$ rpki-client -vvvf rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft File: 6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft (raw, json) Hash identifier: LPq9xgFne954+B6AVML6xPBK/zzM8Llbc+sUZzo2FDY= Subject key identifier: 93:C8:DA:8C:4A:84:79:62:64:EE:CB:40:12:80:4D:34:9A:9C:29:EB Authority key identifier: 6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA Certificate issuer: /CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA Certificate serial: 19333CE1B7653AA40F8D1F17CBFF0AD5B4167556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft Manifest number: BF Signing time: Wed 23 Sep 2026 13:32:52 +0000 Manifest this update: Wed 23 Sep 2026 13:27:52 +0000 Manifest next update: Thu 24 Sep 2026 15:06:52 +0000 Files and hashes: 1: 3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa (hash: m73H0GlDEx00LFI1u2mNj74knbcvjFcFaVPie75MSDI=) 2: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: ualI/pM4NT2Wg3gKd9xAdl1JUbAVFMa5CRAfQUjYzdU=) 3: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: r55de0MlwnHcxztoQUvETv5/95di0cZyECnWwdFgdeM=) 4: 6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl (hash: aEo7LRCwBcaRH1z0LUae7e1+/lgzw8jKTOF5PvF5H5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:33:3c:e1:b7:65:3a:a4:0f:8d:1f:17:cb:ff:0a:d5:b4:16:75:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA Validity Not Before: Sep 23 13:27:52 2026 GMT Not After : Sep 24 15:06:52 2026 GMT Subject: CN=93C8DA8C4A84796264EECB4012804D349A9C29EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:2d:81:be:3d:86:e1:65:52:21:fa:48:66: 24:88:1f:97:5d:2d:b4:1a:ce:86:3d:e1:40:47:2a: 3f:af:3b:f0:5f:45:c9:d7:81:85:0e:02:bd:a4:c7: ef:25:fe:ef:cb:cf:96:a0:2c:c7:e1:e8:90:ea:6c: 95:a7:e7:82:00:84:ec:74:4f:e3:ef:12:ad:2c:ae: 73:90:60:be:c6:0b:d8:57:33:4d:13:d5:e3:f5:e2: 5a:10:e7:40:7e:70:28:4b:26:4a:8a:06:1d:32:e2: 2b:53:9a:bc:5b:d8:70:90:53:76:d5:fd:a8:38:bc: b3:be:12:49:6b:9d:d7:67:77:f3:66:7f:9c:01:e9: dc:89:22:e3:24:b6:bc:2d:4f:17:6e:8d:22:2d:84: c4:c2:f9:65:cc:dc:14:1e:91:72:d6:70:1b:9a:44: 93:18:74:51:63:83:29:b3:84:06:c8:6f:10:fe:b0: ff:74:ed:54:35:ab:4d:20:09:73:72:54:10:f0:35: 51:91:6c:17:e8:dc:87:f5:ce:2c:94:0d:64:b1:93: c3:fb:71:c9:e7:1e:ec:fc:fa:6a:ef:4f:bc:89:b4: ea:a1:f2:a4:ab:94:11:4f:62:a4:55:99:a0:55:62: ff:d7:16:63:64:7c:81:34:0b:3f:f7:7f:df:1f:fc: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C8:DA:8C:4A:84:79:62:64:EE:CB:40:12:80:4D:34:9A:9C:29:EB X509v3 Authority Key Identifier: keyid:6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:41:c4:bb:af:3f:93:c7:2b:9a:e3:51:1d:2e:59:a9:41:20: 31:2a:7e:99:0a:81:40:24:d6:e9:01:81:13:9a:09:f6:66:5d: 7f:8f:16:ad:b6:02:41:16:68:61:8e:b2:ff:a9:ba:81:e0:a1: 59:8c:cf:6b:c8:7f:75:26:e2:55:a9:b8:f1:20:ac:31:0f:09: 62:f7:3e:17:75:53:8b:4e:82:81:59:66:e0:4b:7e:8c:cd:d3: c8:c4:e8:bb:56:6b:80:4d:f4:f5:e8:7c:0f:f2:91:e8:ff:07: 12:c6:4f:72:ea:14:77:82:9b:31:37:69:1c:f4:48:14:ca:51: 9d:66:c2:5e:4f:34:54:86:0f:f3:e4:bd:7a:d3:87:0a:17:c7: b7:67:01:f8:94:a4:13:f9:62:f8:98:7b:07:26:62:d7:a0:17: 6c:0b:a8:fe:eb:83:04:2b:c4:b8:e2:7a:17:ef:81:39:fa:71: 19:5b:3f:15:54:1e:99:0c:71:3b:6b:b8:9e:d3:ee:7d:fe:77: ec:24:d9:d1:77:56:e7:bb:df:7e:56:5b:89:5f:e3:08:55:65: 63:aa:84:14:ea:2b:fe:19:68:f0:a8:42:cd:de:51:86:97:18: ec:6c:8b:85:26:39:d4:61:0f:fa:f7:8d:b6:b2:4e:b1:f1:9e: 51:dc:81:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTM84bdlOqQPjR8Xy/8K1bQWdVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCM0MxM0NGQzAyQTUxQUNGMTU3OTA1RUU2NTc5NEZC MDdCQThGQTAeFw0yNjA5MjMxMzI3NTJaFw0yNjA5MjQxNTA2NTJaMDMxMTAvBgNV BAMTKDkzQzhEQThDNEE4NDc5NjI2NEVFQ0I0MDEyODA0RDM0OUE5QzI5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgS2Bvj2G4WVSIfpIZiSIH5dd LbQazoY94UBHKj+vO/BfRcnXgYUOAr2kx+8l/u/Lz5agLMfh6JDqbJWn54IAhOx0 T+PvEq0srnOQYL7GC9hXM00T1eP14loQ50B+cChLJkqKBh0y4itTmrxb2HCQU3bV /ag4vLO+Eklrnddnd/Nmf5wB6dyJIuMktrwtTxdujSIthMTC+WXM3BQekXLWcBua RJMYdFFjgymzhAbIbxD+sP907VQ1q00gCXNyVBDwNVGRbBfo3If1ziyUDWSxk8P7 ccnnHuz8+mrvT7yJtOqh8qSrlBFPYqRVmaBVYv/XFmNkfIE0Cz/3f98f/N4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk8jajEqEeWJk7stAEoBNNJqcKeswHwYDVR0j BBgwFoAUb7PBPPwCpRrPFXkF7mV5T7B7qPowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdkMjAzMWItMjc2MS00YzM2LWI2OTAtNWI2OWQxNTY5YmFlLzAvNkZCM0MxM0NG QzAyQTUxQUNGMTU3OTA1RUU2NTc5NEZCMDdCQThGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIzQzEzQ0ZDMDJBNTFBQ0YxNTc5MDVFRTY1Nzk0RkIwN0JB OEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2 OTAtNWI2OWQxNTY5YmFlLzAvNkZCM0MxM0NGQzAyQTUxQUNGMTU3OTA1RUU2NTc5 NEZCMDdCQThGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARBxLuvP5PHK5rjUR0uWalBIDEqfpkKgUAk 1ukBgROaCfZmXX+PFq22AkEWaGGOsv+puoHgoVmMz2vIf3Um4lWpuPEgrDEPCWL3 Phd1U4tOgoFZZuBLfozN08jE6LtWa4BN9PXofA/ykej/BxLGT3LqFHeCmzE3aRz0 SBTKUZ1mwl5PNFSGD/PkvXrThwoXx7dnAfiUpBP5YviYewcmYtegF2wLqP7rgwQr xLjiehfvgTn6cRlbPxVUHpkMcTtruJ7T7n3+d+wk2dF3Vue7335WW4lf4whVZWOq hBTqK/4ZaPCoQs3eUYaXGOxsi4UmOdRhD/r3jbayTrHxnlHcgTU= -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:11 2026 by rpki-client