIHxKOFQaRGadYVgeJNGAfUL6Oi1lF 8dQmQA1fQTVIPH430b4ikK6Jgr+wTSPHbllVqBOVTaga2JD8DZsOMGt4Z+kHkECl 6PLnoLvfC66QcKAEtSJD4PQ2vaLgvIRYOc1xP0Gd5Z62/psOOuY= -----END CERTIFICATE-----Generated at Tue Sep 22 19:39:08 2026 by rpki-client