$ rpki-client -vvvf rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft File: D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft (raw, json) Hash identifier: axnCU9ZYzHNvJN2lbxuj29mnaQL0WiKzRndT8YOwMLo= Subject key identifier: B3:AD:C2:EB:81:D3:FD:F1:E1:7E:AF:C6:EE:64:E7:3D:16:E4:F1:85 Authority key identifier: D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 Certificate issuer: /CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2 Certificate serial: 669216BBBD8DF28BE87E4C999D6A2649A5E925CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 03:37:14 +0000 Manifest this update: Thu 03 Sep 2026 03:32:14 +0000 Manifest next update: Fri 04 Sep 2026 06:13:14 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: PgyWI4yshXqNjgdCXVpkLlAnO45nUwUpbrwhDkW6kTc=) 2: D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl (hash: DKjlpw2hXyHI5B1E5hnhrwsG3n9SqG47Be9KoAXEtfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:92:16:bb:bd:8d:f2:8b:e8:7e:4c:99:9d:6a:26:49:a5:e9:25:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2 Validity Not Before: Sep 3 03:32:14 2026 GMT Not After : Sep 4 06:13:14 2026 GMT Subject: CN=B3ADC2EB81D3FDF1E17EAFC6EE64E73D16E4F185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:1e:09:ba:b8:40:4f:15:49:5d:4d:f2:22: d5:82:b9:e5:ad:b9:5a:70:6a:69:90:68:52:21:9e: fc:fe:0c:14:84:ea:2d:1a:47:64:fc:ce:70:bb:8e: eb:fd:b7:04:7b:46:f8:11:4c:f9:10:48:98:a3:f1: 61:bd:0a:02:94:d1:0b:2a:df:1b:23:fa:46:9f:ae: 3e:70:11:0a:7d:8c:6c:b8:bd:db:32:2a:70:4f:52: 77:1c:99:07:5d:3b:25:8d:48:bc:0f:08:bb:8d:85: fe:d8:c7:7e:6a:6d:99:b2:e2:d3:54:ee:4f:58:45: 91:f4:92:5d:93:ec:ee:7d:ca:f7:da:a9:74:2f:21: 46:fc:c9:c5:e2:51:e9:81:bd:fc:e5:1d:5f:07:a0: 5b:9f:33:75:e7:f3:24:f1:c0:2b:ca:a5:f6:87:13: 4e:17:8a:a4:21:27:53:7e:90:95:49:a1:d1:22:da: 04:7d:1e:52:a6:55:25:3a:19:51:d9:1f:45:8f:c7: 20:35:9a:d5:0c:ea:94:47:d9:0b:e3:d7:f2:3f:4a: cd:a0:44:16:95:ee:be:27:72:61:1c:7b:52:7e:9c: b8:9c:15:a0:32:f6:c2:0e:d4:c2:5d:e1:18:90:67: 4e:95:08:b3:35:7c:9d:3b:52:50:34:f9:20:8f:bc: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AD:C2:EB:81:D3:FD:F1:E1:7E:AF:C6:EE:64:E7:3D:16:E4:F1:85 X509v3 Authority Key Identifier: keyid:D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3a:1e:2b:6d:56:eb:c6:ca:3d:24:62:ae:6a:10:20:78:1f: 27:e9:c6:29:36:b4:31:ce:b0:8d:22:b0:bc:98:60:10:a2:c4: 09:f6:cd:27:92:85:ab:9f:09:8e:b4:04:c5:cf:55:71:12:49: 61:60:3e:05:22:1a:77:2e:36:eb:29:88:65:c0:7b:99:a0:00: 13:b6:3c:47:ea:1d:c3:5f:da:ea:64:77:de:06:63:af:45:b7: 1f:88:20:1c:5a:17:77:7c:1e:6a:ae:2e:07:b8:6c:85:4e:ba: eb:2f:44:89:82:0a:e5:cb:e4:9e:a2:df:7a:0f:c8:1b:ed:6c: 83:50:20:c1:13:14:d0:71:ab:68:57:93:9a:25:2c:5d:b9:28: e8:35:64:31:e7:b8:70:5a:ef:ca:30:e0:ef:3e:ab:37:bc:01: c4:09:cc:9c:5f:6a:cf:96:35:fe:2a:bd:ea:63:cc:9c:d2:dd: 1f:e2:54:1b:b3:68:86:c5:8b:52:ab:58:4c:e7:eb:4e:40:3e: 39:4e:bb:4f:8f:95:57:a0:83:f6:e5:3c:d1:a1:95:01:33:f6: 08:f9:94:f0:37:e9:6f:df:e3:96:3e:13:6d:5b:d5:0c:95:a0: 1e:de:80:76:bf:7d:64:bf:f8:c4:34:9a:aa:8d:f2:3d:ec:65: a7:0b:e8:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpIWu72N8ovofkyZnWomSaXpJcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5 Mjc4MDBBMjAeFw0yNjA5MDMwMzMyMTRaFw0yNjA5MDQwNjEzMTRaMDMxMTAvBgNV BAMTKEIzQURDMkVCODFEM0ZERjFFMTdFQUZDNkVFNjRFNzNEMTZFNEYxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRsh4JurhATxVJXU3yItWCueWt uVpwammQaFIhnvz+DBSE6i0aR2T8znC7juv9twR7RvgRTPkQSJij8WG9CgKU0Qsq 3xsj+kafrj5wEQp9jGy4vdsyKnBPUnccmQddOyWNSLwPCLuNhf7Yx35qbZmy4tNU 7k9YRZH0kl2T7O59yvfaqXQvIUb8ycXiUemBvfzlHV8HoFufM3Xn8yTxwCvKpfaH E04XiqQhJ1N+kJVJodEi2gR9HlKmVSU6GVHZH0WPxyA1mtUM6pRH2Qvj1/I/Ss2g RBaV7r4ncmEce1J+nLicFaAy9sIO1MJd4RiQZ06VCLM1fJ07UlA0+SCPvDcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs63C64HT/fHhfq/G7mTnPRbk8YUwHwYDVR0j BBgwFoAU1PbFzZhinTcje07JiVjrrJJ4AKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjliYmU1YzAtNzllZC00NmZhLTg5ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5 ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5Mjc4MDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEY2QzVDRDk4NjI5RDM3MjM3QjRFQzk4OTU4RUJBQzkyNzgw MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVC QUM5Mjc4MDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw6HittVuvGyj0kYq5qECB4Hyfpxik2tDHO sI0isLyYYBCixAn2zSeShaufCY60BMXPVXESSWFgPgUiGncuNuspiGXAe5mgABO2 PEfqHcNf2upkd94GY69Ftx+IIBxaF3d8HmquLge4bIVOuusvRImCCuXL5J6i33oP yBvtbINQIMETFNBxq2hXk5olLF25KOg1ZDHnuHBa78ow4O8+qze8AcQJzJxfas+W Nf4qvepjzJzS3R/iVBuzaIbFi1KrWEzn605APjlOu0+PlVegg/blPNGhlQEz9gj5 lPA36W/f45Y+E21b1QyVoB7egHa/fWS/+MQ0mqqN8j3sZacL6A4= -----END CERTIFICATE-----Generated at Thu Sep 3 06:53:25 2026 by rpki-client