$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft File: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft (raw, json) Hash identifier: KvnUF9mM4agkBB7JxLSnmciBD/9cFmXFxCs+OzotjQw= Subject key identifier: E9:48:08:58:83:35:A4:41:CD:08:F5:56:DF:97:C1:28:41:95:26:14 Authority key identifier: B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 Certificate issuer: /CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Certificate serial: 17866F15C3D413C6CF56ABB49D22916314D76658 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:54:14 +0000 Manifest this update: Thu 24 Sep 2026 14:49:14 +0000 Manifest next update: Fri 25 Sep 2026 18:33:14 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: v0xv6ts8xNGmfAQ65ctkAG3Fqvb6dUvN83XOnaYe2GA=) 2: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl (hash: WeV+S953gnpvsvJYWNs9gzLPmrlb4z8gGKOd29DRoBw=) 3: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: XBc3ZVVKXIlCbURfHv+y5tJpz8Y5k76pERxRfF4D1As=) 4: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 8e9FrxOA/xN95Yot7Ymznk0AodzlekAylsbbF3Artc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:86:6f:15:c3:d4:13:c6:cf:56:ab:b4:9d:22:91:63:14:d7:66:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Validity Not Before: Sep 24 14:49:14 2026 GMT Not After : Sep 25 18:33:14 2026 GMT Subject: CN=E94808588335A441CD08F556DF97C12841952614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:3e:c3:c6:dd:d2:5a:31:98:ca:ca:39:c2: 67:f3:68:7b:a6:a9:5c:d6:47:c5:79:bc:d5:40:78: 9b:0a:fb:f7:94:a2:8f:93:60:ec:de:04:e2:e9:15: 6d:4d:90:a1:f1:58:fa:4c:bb:e5:59:07:33:4d:a6: 87:e9:c2:5d:7a:28:32:87:93:47:76:87:b5:7f:7a: 90:9a:39:24:b4:72:51:dd:8a:ba:31:03:a1:b9:89: 0e:64:fa:e5:b3:55:15:00:e4:d5:19:ce:84:63:05: e7:14:f0:d1:f3:07:33:b8:d1:80:7c:b0:8d:6e:54: 76:15:50:1b:51:70:e4:13:cf:8e:15:7d:8c:66:1f: ea:13:9e:67:e4:cf:67:6f:13:80:db:28:fb:a0:46: 5a:0e:b3:45:fe:1f:cc:ed:aa:fa:72:be:f1:d6:e4: b1:90:79:3c:fb:a7:42:a7:ce:36:49:d7:6e:3c:a7: 99:80:ef:46:f6:03:e2:bf:1e:a7:40:f1:1e:37:e6: c2:54:c6:bf:d9:ab:c8:86:65:ba:f3:77:59:d9:6e: db:e2:9f:b5:ff:4c:0f:e5:76:d7:11:c7:13:09:44: 38:b7:22:f4:c3:70:bd:2e:c6:ff:d9:46:c3:7c:83: b9:66:bc:13:ff:eb:aa:9d:23:2e:64:8a:df:f2:11: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:48:08:58:83:35:A4:41:CD:08:F5:56:DF:97:C1:28:41:95:26:14 X509v3 Authority Key Identifier: keyid:B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:48:b1:03:46:56:df:16:db:7e:a6:13:07:bf:4a:c0:df:b2: ea:60:85:de:d9:71:33:1c:98:9a:8c:ef:e5:f7:85:04:59:f4: da:3c:c3:80:20:86:4d:7a:ae:29:84:18:45:73:02:35:d2:2d: 6a:dd:64:26:9f:38:85:a9:94:3b:9c:e2:2f:5e:00:af:2a:97: 0a:c9:b2:06:4c:4c:29:fc:f1:d7:be:1e:47:b1:d1:50:b5:65: 65:bd:ca:b8:2d:7b:4b:c9:04:a4:40:01:a0:4d:35:6e:1a:9d: 12:4a:47:72:e3:6d:1d:d3:c0:7b:12:47:95:1c:3f:4b:5a:24: 22:9c:02:d4:e0:aa:63:75:55:dc:5a:2c:62:c7:62:d6:16:24: eb:50:9b:02:c8:ab:46:e3:e7:70:dc:8c:bb:1f:f5:97:5c:04: ef:13:2e:1e:a5:3a:92:c2:1f:12:91:9e:7d:b3:0c:1d:34:80: 4f:32:2d:a7:c8:97:60:59:8b:ab:9d:ec:01:0d:f7:60:0d:f3: e3:63:db:ed:01:30:51:52:6c:f3:66:72:67:77:9e:91:a7:1e: bb:85:31:fd:9c:43:54:36:60:bd:83:6a:02:01:c8:cd:2c:aa: 67:c5:e2:7f:30:dd:6d:f5:05:d5:38:dc:d3:7e:d2:8a:45:a9: b5:ce:bf:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4ZvFcPUE8bPVqu0nSKRYxTXZlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5 NkIzMDEwODAeFw0yNjA5MjQxNDQ5MTRaFw0yNjA5MjUxODMzMTRaMDMxMTAvBgNV BAMTKEU5NDgwODU4ODMzNUE0NDFDRDA4RjU1NkRGOTdDMTI4NDE5NTI2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Uj7Dxt3SWjGYyso5wmfzaHum qVzWR8V5vNVAeJsK+/eUoo+TYOzeBOLpFW1NkKHxWPpMu+VZBzNNpofpwl16KDKH k0d2h7V/epCaOSS0clHdiroxA6G5iQ5k+uWzVRUA5NUZzoRjBecU8NHzBzO40YB8 sI1uVHYVUBtRcOQTz44VfYxmH+oTnmfkz2dvE4DbKPugRloOs0X+H8ztqvpyvvHW 5LGQeTz7p0KnzjZJ1248p5mA70b2A+K/HqdA8R435sJUxr/Zq8iGZbrzd1nZbtvi n7X/TA/ldtcRxxMJRDi3IvTDcL0uxv/ZRsN8g7lmvBP/66qdIy5kit/yEUIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UgIWIM1pEHNCPVW35fBKEGVJhQwHwYDVR0j BBgwFoAUtvgQ8ik8v9vD1vqpKIjpx5azAQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY2NTk5MDQtMzcwMi00Nzk3LWJkMWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIy OTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5NkIzMDEwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkY4MTBGMjI5M0NCRkRCQzNENkZBQTkyODg4RTlDNzk2QjMw MTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5 Qzc5NkIzMDEwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdIsQNGVt8W236mEwe/SsDfsupghd7ZcTMc mJqM7+X3hQRZ9No8w4Aghk16rimEGEVzAjXSLWrdZCafOIWplDuc4i9eAK8qlwrJ sgZMTCn88de+Hkex0VC1ZWW9yrgte0vJBKRAAaBNNW4anRJKR3LjbR3TwHsSR5Uc P0taJCKcAtTgqmN1VdxaLGLHYtYWJOtQmwLIq0bj53DcjLsf9ZdcBO8TLh6lOpLC HxKRnn2zDB00gE8yLafIl2BZi6ud7AEN92AN8+Nj2+0BMFFSbPNmcmd3npGnHruF Mf2cQ1Q2YL2DagIByM0sqmfF4n8w3W31BdU43NN+0opFqbXOv5c= -----END CERTIFICATE-----Generated at Fri Sep 25 08:37:42 2026 by rpki-client