$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft File: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft (raw, json) Hash identifier: rdaH7H60S7XZfZ6f3LV4bx1EbAMqwE654U2cdw19dXI= Subject key identifier: A3:B3:98:89:E3:BD:9C:58:AD:66:D2:D2:D3:F5:71:76:39:A8:5B:EA Authority key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD Certificate issuer: /CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Certificate serial: 53AE9FB063AD3C7A0B1DFA0D35AF98BA744A560D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:56:05 +0000 Manifest this update: Mon 21 Sep 2026 19:51:05 +0000 Manifest next update: Tue 22 Sep 2026 19:56:05 +0000 Files and hashes: 1: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl (hash: Fr3iuvTwBicf7aUOiGv1+2Egx1jitiW5z7ciSiN5fV8=) 2: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: E+hRgGJJ8C/Srz5/ghgOOJ3QwYrgYhMnvxLJoD14unU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ae:9f:b0:63:ad:3c:7a:0b:1d:fa:0d:35:af:98:ba:74:4a:56:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Validity Not Before: Sep 21 19:51:05 2026 GMT Not After : Sep 22 19:56:05 2026 GMT Subject: CN=A3B39889E3BD9C58AD66D2D2D3F5717639A85BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:91:bc:70:43:8c:76:9b:18:43:1d:ea:81: af:94:39:ce:56:a8:b7:a3:e4:b7:a7:4b:ea:3e:55: 8b:5b:55:ab:6f:b4:03:0a:1e:6b:1c:e1:dd:75:8a: 72:15:f9:d4:9e:b3:ed:c0:90:f8:b7:81:29:75:1a: b4:49:a0:4a:ee:e5:3d:4b:da:36:28:17:29:0e:5e: 58:1d:7b:5a:73:9b:79:ac:8d:dd:7e:9b:a0:da:37: 5b:c6:67:4f:6f:8e:c7:eb:c7:68:3e:45:91:77:0c: 7b:64:f6:cb:29:85:b7:02:a5:52:3f:f2:2c:7a:24: 9a:1d:7b:0a:31:5f:01:3f:7d:55:5d:eb:ea:32:ef: 9b:22:6c:4c:90:f7:8e:43:d8:3b:65:43:71:82:37: 31:d2:e7:7e:04:d0:78:20:8a:9e:4f:e3:16:49:b2: 9b:4d:a6:7f:75:d9:05:aa:16:be:99:df:90:71:27: b7:2b:74:8d:4e:e0:cd:35:d4:58:f9:ac:c0:2e:79: 20:06:5d:96:61:cd:00:fc:c5:ec:87:4a:4f:8c:ec: 18:ee:89:37:12:1d:87:bc:ef:3b:e6:6f:55:a1:e6: 6f:16:36:3e:37:a6:a7:60:5c:94:59:c1:b0:51:b5: c9:96:16:0a:2d:24:e9:35:87:06:01:99:ee:91:a5: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B3:98:89:E3:BD:9C:58:AD:66:D2:D2:D3:F5:71:76:39:A8:5B:EA X509v3 Authority Key Identifier: keyid:6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e1:2c:9d:c4:f5:7a:c9:64:92:dd:2b:0b:18:3b:4c:6f:ea: 8e:89:a4:af:48:79:79:db:a3:18:f7:a6:fb:89:f7:65:e7:30: 89:a3:e0:54:1f:7c:8c:3c:f2:12:c4:2e:07:88:30:12:09:f1: f0:20:d1:01:01:4c:d7:7f:a2:82:55:b6:4b:59:4b:96:f2:3b: 55:33:b1:62:3c:3d:eb:a8:6e:a4:db:de:5f:79:a5:6b:d2:36: b3:08:27:3a:60:6c:f8:e0:6f:c5:1f:7e:68:89:51:70:ff:5d: ad:70:8f:cb:d0:da:10:6e:94:ac:0c:09:ec:7d:a4:31:95:15: 8c:3f:3d:db:17:1f:60:85:84:ab:09:bb:0a:a4:12:f9:53:e1: 2c:aa:29:94:83:c4:18:44:96:4e:cd:6c:0a:89:f5:c1:ae:6a: 9e:35:87:cd:8e:1b:44:aa:0c:af:56:8a:5b:ec:94:5b:cb:73: d4:53:7b:15:75:5c:b1:89:2d:6b:62:99:f3:8f:e9:9e:ca:10: a9:4e:cc:db:82:4e:dc:d3:fc:cd:a5:77:0b:b1:34:c5:61:18: be:eb:8f:fa:f0:20:50:53:6b:51:77:4c:e8:e6:2a:19:09:d2: 29:7d:68:66:ce:35:e1:05:5f:e1:ba:e9:39:d6:5e:87:9d:8d: c2:3d:6e:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU66fsGOtPHoLHfoNNa+YunRKVg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5 RTYzOUFDRDAeFw0yNjA5MjExOTUxMDVaFw0yNjA5MjIxOTU2MDVaMDMxMTAvBgNV BAMTKEEzQjM5ODg5RTNCRDlDNThBRDY2RDJEMkQzRjU3MTc2MzlBODVCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSG5G8cEOMdpsYQx3qga+UOc5W qLej5LenS+o+VYtbVatvtAMKHmsc4d11inIV+dSes+3AkPi3gSl1GrRJoEru5T1L 2jYoFykOXlgde1pzm3msjd1+m6DaN1vGZ09vjsfrx2g+RZF3DHtk9ssphbcCpVI/ 8ix6JJodewoxXwE/fVVd6+oy75sibEyQ945D2DtlQ3GCNzHS534E0Hggip5P4xZJ sptNpn912QWqFr6Z35BxJ7crdI1O4M011Fj5rMAueSAGXZZhzQD8xeyHSk+M7Bju iTcSHYe87zvmb1Wh5m8WNj43pqdgXJRZwbBRtcmWFgotJOk1hwYBme6RpTG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo7OYieO9nFitZtLS0/VxdjmoW+owHwYDVR0j BBgwFoAUbziDE0uux8EAyLKkk31T3p5jms0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVkNzM2ZGMtZTVkYi00MzgxLTk3MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0 QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5RTYzOUFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RjM4ODMxMzRCQUVDN0MxMDBDOEIyQTQ5MzdENTNERTlFNjM5 QUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVkNzM2ZGMtZTVkYi00MzgxLTk3 MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUz REU5RTYzOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDhLJ3E9XrJZJLdKwsYO0xv6o6JpK9IeXnb oxj3pvuJ92XnMImj4FQffIw88hLELgeIMBIJ8fAg0QEBTNd/ooJVtktZS5byO1Uz sWI8PeuobqTb3l95pWvSNrMIJzpgbPjgb8UffmiJUXD/Xa1wj8vQ2hBulKwMCex9 pDGVFYw/PdsXH2CFhKsJuwqkEvlT4SyqKZSDxBhElk7NbAqJ9cGuap41h82OG0Sq DK9WilvslFvLc9RTexV1XLGJLWtimfOP6Z7KEKlOzNuCTtzT/M2ldwuxNMVhGL7r j/rwIFBTa1F3TOjmKhkJ0il9aGbONeEFX+G66TnWXoedjcI9bq8= -----END CERTIFICATE-----Generated at Tue Sep 22 02:22:55 2026 by rpki-client