$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft File: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft (raw, json) Hash identifier: laYRaoxpeu7+cRcuishjuY7ECROvMkooeVGicP107Yk= Subject key identifier: 76:66:8D:C8:33:64:00:E4:21:37:EA:DE:85:43:31:A5:91:73:F3:C5 Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Certificate serial: 6605EDA79463E5E4625CB627167A868C3FF8412E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:55:02 +0000 Manifest this update: Mon 21 Sep 2026 22:50:02 +0000 Manifest next update: Wed 23 Sep 2026 00:56:02 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: mk6P6nzKZPfeuKq11ThKG2gxjN5qYDKYLpgARoWf7Rc=) 2: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=) 3: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: AZDpkOWjnamEqT8fmcEDZ5d6r3arhBukAiqycsYxsj0=) 4: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl (hash: luNdgUbmGDiz/axsHVxCnEyTTn4TAGDt/eoE7oI8kjc=) 5: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (hash: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:05:ed:a7:94:63:e5:e4:62:5c:b6:27:16:7a:86:8c:3f:f8:41:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Validity Not Before: Sep 21 22:50:02 2026 GMT Not After : Sep 23 00:56:02 2026 GMT Subject: CN=76668DC8336400E42137EADE854331A59173F3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:b3:9d:77:ad:8c:76:24:de:f3:dc:d8:da: d8:fa:fc:c1:cd:0a:a9:3e:b9:40:05:37:fb:b9:1a: b6:38:20:85:45:e6:22:b2:a7:73:56:fb:ee:29:14: 39:93:c9:09:a5:69:e1:e3:a5:6a:85:8a:20:e9:e8: bf:8f:f3:fa:b2:aa:89:2f:ae:4f:a1:86:a3:3b:2d: 73:51:08:92:fe:bb:68:cd:c3:22:a6:94:5a:4c:1e: 28:d8:3b:c1:aa:38:78:a0:be:8b:a3:02:5d:12:d8: 70:bd:44:86:e0:34:db:61:8b:f9:91:ed:07:d8:25: 36:7e:cb:88:91:b0:a4:63:6b:41:b1:18:b7:d6:fd: 7e:b1:a5:58:90:f0:cf:4a:6d:32:67:5f:e0:b7:c5: ba:2e:29:d1:0d:db:e2:69:9b:15:a0:33:f5:77:78: 98:03:b3:72:29:25:c7:ce:79:fb:e2:d5:ba:9d:0d: 9f:02:f0:25:9d:90:46:d0:57:b4:cd:de:57:73:c7: 63:41:1d:13:d4:44:61:65:e0:73:d8:d7:2c:54:e6: bd:21:5e:88:9f:51:a2:a9:21:5b:29:cf:23:8c:15: 55:1e:17:d1:08:f5:de:13:b7:1c:89:03:40:67:b9: 18:a8:90:c8:53:bd:ac:01:91:b8:bf:27:a7:fa:db: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:66:8D:C8:33:64:00:E4:21:37:EA:DE:85:43:31:A5:91:73:F3:C5 X509v3 Authority Key Identifier: keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6b:49:42:f4:4d:2d:2a:49:c8:ca:31:92:5f:d2:e0:b7:aa: a5:44:6d:34:c5:29:8e:92:66:16:61:17:a6:d4:20:1d:9f:51: a9:2a:5b:f7:2a:8e:af:96:d0:30:ea:b5:fb:c0:e9:8e:e4:90: 10:09:46:13:40:8a:bb:c3:66:15:1d:23:20:32:04:cb:04:d4: 30:e5:1a:a7:f5:38:68:2f:20:6a:7d:0b:d0:80:a4:42:48:0d: 76:46:cc:a1:50:c8:ae:99:7a:a1:9d:57:54:d5:62:49:92:32: 4a:7c:5b:59:bc:37:44:9a:fd:30:db:97:cd:53:15:58:94:e8: 25:81:94:99:fc:32:47:ad:ac:69:56:9a:36:27:32:50:16:93: 49:a5:24:9b:55:a1:dc:d0:2e:41:da:b2:31:06:e9:d8:fb:52: 1e:1a:21:36:6f:4e:6f:fe:70:bb:fa:20:09:ae:19:eb:39:4e: 36:af:24:8f:d3:68:8b:95:15:a4:12:e4:dd:f5:72:a3:15:95: 3f:71:05:e3:81:eb:1a:23:bd:73:d1:5e:b9:b7:2a:a5:c2:aa: 23:71:52:63:96:cd:15:4b:80:64:1b:b4:80:ed:96:c3:9c:d0: d5:dd:97:90:6e:f1:c3:5d:be:ef:cb:c7:7a:de:a6:79:b7:54: e1:6e:09:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgXtp5Rj5eRiXLYnFnqGjD/4QS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FB RTQ5QjY1RTAeFw0yNjA5MjEyMjUwMDJaFw0yNjA5MjMwMDU2MDJaMDMxMTAvBgNV BAMTKDc2NjY4REM4MzM2NDAwRTQyMTM3RUFERTg1NDMzMUE1OTE3M0YzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zbOdd62MdiTe89zY2tj6/MHN Cqk+uUAFN/u5GrY4IIVF5iKyp3NW++4pFDmTyQmlaeHjpWqFiiDp6L+P8/qyqokv rk+hhqM7LXNRCJL+u2jNwyKmlFpMHijYO8GqOHigvoujAl0S2HC9RIbgNNthi/mR 7QfYJTZ+y4iRsKRja0GxGLfW/X6xpViQ8M9KbTJnX+C3xbouKdEN2+JpmxWgM/V3 eJgDs3IpJcfOefvi1bqdDZ8C8CWdkEbQV7TN3ldzx2NBHRPURGFl4HPY1yxU5r0h XoifUaKpIVspzyOMFVUeF9EI9d4TtxyJA0BnuRiokMhTvawBkbi/J6f62x25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmaNyDNkAOQhN+rehUMxpZFz88UwHwYDVR0j BBgwFoAUb7JTpPmcD4Eerg0UK3J1yq5Jtl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiYWJmMGItMTEwMS00YWE5LWE0ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRG OTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FBRTQ5QjY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIyNTNBNEY5OUMwRjgxMUVBRTBEMTQyQjcyNzVDQUFFNDlC NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1 Q0FBRTQ5QjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEprSUL0TS0qScjKMZJf0uC3qqVEbTTFKY6S ZhZhF6bUIB2fUakqW/cqjq+W0DDqtfvA6Y7kkBAJRhNAirvDZhUdIyAyBMsE1DDl Gqf1OGgvIGp9C9CApEJIDXZGzKFQyK6ZeqGdV1TVYkmSMkp8W1m8N0Sa/TDbl81T FViU6CWBlJn8MketrGlWmjYnMlAWk0mlJJtVodzQLkHasjEG6dj7Uh4aITZvTm/+ cLv6IAmuGes5TjavJI/TaIuVFaQS5N31cqMVlT9xBeOB6xojvXPRXrm3KqXCqiNx UmOWzRVLgGQbtIDtlsOc0NXdl5Bu8cNdvu/Lx3repnm3VOFuCX8= -----END CERTIFICATE-----Generated at Tue Sep 22 10:22:22 2026 by rpki-client