$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft File: 822159966075595E4F7698AB063AA58F2CE6EFF6.mft (raw, json) Hash identifier: L3ygtCKNNy1AHV27KOIFCrzIY88u1in165A+Ok23TlY= Subject key identifier: 6C:53:22:A6:8E:FE:0F:B4:85:EF:2C:2C:61:23:05:B5:4A:0A:B3:AA Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Certificate serial: 427E698BB1D19E300B4607F0192AD8C7006B86F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:25:52 +0000 Manifest this update: Mon 21 Sep 2026 07:20:52 +0000 Manifest next update: Tue 22 Sep 2026 09:17:52 +0000 Files and hashes: 1: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=) 2: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0=) 3: 822159966075595E4F7698AB063AA58F2CE6EFF6.crl (hash: LF7uDqOAlXvNOC2CdKZRglbOiltGyzWN6mkBQKWUItM=) 4: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7e:69:8b:b1:d1:9e:30:0b:46:07:f0:19:2a:d8:c7:00:6b:86:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Validity Not Before: Sep 21 07:20:52 2026 GMT Not After : Sep 22 09:17:52 2026 GMT Subject: CN=6C5322A68EFE0FB485EF2C2C612305B54A0AB3AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:c5:2e:67:29:21:a9:31:a7:8e:7c:78:92: ce:73:ca:a0:a9:11:b3:69:fa:7e:77:2d:d3:8a:e9: d6:78:11:12:34:b5:b5:93:94:f6:b3:72:2a:29:2e: 25:b7:94:a5:2e:73:5a:86:1e:d8:2d:b0:f2:c2:1d: fd:e2:09:10:c5:27:35:95:5d:e4:b4:28:8f:81:f4: d7:89:9b:6f:24:6b:16:1a:91:5d:8e:eb:46:3f:67: 75:86:d1:af:71:f3:0e:6e:5c:24:84:c5:06:31:5c: 9d:df:93:e1:5a:bf:2a:63:88:28:7f:89:af:31:e3: 24:9e:3e:6b:18:74:30:86:3e:98:22:6d:55:d5:a4: fb:a1:4f:18:04:a4:aa:13:ec:ae:b4:71:69:16:4c: 38:a7:8a:c5:a9:fa:08:b7:07:4b:7a:f4:a5:fb:9f: 05:92:a5:60:db:b1:b9:f3:54:3c:92:6f:b2:50:d4: 10:c2:7a:34:96:f0:01:95:6b:d8:f3:9a:2d:76:d3: 80:fd:fb:07:7b:e9:ee:d6:93:e8:a7:a3:dc:b8:04: a6:96:11:e0:35:f6:e0:9e:68:6b:c4:9c:27:da:53: 03:ae:98:ad:5e:de:43:cc:3a:5d:81:cd:63:60:da: 64:e2:6f:77:53:fb:db:29:3a:d0:43:49:2e:fb:05: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:53:22:A6:8E:FE:0F:B4:85:EF:2C:2C:61:23:05:B5:4A:0A:B3:AA X509v3 Authority Key Identifier: keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:39:07:98:10:fd:76:76:0b:20:ea:41:8a:50:4d:2a:27:2c: 76:88:c5:0c:0b:4d:58:d8:65:1c:32:8b:0e:19:ee:25:96:91: 4c:3b:74:40:17:60:e6:1f:92:a9:77:2b:9f:74:2b:0a:7b:37: 40:c0:38:5f:c5:71:e9:f3:dd:60:f2:9e:7e:1e:6e:33:89:a3: 99:0c:52:ee:26:4e:ad:10:fb:83:d3:a0:b5:3f:ee:35:ec:a2: 21:e5:ba:e8:32:f6:06:b9:b7:14:d0:b2:a0:77:0c:1c:fe:6b: b5:2f:72:99:46:43:49:a9:5e:4c:74:e1:3c:f6:38:c5:03:e2: 72:62:5a:d6:c3:4d:f0:46:59:7f:c9:36:c6:79:93:53:4e:c5: 33:16:93:41:af:be:bf:ca:5c:4c:f7:fb:4f:cd:7b:77:70:da: 5d:41:18:f7:ac:e9:f8:b1:93:60:a3:84:20:c1:0c:b1:6a:65: c8:d2:19:5f:0f:87:c6:50:21:51:ee:16:f9:dc:97:ef:3c:23: bf:8e:5a:40:fa:63:8d:05:cb:3d:33:ee:f7:9a:2e:ab:ec:79: a8:31:d4:de:4d:9e:16:cb:55:fa:b5:c9:40:22:db:88:82:3c: 87:93:7c:0b:02:df:da:04:45:e8:c0:91:79:0e:e6:32:07:82: 31:59:1e:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn5pi7HRnjALRgfwGSrYxwBrhvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYy Q0U2RUZGNjAeFw0yNjA5MjEwNzIwNTJaFw0yNjA5MjIwOTE3NTJaMDMxMTAvBgNV BAMTKDZDNTMyMkE2OEVGRTBGQjQ4NUVGMkMyQzYxMjMwNUI1NEEwQUIzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIL8UuZykhqTGnjnx4ks5zyqCp EbNp+n53LdOK6dZ4ERI0tbWTlPazciopLiW3lKUuc1qGHtgtsPLCHf3iCRDFJzWV XeS0KI+B9NeJm28kaxYakV2O60Y/Z3WG0a9x8w5uXCSExQYxXJ3fk+FavypjiCh/ ia8x4ySePmsYdDCGPpgibVXVpPuhTxgEpKoT7K60cWkWTDinisWp+gi3B0t69KX7 nwWSpWDbsbnzVDySb7JQ1BDCejSW8AGVa9jzmi1204D9+wd76e7Wk+ino9y4BKaW EeA19uCeaGvEnCfaUwOumK1e3kPMOl2BzWNg2mTib3dT+9spOtBDSS77BQvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbFMipo7+D7SF7ywsYSMFtUoKs6owHwYDVR0j BBgwFoAUgiFZlmB1WV5PdpirBjqljyzm7/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2ZDE4NWUtZDRmNC00ODIwLWI0YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2 MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYyQ0U2RUZGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjIxNTk5NjYwNzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJDRTZF RkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1 OEYyQ0U2RUZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA5B5gQ/XZ2CyDqQYpQTSonLHaIxQwLTVjY ZRwyiw4Z7iWWkUw7dEAXYOYfkql3K590Kwp7N0DAOF/Fcenz3WDynn4ebjOJo5kM Uu4mTq0Q+4PToLU/7jXsoiHluugy9ga5txTQsqB3DBz+a7UvcplGQ0mpXkx04Tz2 OMUD4nJiWtbDTfBGWX/JNsZ5k1NOxTMWk0Gvvr/KXEz3+0/Ne3dw2l1BGPes6fix k2CjhCDBDLFqZcjSGV8Ph8ZQIVHuFvncl+88I7+OWkD6Y40Fyz0z7veaLqvseagx 1N5NnhbLVfq1yUAi24iCPIeTfAsC39oERejAkXkO5jIHgjFZHq4= -----END CERTIFICATE-----Generated at Tue Sep 22 03:11:37 2026 by rpki-client