$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft File: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft (raw, json) Hash identifier: vptwOLw4YzI17zXT3hQfLKOV9Og0CuoTwdjRUorHJt0= Subject key identifier: 6F:31:5C:95:8F:90:E7:54:2E:A5:22:5F:88:BB:F3:F8:42:82:22:0B Authority key identifier: 0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6 Certificate issuer: /CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6 Certificate serial: 794229F4F49846C6D827C46D75C6BD2897C5B91D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:31:06 +0000 Manifest this update: Thu 24 Sep 2026 08:26:06 +0000 Manifest next update: Fri 25 Sep 2026 08:35:06 +0000 Files and hashes: 1: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: bOv9UB+jH3yIgez1h0+9f0ARyXLXbtpazjPu+Jy6jyY=) 2: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: uH7wCiM64P68t/GjuIUuXpirB813LNqvCv6j5LUhOUQ=) 3: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: RduQCu6LK4ze8a1KtgwVd9edcTww6Gh3TJk7wQrWXc0=) 4: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl (hash: iVkYkZYegb1uPPSZaPiOVBbLvZ1vtYBjh9xZdWjycfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:42:29:f4:f4:98:46:c6:d8:27:c4:6d:75:c6:bd:28:97:c5:b9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6 Validity Not Before: Sep 24 08:26:06 2026 GMT Not After : Sep 25 08:35:06 2026 GMT Subject: CN=6F315C958F90E7542EA5225F88BBF3F84282220B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:8b:be:3d:1e:d8:4f:97:88:02:9e:ad:df: 2e:cc:61:c5:e5:26:fc:e1:c4:a9:f2:f6:98:71:72: fc:3e:fb:37:a8:ab:b5:30:34:ab:c8:16:1e:af:e7: 35:c8:a8:30:ad:37:f9:40:ab:81:c1:bb:50:49:c2: f5:1d:8b:ba:2c:d6:4b:ce:71:ac:d4:a1:38:f5:32: 48:ec:95:93:c5:c9:c7:16:64:f6:43:34:3e:ee:b5: 30:e2:81:97:02:42:f3:fb:47:55:f8:1d:23:54:a6: f9:71:8c:64:a6:2f:e3:ac:c3:4d:8e:b4:13:82:07: 56:3e:2a:fb:d3:97:43:fc:dd:37:1d:7b:fd:5f:cd: ca:a6:e0:0f:06:7a:7e:a0:dc:66:6f:99:cb:8c:51: 01:6b:d3:a7:1e:12:da:ea:39:cc:9c:f3:59:91:60: 5a:c5:e3:ed:ad:3a:d3:1a:55:8a:a4:5e:2b:1f:88: ad:96:88:28:f6:ce:f8:a0:15:e4:01:8c:5d:1c:60: ae:3d:5a:42:e9:57:00:22:ae:73:7c:f5:32:10:12: 41:56:e7:05:97:c0:8c:7c:51:4e:ec:b0:70:38:c5: e3:68:e8:21:72:5f:8a:7f:76:d0:37:d8:d4:ba:6a: 57:23:a3:8b:ef:fc:b3:96:d3:97:a8:1f:a1:62:db: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:31:5C:95:8F:90:E7:54:2E:A5:22:5F:88:BB:F3:F8:42:82:22:0B X509v3 Authority Key Identifier: keyid:0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:bd:e5:66:f2:15:35:35:1d:16:67:ae:3f:48:12:21:13:79: e4:a0:30:cc:a2:f2:7a:03:c1:7f:c4:ea:c7:c9:9b:1a:4c:72: 82:6a:cd:d2:80:ff:6e:80:d4:41:e4:cc:25:60:fb:98:c8:51: d1:46:2d:92:fe:aa:af:b2:76:3e:9f:67:ec:04:3e:55:41:e8: a5:5a:69:55:5e:1d:ea:41:49:ce:ff:b9:e2:cf:6d:25:cf:c0: 4a:8f:4b:78:4d:37:70:f9:31:9d:4a:7a:68:2f:2d:f7:cf:14: 7d:5b:01:ba:66:ab:59:30:9c:96:8c:ee:38:23:61:66:33:c5: 53:35:80:fe:61:78:f9:fb:80:d2:aa:5e:e8:ac:56:45:cf:e6: 30:f2:50:33:f3:b7:c6:79:f9:9b:e9:06:02:43:b6:d7:ac:5c: 8a:2a:f6:d8:c8:a1:84:59:72:b7:9d:6e:b3:e3:a4:eb:88:31: bd:db:cb:73:f7:4c:2d:6f:96:ee:f4:5b:7d:13:aa:2a:18:01: 5b:17:ee:20:25:3b:9b:d9:df:75:a9:55:18:7e:9a:64:b1:a7: 22:a6:8c:26:ad:dc:66:ba:33:ee:e6:eb:37:1d:b9:a0:a8:79: ae:35:14:9a:85:8c:e2:be:2e:2a:09:a7:a6:16:82:91:20:94: a9:73:57:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUIp9PSYRsbYJ8Rtdca9KJfFuR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI2REZDODFGNkE1QTRDNTFDOTMzNjA1MENGOUM2N0VC RTI4RjJGNjAeFw0yNjA5MjQwODI2MDZaFw0yNjA5MjUwODM1MDZaMDMxMTAvBgNV BAMTKDZGMzE1Qzk1OEY5MEU3NTQyRUE1MjI1Rjg4QkJGM0Y4NDI4MjIyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwe4u+PR7YT5eIAp6t3y7MYcXl JvzhxKny9phxcvw++zeoq7UwNKvIFh6v5zXIqDCtN/lAq4HBu1BJwvUdi7os1kvO cazUoTj1MkjslZPFyccWZPZDND7utTDigZcCQvP7R1X4HSNUpvlxjGSmL+Osw02O tBOCB1Y+KvvTl0P83Tcde/1fzcqm4A8Gen6g3GZvmcuMUQFr06ceEtrqOcyc81mR YFrF4+2tOtMaVYqkXisfiK2WiCj2zvigFeQBjF0cYK49WkLpVwAirnN89TIQEkFW 5wWXwIx8UU7ssHA4xeNo6CFyX4p/dtA32NS6alcjo4vv/LOW05eoH6Fi254nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbzFclY+Q51QupSJfiLvz+EKCIgswHwYDVR0j BBgwFoAUC238gfalpMUckzYFDPnGfr4o8vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxMWFhNDYtZjI4ZS00YzU1LWI5YmEtN2Q1YmRjOTViNGY2LzAvMEI2REZDODFG NkE1QTRDNTFDOTMzNjA1MENGOUM2N0VCRTI4RjJGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjZERkM4MUY2QTVBNEM1MUM5MzM2MDUwQ0Y5QzY3RUJFMjhG MkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvMEI2REZDODFGNkE1QTRDNTFDOTMzNjA1MENGOUM2 N0VCRTI4RjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABS95WbyFTU1HRZnrj9IEiETeeSgMMyi8noD wX/E6sfJmxpMcoJqzdKA/26A1EHkzCVg+5jIUdFGLZL+qq+ydj6fZ+wEPlVB6KVa aVVeHepBSc7/ueLPbSXPwEqPS3hNN3D5MZ1KemgvLffPFH1bAbpmq1kwnJaM7jgj YWYzxVM1gP5hePn7gNKqXuisVkXP5jDyUDPzt8Z5+ZvpBgJDttesXIoq9tjIoYRZ credbrPjpOuIMb3by3P3TC1vlu70W30TqioYAVsX7iAlO5vZ33WpVRh+mmSxpyKm jCat3Ga6M+7m6zcduaCoea41FJqFjOK+LioJp6YWgpEglKlzV5o= -----END CERTIFICATE-----Generated at Thu Sep 24 23:43:55 2026 by rpki-client