$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json) Hash identifier: wq9xqg9L13oQLTkDe+S0NUQDJ0QRF8lza/opnDwBeTs= Subject key identifier: 2D:4B:F5:01:8F:11:4F:A4:E1:24:78:93:F0:74:29:F8:F5:D2:4D:DE Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Certificate serial: 21E575E7FB61A222FDE75BFB49E4570D4E43C9F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:06:00 +0000 Manifest this update: Wed 23 Sep 2026 16:01:00 +0000 Manifest next update: Thu 24 Sep 2026 16:32:00 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=) 2: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: Hf+UYFT9aY+M4aJ0FV7HZnLFv+yBQX7AkLoLP++/E0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e5:75:e7:fb:61:a2:22:fd:e7:5b:fb:49:e4:57:0d:4e:43:c9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Validity Not Before: Sep 23 16:01:00 2026 GMT Not After : Sep 24 16:32:00 2026 GMT Subject: CN=2D4BF5018F114FA4E1247893F07429F8F5D24DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:f8:55:5d:f7:c3:8b:30:85:3a:12:1b:19: 6a:91:57:90:4d:33:91:bb:ed:eb:c8:57:51:cb:bb: 35:6b:6f:b2:25:07:19:64:d6:81:cc:9e:ba:9d:f4: b2:e9:77:53:1f:c6:af:32:d7:5d:c0:c4:9e:dc:69: e9:58:42:51:cf:9e:8c:3d:f7:f1:ff:8b:bd:db:1f: df:e7:96:2d:42:59:e2:42:30:1e:aa:7c:3b:58:06: b2:23:90:11:d5:d7:25:25:cb:88:0d:34:ac:33:b9: 1a:2c:3b:a7:2e:8c:29:35:f0:7b:e7:19:aa:57:a7: 8b:10:85:77:20:e2:a0:4f:5b:29:8b:93:0e:fb:34: 30:e6:7b:ca:9c:47:2e:b6:5b:a9:5f:d9:f1:8a:17: 8b:49:0a:be:92:98:51:32:4c:dc:0e:d8:e6:6d:05: 74:44:00:45:21:65:2f:7d:dc:80:8d:f3:87:69:d9: dd:82:48:66:5a:78:a0:3d:b3:33:f4:8f:de:d7:21: c1:67:71:aa:2e:08:99:6c:ed:9d:ae:10:b7:c1:7e: a3:25:cc:db:96:64:45:6c:39:da:09:b5:b6:be:ce: fd:3d:7f:8d:50:32:15:8b:c2:0b:92:80:fb:94:2f: 6f:1f:78:33:2a:2e:a6:03:35:ee:f2:20:05:6a:3b: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4B:F5:01:8F:11:4F:A4:E1:24:78:93:F0:74:29:F8:F5:D2:4D:DE X509v3 Authority Key Identifier: keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:46:a9:7f:a0:51:ed:35:2e:a1:24:1b:5c:1e:60:9a:bc:9b: 79:8d:6a:3d:a3:5b:0a:21:ac:f1:fe:3b:09:69:37:9c:bb:68: 72:b7:40:ac:51:74:c2:67:0c:29:22:b7:ca:a3:43:52:56:e0: 2d:27:6c:37:4a:3a:8b:79:8f:92:54:e6:29:bc:c8:7c:7a:84: c5:ac:c9:13:6e:e4:5f:96:63:d6:05:ed:c4:66:22:c1:d5:8e: d7:01:0b:a8:71:ed:0e:6c:a9:17:fd:94:3d:45:aa:07:6f:89: 1b:e8:1f:cd:bf:4b:80:df:5d:43:e9:e7:6a:41:99:d4:58:68: a9:1e:dd:7e:12:d3:5f:e3:59:8f:f5:83:a1:07:4a:7f:a6:f2: c2:8c:e5:da:ba:61:15:50:02:21:44:45:cc:1d:f8:0d:99:3d: 04:91:54:01:10:a9:70:e4:df:58:23:2f:46:5c:70:a7:9d:e3: 6a:e6:81:86:e5:81:23:54:c5:4f:81:e8:5c:9f:41:cb:df:34: e9:98:61:87:5e:68:b6:c4:ac:36:6c:f8:65:78:a0:79:93:4f: 53:4a:c9:ae:00:12:39:ff:d9:66:2c:b8:a5:bd:2d:d5:cc:15: fd:55:fe:b1:6d:26:85:f9:b3:a5:8c:5b:64:fc:3b:e9:9c:21: 3d:19:c2:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIeV15/thoiL951v7SeRXDU5DyfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERCRjlE MjIxRjk2RjAeFw0yNjA5MjMxNjAxMDBaFw0yNjA5MjQxNjMyMDBaMDMxMTAvBgNV BAMTKDJENEJGNTAxOEYxMTRGQTRFMTI0Nzg5M0YwNzQyOUY4RjVEMjREREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLfhVXffDizCFOhIbGWqRV5BN M5G77evIV1HLuzVrb7IlBxlk1oHMnrqd9LLpd1Mfxq8y113AxJ7caelYQlHPnow9 9/H/i73bH9/nli1CWeJCMB6qfDtYBrIjkBHV1yUly4gNNKwzuRosO6cujCk18Hvn GapXp4sQhXcg4qBPWymLkw77NDDme8qcRy62W6lf2fGKF4tJCr6SmFEyTNwO2OZt BXREAEUhZS993ICN84dp2d2CSGZaeKA9szP0j97XIcFncaouCJls7Z2uELfBfqMl zNuWZEVsOdoJtba+zv09f41QMhWLwguSgPuUL28feDMqLqYDNe7yIAVqOwbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULUv1AY8RT6ThJHiT8HQp+PXSTd4wHwYDVR0j BBgwFoAU9rhv4g5zoi2aNTzJLtjb+dIh+W8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EzNzZhNmUtM2VjYS00ZjczLThkMTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIw RTczQTIyRDlBMzUzQ0M5MkVEOERCRjlEMjIxRjk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNkI4NkZFMjBFNzNBMjJEOUEzNTNDQzkyRUQ4REJGOUQyMjFG OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERC RjlEMjIxRjk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtGqX+gUe01LqEkG1weYJq8m3mNaj2jWwoh rPH+OwlpN5y7aHK3QKxRdMJnDCkit8qjQ1JW4C0nbDdKOot5j5JU5im8yHx6hMWs yRNu5F+WY9YF7cRmIsHVjtcBC6hx7Q5sqRf9lD1FqgdviRvoH82/S4DfXUPp52pB mdRYaKke3X4S01/jWY/1g6EHSn+m8sKM5dq6YRVQAiFERcwd+A2ZPQSRVAEQqXDk 31gjL0ZccKed42rmgYblgSNUxU+B6FyfQcvfNOmYYYdeaLbErDZs+GV4oHmTT1NK ya4AEjn/2WYsuKW9LdXMFf1V/rFtJoX5s6WMW2T8O+mcIT0Zwpo= -----END CERTIFICATE-----Generated at Thu Sep 24 07:24:34 2026 by rpki-client