$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: P9bqd7P7b2rnH++P75dqkMoKNjLQsqTsIv9NZlUhvfw= Subject key identifier: 3A:7D:30:B3:32:EB:79:3C:0C:64:0A:EB:89:02:8F:C8:8D:C7:B6:B0 Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 06044E9888B1B4824511E02EE95821154DCB56AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 20:22:39 +0000 Manifest this update: Thu 03 Sep 2026 20:17:39 +0000 Manifest next update: Fri 04 Sep 2026 22:29:39 +0000 Files and hashes: 1: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: rhKsko8ETkr+vxFzF/bzhtzpDiL6H78CSpc+ExQVOPw=) 2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) 3: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:04:4e:98:88:b1:b4:82:45:11:e0:2e:e9:58:21:15:4d:cb:56:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: Sep 3 20:17:39 2026 GMT Not After : Sep 4 22:29:39 2026 GMT Subject: CN=3A7D30B332EB793C0C640AEB89028FC88DC7B6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:ee:f0:6f:b8:86:a9:2d:88:c1:5f:3b:ef: 9b:41:cf:df:cc:31:a9:eb:e7:60:6e:84:df:f8:4b: bf:02:35:de:d8:a9:44:0a:fa:c4:8f:1b:b3:bd:5e: 3e:fa:70:9d:86:cb:f8:0c:82:c5:63:92:1f:f1:04: d6:62:17:27:11:44:53:96:9c:77:0c:26:6e:ef:f0: 04:3b:94:cb:95:b1:7c:5c:f3:00:a6:4c:a7:be:dc: 40:2a:be:71:24:18:29:63:67:b3:f0:fa:ff:ed:dc: 32:38:a4:5e:ac:80:6a:79:aa:b3:67:61:93:5e:d4: ed:c2:94:a1:f2:92:69:07:50:ae:7d:93:ec:f4:67: 0e:4a:36:b5:6c:a9:e1:1b:7f:44:c6:cf:b6:ba:57: 63:f9:12:74:17:7b:9d:1b:91:12:9a:5a:ea:19:f3: 6e:2e:00:17:68:b4:53:de:85:eb:59:7b:6c:1b:99: 66:af:ad:4a:ad:cd:55:5d:ed:29:57:76:73:9d:c6: 20:72:4f:ab:ed:05:de:ec:e0:60:2f:24:4f:f2:41: 8b:46:e6:69:58:71:c1:41:26:00:a7:59:98:ca:f3: 76:c1:b1:a5:7c:1f:20:fb:bc:63:38:99:74:bc:3a: 6f:13:8b:44:1f:54:91:75:c1:97:b8:00:03:56:af: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7D:30:B3:32:EB:79:3C:0C:64:0A:EB:89:02:8F:C8:8D:C7:B6:B0 X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3f:1d:b4:9a:5e:89:86:7a:37:86:06:d6:59:82:14:5d:1b: 93:bd:da:67:a6:db:92:09:e9:10:d4:58:5b:58:c3:5c:b4:8c: 90:bc:bc:6d:96:3e:e1:1d:37:1e:77:0b:2b:4c:f8:85:95:cb: 02:94:cf:98:de:a7:25:0d:14:7f:06:31:ee:5d:a7:36:e7:28: dd:10:cb:e2:cf:54:d7:2a:65:5b:50:3d:83:a0:2c:cd:91:a6: 77:c6:3d:5f:67:fc:b7:14:d5:d7:d3:87:cc:4e:48:26:d8:9a: bf:49:ca:92:2f:f1:16:2c:77:a7:f9:9f:3d:85:b1:61:16:14: 5d:bd:de:07:5c:2d:64:80:23:29:d2:ee:9f:c8:ea:30:7e:6a: 43:f8:92:a8:9b:32:fa:75:e9:2d:00:36:48:8d:73:aa:2e:dd: 4f:d4:9f:4d:dc:7f:50:9e:a1:56:c2:17:81:f0:bf:88:54:44: b9:6a:36:cf:15:f3:a8:c6:da:c6:fd:e1:b3:fc:48:e0:54:86: 26:77:3b:78:cf:a1:70:83:88:6c:1c:76:5c:ad:d6:6e:b1:2b: 8e:89:f7:4b:fb:32:e3:eb:90:8a:d5:f9:27:e0:29:a6:e8:a1: 4f:79:62:c3:c2:6f:ff:70:54:fc:ae:7e:a4:3f:51:80:a7:27: 61:d8:58:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgROmIixtIJFEeAu6VghFU3LVq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjA5MDMyMDE3MzlaFw0yNjA5MDQyMjI5MzlaMDMxMTAvBgNV BAMTKDNBN0QzMEIzMzJFQjc5M0MwQzY0MEFFQjg5MDI4RkM4OERDN0I2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmB+7wb7iGqS2IwV8775tBz9/M Manr52BuhN/4S78CNd7YqUQK+sSPG7O9Xj76cJ2Gy/gMgsVjkh/xBNZiFycRRFOW nHcMJm7v8AQ7lMuVsXxc8wCmTKe+3EAqvnEkGCljZ7Pw+v/t3DI4pF6sgGp5qrNn YZNe1O3ClKHykmkHUK59k+z0Zw5KNrVsqeEbf0TGz7a6V2P5EnQXe50bkRKaWuoZ 824uABdotFPehetZe2wbmWavrUqtzVVd7SlXdnOdxiByT6vtBd7s4GAvJE/yQYtG 5mlYccFBJgCnWZjK83bBsaV8HyD7vGM4mXS8Om8Ti0QfVJF1wZe4AANWr6X5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOn0wszLreTwMZArriQKPyI3HtrAwHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0/HbSaXomGejeGBtZZghRdG5O92mem25IJ 6RDUWFtYw1y0jJC8vG2WPuEdNx53CytM+IWVywKUz5jepyUNFH8GMe5dpzbnKN0Q y+LPVNcqZVtQPYOgLM2RpnfGPV9n/LcU1dfTh8xOSCbYmr9JypIv8RYsd6f5nz2F sWEWFF293gdcLWSAIynS7p/I6jB+akP4kqibMvp16S0ANkiNc6ou3U/Un03cf1Ce oVbCF4Hwv4hURLlqNs8V86jG2sb94bP8SOBUhiZ3O3jPoXCDiGwcdlyt1m6xK46J 90v7MuPrkIrV+SfgKabooU95YsPCb/9wVPyufqQ/UYCnJ2HYWNM= -----END CERTIFICATE-----Generated at Fri Sep 4 01:44:14 2026 by rpki-client