$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json) Hash identifier: hiMN7jGJNUb4sYGZEZL/a2O/QJa5AT2EH2cdB3Rp8ZM= Subject key identifier: 53:7A:E0:FD:17:D8:F9:24:C8:5A:1B:24:83:28:B2:08:81:74:E8:97 Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Certificate serial: 6AED72DD60FA1085661FD946F2F0CB270E0678FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:04:31 +0000 Manifest this update: Thu 23 Jul 2026 15:59:31 +0000 Manifest next update: Fri 24 Jul 2026 16:47:31 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=) 2: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: i7fAWFnlgy5Rw0t/EoBmurA6DkVg3StKWNPTTCcQY/E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ed:72:dd:60:fa:10:85:66:1f:d9:46:f2:f0:cb:27:0e:06:78:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Validity Not Before: Jul 23 15:59:31 2026 GMT Not After : Jul 24 16:47:31 2026 GMT Subject: CN=537AE0FD17D8F924C85A1B248328B2088174E897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:f6:6e:d5:e2:87:aa:92:93:24:df:b5:2a: de:aa:f6:14:de:fe:0f:63:23:80:aa:eb:cc:88:1e: 50:2c:62:0e:40:3f:4c:87:c1:85:d8:f4:17:45:7d: a1:04:a8:ea:59:26:de:f3:5c:2d:72:4e:7c:f3:fe: da:de:08:84:f5:d5:96:c1:39:13:d8:fb:ea:83:f9: 25:00:07:62:f4:7a:52:76:40:44:8a:27:31:69:da: 7d:65:55:aa:17:cc:af:a7:5a:42:44:95:6b:1c:26: dc:77:2d:b9:22:e4:64:ff:2b:4d:96:5d:60:51:ad: 85:48:63:0f:f1:02:4c:60:7e:ac:9c:ab:9d:1d:f4: d4:04:9a:15:c6:1f:30:75:0b:6c:20:71:ed:bf:1c: 7c:22:c6:9e:86:8f:a0:cf:f0:e6:73:11:72:e7:a0: c6:cf:44:67:03:dd:5e:f7:a4:3e:0b:66:36:4c:cc: c5:e2:2f:de:cb:40:b1:5c:0c:73:07:92:10:11:68: 59:a1:4d:9a:92:7a:c1:55:7b:dc:b4:e1:9e:17:bf: 59:a8:92:eb:38:84:6c:f6:9b:97:b2:0b:ee:ec:a5: 6b:c8:29:c4:78:ab:1b:9a:5f:f5:a5:0f:f2:14:ac: db:78:7b:69:39:52:0f:53:6d:da:9b:88:3b:c5:1e: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7A:E0:FD:17:D8:F9:24:C8:5A:1B:24:83:28:B2:08:81:74:E8:97 X509v3 Authority Key Identifier: keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:33:93:e5:9b:76:e4:c1:6b:7d:17:bd:63:3f:1f:f1:f9:59: d9:dc:7f:29:00:ae:32:87:4e:29:4c:4a:2f:8f:8a:2a:c0:74: 25:37:ed:53:92:f4:f1:97:bc:1f:7c:89:5a:11:00:e9:ce:21: cb:99:2b:89:4c:11:3d:c2:3e:8a:d5:cf:f9:69:f3:ff:a5:2d: 15:e7:8e:c5:03:b5:ea:50:b9:ca:a5:63:b4:a7:e1:a8:82:43: cc:97:a2:53:68:be:2f:42:7f:70:37:61:4c:21:f1:05:3a:fc: d7:50:30:aa:0f:f0:96:59:78:02:e8:7d:87:b2:d3:36:f4:88: 24:dd:c8:00:46:82:24:11:94:f2:2b:f8:9a:ca:10:41:92:14: cd:ca:ce:fe:46:3e:44:96:a9:53:5d:27:2e:a8:f7:d7:ce:12: 64:6d:e3:51:aa:0d:97:ad:f2:c5:2b:0a:ba:4c:be:05:4e:0b: 0c:86:0b:ce:26:94:a7:63:1e:da:8b:1f:65:70:5c:f8:89:07: 2e:db:69:56:d0:e1:7d:c5:a5:61:27:33:5a:30:27:71:29:1a: 21:3c:9e:b9:50:60:59:7a:25:02:4e:0d:23:55:f7:23:8b:35: 1d:cb:4c:78:66:d7:2e:58:26:fa:bf:d8:0e:2a:cd:6f:23:58: 9b:1e:b5:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUau1y3WD6EIVmH9lG8vDLJw4GePowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERCRjlE MjIxRjk2RjAeFw0yNjA3MjMxNTU5MzFaFw0yNjA3MjQxNjQ3MzFaMDMxMTAvBgNV BAMTKDUzN0FFMEZEMTdEOEY5MjRDODVBMUIyNDgzMjhCMjA4ODE3NEU4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpvZu1eKHqpKTJN+1Kt6q9hTe /g9jI4Cq68yIHlAsYg5AP0yHwYXY9BdFfaEEqOpZJt7zXC1yTnzz/treCIT11ZbB ORPY++qD+SUAB2L0elJ2QESKJzFp2n1lVaoXzK+nWkJElWscJtx3Lbki5GT/K02W XWBRrYVIYw/xAkxgfqycq50d9NQEmhXGHzB1C2wgce2/HHwixp6Gj6DP8OZzEXLn oMbPRGcD3V73pD4LZjZMzMXiL97LQLFcDHMHkhARaFmhTZqSesFVe9y04Z4Xv1mo kus4hGz2m5eyC+7spWvIKcR4qxuaX/WlD/IUrNt4e2k5Ug9TbdqbiDvFHvJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU3rg/RfY+STIWhskgyiyCIF06JcwHwYDVR0j BBgwFoAU9rhv4g5zoi2aNTzJLtjb+dIh+W8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EzNzZhNmUtM2VjYS00ZjczLThkMTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIw RTczQTIyRDlBMzUzQ0M5MkVEOERCRjlEMjIxRjk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNkI4NkZFMjBFNzNBMjJEOUEzNTNDQzkyRUQ4REJGOUQyMjFG OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERC RjlEMjIxRjk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAzk+WbduTBa30XvWM/H/H5WdncfykArjKH TilMSi+PiirAdCU37VOS9PGXvB98iVoRAOnOIcuZK4lMET3CPorVz/lp8/+lLRXn jsUDtepQucqlY7Sn4aiCQ8yXolNovi9Cf3A3YUwh8QU6/NdQMKoP8JZZeALofYey 0zb0iCTdyABGgiQRlPIr+JrKEEGSFM3Kzv5GPkSWqVNdJy6o99fOEmRt41GqDZet 8sUrCrpMvgVOCwyGC84mlKdjHtqLH2VwXPiJBy7baVbQ4X3FpWEnM1owJ3EpGiE8 nrlQYFl6JQJODSNV9yOLNR3LTHhm1y5YJvq/2A4qzW8jWJseteE= -----END CERTIFICATE-----Generated at Fri Jul 24 08:45:11 2026 by rpki-client