$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: HtoopnZIet5wxJqmEDjDXCA8hR6nvaVFWP7s6H0aUEc= Subject key identifier: 90:6D:7D:05:99:6D:C7:2D:E0:36:EC:45:98:85:52:07:BA:EB:20:5E Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 5FA029BFD3B832F739B8BC137C733B4A21BDC348 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 09:26:28 +0000 Manifest this update: Sat 26 Sep 2026 09:21:28 +0000 Manifest next update: Sun 27 Sep 2026 12:17:28 +0000 Files and hashes: 1: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) 2: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: /nKVnnOtbCDGAGP2cwlbxejU/Yj1QSTDluaVr4F+YvM=) 3: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a0:29:bf:d3:b8:32:f7:39:b8:bc:13:7c:73:3b:4a:21:bd:c3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: Sep 26 09:21:28 2026 GMT Not After : Sep 27 12:17:28 2026 GMT Subject: CN=906D7D05996DC72DE036EC4598855207BAEB205E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c4:c9:4a:15:30:27:9f:96:e7:9b:1e:1f:0e: 4a:14:7c:75:fd:fa:43:74:be:b5:8a:9d:e0:bf:b7: c9:bf:22:64:c0:1b:cc:bd:f9:67:07:c2:ec:62:12: 28:6f:f6:d7:93:f5:56:f8:8e:47:63:64:5d:24:71: 49:98:85:26:ae:86:5f:f9:cd:7b:4f:85:65:96:9e: ce:2f:9a:3e:5e:d8:9f:f3:3f:1e:b6:8e:dc:a9:ee: 32:02:eb:d5:17:77:1a:2d:1c:9d:63:05:62:d7:9a: 5f:00:d6:cd:32:2c:52:6b:b6:36:70:d8:96:68:43: 5d:46:b4:d6:52:4c:7a:53:e0:9b:e8:2e:94:0e:1b: f0:28:d4:a3:a2:6e:56:3f:aa:31:cd:81:b0:e7:48: 80:db:13:20:a6:62:0b:2c:e3:c7:cd:76:0f:2a:2b: 35:db:f6:66:d0:08:5d:d4:c8:b4:25:c8:b6:d9:af: 94:d0:65:a7:89:37:28:64:43:be:56:25:3d:45:b8: 77:1b:3e:09:be:98:83:fe:ea:cb:60:e4:94:48:ac: 51:b9:a0:07:7c:3c:3e:55:80:c4:79:20:97:1d:c3: 8e:4b:cc:fe:c1:41:63:59:08:2c:98:00:1b:ce:c7: 8f:f7:62:76:a4:5c:3e:65:4b:b3:d1:c7:89:ec:ac: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6D:7D:05:99:6D:C7:2D:E0:36:EC:45:98:85:52:07:BA:EB:20:5E X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:67:70:3c:fa:23:cf:43:5b:3c:10:75:a2:a7:ac:d5:9e:07: f8:e8:73:4a:04:b3:07:67:6e:c0:0f:3e:6a:f2:25:85:fc:f1: 7f:b5:e9:63:30:ec:42:11:72:7f:80:a8:ae:f7:c2:d9:46:2f: 5a:c0:79:04:eb:6f:52:5c:0d:c7:71:db:d0:b9:89:40:02:77: 17:d0:87:fd:0a:79:f0:44:c5:bf:24:2c:03:2d:18:a5:78:64: 00:ec:e1:3b:02:79:2c:d6:16:9c:7c:fe:61:1b:26:30:44:fc: 3c:06:11:8d:be:01:61:27:c9:c1:bd:82:8e:48:e8:a8:89:2e: 94:a9:32:23:16:1b:dd:58:70:8a:17:57:89:29:4f:43:c2:77: cb:c3:58:f9:fb:eb:2c:e6:84:f0:96:d5:f4:69:74:8c:44:c1: fe:11:41:8f:42:7e:5e:12:56:04:bc:3a:a9:6c:08:23:eb:36: 1f:d5:18:65:69:d1:78:e4:0e:df:76:2f:f9:a1:2c:8e:3a:66: 7c:84:48:bb:5d:a6:1d:cd:ff:84:1a:87:1f:57:e8:21:8b:52: 4d:eb:95:c0:42:fc:64:c1:0e:ad:d6:13:51:4b:6b:bf:da:79: 9c:fe:76:8d:f4:e3:2b:9b:6c:06:3d:9b:67:c7:32:c4:19:46: cb:2b:c2:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6Apv9O4Mvc5uLwTfHM7SiG9w0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjA5MjYwOTIxMjhaFw0yNjA5MjcxMjE3MjhaMDMxMTAvBgNV BAMTKDkwNkQ3RDA1OTk2REM3MkRFMDM2RUM0NTk4ODU1MjA3QkFFQjIwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDexMlKFTAnn5bnmx4fDkoUfHX9 +kN0vrWKneC/t8m/ImTAG8y9+WcHwuxiEihv9teT9Vb4jkdjZF0kcUmYhSauhl/5 zXtPhWWWns4vmj5e2J/zPx62jtyp7jIC69UXdxotHJ1jBWLXml8A1s0yLFJrtjZw 2JZoQ11GtNZSTHpT4JvoLpQOG/Ao1KOiblY/qjHNgbDnSIDbEyCmYgss48fNdg8q KzXb9mbQCF3UyLQlyLbZr5TQZaeJNyhkQ75WJT1FuHcbPgm+mIP+6stg5JRIrFG5 oAd8PD5VgMR5IJcdw45LzP7BQWNZCCyYABvOx4/3YnakXD5lS7PRx4nsrH3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkG19BZltxy3gNuxFmIVSB7rrIF4wHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9ncDz6I89DWzwQdaKnrNWeB/joc0oEswdn bsAPPmryJYX88X+16WMw7EIRcn+AqK73wtlGL1rAeQTrb1JcDcdx29C5iUACdxfQ h/0KefBExb8kLAMtGKV4ZADs4TsCeSzWFpx8/mEbJjBE/DwGEY2+AWEnycG9go5I 6KiJLpSpMiMWG91YcIoXV4kpT0PCd8vDWPn76yzmhPCW1fRpdIxEwf4RQY9Cfl4S VgS8OqlsCCPrNh/VGGVp0XjkDt92L/mhLI46ZnyESLtdph3N/4Qahx9X6CGLUk3r lcBC/GTBDq3WE1FLa7/aeZz+do304yubbAY9m2fHMsQZRssrwtA= -----END CERTIFICATE-----Generated at Sun Sep 27 03:14:19 2026 by rpki-client