$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft File: 6FBD1F05CFD81D40960E84596F61608A5408054A.mft (raw, json) Hash identifier: bx5VcyBMehSJzpkStsg+lr3w769eflYutR3Jy7WJEA8= Subject key identifier: DD:37:57:60:0B:6B:19:8E:06:D8:C7:00:A8:31:F1:17:F8:57:3C:5E Authority key identifier: 6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A Certificate issuer: /CN=6FBD1F05CFD81D40960E84596F61608A5408054A Certificate serial: 5DEECBF3A9A147E321597257816C23F69B934E32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:54:58 +0000 Manifest this update: Mon 21 Sep 2026 14:49:58 +0000 Manifest next update: Tue 22 Sep 2026 17:53:58 +0000 Files and hashes: 1: 6FBD1F05CFD81D40960E84596F61608A5408054A.crl (hash: HAZlmqAnmak7bWpGiFbyJIhTM8j9JYPqEmrgq9o8iUc=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: ceR7+4PbLSFwnkdZjst5pMwZoHsoUwM163fNIT0NuZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.crl rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ee:cb:f3:a9:a1:47:e3:21:59:72:57:81:6c:23:f6:9b:93:4e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FBD1F05CFD81D40960E84596F61608A5408054A Validity Not Before: Sep 21 14:49:58 2026 GMT Not After : Sep 22 17:53:58 2026 GMT Subject: CN=DD3757600B6B198E06D8C700A831F117F8573C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:df:6c:75:23:4a:0c:d7:41:82:28:ca:29: 03:da:76:97:da:dc:fa:a5:39:b1:1a:01:7e:47:9b: 41:74:b1:62:26:45:96:77:b4:1f:83:55:4f:43:6a: eb:d5:34:cc:d0:61:a8:6d:f0:0a:98:8e:44:c1:f9: c7:7c:3b:cf:87:b6:f5:14:9b:1b:c0:b4:2b:c7:d2: ed:73:b8:6f:aa:0d:ee:7e:e6:1a:00:ad:84:4f:1b: 3a:0c:5a:17:a3:38:8c:94:4d:d9:e8:67:d4:ac:07: 55:76:ab:c7:c0:9d:fa:f9:4f:54:3e:a7:ae:c7:90: 18:40:d5:7f:f3:b3:0d:9b:06:d5:8f:bb:23:6a:ee: 69:23:aa:b9:9a:9d:7d:a3:98:b0:3c:c5:43:9c:4e: 5a:3b:22:7f:26:23:07:b7:1a:e3:34:f1:1e:a0:b1: 3b:25:56:a1:73:db:8e:0a:94:ec:9d:1d:33:be:89: b4:de:0a:4b:d1:54:92:16:da:e7:c8:cd:ca:32:f6: c5:e4:d2:a6:e3:79:7b:a6:57:fc:e5:8d:8d:7b:15: 62:27:f6:3d:05:b2:3f:a0:77:0e:f9:de:42:7e:00: 19:ba:65:eb:cf:e3:22:e9:37:e4:57:d1:b7:6a:5c: 59:d7:27:e5:ed:8f:35:8a:69:5c:29:2e:36:f0:25: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:37:57:60:0B:6B:19:8E:06:D8:C7:00:A8:31:F1:17:F8:57:3C:5E X509v3 Authority Key Identifier: keyid:6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c9:6a:af:9b:26:b3:9a:e7:36:63:35:ba:11:b6:1c:b0:af: e6:60:05:44:9e:7f:8c:1a:81:3d:81:e7:8c:3c:78:67:47:bc: 6d:08:41:33:84:51:f8:5f:36:91:84:ec:a0:8c:6a:8f:27:a0: 93:ae:3f:ca:80:af:c2:1a:99:5c:e3:52:b1:3c:8d:31:f5:4e: 2f:2e:a8:52:a1:db:04:8a:7e:bc:85:3d:4d:1b:00:27:7c:14: d7:96:37:81:81:88:2f:6e:81:29:ac:76:37:2a:ee:31:ee:40: 6e:e6:e4:a9:68:e5:28:a5:59:2e:f0:48:cb:b4:95:4b:b7:33: d7:41:ee:f9:3a:a3:05:46:11:26:94:95:0f:7c:fd:04:34:a2: bd:d3:4f:46:e3:02:2a:24:8e:c9:72:7a:f5:43:a9:f7:0d:37: ac:59:5b:ea:e1:6f:82:5e:48:cb:eb:34:f3:38:64:93:da:a8: 08:31:d8:54:c6:f8:6c:4a:26:2e:81:19:84:96:a0:8e:e4:e9: 0d:ce:c0:c9:9a:ab:79:be:2b:19:4d:54:06:6e:81:32:6f:43: 76:8a:eb:c4:74:88:38:68:41:ef:6e:cc:be:85:c5:93:be:54: 61:b4:e8:f0:11:3f:48:e4:3b:44:41:b6:8d:b7:a9:19:cf:3e: 67:38:10:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXe7L86mhR+MhWXJXgWwj9puTTjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCRDFGMDVDRkQ4MUQ0MDk2MEU4NDU5NkY2MTYwOEE1 NDA4MDU0QTAeFw0yNjA5MjExNDQ5NThaFw0yNjA5MjIxNzUzNThaMDMxMTAvBgNV BAMTKEREMzc1NzYwMEI2QjE5OEUwNkQ4QzcwMEE4MzFGMTE3Rjg1NzNDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27N9sdSNKDNdBgijKKQPadpfa 3PqlObEaAX5Hm0F0sWImRZZ3tB+DVU9DauvVNMzQYaht8AqYjkTB+cd8O8+HtvUU mxvAtCvH0u1zuG+qDe5+5hoArYRPGzoMWhejOIyUTdnoZ9SsB1V2q8fAnfr5T1Q+ p67HkBhA1X/zsw2bBtWPuyNq7mkjqrmanX2jmLA8xUOcTlo7In8mIwe3GuM08R6g sTslVqFz244KlOydHTO+ibTeCkvRVJIW2ufIzcoy9sXk0qbjeXumV/zljY17FWIn 9j0Fsj+gdw753kJ+ABm6ZevP4yLpN+RX0bdqXFnXJ+XtjzWKaVwpLjbwJX4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3TdXYAtrGY4G2McAqDHxF/hXPF4wHwYDVR0j BBgwFoAUb70fBc/YHUCWDoRZb2FgilQIBUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwYmRjYzUtNGNkOS00NmIwLTlkN2ItZDIzMWE5ZTU3YjUwLzAvNkZCRDFGMDVD RkQ4MUQ0MDk2MEU4NDU5NkY2MTYwOEE1NDA4MDU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkJEMUYwNUNGRDgxRDQwOTYwRTg0NTk2RjYxNjA4QTU0MDgw NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvNkZCRDFGMDVDRkQ4MUQ0MDk2MEU4NDU5NkY2MTYw OEE1NDA4MDU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrJaq+bJrOa5zZjNboRthywr+ZgBUSef4wa gT2B54w8eGdHvG0IQTOEUfhfNpGE7KCMao8noJOuP8qAr8IamVzjUrE8jTH1Ti8u qFKh2wSKfryFPU0bACd8FNeWN4GBiC9ugSmsdjcq7jHuQG7m5Klo5SilWS7wSMu0 lUu3M9dB7vk6owVGESaUlQ98/QQ0or3TT0bjAiokjslyevVDqfcNN6xZW+rhb4Je SMvrNPM4ZJPaqAgx2FTG+GxKJi6BGYSWoI7k6Q3OwMmaq3m+KxlNVAZugTJvQ3aK 68R0iDhoQe9uzL6FxZO+VGG06PARP0jkO0RBto23qRnPPmc4EGc= -----END CERTIFICATE-----Generated at Mon Sep 21 23:42:21 2026 by rpki-client