$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json) Hash identifier: YP10hb+OqwZMrpvSXgUlRaNqrBFo0mYXnbcLqnV2FT8= Subject key identifier: 6A:38:F0:C3:8B:0F:53:93:E2:0C:97:83:BA:BE:5C:FB:D5:50:15:93 Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Certificate serial: 1CD9D730881F287D97B55195914E5CCC1E7CA1EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 19:24:37 +0000 Manifest this update: Thu 24 Sep 2026 19:19:37 +0000 Manifest next update: Fri 25 Sep 2026 19:30:37 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=) 2: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=) 3: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: XhinS3OLVTdcihglmB7kX+LiTPV+OFnnaTdtBtQNfu8=) 4: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=) 5: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d9:d7:30:88:1f:28:7d:97:b5:51:95:91:4e:5c:cc:1e:7c:a1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Validity Not Before: Sep 24 19:19:37 2026 GMT Not After : Sep 25 19:30:37 2026 GMT Subject: CN=6A38F0C38B0F5393E20C9783BABE5CFBD5501593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:c7:f7:03:7e:9a:4f:5f:1a:7d:ea:15:5b: d2:d3:e1:f5:87:21:92:1e:da:52:01:6b:16:42:fb: 3b:47:3c:dd:2c:28:41:0a:18:62:8d:e1:ec:d6:93: 01:4f:94:22:ca:7f:91:8f:6f:8f:8a:0c:c5:2d:f0: 92:d5:64:4e:e3:fc:87:4d:44:c2:07:87:83:69:fc: d3:39:7b:e5:c3:e0:db:5d:68:01:1c:6e:ee:c4:f7: 95:5c:a2:d9:b3:82:c4:5f:96:26:e6:53:e2:55:f6: c8:3d:f5:d1:ec:cd:64:1d:30:9c:de:c7:39:0e:22: ef:61:a0:d5:81:5a:2e:5c:f3:5f:8d:45:10:c0:d1: d0:cc:fb:06:1c:ee:fa:39:2d:4b:e6:96:de:78:9c: 3c:3c:f7:70:58:60:42:59:c7:b8:3e:0d:c8:9b:ea: 6f:cb:cc:01:3e:be:02:7f:49:fb:18:8a:ab:0a:d4: b7:c6:e7:e7:96:71:dc:25:cb:5c:ff:3b:70:e9:6d: 55:ef:50:0d:7d:fe:70:0e:47:fa:11:f5:14:c5:d7: f3:39:17:67:c0:75:46:ff:d6:36:36:66:d2:f0:37: 21:1d:a8:ce:45:8a:8a:56:2c:62:dc:1d:13:a1:fa: e4:4f:0e:10:37:7e:a2:7f:03:a2:f9:cd:c7:42:47: cb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:38:F0:C3:8B:0F:53:93:E2:0C:97:83:BA:BE:5C:FB:D5:50:15:93 X509v3 Authority Key Identifier: keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ca:79:f8:00:ad:80:90:e7:1a:43:7a:86:2c:4e:5d:64:4a: 2b:9a:53:b2:7c:3f:b0:54:96:85:cd:22:28:e4:9e:ed:6b:f8: fa:2c:9e:24:7f:40:4d:8b:bc:bd:27:cc:72:b6:74:14:9f:69: fc:12:bc:1b:de:7c:bd:75:b3:3a:89:7b:72:73:d2:bf:d3:d3: d4:f5:87:66:ac:75:e9:17:4c:1a:1b:7a:6e:06:a2:e0:20:24: e6:01:ba:e7:4e:86:21:5b:b7:5d:a3:08:97:fb:af:5d:01:05: 53:9b:4b:a2:9a:21:2a:ab:f1:97:f0:a9:68:80:6f:33:9a:d5: a8:2c:f9:9f:fd:db:1f:7f:30:d3:85:01:21:64:22:1a:09:58: 9f:51:46:9b:be:57:98:f4:4e:91:b1:57:31:f3:d8:5c:14:92: 3e:d6:b1:cf:42:bd:7c:5d:7e:10:f3:25:5f:03:2f:59:a3:3b: 29:b0:b4:47:e2:1c:07:c5:86:49:70:0a:2a:e3:53:50:59:e9: 86:21:54:0e:73:62:f2:5c:fe:0b:1c:46:6a:4b:4b:95:b2:a9: 84:02:30:c6:87:e8:8c:7b:fd:5f:3f:6c:31:99:31:13:e0:5b: 05:2d:32:e8:7b:40:c3:5b:65:92:69:f5:a1:e4:e4:e7:e1:29: e2:d2:18:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNnXMIgfKH2XtVGVkU5czB58oe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4 MDc3QjRFRjAeFw0yNjA5MjQxOTE5MzdaFw0yNjA5MjUxOTMwMzdaMDMxMTAvBgNV BAMTKDZBMzhGMEMzOEIwRjUzOTNFMjBDOTc4M0JBQkU1Q0ZCRDU1MDE1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dMf3A36aT18afeoVW9LT4fWH IZIe2lIBaxZC+ztHPN0sKEEKGGKN4ezWkwFPlCLKf5GPb4+KDMUt8JLVZE7j/IdN RMIHh4Np/NM5e+XD4NtdaAEcbu7E95VcotmzgsRflibmU+JV9sg99dHszWQdMJze xzkOIu9hoNWBWi5c81+NRRDA0dDM+wYc7vo5LUvmlt54nDw893BYYEJZx7g+Dcib 6m/LzAE+vgJ/SfsYiqsK1LfG5+eWcdwly1z/O3DpbVXvUA19/nAOR/oR9RTF1/M5 F2fAdUb/1jY2ZtLwNyEdqM5FiopWLGLcHROh+uRPDhA3fqJ/A6L5zcdCR8shAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajjww4sPU5PiDJeDur5c+9VQFZMwHwYDVR0j BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC NEVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURB OEE4MDc3QjRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDKefgArYCQ5xpDeoYsTl1kSiuaU7J8P7BU loXNIijknu1r+PosniR/QE2LvL0nzHK2dBSfafwSvBvefL11szqJe3Jz0r/T09T1 h2asdekXTBobem4GouAgJOYBuudOhiFbt12jCJf7r10BBVObS6KaISqr8ZfwqWiA bzOa1ags+Z/92x9/MNOFASFkIhoJWJ9RRpu+V5j0TpGxVzHz2FwUkj7Wsc9CvXxd fhDzJV8DL1mjOymwtEfiHAfFhklwCirjU1BZ6YYhVA5zYvJc/gscRmpLS5WyqYQC MMaH6Ix7/V8/bDGZMRPgWwUtMuh7QMNbZZJp9aHk5OfhKeLSGFo= -----END CERTIFICATE-----Generated at Fri Sep 25 09:21:37 2026 by rpki-client