$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft File: 6D157C9F12B387F14489E16709B7918837CC6D0D.mft (raw, json) Hash identifier: 0N3UOJvEOB3xs7Tr76x4tdCwikzksE8bpma4nXaJprY= Subject key identifier: 97:F8:5F:EA:8D:09:C5:D4:60:AA:56:4E:52:6A:7F:F6:22:F1:D9:58 Authority key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D Certificate issuer: /CN=6D157C9F12B387F14489E16709B7918837CC6D0D Certificate serial: 5F44AD5A4467636862E7AD26501ED94D33E3E4FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:13:36 +0000 Manifest this update: Mon 20 Jul 2026 22:08:36 +0000 Manifest next update: Wed 22 Jul 2026 01:23:36 +0000 Files and hashes: 1: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: Q1+ewmleGWvKt5GVutrjmiB3bltbmXv4+SV22bkfQSA=) 2: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: VkyPTF+RY+z/p6xoTjLQ0ZWN42gQ1j6IA9bwlr+r6r8=) 3: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: NlPuBH9s19urTN9l/ySJyKm6WWO9NdJomGBorLJ9CcM=) 4: 6D157C9F12B387F14489E16709B7918837CC6D0D.crl (hash: 8uMbWoXh9eunROKl9NckByRsa5Ct7qVCRXgNq85f5Nw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:44:ad:5a:44:67:63:68:62:e7:ad:26:50:1e:d9:4d:33:e3:e4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D157C9F12B387F14489E16709B7918837CC6D0D Validity Not Before: Jul 20 22:08:36 2026 GMT Not After : Jul 22 01:23:36 2026 GMT Subject: CN=97F85FEA8D09C5D460AA564E526A7FF622F1D958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:ba:58:a5:89:b1:91:9e:d3:27:ec:ed:04: 07:88:ed:c4:2b:da:55:69:eb:f1:53:3f:b2:cf:3e: a7:d8:e1:03:af:c5:e2:bf:b9:7b:12:54:f3:ad:6d: a8:8f:ca:b3:3c:45:27:59:f5:51:33:a5:fb:d5:77: 0b:c4:8b:47:02:f2:bb:17:b6:27:ea:8e:a0:03:a8: e3:73:a2:1c:e0:03:4f:61:05:27:a7:c0:74:49:1f: cd:84:0f:b5:2f:7f:1a:d1:5b:06:98:f4:5b:17:23: fd:ea:66:52:91:d0:bd:44:7b:19:c3:2d:a2:3b:3c: 03:ce:c8:82:f7:81:b9:11:53:03:f3:5f:25:6c:95: ad:50:ab:09:16:06:79:b8:34:2e:a5:23:e2:79:20: 9b:68:ad:f8:74:8e:6a:84:25:51:40:86:4a:cd:9c: 01:b9:7e:23:81:5e:d1:f2:44:ca:93:8a:6a:95:15: e7:46:3e:61:3c:64:c9:ee:5c:81:94:74:f3:f4:b7: bc:16:12:eb:8c:2b:21:ba:5a:dd:31:8b:d3:64:ad: c9:b2:e2:d5:ac:57:f1:32:57:17:f8:2d:41:1c:f8: 3f:55:7a:9f:6b:8c:42:fb:4c:d3:b6:bb:99:74:a8: b7:03:a6:7e:a7:e8:04:44:a0:3f:dc:b8:65:25:4a: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F8:5F:EA:8D:09:C5:D4:60:AA:56:4E:52:6A:7F:F6:22:F1:D9:58 X509v3 Authority Key Identifier: keyid:6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b1:b1:7e:c2:9b:fa:8d:4d:8a:f1:5b:18:33:b0:de:26:b7: 59:94:52:ec:f6:61:ec:2d:e7:16:ca:93:8e:09:9a:26:64:6b: 1e:c9:83:b7:8c:6d:ec:e7:0d:1e:6a:c4:7c:e6:9f:61:d3:4a: cf:b8:1f:41:6b:e3:96:d7:ef:31:72:94:4a:64:22:ff:50:f2: 15:e8:69:a4:9b:48:34:6a:dc:a8:2c:77:3b:d2:78:8a:31:b6: d0:2b:ca:22:84:ff:d9:1b:37:43:9d:3f:64:91:ec:f3:f9:b1: 5b:1c:8f:6c:e7:5e:5e:da:78:f8:47:fa:0b:a4:58:5e:7b:2a: ba:17:17:ac:55:53:d4:e5:23:07:31:96:52:e8:06:e3:8b:79: a4:a1:a8:bc:df:97:fb:a1:23:2c:2f:04:3d:23:1e:e1:f9:b6: 79:fd:7c:24:1a:50:4a:38:6b:f2:7d:9e:6f:e3:43:98:6e:1f: 8e:7b:88:44:38:2c:04:2b:e0:81:88:ba:23:42:62:d1:5b:53: 23:8c:c7:2c:98:a6:5e:02:e7:0c:b6:2c:06:61:68:ce:1f:37: 48:dc:3c:4d:68:bc:bb:eb:3e:34:8a:4c:79:db:f0:0d:80:73: 66:60:b1:cd:1f:4c:71:7e:c7:b9:6e:0d:ec:97:7c:30:20:08: 66:08:97:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0StWkRnY2hi560mUB7ZTTPj5P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkxODgz N0NDNkQwRDAeFw0yNjA3MjAyMjA4MzZaFw0yNjA3MjIwMTIzMzZaMDMxMTAvBgNV BAMTKDk3Rjg1RkVBOEQwOUM1RDQ2MEFBNTY0RTUyNkE3RkY2MjJGMUQ5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzu7pYpYmxkZ7TJ+ztBAeI7cQr 2lVp6/FTP7LPPqfY4QOvxeK/uXsSVPOtbaiPyrM8RSdZ9VEzpfvVdwvEi0cC8rsX tifqjqADqONzohzgA09hBSenwHRJH82ED7UvfxrRWwaY9FsXI/3qZlKR0L1EexnD LaI7PAPOyIL3gbkRUwPzXyVsla1QqwkWBnm4NC6lI+J5IJtorfh0jmqEJVFAhkrN nAG5fiOBXtHyRMqTimqVFedGPmE8ZMnuXIGUdPP0t7wWEuuMKyG6Wt0xi9Nkrcmy 4tWsV/EyVxf4LUEc+D9Vep9rjEL7TNO2u5l0qLcDpn6n6AREoD/cuGUlShFrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/hf6o0JxdRgqlZOUmp/9iLx2VgwHwYDVR0j BBgwFoAUbRV8nxKzh/FEieFnCbeRiDfMbQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEyYmZlOWEtMzgyMy00NGU5LTk3YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYx MkIzODdGMTQ0ODlFMTY3MDlCNzkxODgzN0NDNkQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDE1N0M5RjEyQjM4N0YxNDQ4OUUxNjcwOUI3OTE4ODM3Q0M2 RDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkx ODgzN0NDNkQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCxsX7Cm/qNTYrxWxgzsN4mt1mUUuz2Yewt 5xbKk44JmiZkax7Jg7eMbeznDR5qxHzmn2HTSs+4H0Fr45bX7zFylEpkIv9Q8hXo aaSbSDRq3KgsdzvSeIoxttAryiKE/9kbN0OdP2SR7PP5sVscj2znXl7aePhH+guk WF57KroXF6xVU9TlIwcxllLoBuOLeaShqLzfl/uhIywvBD0jHuH5tnn9fCQaUEo4 a/J9nm/jQ5huH457iEQ4LAQr4IGIuiNCYtFbUyOMxyyYpl4C5wy2LAZhaM4fN0jc PE1ovLvrPjSKTHnb8A2Ac2Zgsc0fTHF+x7luDeyXfDAgCGYIl1c= -----END CERTIFICATE-----Generated at Tue Jul 21 09:18:36 2026 by rpki-client