$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft File: 06083035B4010CEC337EE26F5EA15A04DD209219.mft (raw, json) Hash identifier: O2WLjNm3Iacy3fDPTTm5jV/wc66jwnB2essqdQ74B+A= Subject key identifier: 6F:0C:ED:9A:47:C9:A5:72:50:9D:34:D5:B0:60:E8:CC:6E:CD:D6:68 Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219 Certificate serial: 22E32394D689C9CF0C5A88506E74254827B0932A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:27:06 +0000 Manifest this update: Thu 24 Sep 2026 21:22:06 +0000 Manifest next update: Fri 25 Sep 2026 22:10:06 +0000 Files and hashes: 1: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: ILzJvkloOZdmChaklTC1z8yHQQ79CFcrInsypXVfRQY=) 2: 06083035B4010CEC337EE26F5EA15A04DD209219.crl (hash: dgbyivisOs4VYR5a48J9kLGKHAnV+0cZ1Ph/24mLkjA=) 3: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: PCIebsIX9snQ/16KTknT7n3JoWYoLSW34RbZ1h8yq10=) 4: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: hu61kA8y8+AVvATIk7KwJvKK9QvDhjlP6nmM1pXjVy4=) 5: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e3:23:94:d6:89:c9:cf:0c:5a:88:50:6e:74:25:48:27:b0:93:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219 Validity Not Before: Sep 24 21:22:06 2026 GMT Not After : Sep 25 22:10:06 2026 GMT Subject: CN=6F0CED9A47C9A572509D34D5B060E8CC6ECDD668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:68:35:4e:b1:19:94:f9:6a:76:c1:20:52: 07:8c:58:46:bc:1e:ba:4f:ad:64:73:10:9a:84:7a: 46:cf:f8:a4:35:8e:23:96:eb:23:05:af:78:72:f2: 67:cd:a2:fb:c7:bc:71:b7:0f:a8:f8:1e:ed:00:c9: 56:8d:a6:6e:51:71:72:57:0f:c2:cb:ed:b6:4d:bf: 6e:64:ed:55:bb:01:5d:b5:09:37:be:9e:a6:ad:87: 0d:8a:c6:1c:9d:5b:37:ac:76:12:79:9e:fe:25:23: 93:7b:d5:36:c7:53:ec:f5:c0:01:be:8f:22:e2:a5: 46:b1:2a:e9:ab:87:57:3b:9d:ba:8e:a2:2f:ca:1c: c0:4e:8e:c6:22:8a:78:82:f5:d4:c3:df:18:3b:cd: ca:93:59:e2:3e:29:31:f4:15:b5:1f:7d:14:a9:14: 02:ca:79:b9:2e:6c:85:6e:67:bb:93:ba:96:7c:f7: ad:08:e2:af:be:81:bc:30:de:a4:e3:10:cf:6c:ba: 13:cc:23:4f:9c:25:6e:f7:db:9a:3b:a2:23:b7:c1: 83:33:21:86:8f:74:7b:4a:19:1d:aa:cd:e4:a0:ad: 4f:6c:16:5d:43:a0:8d:cd:f5:6a:3f:69:b5:7a:97: 7e:03:7c:cd:0e:ab:b0:95:4a:8d:f6:09:98:d3:eb: 46:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0C:ED:9A:47:C9:A5:72:50:9D:34:D5:B0:60:E8:CC:6E:CD:D6:68 X509v3 Authority Key Identifier: keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:69:03:a2:57:7f:64:e4:7a:9f:71:fd:7d:26:39:2c:a2:05: ee:8e:26:c6:7e:3b:1f:19:34:25:0e:26:4a:18:15:3d:55:0c: e6:95:5d:95:e9:60:ea:41:ec:10:b8:73:2a:f2:19:42:82:89: ca:b9:63:2b:36:7c:f8:0e:0a:cc:4c:cb:d3:1b:8a:bf:0f:dc: c1:ed:61:2e:93:88:f5:16:06:91:d1:55:72:80:79:33:de:fb: f0:2a:8d:8d:55:75:38:64:c1:24:fc:15:0c:e6:c7:45:63:57: 8f:fc:e9:6e:ad:2a:8a:fe:bc:46:18:7b:f9:d3:03:87:15:8a: 55:ff:2b:f5:e5:80:fc:16:1e:02:38:7c:58:51:51:60:03:cf: 90:44:c9:75:58:79:f9:52:94:89:be:ef:00:17:88:54:88:12: 1b:d0:86:a7:d1:42:44:8c:25:be:ba:bc:99:36:50:87:ae:5b: 46:11:29:51:6c:e2:31:48:b1:cf:82:b4:1e:97:ff:7e:4a:2b: 1c:80:5e:48:7d:e6:98:d1:77:e0:f3:aa:1f:55:82:d5:42:a7: 65:c6:08:3a:40:8f:9c:39:69:53:8d:e8:9f:77:a7:0b:37:60: 4c:6a:ab:5f:15:ae:c6:f5:32:a3:7d:fa:57:cc:bc:29:58:91: 59:07:30:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuMjlNaJyc8MWohQbnQlSCewkyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVBMDRE RDIwOTIxOTAeFw0yNjA5MjQyMTIyMDZaFw0yNjA5MjUyMjEwMDZaMDMxMTAvBgNV BAMTKDZGMENFRDlBNDdDOUE1NzI1MDlEMzRENUIwNjBFOENDNkVDREQ2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC582g1TrEZlPlqdsEgUgeMWEa8 HrpPrWRzEJqEekbP+KQ1jiOW6yMFr3hy8mfNovvHvHG3D6j4Hu0AyVaNpm5RcXJX D8LL7bZNv25k7VW7AV21CTe+nqathw2KxhydWzesdhJ5nv4lI5N71TbHU+z1wAG+ jyLipUaxKumrh1c7nbqOoi/KHMBOjsYiiniC9dTD3xg7zcqTWeI+KTH0FbUffRSp FALKebkubIVuZ7uTupZ8960I4q++gbww3qTjEM9suhPMI0+cJW7325o7oiO3wYMz IYaPdHtKGR2qzeSgrU9sFl1DoI3N9Wo/abV6l34DfM0Oq7CVSo32CZjT60ZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbwztmkfJpXJQnTTVsGDozG7N1mgwHwYDVR0j BBgwFoAUBggwNbQBDOwzfuJvXqFaBN0gkhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ4MzMwNzQtMzMwZS00YWFhLThjMDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVC NDAxMENFQzMzN0VFMjZGNUVBMTVBMDRERDIwOTIxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjA4MzAzNUI0MDEwQ0VDMzM3RUUyNkY1RUExNUEwNEREMjA5 MjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVB MDRERDIwOTIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVpA6JXf2Tkep9x/X0mOSyiBe6OJsZ+Ox8Z NCUOJkoYFT1VDOaVXZXpYOpB7BC4cyryGUKCicq5Yys2fPgOCsxMy9Mbir8P3MHt YS6TiPUWBpHRVXKAeTPe+/AqjY1VdThkwST8FQzmx0VjV4/86W6tKor+vEYYe/nT A4cVilX/K/XlgPwWHgI4fFhRUWADz5BEyXVYeflSlIm+7wAXiFSIEhvQhqfRQkSM Jb66vJk2UIeuW0YRKVFs4jFIsc+CtB6X/35KKxyAXkh95pjRd+Dzqh9VgtVCp2XG CDpAj5w5aVON6J93pws3YExqq18Vrsb1MqN9+lfMvClYkVkHMH0= -----END CERTIFICATE-----Generated at Fri Sep 25 07:44:47 2026 by rpki-client