$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft File: 6D157C9F12B387F14489E16709B7918837CC6D0D.mft (raw, json) Hash identifier: d8nttz4N4nNQt2YiHhezWbK0lNjmLWnDuvP0InsQe7s= Subject key identifier: F2:2D:48:B8:73:DE:D9:9E:6F:6A:41:87:2D:8E:32:27:85:B9:FA:D7 Authority key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D Certificate issuer: /CN=6D157C9F12B387F14489E16709B7918837CC6D0D Certificate serial: 60E5A7C1E519931D271A2AFCA2193B77E6B71760 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:57:47 +0000 Manifest this update: Thu 24 Sep 2026 21:52:47 +0000 Manifest next update: Fri 25 Sep 2026 22:13:47 +0000 Files and hashes: 1: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: Q1+ewmleGWvKt5GVutrjmiB3bltbmXv4+SV22bkfQSA=) 2: 6D157C9F12B387F14489E16709B7918837CC6D0D.crl (hash: aTjud0FgUsEjo92jxe6kCboKIG8/Zrjk9N0R17mMPug=) 3: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: NlPuBH9s19urTN9l/ySJyKm6WWO9NdJomGBorLJ9CcM=) 4: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: VkyPTF+RY+z/p6xoTjLQ0ZWN42gQ1j6IA9bwlr+r6r8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e5:a7:c1:e5:19:93:1d:27:1a:2a:fc:a2:19:3b:77:e6:b7:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D157C9F12B387F14489E16709B7918837CC6D0D Validity Not Before: Sep 24 21:52:47 2026 GMT Not After : Sep 25 22:13:47 2026 GMT Subject: CN=F22D48B873DED99E6F6A41872D8E322785B9FAD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:28:04:ba:67:a9:0e:31:dc:24:88:68:bf: 70:51:07:29:0a:a7:b5:b6:45:2e:2a:68:36:56:be: 94:a6:a7:82:b6:42:65:53:05:a1:47:82:3e:71:b3: 71:70:95:40:80:62:9c:34:f9:7b:70:b9:ed:ff:c7: d2:a7:97:b4:14:ac:aa:dd:4d:c9:ed:a8:96:43:8f: 55:18:51:52:15:cf:23:e1:33:d8:0d:a4:35:d1:57: 59:1d:30:15:b3:81:bf:1f:6a:76:8f:9f:b5:03:19: 24:0c:5c:0a:21:6f:ed:97:2d:62:d2:a1:d8:24:ed: 04:58:3b:ec:ff:e6:26:c9:ea:c5:d9:ac:53:3e:d4: 0d:f5:ee:0c:e1:41:64:71:2b:82:a9:e5:71:f9:86: a1:68:a4:ad:69:81:f2:bd:e9:2f:7d:89:75:0b:97: ab:30:1f:4c:44:e0:b5:c3:17:92:68:be:bb:a0:b2: b9:d3:51:c7:34:df:57:a1:03:5b:6b:b2:be:16:9d: 48:6b:80:e2:ed:da:30:b1:a3:fd:c6:e2:83:ab:18: 1d:e8:db:ff:b2:13:0b:71:56:0e:26:0d:55:2a:93: 1c:62:05:ae:ee:a0:07:53:47:6f:4d:dd:13:13:32: 89:69:40:91:5d:21:18:54:37:c6:1a:eb:a6:45:05: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2D:48:B8:73:DE:D9:9E:6F:6A:41:87:2D:8E:32:27:85:B9:FA:D7 X509v3 Authority Key Identifier: keyid:6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:03:e2:8a:2c:f8:3f:5f:85:29:b5:8c:e1:bd:5c:09:2b:44: cb:76:d4:3b:17:b4:9a:d9:ac:5b:89:7f:02:e7:97:b0:88:b5: 04:7a:90:8f:58:96:2b:4e:4f:c3:a1:bd:93:5f:f0:05:52:93: e4:e1:12:65:9f:65:d2:39:86:cf:ed:2b:bd:35:7b:40:6e:c0: 7d:e9:b9:63:79:03:a5:8f:7c:68:44:46:21:0c:1b:81:8c:d0: bb:83:47:d1:5f:a0:52:80:6e:aa:72:d6:e9:b1:d2:ce:d0:68: 79:6c:94:ff:f5:62:b2:63:e5:09:53:6f:0c:a9:bb:fa:eb:a8: c7:fc:1f:b9:62:8c:dd:11:84:8f:2d:bf:42:ba:45:82:93:37: ca:a0:db:01:7a:0b:17:f0:ea:75:bd:9d:d0:fa:19:72:db:67: 40:fd:5e:70:d6:a6:bf:02:b0:d3:a8:8f:1e:36:60:22:b3:c6: 82:5f:6d:23:f4:ac:45:e5:66:f7:6f:7c:fc:7b:aa:36:4f:83: f9:52:c6:87:7c:c4:d5:10:21:cf:1c:ef:64:e8:46:4c:8f:cb: f2:2e:5b:94:ff:1a:71:81:d2:48:df:d4:8a:12:6d:57:5a:5a: 7d:14:aa:3a:ee:f9:5a:02:6a:fe:74:a0:93:2d:d0:ab:56:7a: 7b:1b:59:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOWnweUZkx0nGir8ohk7d+a3F2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkxODgz N0NDNkQwRDAeFw0yNjA5MjQyMTUyNDdaFw0yNjA5MjUyMjEzNDdaMDMxMTAvBgNV BAMTKEYyMkQ0OEI4NzNERUQ5OUU2RjZBNDE4NzJEOEUzMjI3ODVCOUZBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpigEumepDjHcJIhov3BRBykK p7W2RS4qaDZWvpSmp4K2QmVTBaFHgj5xs3FwlUCAYpw0+Xtwue3/x9Knl7QUrKrd TcntqJZDj1UYUVIVzyPhM9gNpDXRV1kdMBWzgb8fanaPn7UDGSQMXAohb+2XLWLS odgk7QRYO+z/5ibJ6sXZrFM+1A317gzhQWRxK4Kp5XH5hqFopK1pgfK96S99iXUL l6swH0xE4LXDF5JovrugsrnTUcc031ehA1trsr4WnUhrgOLt2jCxo/3G4oOrGB3o 2/+yEwtxVg4mDVUqkxxiBa7uoAdTR29N3RMTMolpQJFdIRhUN8Ya66ZFBdqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8i1IuHPe2Z5vakGHLY4yJ4W5+tcwHwYDVR0j BBgwFoAUbRV8nxKzh/FEieFnCbeRiDfMbQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEyYmZlOWEtMzgyMy00NGU5LTk3YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYx MkIzODdGMTQ0ODlFMTY3MDlCNzkxODgzN0NDNkQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDE1N0M5RjEyQjM4N0YxNDQ4OUUxNjcwOUI3OTE4ODM3Q0M2 RDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkx ODgzN0NDNkQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIID4oos+D9fhSm1jOG9XAkrRMt21DsXtJrZ rFuJfwLnl7CItQR6kI9YlitOT8OhvZNf8AVSk+ThEmWfZdI5hs/tK701e0BuwH3p uWN5A6WPfGhERiEMG4GM0LuDR9FfoFKAbqpy1umx0s7QaHlslP/1YrJj5QlTbwyp u/rrqMf8H7lijN0RhI8tv0K6RYKTN8qg2wF6Cxfw6nW9ndD6GXLbZ0D9XnDWpr8C sNOojx42YCKzxoJfbSP0rEXlZvdvfPx7qjZPg/lSxod8xNUQIc8c72ToRkyPy/Iu W5T/GnGB0kjf1IoSbVdaWn0Uqjru+VoCav50oJMt0KtWensbWVo= -----END CERTIFICATE-----Generated at Fri Sep 25 12:50:20 2026 by rpki-client