$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft File: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft (raw, json) Hash identifier: gWaWdG+M/09sSqpkHqZ0FxxJKEZB0jNu3fYlAV3s8FI= Subject key identifier: BB:AA:C7:EF:94:5E:31:BE:C4:32:77:F7:1E:4A:C9:87:51:9A:6F:32 Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Certificate serial: 2379E68453B20CC177F5FED0A547E5B9E6D2551C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 13:22:00 +0000 Manifest this update: Fri 25 Sep 2026 13:17:00 +0000 Manifest next update: Sat 26 Sep 2026 16:48:00 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: AZDpkOWjnamEqT8fmcEDZ5d6r3arhBukAiqycsYxsj0=) 2: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: mk6P6nzKZPfeuKq11ThKG2gxjN5qYDKYLpgARoWf7Rc=) 3: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl (hash: eUstd9S4iYfW53axC4VKwduTUylFJB5InQ5XPWXRjNM=) 4: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (hash: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=) 5: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:79:e6:84:53:b2:0c:c1:77:f5:fe:d0:a5:47:e5:b9:e6:d2:55:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Validity Not Before: Sep 25 13:17:00 2026 GMT Not After : Sep 26 16:48:00 2026 GMT Subject: CN=BBAAC7EF945E31BEC43277F71E4AC987519A6F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:d6:97:e8:8c:26:08:65:44:3a:32:58:c6: da:7a:73:da:64:7f:96:00:77:f7:7a:b8:35:bd:99: 16:e2:16:d5:4e:f4:7c:ad:a9:79:fe:69:65:40:46: 83:4a:c2:b2:dd:54:ac:40:77:d6:36:20:37:4f:2b: d7:77:f8:6c:a9:64:4c:3f:34:dc:e2:fd:9b:d5:13: 82:aa:d4:95:8c:a6:8f:ee:08:dc:52:22:c1:68:ce: a5:94:7a:70:85:b1:99:ef:3e:d3:85:c8:f5:7a:d6: 71:15:fa:57:e5:a1:20:c3:3c:e4:9a:58:4b:2d:88: 84:e2:ae:aa:6c:bd:2c:31:51:f3:c8:d5:f6:d0:d0: 1b:af:bf:dc:d0:ee:70:41:5e:75:19:e3:f2:60:46: 87:f0:3b:fb:89:a6:76:89:4c:88:86:44:8a:57:d1: 64:cd:c3:a2:e7:67:88:cb:62:78:31:49:e5:13:92: 94:6e:06:b1:ec:1c:7b:d2:49:1b:2a:aa:e2:c7:40: dc:b6:ab:6b:42:44:d9:a1:7c:a3:5e:ac:a6:f8:2d: 1d:c3:8e:22:e9:e0:7f:02:92:ee:49:a2:c8:9f:b1: 6c:6a:05:2e:8c:38:5d:6b:91:67:0e:04:b1:f1:72: 11:d0:a7:2b:98:32:81:82:f3:28:71:ce:52:f4:71: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:C7:EF:94:5E:31:BE:C4:32:77:F7:1E:4A:C9:87:51:9A:6F:32 X509v3 Authority Key Identifier: keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fe:b5:ec:f7:a8:b4:38:88:02:ec:0e:b4:50:c1:8c:ed:d4: 0a:e0:19:6a:c3:b3:c4:70:b6:13:39:43:59:8a:fd:19:08:af: 3f:ad:63:14:a4:0a:e8:17:b6:23:b5:d9:78:7b:7d:c5:9d:de: 55:d8:38:0d:54:0d:6c:52:02:29:01:59:f3:4f:98:9c:5d:87: 7d:42:e1:9a:49:35:c0:ae:eb:89:80:7f:d3:f7:ac:ab:2c:b9: 15:53:26:a3:a3:b9:08:ba:a8:47:8f:22:40:41:55:77:09:4f: 57:3d:ed:c4:25:6b:b3:be:84:5f:8e:78:78:5c:93:1c:af:38: 39:a2:77:47:67:0e:99:a3:99:89:3c:d4:0d:b4:a0:2a:d0:79: 66:67:76:ba:ee:ed:46:1d:7a:7b:08:1d:06:5c:47:19:42:cf: 99:5b:9e:3c:6b:5f:78:6c:39:fb:3f:d5:3e:80:c0:a5:5a:7b: 3a:59:55:ca:83:df:14:8f:c3:f8:4e:ee:06:30:ee:f9:7f:42: 12:b4:74:68:29:c8:61:7c:a7:44:4d:6d:ad:ee:4a:05:9f:0f: ef:75:42:e0:fc:57:05:d4:d0:f3:56:fb:07:f1:c6:14:a4:9e: 62:1f:2b:88:e2:8d:c1:8c:15:7a:22:1f:f4:cf:bf:dc:59:43: 07:1f:31:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3nmhFOyDMF39f7QpUfluebSVRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FB RTQ5QjY1RTAeFw0yNjA5MjUxMzE3MDBaFw0yNjA5MjYxNjQ4MDBaMDMxMTAvBgNV BAMTKEJCQUFDN0VGOTQ1RTMxQkVDNDMyNzdGNzFFNEFDOTg3NTE5QTZGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaV9aX6IwmCGVEOjJYxtp6c9pk f5YAd/d6uDW9mRbiFtVO9HytqXn+aWVARoNKwrLdVKxAd9Y2IDdPK9d3+GypZEw/ NNzi/ZvVE4Kq1JWMpo/uCNxSIsFozqWUenCFsZnvPtOFyPV61nEV+lfloSDDPOSa WEstiITirqpsvSwxUfPI1fbQ0Buvv9zQ7nBBXnUZ4/JgRofwO/uJpnaJTIiGRIpX 0WTNw6LnZ4jLYngxSeUTkpRuBrHsHHvSSRsqquLHQNy2q2tCRNmhfKNerKb4LR3D jiLp4H8Cku5JosifsWxqBS6MOF1rkWcOBLHxchHQpyuYMoGC8yhxzlL0cV3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu6rH75ReMb7EMnf3HkrJh1GabzIwHwYDVR0j BBgwFoAUb7JTpPmcD4Eerg0UK3J1yq5Jtl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiYWJmMGItMTEwMS00YWE5LWE0ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRG OTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FBRTQ5QjY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIyNTNBNEY5OUMwRjgxMUVBRTBEMTQyQjcyNzVDQUFFNDlC NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1 Q0FBRTQ5QjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT+tez3qLQ4iALsDrRQwYzt1ArgGWrDs8Rw thM5Q1mK/RkIrz+tYxSkCugXtiO12Xh7fcWd3lXYOA1UDWxSAikBWfNPmJxdh31C 4ZpJNcCu64mAf9P3rKssuRVTJqOjuQi6qEePIkBBVXcJT1c97cQla7O+hF+OeHhc kxyvODmid0dnDpmjmYk81A20oCrQeWZndrru7UYdensIHQZcRxlCz5lbnjxrX3hs Ofs/1T6AwKVaezpZVcqD3xSPw/hO7gYw7vl/QhK0dGgpyGF8p0RNba3uSgWfD+91 QuD8VwXU0PNW+wfxxhSknmIfK4jijcGMFXoiH/TPv9xZQwcfMeg= -----END CERTIFICATE-----Generated at Fri Sep 25 17:18:30 2026 by rpki-client