$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json) Hash identifier: jANXSJhMlQjPKA/lmkNWep7hq8p7E3k55jJ2msrcvo0= Subject key identifier: B9:21:80:69:E4:1C:75:92:2D:33:A0:8E:21:6E:9E:23:6C:A5:76:29 Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Certificate serial: 20CD715028964AB609EDFA24D9F77589E25E5FB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft Manifest number: BC Signing time: Sun 20 Sep 2026 14:04:21 +0000 Manifest this update: Sun 20 Sep 2026 13:59:21 +0000 Manifest next update: Mon 21 Sep 2026 16:16:21 +0000 Files and hashes: 1: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: ToftyhmXuOteTnC/fl7NhkV5EfTvK+WCnf+auyORbVY=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:cd:71:50:28:96:4a:b6:09:ed:fa:24:d9:f7:75:89:e2:5e:5f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Validity Not Before: Sep 20 13:59:21 2026 GMT Not After : Sep 21 16:16:21 2026 GMT Subject: CN=B9218069E41C75922D33A08E216E9E236CA57629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:51:d2:a8:b4:d1:c5:c6:70:55:53:fe:d4: 65:62:97:38:cf:5a:e0:91:a8:ef:62:1f:ec:a5:62: c7:30:96:84:5c:42:e8:00:5c:e1:b6:dd:90:53:ee: d9:34:fc:b1:e5:c0:8b:e6:23:c5:bf:06:67:6e:12: 56:33:28:57:d1:d7:27:de:5d:fc:a3:c7:0d:8b:82: 2e:ec:bd:f7:7f:bb:84:eb:45:75:26:0d:16:9e:67: 24:c6:f2:77:67:a8:90:4a:8b:26:b0:22:90:6b:01: fc:b7:0f:68:7c:9f:15:63:a9:ab:0b:f3:34:7a:e2: 9e:82:fb:47:7d:4c:5b:0a:48:76:f8:46:3c:d4:2d: 51:ba:ee:a6:99:a1:b3:8f:cf:8a:2d:d2:4b:29:07: 62:d6:37:2f:12:fd:16:9a:8d:8d:2e:7e:a4:0a:a8: 12:2a:96:41:9c:7b:0e:10:3b:e8:2c:8c:17:b1:92: 3d:33:7c:c0:4c:96:3d:3a:da:b5:24:0d:49:25:8a: 49:2d:01:f9:4a:21:75:2c:b2:c1:27:76:63:48:3f: 45:b2:fa:ee:e3:e8:b3:f8:07:6b:d8:4a:0b:69:1c: a0:b8:4e:e0:6a:d9:4a:55:ff:cd:24:bc:d7:35:bb: 4f:ce:8d:60:90:db:42:9d:a5:25:dc:9d:fb:f8:b1: 15:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:21:80:69:E4:1C:75:92:2D:33:A0:8E:21:6E:9E:23:6C:A5:76:29 X509v3 Authority Key Identifier: keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:66:b3:22:69:c6:ec:d4:e5:48:b1:27:ee:af:3f:e2:23:72: 5a:f9:d5:a7:bb:95:79:84:2d:4d:02:ac:57:3b:bf:52:88:ef: 35:c9:11:ce:11:60:d9:38:e6:1e:01:62:50:9a:8e:69:a7:5a: ee:e8:73:c1:b2:07:c5:74:73:5b:b8:e9:d5:9a:f2:61:82:c9: 8a:b1:c6:f9:3b:01:bf:43:1d:38:0c:23:ea:d6:31:55:d8:79: 82:10:af:66:00:86:3b:88:9f:c7:f7:92:d1:d2:35:c2:dd:3b: e2:bc:95:66:d2:33:c8:62:f6:fc:ae:c0:9d:a3:8a:f1:08:14: 9a:6c:63:3c:f4:58:ff:e3:5d:1f:e3:26:ba:5b:52:5c:3c:12: 42:42:5f:0c:d3:6f:a4:1f:b0:55:8f:d3:28:35:24:d4:e5:f3: f9:a0:4f:93:e9:74:e0:99:41:d9:2e:7f:3e:0c:6b:ee:78:1b: ef:64:8b:ee:66:fd:81:be:da:48:b5:3e:b9:4d:33:84:31:34: 70:34:79:3f:f3:9d:e0:fd:8e:2a:0f:63:05:76:61:ea:11:0d: b2:ce:12:c1:94:dd:23:59:24:8b:ff:51:33:5a:ef:df:65:eb: 5f:f0:d1:71:ae:90:af:43:c6:4e:d1:80:28:b2:93:bb:0b:ca: 34:f2:ac:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIM1xUCiWSrYJ7fok2fd1ieJeX7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERCRjlE MjIxRjk2RjAeFw0yNjA5MjAxMzU5MjFaFw0yNjA5MjExNjE2MjFaMDMxMTAvBgNV BAMTKEI5MjE4MDY5RTQxQzc1OTIyRDMzQTA4RTIxNkU5RTIzNkNBNTc2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+FHSqLTRxcZwVVP+1GVilzjP WuCRqO9iH+ylYscwloRcQugAXOG23ZBT7tk0/LHlwIvmI8W/BmduElYzKFfR1yfe Xfyjxw2Lgi7svfd/u4TrRXUmDRaeZyTG8ndnqJBKiyawIpBrAfy3D2h8nxVjqasL 8zR64p6C+0d9TFsKSHb4RjzULVG67qaZobOPz4ot0kspB2LWNy8S/RaajY0ufqQK qBIqlkGcew4QO+gsjBexkj0zfMBMlj062rUkDUklikktAflKIXUsssEndmNIP0Wy +u7j6LP4B2vYSgtpHKC4TuBq2UpV/80kvNc1u0/OjWCQ20KdpSXcnfv4sRX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuSGAaeQcdZItM6COIW6eI2yldikwHwYDVR0j BBgwFoAU9rhv4g5zoi2aNTzJLtjb+dIh+W8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EzNzZhNmUtM2VjYS00ZjczLThkMTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIw RTczQTIyRDlBMzUzQ0M5MkVEOERCRjlEMjIxRjk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNkI4NkZFMjBFNzNBMjJEOUEzNTNDQzkyRUQ4REJGOUQyMjFG OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERC RjlEMjIxRjk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFmsyJpxuzU5UixJ+6vP+Ijclr51ae7lXmE LU0CrFc7v1KI7zXJEc4RYNk45h4BYlCajmmnWu7oc8GyB8V0c1u46dWa8mGCyYqx xvk7Ab9DHTgMI+rWMVXYeYIQr2YAhjuIn8f3ktHSNcLdO+K8lWbSM8hi9vyuwJ2j ivEIFJpsYzz0WP/jXR/jJrpbUlw8EkJCXwzTb6QfsFWP0yg1JNTl8/mgT5PpdOCZ Qdkufz4Ma+54G+9ki+5m/YG+2ki1PrlNM4QxNHA0eT/zneD9jioPYwV2YeoRDbLO EsGU3SNZJIv/UTNa799l61/w0XGukK9Dxk7RgCiyk7sLyjTyrMU= -----END CERTIFICATE-----Generated at Mon Sep 21 05:21:30 2026 by rpki-client