$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft File: B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft (raw, json) Hash identifier: SoXpi0mbrxOxChfcl0YwfZj4QOKdHr9ICqrsVZMenHA= Subject key identifier: 78:0C:26:E2:C0:8D:0C:1B:4D:95:A2:D4:4E:F6:E5:56:66:A7:D8:82 Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C Certificate issuer: /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C Certificate serial: 638BEE0029045D685D6189751747C0D03BD7FE5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 22:38:58 +0000 Manifest this update: Wed 23 Sep 2026 22:33:58 +0000 Manifest next update: Thu 24 Sep 2026 23:56:58 +0000 Files and hashes: 1: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: Cl+3Yo+bu8lAW/IU+MoES7T3F7PhgakZcVRu4FSP59E=) 2: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: TiDTdLFtscLo1gjWjoWEhnPEKlKIibkgXZac0KwabKk=) 3: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: hhoCmD2A3Hrpt2QLVgfRu8FAamoEY4vI2CK2lYPT4Mg=) 4: B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl (hash: B6ZQdiFjT59LGwwVmLQKEntiTVm46T9dlNTw38V2UbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8b:ee:00:29:04:5d:68:5d:61:89:75:17:47:c0:d0:3b:d7:fe:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C Validity Not Before: Sep 23 22:33:58 2026 GMT Not After : Sep 24 23:56:58 2026 GMT Subject: CN=780C26E2C08D0C1B4D95A2D44EF6E55666A7D882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:42:2f:82:a2:72:a4:8b:e1:07:57:02:60: cd:50:e4:af:9e:86:35:c7:97:08:33:78:0a:b6:d5: 1d:08:27:ec:99:07:b2:1c:f8:e5:63:fc:a2:a5:69: f5:73:a6:ea:63:9e:c0:88:03:4a:81:a9:a6:5f:fa: 21:dd:c4:0c:f1:be:dc:c8:87:7d:df:7d:77:3b:c9: ba:f6:b5:f5:b5:f6:6b:87:16:b1:bc:0a:6d:ad:76: c6:99:97:d1:a4:f6:30:8d:ab:56:22:2c:06:3c:84: 41:11:fd:ac:8d:74:3c:13:67:a2:f9:64:6c:00:3b: 25:11:31:06:79:6f:54:e9:f4:ee:95:a9:b0:c3:bd: b0:b3:c3:4b:eb:44:79:80:a1:86:3a:ee:f9:f9:51: 58:0c:59:3c:52:15:8c:b0:32:b4:e8:3f:21:19:76: 51:0c:2d:84:06:48:d5:d2:f5:48:c8:ca:f2:47:af: 62:5b:4c:4c:d7:9d:6d:d6:9a:0a:4c:a3:23:b2:6d: 3d:91:a7:b0:f3:25:28:2a:88:c2:91:1b:58:09:94: e9:7b:f2:ac:4f:32:a9:53:de:99:f0:69:ca:bd:c0: 37:81:ee:aa:92:68:4b:71:07:c0:47:38:92:1c:6c: fd:4f:61:47:56:4c:48:b3:65:08:a6:69:96:51:2b: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0C:26:E2:C0:8D:0C:1B:4D:95:A2:D4:4E:F6:E5:56:66:A7:D8:82 X509v3 Authority Key Identifier: keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:53:69:2d:7a:7d:c9:f4:77:6c:07:09:e0:51:c0:34:3e:96: 7d:97:a3:d1:20:8b:63:82:3b:ea:4b:fb:ad:ac:70:d1:7a:85: be:1d:bc:52:b6:ab:c4:37:24:b9:45:59:54:65:91:19:ca:f4: 0b:57:8f:8e:c8:c1:d8:6e:14:98:76:ae:48:b1:f1:36:4a:88: e8:61:c3:d3:19:9b:8f:51:d6:1c:9d:42:0e:96:ae:d5:1f:92: c6:dd:00:a7:ad:db:93:6d:92:7f:50:a9:d3:ea:f2:06:d1:39: 96:48:c1:7e:3e:83:af:19:7f:1f:de:45:9e:4b:a2:28:b9:b4: 65:f2:9f:78:ee:61:5f:9f:18:8b:d5:c0:46:6f:28:b8:0b:48: 8c:26:80:d9:c1:dc:2c:b1:c4:4d:0c:32:0e:0d:1d:4e:86:87: 8b:04:9c:3d:7d:3d:57:d3:f6:f0:d1:38:18:c4:0c:68:e4:82: 9f:76:cc:19:0c:13:29:7c:1f:b6:01:62:17:c1:b4:aa:23:c6: f3:7b:a8:3a:86:a1:e8:53:f5:df:45:3f:20:00:e8:eb:13:13: 03:27:29:08:87:13:42:99:98:17:fb:40:4a:5a:37:1d:6b:ee: 4c:98:bd:65:f0:3d:9c:84:c7:39:d2:2f:d3:92:d5:09:e1:8e: 57:e5:ae:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4vuACkEXWhdYYl1F0fA0DvX/lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZEQTY4NEU0NDgwOTM1QTk1RTZGMzM3M0NDREFDQUE5 OUI4ODgzQzAeFw0yNjA5MjMyMjMzNThaFw0yNjA5MjQyMzU2NThaMDMxMTAvBgNV BAMTKDc4MEMyNkUyQzA4RDBDMUI0RDk1QTJENDRFRjZFNTU2NjZBN0Q4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn3EIvgqJypIvhB1cCYM1Q5K+e hjXHlwgzeAq21R0IJ+yZB7Ic+OVj/KKlafVzpupjnsCIA0qBqaZf+iHdxAzxvtzI h33ffXc7ybr2tfW19muHFrG8Cm2tdsaZl9Gk9jCNq1YiLAY8hEER/ayNdDwTZ6L5 ZGwAOyURMQZ5b1Tp9O6VqbDDvbCzw0vrRHmAoYY67vn5UVgMWTxSFYywMrToPyEZ dlEMLYQGSNXS9UjIyvJHr2JbTEzXnW3WmgpMoyOybT2Rp7DzJSgqiMKRG1gJlOl7 8qxPMqlT3pnwacq9wDeB7qqSaEtxB8BHOJIcbP1PYUdWTEizZQimaZZRKwDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAwm4sCNDBtNlaLUTvblVman2IIwHwYDVR0j BBgwFoAUttpoTkSAk1qV5vM3PM2sqpm4iDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ1NWNiMjktNTI3Ni00YTc5LWIzM2EtY2M1MTUxN2JkZDE4LzAvQjZEQTY4NEU0 NDgwOTM1QTk1RTZGMzM3M0NDREFDQUE5OUI4ODgzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkRBNjg0RTQ0ODA5MzVBOTVFNkYzMzczQ0NEQUNBQTk5Qjg4 ODNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvQjZEQTY4NEU0NDgwOTM1QTk1RTZGMzM3M0NDREFD QUE5OUI4ODgzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdTaS16fcn0d2wHCeBRwDQ+ln2Xo9Egi2OC O+pL+62scNF6hb4dvFK2q8Q3JLlFWVRlkRnK9AtXj47IwdhuFJh2rkix8TZKiOhh w9MZm49R1hydQg6WrtUfksbdAKet25Ntkn9QqdPq8gbROZZIwX4+g68Zfx/eRZ5L oii5tGXyn3juYV+fGIvVwEZvKLgLSIwmgNnB3CyxxE0MMg4NHU6Gh4sEnD19PVfT 9vDROBjEDGjkgp92zBkMEyl8H7YBYhfBtKojxvN7qDqGoehT9d9FPyAA6OsTEwMn KQiHE0KZmBf7QEpaNx1r7kyYvWXwPZyExznSL9OS1Qnhjlflrh0= -----END CERTIFICATE-----Generated at Thu Sep 24 11:48:12 2026 by rpki-client