$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft File: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft (raw, json) Hash identifier: KU/6zsVMtZfp2t2DnazTYNG5iueCAklU/eq0FR0Q/BA= Subject key identifier: BC:B1:BF:DE:A4:BE:E4:6C:C0:11:89:C0:2D:12:2F:7E:71:9D:13:8D Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Certificate serial: 0785290C74822D3D7BA0BBBA1C0E35653AC6C88B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 17:01:44 +0000 Manifest this update: Thu 24 Sep 2026 16:56:44 +0000 Manifest next update: Fri 25 Sep 2026 19:42:44 +0000 Files and hashes: 1: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 1n9vrO/e00jv7CzxxHzwEFPz/e1n9uFRka2H9k4SRco=) 2: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl (hash: zh6xRQcbCNAbVui0SUnTIapgSWuYBHV6essgI+iIC4I=) 3: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: bx3Jz5RMo6M/oNMchr0+LwmSKVwAEYYJfafpXARS4Ho=) 4: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=) 5: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=) 6: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:85:29:0c:74:82:2d:3d:7b:a0:bb:ba:1c:0e:35:65:3a:c6:c8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Validity Not Before: Sep 24 16:56:44 2026 GMT Not After : Sep 25 19:42:44 2026 GMT Subject: CN=BCB1BFDEA4BEE46CC01189C02D122F7E719D138D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:ac:de:6e:35:6b:93:bd:78:52:f0:a1:70: 3b:f3:95:08:7e:57:bf:36:e9:aa:bc:ba:9c:2a:38: 3d:6a:cd:67:5b:83:5d:af:c3:c6:78:c7:57:37:02: 6d:a2:23:2a:66:09:2c:7f:49:fe:f9:72:a7:8e:20: 89:b7:3e:3e:d7:ac:b6:d4:9a:fd:a0:43:45:e8:13: 1d:e9:cf:2a:ee:1a:42:b4:5f:0d:7c:3f:f6:af:cb: 38:f5:a1:87:53:07:10:78:79:bd:93:12:86:68:18: e4:a7:81:2a:33:b0:3b:1e:1f:06:06:b2:92:d6:d5: 2b:62:cf:f9:17:10:a0:34:4e:fb:6e:90:09:d2:c2: 62:31:5b:99:78:df:d5:93:13:2c:81:b5:79:3d:b4: 10:93:1d:a8:1f:7d:e8:37:7f:1f:42:eb:2d:19:78: 7b:da:99:c9:06:51:d6:c1:d8:24:b0:26:01:bc:c7: 41:d0:2e:9e:af:f2:a6:b6:30:55:df:3c:08:9b:26: 28:22:47:5c:49:c7:d8:66:1f:72:92:8b:c6:9c:fd: c3:3e:c8:d6:42:35:60:39:db:d4:14:fb:b3:38:9c: aa:1f:01:01:99:60:db:83:af:d1:4e:f8:b3:b9:79: 2a:00:25:b5:47:3f:6a:69:e0:2d:da:29:35:11:d9: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B1:BF:DE:A4:BE:E4:6C:C0:11:89:C0:2D:12:2F:7E:71:9D:13:8D X509v3 Authority Key Identifier: keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bb:8d:07:53:9e:1d:23:fa:6a:5f:19:1b:86:e3:e9:7f:ba: 90:54:ed:e7:66:ec:83:95:b4:1b:9a:6b:0e:0c:4f:55:4d:cc: 23:66:28:03:0b:53:95:67:00:86:1f:d2:65:cc:b0:5f:7c:84: 76:0a:da:9f:22:cc:62:29:7b:8d:c1:5d:38:67:cd:ca:ac:2f: 77:b9:a8:42:ec:66:1b:33:43:26:44:40:4d:aa:d1:15:f2:e6: 67:22:7b:53:80:5e:b0:b1:69:cc:b9:c5:ab:bc:4a:c4:1a:cb: 78:cc:c8:e6:1d:54:01:1f:cf:2b:10:52:7d:91:52:c4:e5:fa: 28:76:2f:e5:44:78:33:51:a5:21:69:30:e9:06:d2:ba:57:cc: f8:42:dc:3f:68:25:5e:b0:1f:47:dd:ec:37:e9:82:0b:31:ae: c5:cf:40:ef:8a:42:88:92:21:5f:76:dd:92:be:4f:8e:eb:f3: d8:73:49:02:8f:f6:86:ac:47:5f:9e:b4:69:06:b5:d9:3e:c8: 14:cc:df:de:66:00:b1:dc:69:44:45:ad:9e:10:ce:25:3c:75: 2d:19:d9:54:6a:7a:d2:c1:5b:dd:7e:c7:1f:c9:f5:c1:67:d9: 43:25:d1:f6:94:4b:47:dd:44:47:96:b2:a7:b0:7b:ba:ac:68: f1:f6:92:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4UpDHSCLT17oLu6HA41ZTrGyIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND OTFGRURCRjAeFw0yNjA5MjQxNjU2NDRaFw0yNjA5MjUxOTQyNDRaMDMxMTAvBgNV BAMTKEJDQjFCRkRFQTRCRUU0NkNDMDExODlDMDJEMTIyRjdFNzE5RDEzOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHazebjVrk714UvChcDvzlQh+ V7826aq8upwqOD1qzWdbg12vw8Z4x1c3Am2iIypmCSx/Sf75cqeOIIm3Pj7XrLbU mv2gQ0XoEx3pzyruGkK0Xw18P/avyzj1oYdTBxB4eb2TEoZoGOSngSozsDseHwYG spLW1Stiz/kXEKA0TvtukAnSwmIxW5l439WTEyyBtXk9tBCTHagffeg3fx9C6y0Z eHvamckGUdbB2CSwJgG8x0HQLp6v8qa2MFXfPAibJigiR1xJx9hmH3KSi8ac/cM+ yNZCNWA529QU+7M4nKofAQGZYNuDr9FO+LO5eSoAJbVHP2pp4C3aKTUR2biTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvLG/3qS+5GzAEYnALRIvfnGdE40wHwYDVR0j BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0 RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThF NkNDOTFGRURCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIK7jQdTnh0j+mpfGRuG4+l/upBU7edm7IOV tBuaaw4MT1VNzCNmKAMLU5VnAIYf0mXMsF98hHYK2p8izGIpe43BXThnzcqsL3e5 qELsZhszQyZEQE2q0RXy5mcie1OAXrCxacy5xau8SsQay3jMyOYdVAEfzysQUn2R UsTl+ih2L+VEeDNRpSFpMOkG0rpXzPhC3D9oJV6wH0fd7DfpggsxrsXPQO+KQoiS IV923ZK+T47r89hzSQKP9oasR1+etGkGtdk+yBTM395mALHcaURFrZ4QziU8dS0Z 2VRqetLBW91+xx/J9cFn2UMl0faUS0fdREeWsqewe7qsaPH2kuA= -----END CERTIFICATE-----Generated at Thu Sep 24 23:37:02 2026 by rpki-client