$ rpki-client -vvvf rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft File: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft (raw, json) Hash identifier: wrhjlgT/73TUqOJSgOFKtkVVINQedqEFCz+CZ8ZB1Zk= Subject key identifier: 64:B1:CB:59:A5:31:DC:18:AA:B4:51:19:83:95:22:C5:1B:3E:91:1B Authority key identifier: 00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 Certificate issuer: /CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Certificate serial: 308E0CB67EA0D48BDFFA961FD80CDB2E3A3A1092 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 06:23:54 +0000 Manifest this update: Wed 23 Sep 2026 06:18:54 +0000 Manifest next update: Thu 24 Sep 2026 08:25:54 +0000 Files and hashes: 1: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl (hash: 2cQfwKrn99b75K2TNq2qSgkv9y53xZwXa01DjH+Aymg=) 2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: Q/80xzITob9EDyGUauN9lSkFfskt31UxgEkyUCmZLOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8e:0c:b6:7e:a0:d4:8b:df:fa:96:1f:d8:0c:db:2e:3a:3a:10:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Validity Not Before: Sep 23 06:18:54 2026 GMT Not After : Sep 24 08:25:54 2026 GMT Subject: CN=64B1CB59A531DC18AAB45119839522C51B3E911B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:2f:44:03:6f:cb:77:f4:77:e5:54:c0:2e: a9:30:27:ed:44:b0:14:4d:1c:8b:64:31:fb:23:c9: dd:35:c6:1d:f2:e1:aa:ef:d9:35:e7:dd:4e:21:ae: ca:61:72:5b:04:ae:17:a6:8e:8c:91:39:d4:b3:5e: a8:f9:26:71:02:6f:45:2d:62:26:93:5d:16:5c:e5: c7:da:08:b4:c9:35:65:29:bd:96:5c:8c:19:15:31: b6:04:ac:aa:c8:ec:e1:a4:63:5d:af:5b:0f:1e:77: 3b:eb:63:61:07:1d:24:eb:33:ae:ac:b0:16:ae:76: ac:39:4c:9c:07:65:fa:a8:9f:51:7f:df:9e:1c:18: c1:1f:03:d1:b5:9e:44:3b:7d:30:5c:88:5b:67:48: de:ec:f0:64:33:8b:67:97:90:f6:fb:3a:67:aa:ed: 18:d2:01:39:c0:41:52:56:19:5a:21:98:18:64:8e: ab:e9:bc:05:4d:ae:ce:33:9f:e3:79:c1:01:8f:86: 9a:29:99:0a:89:6f:46:b1:e8:21:c6:a4:31:9f:5f: d4:58:49:a5:05:3d:96:23:4b:2e:ff:5a:33:97:f5: 72:13:4a:5f:98:05:7e:81:50:6c:cc:5d:85:53:c8: d2:ee:92:e2:84:89:a6:9f:ca:eb:bc:8e:b2:fe:59: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:CB:59:A5:31:DC:18:AA:B4:51:19:83:95:22:C5:1B:3E:91:1B X509v3 Authority Key Identifier: keyid:00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a4:ee:af:9a:20:37:b4:77:61:0f:4d:cd:26:ae:c6:ea:1c: 9d:ea:df:0f:c6:c8:8b:43:35:f0:13:56:04:9d:34:8d:c7:d8: 14:59:76:99:f2:eb:b1:82:39:22:d1:7c:0b:84:53:ef:05:ac: 61:0d:f3:e1:3f:fd:47:58:b7:5e:37:e3:03:e0:5c:b8:09:27: 54:34:c3:70:92:2d:2c:b5:3b:55:41:28:6a:f4:66:74:99:b9: 4e:46:c1:6b:4c:89:41:72:b9:39:8c:be:70:52:fa:41:cd:65: 64:2e:d3:6e:2b:25:4a:49:08:c5:c1:81:2b:80:3b:d1:e1:5b: 35:0a:2f:0c:3f:ac:7c:32:a4:4c:2f:de:20:1a:d2:dd:1a:68: 41:18:9b:89:81:a2:57:77:4b:a1:93:fb:4b:54:88:cf:6d:c4: 45:8d:9c:a6:39:95:43:cc:f3:87:59:7d:6f:be:2d:db:1a:2c: a6:f4:e4:5d:73:fd:f4:af:c5:05:be:95:ca:b4:3c:7b:24:44: d3:2e:9b:8a:bf:18:20:90:0a:98:ce:84:9e:c3:f3:b4:4c:92: 0c:cd:b9:f5:2c:26:04:55:1e:b3:7b:7f:bc:65:ae:4e:7f:c5: 09:e9:6e:84:ff:94:76:69:91:9d:ce:d7:99:4b:aa:2e:52:4a: c6:7c:61:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMI4Mtn6g1Ivf+pYf2AzbLjo6EJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBB MkY0RDlFODAeFw0yNjA5MjMwNjE4NTRaFw0yNjA5MjQwODI1NTRaMDMxMTAvBgNV BAMTKDY0QjFDQjU5QTUzMURDMThBQUI0NTExOTgzOTUyMkM1MUIzRTkxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgry9EA2/Ld/R35VTALqkwJ+1E sBRNHItkMfsjyd01xh3y4arv2TXn3U4hrsphclsErhemjoyROdSzXqj5JnECb0Ut YiaTXRZc5cfaCLTJNWUpvZZcjBkVMbYErKrI7OGkY12vWw8edzvrY2EHHSTrM66s sBaudqw5TJwHZfqon1F/354cGMEfA9G1nkQ7fTBciFtnSN7s8GQzi2eXkPb7Omeq 7RjSATnAQVJWGVohmBhkjqvpvAVNrs4zn+N5wQGPhpopmQqJb0ax6CHGpDGfX9RY SaUFPZYjSy7/WjOX9XITSl+YBX6BUGzMXYVTyNLukuKEiaafyuu8jrL+WdOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLHLWaUx3BiqtFEZg5UixRs+kRswHwYDVR0j BBgwFoAUAGuOhbb865lK0Aum5k6vIKL02egwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM3NTA2YzUtNWVmMS00Mjk0LTg5MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVC NkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBBMkY0RDlFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDZCOEU4NUI2RkNFQjk5NEFEMDBCQTZFNjRFQUYyMEEyRjRE OUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFG MjBBMkY0RDlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmk7q+aIDe0d2EPTc0mrsbqHJ3q3w/GyItD NfATVgSdNI3H2BRZdpny67GCOSLRfAuEU+8FrGEN8+E//UdYt1434wPgXLgJJ1Q0 w3CSLSy1O1VBKGr0ZnSZuU5GwWtMiUFyuTmMvnBS+kHNZWQu024rJUpJCMXBgSuA O9HhWzUKLww/rHwypEwv3iAa0t0aaEEYm4mBold3S6GT+0tUiM9txEWNnKY5lUPM 84dZfW++LdsaLKb05F1z/fSvxQW+lcq0PHskRNMum4q/GCCQCpjOhJ7D87RMkgzN ufUsJgRVHrN7f7xlrk5/xQnpboT/lHZpkZ3O15lLqi5SSsZ8YYk= -----END CERTIFICATE-----Generated at Wed Sep 23 23:19:45 2026 by rpki-client