$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: 703W75TD9dKJcygvp4AdKsShsmZ0TyluID6oTJW/Ojg= Subject key identifier: 70:64:C5:B1:EA:70:5C:3B:E2:19:2F:50:C5:0E:75:2F:16:B7:58:79 Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 79C9B4234C010E47131AFBFD9057660024E240AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 12:46:16 +0000 Manifest this update: Fri 25 Sep 2026 12:41:16 +0000 Manifest next update: Sat 26 Sep 2026 13:36:16 +0000 Files and hashes: 1: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 3: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: cpHU5IjPDa7t6jyRiFBmrUbOpOCGnILF+iNyEESqGAs=) 4: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c9:b4:23:4c:01:0e:47:13:1a:fb:fd:90:57:66:00:24:e2:40:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Sep 25 12:41:16 2026 GMT Not After : Sep 26 13:36:16 2026 GMT Subject: CN=7064C5B1EA705C3BE2192F50C50E752F16B75879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:8d:a9:56:52:c5:c0:fc:69:11:b8:b7:e2: 7d:eb:20:a0:59:53:6c:7e:01:77:ec:cc:20:2b:0b: 8e:18:5e:b4:43:e5:e3:b0:58:09:99:34:bc:89:bf: 24:3e:1b:55:e1:d7:aa:1a:7d:d8:b7:49:ff:d6:65: 50:32:55:79:3d:09:65:0c:03:3f:b8:d6:0a:f1:55: b4:54:82:8d:92:f7:8f:5b:81:aa:22:1f:9a:7d:b3: 5f:75:3b:7e:a0:f9:03:10:80:e3:8e:d4:40:23:80: 05:d3:9d:45:2f:52:00:c6:89:a3:f9:0b:74:b3:4f: 54:c7:da:7a:f6:75:6b:c0:ae:0e:3f:06:2c:b5:2c: 9b:11:e0:75:9d:a6:9f:f6:17:a6:39:68:3d:81:3c: 10:ac:10:c6:82:00:e5:69:00:e3:54:0d:79:96:0f: e0:e1:b7:d8:f1:f2:1f:cf:f3:53:6f:87:b2:7a:aa: 46:af:18:36:dd:2e:3f:6b:ad:23:45:69:9d:05:a5: c9:20:b4:88:5f:5a:59:52:87:a5:04:90:32:5f:ad: c2:bb:8c:ef:79:6d:78:98:ae:1b:5d:07:99:2c:69: 38:19:ab:6c:4f:aa:65:4a:f2:bf:29:fc:dc:2c:49: 9f:be:67:dd:7b:d5:cf:a1:27:71:0e:61:86:2f:b8: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:64:C5:B1:EA:70:5C:3B:E2:19:2F:50:C5:0E:75:2F:16:B7:58:79 X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a7:f0:7b:2a:8a:4c:64:4a:ed:47:e5:32:f1:7c:c7:37:93: 68:4a:f7:5a:c5:76:1e:c0:16:4c:61:96:3c:2d:bb:87:f7:b4: fc:5a:ef:3f:03:78:87:df:83:93:5a:e3:81:02:30:c5:b3:70: b3:b1:7c:f5:2f:66:63:68:fe:9f:af:da:d7:8a:de:91:02:47: 80:fa:8d:7e:e7:56:8a:ec:88:5b:b7:e6:4d:9c:96:e5:0a:3c: cf:2f:69:d9:62:8d:0e:07:c9:e0:37:eb:30:aa:6e:b3:77:47: 02:21:ad:6e:0c:88:2f:3b:bb:74:63:b1:24:b6:d6:6a:38:28: 57:b2:e8:b3:86:81:7f:64:41:ea:ab:68:f4:26:6c:ba:40:ce: 07:8d:f0:c8:c3:ca:d0:7a:d3:ed:0c:ab:c3:4f:b3:21:15:f7: 07:8c:81:e0:cf:1e:9b:85:82:46:20:ef:be:bc:e9:23:63:86: 9b:5e:ac:ca:65:14:4a:19:b2:6e:e1:5a:20:ff:88:6d:69:28: a5:64:b5:e3:6d:1d:78:a7:3d:4c:be:79:3c:77:10:7f:a0:03: 6b:3b:58:37:61:ef:8b:e2:08:b8:93:dd:37:72:87:76:1d:73: 83:83:27:5c:72:94:72:20:19:83:5b:10:55:38:96:aa:da:4d: 98:7b:a8:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecm0I0wBDkcTGvv9kFdmACTiQK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA5MjUxMjQxMTZaFw0yNjA5MjYxMzM2MTZaMDMxMTAvBgNV BAMTKDcwNjRDNUIxRUE3MDVDM0JFMjE5MkY1MEM1MEU3NTJGMTZCNzU4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK942pVlLFwPxpEbi34n3rIKBZ U2x+AXfszCArC44YXrRD5eOwWAmZNLyJvyQ+G1Xh16oafdi3Sf/WZVAyVXk9CWUM Az+41grxVbRUgo2S949bgaoiH5p9s191O36g+QMQgOOO1EAjgAXTnUUvUgDGiaP5 C3SzT1TH2nr2dWvArg4/Biy1LJsR4HWdpp/2F6Y5aD2BPBCsEMaCAOVpAONUDXmW D+Dht9jx8h/P81Nvh7J6qkavGDbdLj9rrSNFaZ0FpckgtIhfWllSh6UEkDJfrcK7 jO95bXiYrhtdB5ksaTgZq2xPqmVK8r8p/NwsSZ++Z9171c+hJ3EOYYYvuImRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGTFsepwXDviGS9QxQ51Lxa3WHkwHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOn8HsqikxkSu1H5TLxfMc3k2hK91rFdh7A Fkxhljwtu4f3tPxa7z8DeIffg5Na44ECMMWzcLOxfPUvZmNo/p+v2teK3pECR4D6 jX7nVorsiFu35k2cluUKPM8vadlijQ4HyeA36zCqbrN3RwIhrW4MiC87u3RjsSS2 1mo4KFey6LOGgX9kQeqraPQmbLpAzgeN8MjDytB60+0Mq8NPsyEV9weMgeDPHpuF gkYg77686SNjhpterMplFEoZsm7hWiD/iG1pKKVkteNtHXinPUy+eTx3EH+gA2s7 WDdh74viCLiT3Tdyh3Ydc4ODJ1xylHIgGYNbEFU4lqraTZh7qN4= -----END CERTIFICATE-----Generated at Fri Sep 25 23:30:45 2026 by rpki-client