$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: eiNf6oF1dS+WB8rrVDddB8oFkktGMrMD6GAlyxUVPOg= Subject key identifier: C6:DC:2E:8E:90:79:E0:D3:CF:46:B5:64:53:A6:DF:70:B3:3C:17:98 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 3C0F7CE5C7B74CE582DF95533A518C7A1D553292 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 20:27:47 +0000 Manifest this update: Thu 03 Sep 2026 20:22:47 +0000 Manifest next update: Fri 04 Sep 2026 23:52:47 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) 2: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: RSMQexLtRNnA6zSCQriAlU+gE1JXecgYrwadF6sIgAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 23:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0f:7c:e5:c7:b7:4c:e5:82:df:95:53:3a:51:8c:7a:1d:55:32:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Sep 3 20:22:47 2026 GMT Not After : Sep 4 23:52:47 2026 GMT Subject: CN=C6DC2E8E9079E0D3CF46B56453A6DF70B33C1798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:f3:9c:ec:48:d4:e7:29:1b:b2:3d:21:69: e8:51:74:1b:aa:45:99:09:67:bd:bb:2e:ea:ca:1e: dd:ed:de:f1:bc:d9:1f:f7:ca:ff:7c:c6:2c:0f:7d: 61:ed:13:2e:2c:9d:93:7b:b1:01:f5:a5:58:d1:72: f3:85:ae:e3:ff:a4:84:12:64:2a:0c:c3:e5:69:41: 90:d3:4f:10:f7:0b:8a:f0:af:4f:a4:48:90:19:13: 9b:43:47:be:0e:26:ff:fd:a9:b1:2b:11:15:d2:f4: f8:11:71:0c:6c:82:d2:8d:e8:6c:d3:d7:df:61:d1: ef:c3:d9:22:51:16:7f:6b:ab:d1:c7:4c:9f:ec:7e: 1d:e5:9e:98:ae:aa:57:79:43:61:57:df:c9:5f:1c: 6d:d0:5c:8e:bd:06:15:be:fc:ea:e7:0a:49:45:63: 6e:bc:00:f0:d6:22:2a:e6:c2:64:24:48:bf:a7:12: 1c:f6:8c:f2:a1:a5:4d:54:f4:05:b9:3d:7e:54:02: 8f:28:9c:7f:e6:1f:1a:0b:5d:ee:8e:e9:d7:24:55: 41:a5:4d:96:8b:82:ee:ca:e0:16:3a:24:ad:53:8d: a5:23:df:1c:78:31:42:45:75:bb:44:1b:1f:a4:01: db:36:dc:64:01:88:9d:85:ab:29:12:fe:c9:5e:0c: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DC:2E:8E:90:79:E0:D3:CF:46:B5:64:53:A6:DF:70:B3:3C:17:98 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c6:83:f0:d1:c3:1b:cf:be:c8:54:da:9b:11:50:02:f7:b5: be:9b:ce:01:b1:e3:88:31:02:de:40:90:1f:d8:f5:ca:71:2d: 70:c1:33:ac:b3:39:0c:f4:0d:6e:4d:b6:7b:f9:2c:96:80:3c: 88:c3:e0:df:a5:81:d3:60:5c:c3:9b:ce:5d:a8:68:a3:e2:e4: c5:9b:74:0f:89:52:63:ea:76:ec:94:2e:b1:fb:e3:c4:3b:3f: 74:09:61:34:d7:83:0c:7a:7c:6f:1a:ec:bf:aa:93:30:d3:00: 70:53:e9:c9:2b:ea:e3:99:64:06:dd:36:5f:b2:50:cf:48:27: f9:f3:00:06:24:b0:33:94:0c:4a:c8:13:bc:38:ca:aa:74:cb: d2:b8:b9:cd:2b:50:da:e0:72:7c:4d:11:0f:40:e6:74:a4:2f: 00:a1:09:b3:bb:b2:f9:cc:5b:a7:a3:57:ae:61:1d:2e:37:8d: b3:9a:33:59:06:dd:5c:f8:c8:2e:5a:e7:99:80:37:4f:1e:76: bf:db:57:c8:54:4a:af:64:82:be:a5:37:e6:04:95:8b:a2:15: ef:d5:70:4f:fb:5a:ca:10:b0:b1:21:22:4e:b4:71:c3:b1:8d: d0:71:0d:0d:74:bd:5f:02:4f:55:c5:a3:51:ac:65:04:55:a9: 04:95:2f:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPA985ce3TOWC35VTOlGMeh1VMpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA5MDMyMDIyNDdaFw0yNjA5MDQyMzUyNDdaMDMxMTAvBgNV BAMTKEM2REMyRThFOTA3OUUwRDNDRjQ2QjU2NDUzQTZERjcwQjMzQzE3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeW/Oc7EjU5ykbsj0haehRdBuq RZkJZ727LurKHt3t3vG82R/3yv98xiwPfWHtEy4snZN7sQH1pVjRcvOFruP/pIQS ZCoMw+VpQZDTTxD3C4rwr0+kSJAZE5tDR74OJv/9qbErERXS9PgRcQxsgtKN6GzT 199h0e/D2SJRFn9rq9HHTJ/sfh3lnpiuqld5Q2FX38lfHG3QXI69BhW+/OrnCklF Y268APDWIirmwmQkSL+nEhz2jPKhpU1U9AW5PX5UAo8onH/mHxoLXe6O6dckVUGl TZaLgu7K4BY6JK1TjaUj3xx4MUJFdbtEGx+kAds23GQBiJ2FqykS/sleDBr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtwujpB54NPPRrVkU6bfcLM8F5gwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPGg/DRwxvPvshU2psRUAL3tb6bzgGx44gx At5AkB/Y9cpxLXDBM6yzOQz0DW5Ntnv5LJaAPIjD4N+lgdNgXMObzl2oaKPi5MWb dA+JUmPqduyULrH748Q7P3QJYTTXgwx6fG8a7L+qkzDTAHBT6ckr6uOZZAbdNl+y UM9IJ/nzAAYksDOUDErIE7w4yqp0y9K4uc0rUNrgcnxNEQ9A5nSkLwChCbO7svnM W6ejV65hHS43jbOaM1kG3Vz4yC5a55mAN08edr/bV8hUSq9kgr6lN+YElYuiFe/V cE/7WsoQsLEhIk60ccOxjdBxDQ10vV8CT1XFo1GsZQRVqQSVL6k= -----END CERTIFICATE-----Generated at Fri Sep 4 09:45:10 2026 by rpki-client