$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json) Hash identifier: SLLlvQ6riqf+PA6mG/lysIqtcGecOeyH9HDpmyWxniU= Subject key identifier: 14:BE:59:50:83:50:D6:56:90:B9:C1:7C:DC:76:06:53:26:12:6D:38 Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Certificate serial: 6B0A2516F63BADB1763E006EDE040374CB11C49A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 16:53:25 +0000 Manifest this update: Wed 02 Sep 2026 16:48:25 +0000 Manifest next update: Thu 03 Sep 2026 19:48:25 +0000 Files and hashes: 1: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=) 2: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=) 3: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: /NWYIMZvrlVmaw84Uc7A1QRo3CwAvzJJBIVEJJDeI8I=) 4: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0a:25:16:f6:3b:ad:b1:76:3e:00:6e:de:04:03:74:cb:11:c4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Validity Not Before: Sep 2 16:48:25 2026 GMT Not After : Sep 3 19:48:25 2026 GMT Subject: CN=14BE59508350D65690B9C17CDC76065326126D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:af:ab:02:ad:0f:84:0b:6a:04:fd:4f:23: c5:d3:e1:d8:18:e8:54:b3:aa:b1:e6:b9:30:28:a2: 09:eb:a6:b9:66:3e:9b:b3:66:9a:60:3a:e7:6d:a5: f7:4d:86:e4:e1:42:74:cb:e5:9c:3c:20:98:25:66: 8a:fe:6c:f7:2b:9e:14:1c:8d:f8:f5:3e:cb:5b:ba: 5e:62:43:b2:32:8d:55:f0:ad:49:af:86:9a:c7:64: 8a:aa:7d:48:12:7e:65:15:5c:b3:64:27:c0:10:a3: 21:72:c7:29:fa:52:ec:0c:40:25:c7:d6:6d:01:e8: 60:5f:73:01:d8:a1:e2:f8:08:1f:26:d3:2c:f6:5e: 8d:80:9c:8c:1f:42:1c:ca:e4:e9:5f:0b:aa:bf:c1: a3:91:09:ad:7f:a5:29:48:09:e8:28:1e:32:d6:c0: db:ad:e0:94:8b:a0:49:17:ee:d2:82:6c:e4:c5:cc: 07:83:55:12:90:2b:05:39:12:89:3e:53:c5:bc:ae: 5a:a5:86:cb:87:9f:e4:6c:d3:08:76:f8:b4:bc:88: 6b:1b:f7:99:e4:b1:f7:23:52:51:d9:4d:c9:ba:4b: ce:0c:e2:3f:bc:c4:80:aa:90:89:9f:e3:ba:4a:e0: 4e:f7:b6:91:d4:1c:5b:51:3e:2f:d2:c4:fb:eb:d6: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BE:59:50:83:50:D6:56:90:B9:C1:7C:DC:76:06:53:26:12:6D:38 X509v3 Authority Key Identifier: keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:48:27:8f:2e:b7:54:33:cc:f2:5a:31:cf:05:4a:46:14:98: 46:37:52:a4:76:40:75:8a:1d:1e:30:e0:d6:3f:52:af:c5:32: f5:d6:95:9c:63:b5:1c:2e:88:37:6b:f1:b0:aa:bb:48:78:28: dc:f2:56:23:84:0d:0b:bb:a0:8c:d3:3e:71:b0:dd:b5:f7:2c: 74:19:88:1b:a6:5c:70:3a:78:3d:1b:65:54:b2:f0:98:de:05: 3d:06:2d:99:cb:d0:d9:c8:5e:74:aa:63:96:93:94:d3:7f:cb: 15:eb:41:1d:69:a5:12:42:7f:fe:0e:5e:a6:1c:78:46:1e:f5: be:3e:03:0d:9b:80:6c:f4:55:ef:8c:f1:29:a1:4d:ee:17:6a: 98:18:c2:96:7d:e9:b1:60:41:92:bf:ae:54:82:40:13:50:a4: 7b:c4:dc:66:e6:c5:e8:12:e9:f9:c7:15:9f:fd:4b:6a:8a:8e: e1:bc:2f:e3:69:f5:a8:0a:16:b5:e8:2a:a9:8c:2d:02:44:7f: a6:af:48:8a:fc:01:4f:6c:7a:e2:f7:c9:33:b5:bc:82:01:71: 5a:2a:1d:95:76:02:c5:7a:73:68:50:2b:55:8d:fa:1f:05:bd: dd:be:ff:9a:2a:e6:0a:0a:2f:fa:a9:a2:62:b2:4f:c8:54:a9: 13:af:88:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawolFvY7rbF2PgBu3gQDdMsRxJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5NTFG OTk1MDc5QTAeFw0yNjA5MDIxNjQ4MjVaFw0yNjA5MDMxOTQ4MjVaMDMxMTAvBgNV BAMTKDE0QkU1OTUwODM1MEQ2NTY5MEI5QzE3Q0RDNzYwNjUzMjYxMjZEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVda+rAq0PhAtqBP1PI8XT4dgY 6FSzqrHmuTAoognrprlmPpuzZppgOudtpfdNhuThQnTL5Zw8IJglZor+bPcrnhQc jfj1Pstbul5iQ7IyjVXwrUmvhprHZIqqfUgSfmUVXLNkJ8AQoyFyxyn6UuwMQCXH 1m0B6GBfcwHYoeL4CB8m0yz2Xo2AnIwfQhzK5OlfC6q/waORCa1/pSlICegoHjLW wNut4JSLoEkX7tKCbOTFzAeDVRKQKwU5Eok+U8W8rlqlhsuHn+Rs0wh2+LS8iGsb 95nksfcjUlHZTcm6S84M4j+8xICqkImf47pK4E73tpHUHFtRPi/SxPvr1gDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFL5ZUINQ1laQucF83HYGUyYSbTgwHwYDVR0j BBgwFoAUbCHzcfzt0t4prpFLNT9pUfmVB5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVlYzZjZjgtOTY1NS00Mzc5LWJmMzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFG Q0VERDJERTI5QUU5MTRCMzUzRjY5NTFGOTk1MDc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzIxRjM3MUZDRUREMkRFMjlBRTkxNEIzNTNGNjk1MUY5OTUw NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5 NTFGOTk1MDc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINIJ48ut1QzzPJaMc8FSkYUmEY3UqR2QHWK HR4w4NY/Uq/FMvXWlZxjtRwuiDdr8bCqu0h4KNzyViOEDQu7oIzTPnGw3bX3LHQZ iBumXHA6eD0bZVSy8JjeBT0GLZnL0NnIXnSqY5aTlNN/yxXrQR1ppRJCf/4OXqYc eEYe9b4+Aw2bgGz0Ve+M8SmhTe4XapgYwpZ96bFgQZK/rlSCQBNQpHvE3GbmxegS 6fnHFZ/9S2qKjuG8L+Np9agKFrXoKqmMLQJEf6avSIr8AU9seuL3yTO1vIIBcVoq HZV2AsV6c2hQK1WN+h8Fvd2+/5oq5goKL/qpomKyT8hUqROviBo= -----END CERTIFICATE-----Generated at Thu Sep 3 08:00:55 2026 by rpki-client