$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft File: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft (raw, json) Hash identifier: OYapCXMLNvOpgihxTHixiWHbZG9jwLEkdGEx6dbHjd8= Subject key identifier: 08:83:A7:C2:78:C8:23:3E:03:48:46:1A:01:00:57:B8:CE:12:02:B4 Authority key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD Certificate issuer: /CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Certificate serial: 654F8BBB4A00B45CE097E11F3269A276214319E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:35:13 +0000 Manifest this update: Wed 23 Sep 2026 23:30:13 +0000 Manifest next update: Fri 25 Sep 2026 00:59:13 +0000 Files and hashes: 1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: E+hRgGJJ8C/Srz5/ghgOOJ3QwYrgYhMnvxLJoD14unU=) 2: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl (hash: r46xS2SWN7TFBDP1DXqkgXeCGgLZoR3azTmWyPqQHDE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4f:8b:bb:4a:00:b4:5c:e0:97:e1:1f:32:69:a2:76:21:43:19:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Validity Not Before: Sep 23 23:30:13 2026 GMT Not After : Sep 25 00:59:13 2026 GMT Subject: CN=0883A7C278C8233E0348461A010057B8CE1202B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:6b:f9:96:09:35:f9:8e:20:21:6a:26:84: c5:ff:fa:07:a0:08:dd:83:dc:b4:d0:3c:63:7e:82: 62:ad:6e:d2:0b:47:ae:60:ff:bc:cf:a7:da:17:00: 09:f6:9a:3a:6d:35:02:68:65:1e:91:63:50:06:5b: 5b:66:36:b0:0a:d6:ad:66:89:a9:a9:86:2a:22:72: 76:a7:0d:dc:1a:91:ff:93:5e:82:c9:05:76:21:5c: ad:6a:8d:99:94:6b:27:83:1e:eb:60:fd:5a:d0:c9: b0:c9:3e:42:37:d2:70:4b:73:8c:3b:3d:70:03:56: 56:66:d9:b8:1b:06:f6:b2:27:9a:4b:bc:ca:b0:ed: de:61:8b:99:05:cc:45:49:d0:f8:ba:37:96:fc:19: 8e:c3:8f:b2:63:bb:a5:54:4c:8c:1f:61:67:d4:1d: f4:cc:3a:6b:e2:a4:a7:32:fa:45:fa:4f:3f:f4:63: d7:d3:3d:45:1f:cc:1e:4d:78:92:3c:4b:d6:51:42: 06:52:2c:3d:d4:e4:b2:18:6e:b5:d6:b2:34:fa:42: ea:81:9a:62:32:d2:1f:6f:90:20:00:cf:0c:ca:11: e0:64:40:81:8a:5a:7d:1c:24:06:ee:9d:48:b5:a5: ee:88:5f:85:ee:75:a9:06:dc:99:32:97:4d:1f:4b: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:83:A7:C2:78:C8:23:3E:03:48:46:1A:01:00:57:B8:CE:12:02:B4 X509v3 Authority Key Identifier: keyid:6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b8:d5:66:5b:5a:c8:3d:58:75:38:1f:9c:09:54:46:90:a2: d2:ec:94:ca:f0:71:cc:77:0b:3b:28:ea:2e:ca:6e:f7:35:18: 7d:40:f0:31:d0:c5:e5:57:28:00:11:01:95:36:b7:37:a9:fa: 6b:63:38:04:58:3c:74:19:f4:be:64:a6:79:2d:12:02:a7:0d: 8f:24:1a:22:e1:b7:74:d4:80:f1:5a:97:9c:e5:ad:15:b8:87: 58:9b:c1:7a:d8:2f:4b:81:b4:5d:57:fd:f0:a8:49:66:37:82: c5:65:32:da:81:ae:14:3c:3c:e7:7d:7b:74:5d:c2:fc:70:0f: b8:1a:c9:02:ef:f1:d8:46:2f:40:69:54:80:08:f1:fa:37:cf: 72:a9:ce:be:ce:08:56:bf:5a:c7:6a:1f:d1:af:1c:c4:69:d5: 25:76:04:2b:5d:58:3f:76:4b:b4:91:08:a2:65:21:b9:e5:26: 65:cd:22:74:79:e7:fe:6f:5e:99:0f:1c:99:47:7c:fe:fc:fd: 9c:97:f8:9c:a9:28:34:57:a5:c3:0d:2d:4f:1e:1e:9e:46:27: c8:46:cb:5e:cc:c3:9a:a4:83:59:16:58:e0:34:f9:e0:45:db: f3:c8:38:6d:26:d4:76:0c:1f:cb:2f:fa:69:15:a5:32:b7:93: 5b:9c:33:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZU+Lu0oAtFzgl+EfMmmidiFDGekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5 RTYzOUFDRDAeFw0yNjA5MjMyMzMwMTNaFw0yNjA5MjUwMDU5MTNaMDMxMTAvBgNV BAMTKDA4ODNBN0MyNzhDODIzM0UwMzQ4NDYxQTAxMDA1N0I4Q0UxMjAyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9W2v5lgk1+Y4gIWomhMX/+geg CN2D3LTQPGN+gmKtbtILR65g/7zPp9oXAAn2mjptNQJoZR6RY1AGW1tmNrAK1q1m iamphioicnanDdwakf+TXoLJBXYhXK1qjZmUayeDHutg/VrQybDJPkI30nBLc4w7 PXADVlZm2bgbBvayJ5pLvMqw7d5hi5kFzEVJ0Pi6N5b8GY7Dj7Jju6VUTIwfYWfU HfTMOmvipKcy+kX6Tz/0Y9fTPUUfzB5NeJI8S9ZRQgZSLD3U5LIYbrXWsjT6QuqB mmIy0h9vkCAAzwzKEeBkQIGKWn0cJAbunUi1pe6IX4XudakG3Jkyl00fS+eTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIOnwnjIIz4DSEYaAQBXuM4SArQwHwYDVR0j BBgwFoAUbziDE0uux8EAyLKkk31T3p5jms0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVkNzM2ZGMtZTVkYi00MzgxLTk3MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0 QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5RTYzOUFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RjM4ODMxMzRCQUVDN0MxMDBDOEIyQTQ5MzdENTNERTlFNjM5 QUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVkNzM2ZGMtZTVkYi00MzgxLTk3 MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUz REU5RTYzOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADS41WZbWsg9WHU4H5wJVEaQotLslMrwccx3 Czso6i7Kbvc1GH1A8DHQxeVXKAARAZU2tzep+mtjOARYPHQZ9L5kpnktEgKnDY8k GiLht3TUgPFal5zlrRW4h1ibwXrYL0uBtF1X/fCoSWY3gsVlMtqBrhQ8POd9e3Rd wvxwD7gayQLv8dhGL0BpVIAI8fo3z3Kpzr7OCFa/WsdqH9GvHMRp1SV2BCtdWD92 S7SRCKJlIbnlJmXNInR55/5vXpkPHJlHfP78/ZyX+JypKDRXpcMNLU8eHp5GJ8hG y17Mw5qkg1kWWOA0+eBF2/PIOG0m1HYMH8sv+mkVpTK3k1ucM00= -----END CERTIFICATE-----Generated at Thu Sep 24 08:44:50 2026 by rpki-client