$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft File: 6788613027532DE8F60D043DF88AC63BAB03BBF8.mft (raw, json) Hash identifier: hV1f6QiVaXDfzg5NYtYnl5gWbQFJWUPwh+856e1gCgI= Subject key identifier: A1:28:9A:38:11:D1:BA:E8:F5:C3:C6:DD:63:64:AE:DD:5F:13:28:76 Authority key identifier: 67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8 Certificate issuer: /CN=6788613027532DE8F60D043DF88AC63BAB03BBF8 Certificate serial: 38669DC72E0F558D4CCBD32B73D35CB24DDEDEDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 13:43:10 +0000 Manifest this update: Wed 23 Sep 2026 13:38:10 +0000 Manifest next update: Thu 24 Sep 2026 17:14:10 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: 4cMlP64uyDCNnS+HV6/5myzDbaQzlXGJoTPK5CiDoaQ=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: bN4+AtALc/9iyjNGa+tTVjtSTWUiYCkfUiJRmkaULIU=) 3: 6788613027532DE8F60D043DF88AC63BAB03BBF8.crl (hash: jp8LT3/5saeO9qp/Jhq1vkp7jSlwMdOzCzCI8pK+B+o=) 4: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 9KpyEhEGhAy9FznniYWT52KZ7CJy6UiIPh+5fqTydWs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.crl rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:66:9d:c7:2e:0f:55:8d:4c:cb:d3:2b:73:d3:5c:b2:4d:de:de:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6788613027532DE8F60D043DF88AC63BAB03BBF8 Validity Not Before: Sep 23 13:38:10 2026 GMT Not After : Sep 24 17:14:10 2026 GMT Subject: CN=A1289A3811D1BAE8F5C3C6DD6364AEDD5F132876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:b6:3e:a0:30:06:a7:b8:1b:d0:45:f2:d4: 33:07:b5:86:79:a7:29:1c:07:f2:ee:eb:49:87:fd: 32:6a:cc:a5:4d:fb:be:ae:73:35:f6:8f:81:22:42: b3:f2:de:a0:ff:e3:f3:1d:a3:4b:de:f3:84:48:28: 11:db:ff:00:f0:3b:20:cb:90:f8:83:27:56:fe:c3: 05:04:77:81:98:39:ba:74:99:2b:75:45:8c:4e:fc: a1:99:2d:0a:22:43:48:3c:e9:b2:e5:64:6e:a7:51: ff:02:86:19:ab:23:ae:d8:08:3c:53:85:69:95:df: 49:b2:ff:9e:34:bc:96:7e:44:6f:f9:d5:ba:0c:59: b5:41:b8:ef:2f:f8:ec:7d:e6:54:73:45:58:d1:86: ce:0e:a7:3d:62:27:0a:b7:a0:cd:dd:7d:5e:38:63: 0d:a8:12:c6:5f:0c:85:a2:24:77:c3:a3:0a:46:d3: d2:5e:70:0e:76:fe:75:04:fd:a7:20:98:04:ab:6d: 3b:47:fe:17:d9:3d:c6:d2:88:fc:ba:dc:a7:6e:88: 9e:e8:be:26:57:d6:30:a1:21:af:be:4a:65:39:0f: d2:4a:8d:f5:1e:e0:10:5f:43:04:87:b9:1e:0a:8c: 2d:57:ed:9e:25:27:71:98:aa:af:26:3d:f5:2c:4e: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:28:9A:38:11:D1:BA:E8:F5:C3:C6:DD:63:64:AE:DD:5F:13:28:76 X509v3 Authority Key Identifier: keyid:67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:18:0f:6c:85:f7:d0:1d:8b:5a:61:1b:c6:a9:f8:b9:f8:28: be:60:0c:c7:bf:b7:69:9f:b6:8c:51:96:5c:cb:7b:06:42:22: 26:9d:47:08:38:ff:0f:8a:a1:4c:c7:e5:e7:1c:5b:e8:41:1d: b4:cc:60:78:b9:5e:3d:20:94:80:23:f2:4b:7d:d9:f6:bd:49: f2:18:44:41:f6:60:01:66:a8:37:a9:fb:4e:14:5a:3a:b1:99: d2:e2:a8:11:67:40:43:69:b4:40:f2:b7:d9:04:43:05:38:cc: f9:12:08:5b:a1:d2:ac:0b:44:c3:1f:f3:66:44:ce:dc:3e:16: 93:55:14:b4:e8:e7:4c:48:f8:8d:f0:16:86:a7:8d:60:ec:07: 19:d0:c7:bb:6f:65:d5:45:c5:c0:c8:e4:8e:85:69:be:ce:da: ce:0c:05:52:5d:e6:97:d2:03:d5:70:69:a1:ba:72:e9:6c:b4: 04:53:d6:46:53:6c:44:8a:2d:3b:a7:34:41:af:ad:07:3f:e3: bc:77:87:1c:8a:5f:83:b4:16:85:b9:5d:06:47:f4:dc:3f:ca: 3c:2d:9c:3d:8a:c1:66:1c:6e:ee:ae:8d:aa:06:33:3b:d9:43: e1:9a:ad:ac:0d:7c:81:9e:8b:6c:6f:39:f8:17:44:18:a1:6d: 7b:7a:e1:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGadxy4PVY1My9Mrc9Ncsk3e3t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4ODYxMzAyNzUzMkRFOEY2MEQwNDNERjg4QUM2M0JB QjAzQkJGODAeFw0yNjA5MjMxMzM4MTBaFw0yNjA5MjQxNzE0MTBaMDMxMTAvBgNV BAMTKEExMjg5QTM4MTFEMUJBRThGNUMzQzZERDYzNjRBRURENUYxMzI4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0j7Y+oDAGp7gb0EXy1DMHtYZ5 pykcB/Lu60mH/TJqzKVN+76uczX2j4EiQrPy3qD/4/Mdo0ve84RIKBHb/wDwOyDL kPiDJ1b+wwUEd4GYObp0mSt1RYxO/KGZLQoiQ0g86bLlZG6nUf8ChhmrI67YCDxT hWmV30my/540vJZ+RG/51boMWbVBuO8v+Ox95lRzRVjRhs4Opz1iJwq3oM3dfV44 Yw2oEsZfDIWiJHfDowpG09JecA52/nUE/acgmASrbTtH/hfZPcbSiPy63KduiJ7o viZX1jChIa++SmU5D9JKjfUe4BBfQwSHuR4KjC1X7Z4lJ3GYqq8mPfUsTroTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoSiaOBHRuuj1w8bdY2Su3V8TKHYwHwYDVR0j BBgwFoAUZ4hhMCdTLej2DQQ9+IrGO6sDu/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI2NGJmYjItZDQxZC00MzE3LWI5MmQtYmI5NDQxZmQwZGNmLzAvNjc4ODYxMzAy NzUzMkRFOEY2MEQwNDNERjg4QUM2M0JBQjAzQkJGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Nzg4NjEzMDI3NTMyREU4RjYwRDA0M0RGODhBQzYzQkFCMDNC QkY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc4ODYxMzAyNzUzMkRFOEY2MEQwNDNERjg4QUM2 M0JBQjAzQkJGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcYD2yF99Adi1phG8ap+Ln4KL5gDMe/t2mf toxRllzLewZCIiadRwg4/w+KoUzH5eccW+hBHbTMYHi5Xj0glIAj8kt92fa9SfIY REH2YAFmqDep+04UWjqxmdLiqBFnQENptEDyt9kEQwU4zPkSCFuh0qwLRMMf82ZE ztw+FpNVFLTo50xI+I3wFoanjWDsBxnQx7tvZdVFxcDI5I6Fab7O2s4MBVJd5pfS A9VwaaG6culstART1kZTbESKLTunNEGvrQc/47x3hxyKX4O0FoW5XQZH9Nw/yjwt nD2KwWYcbu6ujaoGMzvZQ+GarawNfIGei2xvOfgXRBihbXt64UY= -----END CERTIFICATE-----Generated at Wed Sep 23 20:17:37 2026 by rpki-client