$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft File: 6788613027532DE8F60D043DF88AC63BAB03BBF8.mft (raw, json) Hash identifier: FaTGPnYBl2eYhANQatN7uwhEY5p7LgZ4w/8FP9MpMyk= Subject key identifier: 51:94:C5:9C:F1:4E:48:2A:CF:78:7F:AA:FA:F6:3A:8B:62:59:C3:62 Authority key identifier: 67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8 Certificate issuer: /CN=6788613027532DE8F60D043DF88AC63BAB03BBF8 Certificate serial: 43FB2072613FAD57A10F9EE8AE82A90995064AA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft Manifest number: BF Signing time: Mon 21 Sep 2026 07:36:11 +0000 Manifest this update: Mon 21 Sep 2026 07:31:10 +0000 Manifest next update: Tue 22 Sep 2026 10:23:10 +0000 Files and hashes: 1: 6788613027532DE8F60D043DF88AC63BAB03BBF8.crl (hash: QCnNfa9TA0tBsp8a4b8Rs13NuY60yPSo0iocYX1oxSw=) 2: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: 4cMlP64uyDCNnS+HV6/5myzDbaQzlXGJoTPK5CiDoaQ=) 3: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 9KpyEhEGhAy9FznniYWT52KZ7CJy6UiIPh+5fqTydWs=) 4: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: bN4+AtALc/9iyjNGa+tTVjtSTWUiYCkfUiJRmkaULIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.crl rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fb:20:72:61:3f:ad:57:a1:0f:9e:e8:ae:82:a9:09:95:06:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6788613027532DE8F60D043DF88AC63BAB03BBF8 Validity Not Before: Sep 21 07:31:10 2026 GMT Not After : Sep 22 10:23:10 2026 GMT Subject: CN=5194C59CF14E482ACF787FAAFAF63A8B6259C362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:0c:ec:2d:dc:c6:aa:86:7f:ee:42:b9:d2: e2:15:c0:c9:59:fa:4b:19:fc:ba:9b:3d:56:61:84: cf:b1:89:1c:93:7b:e6:f2:94:8e:f1:bc:f9:a6:14: bc:10:d5:2c:76:a3:f4:47:b7:19:db:e8:52:c9:94: eb:c9:36:b9:5d:08:47:67:53:20:2e:75:80:63:0e: 0f:0a:c1:04:ca:b9:5e:4d:5a:8c:2b:77:c9:fb:7e: 44:60:4a:e4:4c:a1:04:35:fd:65:84:82:8f:1d:ec: 8e:e5:32:b4:b8:40:de:89:c3:0a:bd:bd:6b:42:f3: 09:2e:35:ac:9b:86:73:21:14:d3:16:ab:d3:9a:38: 1f:9e:84:20:d6:96:9e:a9:87:5c:5b:88:96:d4:38: a7:4e:35:e2:74:e5:3b:bf:c7:10:66:3c:14:5d:c9: a8:0b:6e:41:c2:02:ec:8f:6a:04:2a:4e:97:09:78: ac:30:02:45:c7:17:13:91:bc:44:91:f9:b6:36:e5: 66:bc:0b:47:a1:ba:c8:bc:37:9d:1d:fc:f8:c9:4b: 60:c4:fe:2e:77:33:f1:e9:c0:b6:90:80:95:0f:5c: e7:1c:7d:a0:a9:0b:34:63:95:ca:d8:bb:71:37:78: 31:7f:02:dc:02:d3:3d:bc:e8:69:67:5b:f7:f3:cd: c0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:94:C5:9C:F1:4E:48:2A:CF:78:7F:AA:FA:F6:3A:8B:62:59:C3:62 X509v3 Authority Key Identifier: keyid:67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:11:14:5f:60:d7:50:9f:42:46:62:a5:6b:32:38:dc:77:b8: 65:78:fb:4b:5c:92:59:08:32:c0:71:46:43:26:7b:a9:51:57: a4:78:61:5e:c3:e6:42:d3:9b:c4:f0:3a:d1:03:30:7d:1e:74: aa:ed:09:06:b5:21:e4:dc:ee:ab:79:26:a9:83:13:e5:51:4d: 31:9b:86:c8:40:d2:d7:d0:17:52:a7:1a:7b:ff:0d:0d:a8:be: ba:15:50:44:29:99:6c:6c:25:38:a7:8c:b9:25:49:23:86:4c: fd:2c:5a:80:1c:a5:bb:b0:da:07:ad:f9:7d:2d:24:83:57:e1: e0:7a:0f:74:f9:42:c5:e7:ff:c2:28:d9:23:49:c6:0a:5d:72: b9:a4:b6:d1:a8:24:24:4d:e5:5d:1f:b4:21:e4:2c:d9:65:2c: 06:ea:31:7c:5c:41:6a:45:a1:e1:7c:bb:b2:80:f4:5c:bd:e2: 97:75:0e:7e:aa:ca:72:98:11:97:01:6d:81:43:de:1f:f2:5b: 9a:af:13:7c:5b:66:21:5b:ca:06:bd:44:88:d6:4b:a9:ab:04: e3:85:ea:f0:02:1e:85:41:ef:96:0f:f3:21:80:ee:82:1a:c7: d7:2f:67:23:31:ef:a6:9f:d2:9a:66:6e:1b:2b:c3:bc:58:59: c6:58:dd:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/sgcmE/rVehD57oroKpCZUGSqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4ODYxMzAyNzUzMkRFOEY2MEQwNDNERjg4QUM2M0JB QjAzQkJGODAeFw0yNjA5MjEwNzMxMTBaFw0yNjA5MjIxMDIzMTBaMDMxMTAvBgNV BAMTKDUxOTRDNTlDRjE0RTQ4MkFDRjc4N0ZBQUZBRjYzQThCNjI1OUMzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahgzsLdzGqoZ/7kK50uIVwMlZ +ksZ/LqbPVZhhM+xiRyTe+bylI7xvPmmFLwQ1Sx2o/RHtxnb6FLJlOvJNrldCEdn UyAudYBjDg8KwQTKuV5NWowrd8n7fkRgSuRMoQQ1/WWEgo8d7I7lMrS4QN6Jwwq9 vWtC8wkuNaybhnMhFNMWq9OaOB+ehCDWlp6ph1xbiJbUOKdONeJ05Tu/xxBmPBRd yagLbkHCAuyPagQqTpcJeKwwAkXHFxORvESR+bY25Wa8C0ehusi8N50d/PjJS2DE /i53M/HpwLaQgJUPXOccfaCpCzRjlcrYu3E3eDF/AtwC0z286GlnW/fzzcArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUZTFnPFOSCrPeH+q+vY6i2JZw2IwHwYDVR0j BBgwFoAUZ4hhMCdTLej2DQQ9+IrGO6sDu/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI2NGJmYjItZDQxZC00MzE3LWI5MmQtYmI5NDQxZmQwZGNmLzAvNjc4ODYxMzAy NzUzMkRFOEY2MEQwNDNERjg4QUM2M0JBQjAzQkJGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Nzg4NjEzMDI3NTMyREU4RjYwRDA0M0RGODhBQzYzQkFCMDNC QkY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc4ODYxMzAyNzUzMkRFOEY2MEQwNDNERjg4QUM2 M0JBQjAzQkJGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQRFF9g11CfQkZipWsyONx3uGV4+0tcklkI MsBxRkMme6lRV6R4YV7D5kLTm8TwOtEDMH0edKrtCQa1IeTc7qt5JqmDE+VRTTGb hshA0tfQF1KnGnv/DQ2ovroVUEQpmWxsJTinjLklSSOGTP0sWoAcpbuw2get+X0t JINX4eB6D3T5QsXn/8Io2SNJxgpdcrmkttGoJCRN5V0ftCHkLNllLAbqMXxcQWpF oeF8u7KA9Fy94pd1Dn6qynKYEZcBbYFD3h/yW5qvE3xbZiFbyga9RIjWS6mrBOOF 6vACHoVB75YP8yGA7oIax9cvZyMx76af0ppmbhsrw7xYWcZY3fc= -----END CERTIFICATE-----Generated at Mon Sep 21 15:39:31 2026 by rpki-client