$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft File: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft (raw, json) Hash identifier: i6S3j3KeN9BdrZl7QTDmfaW/Se1EYo4YQ+Tv4+JgNOE= Subject key identifier: D6:29:74:F4:95:71:77:8F:71:CE:12:BC:FA:EC:94:76:F3:C8:B6:DB Authority key identifier: 6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 Certificate issuer: /CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Certificate serial: 5EFD6E6894E12419756DF14916B6E34635455D0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:53:07 +0000 Manifest this update: Thu 24 Sep 2026 01:48:07 +0000 Manifest next update: Fri 25 Sep 2026 03:57:07 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: /9mhE8hilLMkdKj/KGoukj1sKVJz3HgKOnytnAx8zSY=) 2: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl (hash: 1DlQ1kyw6OhFc1stXD66pVBovZUeOaIj9rASEHPJJVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fd:6e:68:94:e1:24:19:75:6d:f1:49:16:b6:e3:46:35:45:5d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Validity Not Before: Sep 24 01:48:07 2026 GMT Not After : Sep 25 03:57:07 2026 GMT Subject: CN=D62974F49571778F71CE12BCFAEC9476F3C8B6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:6e:7f:ef:0e:06:a1:16:8e:34:5b:97:e3: 6b:36:45:4c:9a:ff:63:46:50:39:37:93:4e:4a:74: 54:31:64:f7:ce:b9:5a:6c:23:d2:56:95:13:88:25: 5e:b3:fa:4e:39:55:2a:09:93:b3:76:53:18:fc:6f: 5b:78:c2:a8:cf:60:78:b5:3f:e3:36:76:61:0b:d4: f9:de:50:79:1d:cd:9e:aa:64:a6:58:26:ee:59:04: 33:cc:b3:dc:7d:3d:1d:f6:9f:6e:b7:e6:60:44:18: bb:58:e4:90:00:a7:bc:ae:d7:b1:f6:03:5b:6a:46: 84:ae:8a:4c:7c:ca:89:b5:14:81:93:88:c7:ed:9b: b8:d1:c4:58:b5:65:2d:76:f6:ea:a4:be:f6:6f:9e: f9:08:f7:a4:aa:a0:ea:5b:01:ed:2d:f3:a3:bf:e7: cc:e2:9a:87:c8:7a:5e:c8:51:69:0e:aa:db:f7:95: 24:64:23:aa:c8:4d:9f:74:91:ad:6f:a6:16:89:41: 8e:47:7b:54:c5:57:d5:56:c1:9d:bf:2a:94:e6:2c: 04:0d:a1:a8:e2:02:ec:d0:f5:66:83:94:42:a4:8d: c5:bb:8c:c4:03:ea:b6:1b:5c:c4:c4:4b:d7:9f:d9: e1:14:03:cf:95:94:c3:08:80:3c:e9:aa:15:8b:28: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:74:F4:95:71:77:8F:71:CE:12:BC:FA:EC:94:76:F3:C8:B6:DB X509v3 Authority Key Identifier: keyid:6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:07:92:a3:b6:4d:4d:57:b8:96:72:f1:60:3b:43:1b:12:bb: ee:0b:08:4f:f0:51:95:fa:a0:f9:9a:50:63:12:de:2d:fe:08: e0:19:55:4d:d6:3d:5a:cf:06:bf:04:97:83:c6:18:1a:bb:64: 6d:29:02:57:0f:90:33:e1:fe:76:a8:c8:7f:60:f1:f0:8c:b2: 6c:1d:c4:0b:45:b2:1b:bc:41:fb:9d:39:18:3e:28:94:82:b4: 83:17:cf:3a:99:58:9a:b7:66:2a:30:29:fd:23:3c:c5:b7:51: 07:1f:70:05:12:f0:ac:e8:b5:e2:3d:9f:c6:4f:ee:1e:af:49: 4d:09:ef:b9:85:ef:ff:02:1c:6b:32:9f:1d:5b:94:f4:c2:40: 31:e1:3a:93:0b:a9:a9:de:d0:56:57:87:61:ca:0e:46:50:56: 1e:00:e0:1b:df:ed:15:fb:48:66:7f:26:96:b9:03:39:43:00: 7b:09:28:7f:a8:6a:57:c3:e2:0d:2a:bb:37:ea:5f:0c:8b:2e: d7:d9:72:ab:02:05:b6:e9:58:5a:fe:8d:73:22:d8:fd:ce:9b: 69:0b:ec:08:58:39:12:04:3d:20:e0:e9:85:2e:13:49:f4:88: d3:13:04:ea:00:24:51:ab:56:58:c5:19:87:74:73:46:ae:0a: 42:86:fb:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXv1uaJThJBl1bfFJFrbjRjVFXQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZD N0NCRDQ5NzAeFw0yNjA5MjQwMTQ4MDdaFw0yNjA5MjUwMzU3MDdaMDMxMTAvBgNV BAMTKEQ2Mjk3NEY0OTU3MTc3OEY3MUNFMTJCQ0ZBRUM5NDc2RjNDOEI2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12W5/7w4GoRaONFuX42s2RUya /2NGUDk3k05KdFQxZPfOuVpsI9JWlROIJV6z+k45VSoJk7N2Uxj8b1t4wqjPYHi1 P+M2dmEL1PneUHkdzZ6qZKZYJu5ZBDPMs9x9PR32n2635mBEGLtY5JAAp7yu17H2 A1tqRoSuikx8yom1FIGTiMftm7jRxFi1ZS129uqkvvZvnvkI96SqoOpbAe0t86O/ 58zimofIel7IUWkOqtv3lSRkI6rITZ90ka1vphaJQY5He1TFV9VWwZ2/KpTmLAQN oajiAuzQ9WaDlEKkjcW7jMQD6rYbXMTES9ef2eEUA8+VlMMIgDzpqhWLKCPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1il09JVxd49xzhK8+uyUdvPIttswHwYDVR0j BBgwFoAUahOHEqHSyDj4Y6e4gu1/1sfL1JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiMWFiN2YtZTQ1MS00MGQxLTliNzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJB MUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZDN0NCRDQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QTEzODcxMkExRDJDODM4Rjg2M0E3Qjg4MkVEN0ZENkM3Q0JE NDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdG RDZDN0NCRDQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwHkqO2TU1XuJZy8WA7QxsSu+4LCE/wUZX6 oPmaUGMS3i3+COAZVU3WPVrPBr8El4PGGBq7ZG0pAlcPkDPh/naoyH9g8fCMsmwd xAtFshu8QfudORg+KJSCtIMXzzqZWJq3ZiowKf0jPMW3UQcfcAUS8KzoteI9n8ZP 7h6vSU0J77mF7/8CHGsynx1blPTCQDHhOpMLqane0FZXh2HKDkZQVh4A4Bvf7RX7 SGZ/Jpa5AzlDAHsJKH+oalfD4g0quzfqXwyLLtfZcqsCBbbpWFr+jXMi2P3Om2kL 7AhYORIEPSDg6YUuE0n0iNMTBOoAJFGrVljFGYd0c0auCkKG+7c= -----END CERTIFICATE-----Generated at Thu Sep 24 10:52:34 2026 by rpki-client