$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: 4OUPXHFjmdg8IijnkXjglGDr0xPBLoiZLmwW2b/gZsE= Subject key identifier: 1F:8D:B1:B7:79:BF:51:17:27:73:00:EB:F6:61:B8:48:49:38:AD:F4 Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 52393B7316E9E109BE0AFD1E3A0A49B362957B48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 02:23:38 +0000 Manifest this update: Thu 24 Sep 2026 02:18:38 +0000 Manifest next update: Fri 25 Sep 2026 03:22:38 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 2: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 3: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: daGPuRXHHyC0mQjANSaMCMuPqEwAwLGfdyxAimoDbww=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:39:3b:73:16:e9:e1:09:be:0a:fd:1e:3a:0a:49:b3:62:95:7b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Sep 24 02:18:38 2026 GMT Not After : Sep 25 03:22:38 2026 GMT Subject: CN=1F8DB1B779BF5117277300EBF661B8484938ADF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:10:ef:d6:92:4d:2d:4a:0d:1f:fd:14:62: cc:e2:33:4b:16:b1:96:d8:be:3e:68:4b:ce:0a:41: 44:a6:a9:06:2e:17:65:cf:f1:d6:b5:43:17:41:39: 6b:25:c1:7f:3d:2e:b2:18:0b:88:12:c4:d5:78:51: d5:df:c8:b8:fa:00:3d:90:f7:8a:cf:de:8e:6c:23: 1b:f9:95:bb:ea:4a:fe:0b:47:4b:bb:28:98:d7:96: 46:e9:6f:6c:a8:95:21:49:1f:a6:c2:a9:25:4d:5f: 28:c1:cc:bf:ce:4f:92:65:a1:26:a8:89:51:80:10: 6b:1f:97:96:b5:1e:18:93:a5:78:ae:7b:5e:32:7b: 72:b2:da:34:67:c0:6e:45:48:30:54:ad:2e:01:6e: fa:7d:ae:8b:f3:2c:60:25:5a:df:f4:a1:62:b4:bb: 4c:27:75:f6:9d:cd:b1:cb:28:17:da:55:53:f9:a1: 05:94:b4:72:61:c3:b6:6c:37:3e:e8:46:0c:d5:69: 38:a1:7e:1b:47:d3:5d:81:14:a5:5c:12:67:98:7d: 54:c7:10:92:7c:30:db:5d:c3:b2:85:24:38:c9:84: 1a:e9:86:f0:62:5c:54:75:90:50:d8:e6:3d:d2:bf: 13:07:9e:eb:1b:44:6b:ec:79:d6:49:87:2b:8a:cb: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8D:B1:B7:79:BF:51:17:27:73:00:EB:F6:61:B8:48:49:38:AD:F4 X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5a:5a:b8:1c:e5:f7:50:d2:7b:0d:5f:f5:94:9e:6a:02:fd: 6a:d8:3f:d3:ed:b7:79:33:3f:c2:2d:de:0c:ec:a7:84:b3:6a: 69:d4:db:bd:6f:3c:d5:95:de:82:c9:7a:08:6e:e0:c9:bd:52: 21:4d:b1:95:b7:86:ea:81:cd:a0:c8:09:7e:49:c2:4c:48:7a: b2:28:42:b3:f1:d5:38:31:62:22:05:7d:d0:52:1e:0e:ad:26: 7c:67:b1:d3:9f:80:e4:a2:4a:9b:94:a7:d7:a6:ca:f3:af:cc: 21:5f:05:f0:91:da:41:70:fd:df:7d:fc:40:7d:79:23:7f:63: 75:f1:71:6f:01:8b:49:de:3b:21:80:65:30:74:4b:4c:aa:19: 65:d1:eb:d0:04:f8:80:c9:b8:87:4c:97:c4:c2:c3:2e:8c:45: ec:8e:7b:52:b0:ce:06:9e:2f:2e:53:f0:ad:fd:44:31:d1:1a: f9:34:11:73:81:00:84:c1:47:05:69:b5:52:9e:ca:45:4f:f8: 44:8e:28:3b:18:33:3a:d6:2e:c3:96:06:c2:6f:8a:49:28:46: 94:68:87:32:a2:b1:c5:35:a6:cc:4a:7a:4d:07:e6:71:85:3a: 48:2a:55:2e:d2:44:7c:ae:51:94:d9:4c:87:0d:20:83:c8:74: 7f:70:eb:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjk7cxbp4Qm+Cv0eOgpJs2KVe0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA5MjQwMjE4MzhaFw0yNjA5MjUwMzIyMzhaMDMxMTAvBgNV BAMTKDFGOERCMUI3NzlCRjUxMTcyNzczMDBFQkY2NjFCODQ4NDkzOEFERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkxDv1pJNLUoNH/0UYsziM0sW sZbYvj5oS84KQUSmqQYuF2XP8da1QxdBOWslwX89LrIYC4gSxNV4UdXfyLj6AD2Q 94rP3o5sIxv5lbvqSv4LR0u7KJjXlkbpb2yolSFJH6bCqSVNXyjBzL/OT5JloSao iVGAEGsfl5a1HhiTpXiue14ye3Ky2jRnwG5FSDBUrS4Bbvp9rovzLGAlWt/0oWK0 u0wndfadzbHLKBfaVVP5oQWUtHJhw7ZsNz7oRgzVaTihfhtH012BFKVcEmeYfVTH EJJ8MNtdw7KFJDjJhBrphvBiXFR1kFDY5j3SvxMHnusbRGvsedZJhyuKy7axAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH42xt3m/URcncwDr9mG4SEk4rfQwHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRaWrgc5fdQ0nsNX/WUnmoC/WrYP9Ptt3kz P8It3gzsp4SzamnU271vPNWV3oLJeghu4Mm9UiFNsZW3huqBzaDICX5JwkxIerIo QrPx1TgxYiIFfdBSHg6tJnxnsdOfgOSiSpuUp9emyvOvzCFfBfCR2kFw/d99/EB9 eSN/Y3XxcW8Bi0neOyGAZTB0S0yqGWXR69AE+IDJuIdMl8TCwy6MReyOe1Kwzgae Ly5T8K39RDHRGvk0EXOBAITBRwVptVKeykVP+ESOKDsYMzrWLsOWBsJvikkoRpRo hzKiscU1psxKek0H5nGFOkgqVS7SRHyuUZTZTIcNIIPIdH9w62M= -----END CERTIFICATE-----Generated at Thu Sep 24 21:17:18 2026 by rpki-client