$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft File: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json) Hash identifier: dzE3zpfMVoXuxT9MGmKyjeFf0PSg1CRCTGq0X+SPMHQ= Subject key identifier: EE:D4:C0:32:92:CC:55:A1:3D:77:15:CE:9C:07:1F:E4:9D:0F:FB:65 Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 3C899D3B96EE08AD6A7546EBB7865434FFDD64D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 07:40:42 +0000 Manifest this update: Wed 23 Sep 2026 07:35:42 +0000 Manifest next update: Thu 24 Sep 2026 10:12:42 +0000 Files and hashes: 1: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=) 2: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=) 3: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=) 4: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=) 5: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: ihD+bq/eFRKq3bISoUjHaxKkwPF53mK+33WofZ9dyo8=) 6: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=) 7: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=) 8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=) 9: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:89:9d:3b:96:ee:08:ad:6a:75:46:eb:b7:86:54:34:ff:dd:64:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: Sep 23 07:35:42 2026 GMT Not After : Sep 24 10:12:42 2026 GMT Subject: CN=EED4C03292CC55A13D7715CE9C071FE49D0FFB65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:04:44:79:53:b3:36:c5:60:f6:6c:ab:5b: 7e:fb:54:2a:dc:dc:8f:a9:82:07:4b:b5:10:bf:7b: af:a1:ae:e9:99:f3:25:9c:4c:75:77:55:be:09:b0: 3d:c6:0e:73:f2:57:07:ca:00:41:1e:60:99:b2:27: ba:e9:62:7b:a8:a6:ff:c8:f8:59:3b:c9:c4:f8:df: e3:b9:97:ff:98:50:66:21:25:8c:ea:0b:e7:bb:74: 88:e8:d3:4b:77:a8:e1:79:48:46:51:7a:64:0c:63: 63:cd:92:58:a1:ca:8d:72:8f:b2:5d:c0:53:32:ff: a1:6c:c0:b6:ec:0f:67:7d:a1:5c:a2:f7:68:70:6f: 52:eb:ca:0f:b2:24:6e:86:34:3a:e6:09:c2:39:5d: eb:3d:47:a7:4c:c6:e4:7c:9b:5c:0b:bb:76:fe:0b: 7c:ae:d0:71:88:cd:ce:c9:d2:53:c2:ef:44:f6:f7: f3:5d:f5:35:3e:5a:65:6d:91:52:5f:1c:c2:30:62: 4c:d3:02:cc:3f:e6:30:0b:e9:e1:c9:01:94:74:d7: f6:c8:ee:51:4a:fc:dc:5a:53:d7:8e:fa:0e:7c:37: 63:d0:25:a1:14:32:22:c2:6b:7e:b7:06:b4:d6:6c: 47:ad:d5:32:02:a3:68:f6:8f:a1:2a:7d:e0:e7:82: a2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D4:C0:32:92:CC:55:A1:3D:77:15:CE:9C:07:1F:E4:9D:0F:FB:65 X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ed:28:26:aa:6d:a8:12:a1:4f:c4:4e:87:77:77:cd:73:c8: 32:46:fa:59:b7:c4:a2:4c:b6:f0:11:4b:68:de:5b:2f:b5:44: 48:8b:13:39:e6:37:e4:a5:13:50:84:9c:1a:41:5b:9b:ef:a1: 1c:bd:c4:21:9c:f7:4c:bd:5f:cb:41:38:f5:bd:51:38:c9:d4: 68:c0:89:7d:37:38:be:61:e2:3a:19:35:13:e1:50:b6:02:ce: 73:e0:a2:5c:d4:a7:28:d7:e7:0f:d3:d1:ef:c4:e3:ec:78:1c: ee:c4:82:21:a8:09:19:68:93:8f:b6:10:04:66:9c:30:9c:af: 9a:b3:46:97:9f:36:2f:6a:c1:bc:32:d0:7d:eb:d7:dd:83:1b: 0d:bf:56:89:ad:0c:b7:29:76:e7:4e:17:23:f3:36:85:dd:9e: 6b:78:c1:06:87:9b:c7:20:1f:f8:dd:d0:59:af:46:00:af:59: 5c:74:e5:fc:c2:3f:cc:b5:b8:b1:c2:3c:04:02:9a:4b:9f:4f: d1:b9:52:6c:5b:ed:34:c0:1a:c0:c0:35:74:fc:9d:5c:cf:d3: 8c:51:63:ea:05:fa:ab:0b:80:f0:a2:21:ae:ad:7b:f1:43:ab: 41:cc:7a:2c:09:fb:50:0d:85:65:e0:d9:99:ad:f8:34:f5:8a: 67:be:6f:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPImdO5buCK1qdUbrt4ZUNP/dZNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjA5MjMwNzM1NDJaFw0yNjA5MjQxMDEyNDJaMDMxMTAvBgNV BAMTKEVFRDRDMDMyOTJDQzU1QTEzRDc3MTVDRTlDMDcxRkU0OUQwRkZCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtgREeVOzNsVg9myrW377VCrc 3I+pggdLtRC/e6+hrumZ8yWcTHV3Vb4JsD3GDnPyVwfKAEEeYJmyJ7rpYnuopv/I +Fk7ycT43+O5l/+YUGYhJYzqC+e7dIjo00t3qOF5SEZRemQMY2PNklihyo1yj7Jd wFMy/6FswLbsD2d9oVyi92hwb1Lryg+yJG6GNDrmCcI5Xes9R6dMxuR8m1wLu3b+ C3yu0HGIzc7J0lPC70T29/Nd9TU+WmVtkVJfHMIwYkzTAsw/5jAL6eHJAZR01/bI 7lFK/NxaU9eO+g58N2PQJaEUMiLCa363BrTWbEet1TICo2j2j6EqfeDngqJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7tTAMpLMVaE9dxXOnAcf5J0P+2UwHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0Yx RjY5NzlFRTdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3tKCaqbagSoU/ETod3d81zyDJG+lm3xKJM tvARS2jeWy+1REiLEznmN+SlE1CEnBpBW5vvoRy9xCGc90y9X8tBOPW9UTjJ1GjA iX03OL5h4joZNRPhULYCznPgolzUpyjX5w/T0e/E4+x4HO7EgiGoCRlok4+2EARm nDCcr5qzRpefNi9qwbwy0H3r192DGw2/VomtDLcpdudOFyPzNoXdnmt4wQaHm8cg H/jd0FmvRgCvWVx05fzCP8y1uLHCPAQCmkufT9G5Umxb7TTAGsDANXT8nVzP04xR Y+oF+qsLgPCiIa6te/FDq0HMeiwJ+1ANhWXg2Zmt+DT1ime+b/I= -----END CERTIFICATE-----Generated at Thu Sep 24 02:18:05 2026 by rpki-client