$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft File: 6D8C2202C602D4BCB9586F638744BA643908A389.mft (raw, json) Hash identifier: Ju1sWl/nby/4fmz2qbJxqq/k/l7grCnn1o05vsyHL4E= Subject key identifier: 0A:C4:F1:12:B6:9B:0A:23:12:A3:17:34:F3:DB:9F:E8:C1:6E:2B:5D Authority key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 Certificate issuer: /CN=6D8C2202C602D4BCB9586F638744BA643908A389 Certificate serial: 64454FE674CCE79AF6F6F1029EEF7A5D53573823 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 19:11:19 +0000 Manifest this update: Wed 02 Sep 2026 19:06:19 +0000 Manifest next update: Thu 03 Sep 2026 19:32:19 +0000 Files and hashes: 1: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: b7wBGbC9SNhjzw8V9K2lv7CY6SFtdKxPdtK4cOG4BhI=) 2: 6D8C2202C602D4BCB9586F638744BA643908A389.crl (hash: CJF/EE/hdFy8YIw+997avzzanY/gQpqRil5Gd0ftXhI=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: m+uFtZihUm3fWV/iOrWY8zLaQsNI9BmUlq7mnOF09qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:45:4f:e6:74:cc:e7:9a:f6:f6:f1:02:9e:ef:7a:5d:53:57:38:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D8C2202C602D4BCB9586F638744BA643908A389 Validity Not Before: Sep 2 19:06:19 2026 GMT Not After : Sep 3 19:32:19 2026 GMT Subject: CN=0AC4F112B69B0A2312A31734F3DB9FE8C16E2B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:d6:45:53:7c:47:b9:e1:d5:3f:3a:f9:3e: 4d:81:7b:65:70:cd:97:85:b9:45:97:20:3f:c4:7f: 3e:87:d6:23:9b:cf:ee:21:72:d7:04:17:e0:ce:50: ed:e0:c0:6f:82:ce:68:56:06:5b:28:a5:63:31:68: bd:58:4b:a8:6c:7b:9c:15:c8:bf:a1:e1:51:ef:e1: 4b:09:a7:9f:b0:a2:20:65:a3:73:83:a9:64:f9:6e: 53:82:43:8a:5e:bd:e7:78:e8:47:04:cb:c3:bf:a1: 4a:90:97:b9:e2:25:15:96:55:f5:58:3e:f6:01:59: 78:d2:1a:4e:33:ae:06:e4:14:a4:b6:07:bb:b8:2b: 6e:d1:64:6a:2d:ca:0e:1c:17:01:9e:69:be:36:b8: 64:92:e6:c1:f9:65:cb:cf:97:ff:3c:61:4d:4e:db: 94:8d:ab:12:e7:2c:cf:1c:98:62:f2:5c:1d:fb:e0: ef:cb:05:90:46:41:a4:0d:e0:4d:cd:1c:13:4a:52: 9c:6f:31:87:f4:ac:de:77:5e:5a:18:46:fa:8c:e2: ad:53:e8:b9:76:82:55:f1:00:46:af:95:77:01:32: 7d:56:5b:5d:00:89:c9:8b:9c:b1:1d:60:03:7c:87: 16:26:bd:aa:a6:a7:c9:0b:28:79:f1:4b:3a:3d:c3: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C4:F1:12:B6:9B:0A:23:12:A3:17:34:F3:DB:9F:E8:C1:6E:2B:5D X509v3 Authority Key Identifier: keyid:6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:22:77:69:c5:bf:3c:e7:c8:7c:34:4b:08:fb:e2:cc:c7:b4: 5b:6c:47:3e:50:53:7e:27:b8:43:d9:19:99:b7:b6:ff:49:c5: 53:cf:85:04:15:d5:5d:cd:7d:bc:49:6f:81:b2:98:81:23:5a: 3d:75:15:89:25:41:01:92:90:31:61:6a:de:be:33:3e:1b:d8: b1:58:89:e3:38:99:40:35:69:ae:3a:46:b3:98:86:6f:c0:49: 27:52:9e:f0:43:c1:ac:95:7a:0b:6f:fa:db:c6:5a:c0:07:38: a4:eb:76:fe:d4:b2:62:dd:e4:88:1d:71:ee:1f:1a:d9:dd:84: db:a2:21:3a:cc:8b:9c:d5:c8:5d:20:61:e4:96:03:6a:9a:a9: d3:50:12:e0:99:c3:ce:06:e0:c0:7a:6e:16:71:a8:b1:48:d3: 4a:9a:3b:25:78:f3:79:53:76:02:80:21:67:3a:85:ce:92:17: 15:75:91:7e:a8:80:ff:fa:cd:84:7d:3e:b1:ef:1c:40:a8:15: 95:ad:9a:77:41:03:52:5f:cf:d8:74:11:0b:c4:a4:2e:66:32: ab:49:63:c8:ca:24:5e:a1:cc:7d:d2:44:d8:28:6d:81:eb:58: e6:c6:bf:d0:fb:c8:05:59:a7:d9:96:ec:c8:32:4e:ee:b2:13: a5:15:a3:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEVP5nTM55r29vECnu96XVNXOCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ4QzIyMDJDNjAyRDRCQ0I5NTg2RjYzODc0NEJBNjQz OTA4QTM4OTAeFw0yNjA5MDIxOTA2MTlaFw0yNjA5MDMxOTMyMTlaMDMxMTAvBgNV BAMTKDBBQzRGMTEyQjY5QjBBMjMxMkEzMTczNEYzREI5RkU4QzE2RTJCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvw9ZFU3xHueHVPzr5Pk2Be2Vw zZeFuUWXID/Efz6H1iObz+4hctcEF+DOUO3gwG+CzmhWBlsopWMxaL1YS6hse5wV yL+h4VHv4UsJp5+woiBlo3ODqWT5blOCQ4peved46EcEy8O/oUqQl7niJRWWVfVY PvYBWXjSGk4zrgbkFKS2B7u4K27RZGotyg4cFwGeab42uGSS5sH5ZcvPl/88YU1O 25SNqxLnLM8cmGLyXB374O/LBZBGQaQN4E3NHBNKUpxvMYf0rN53XloYRvqM4q1T 6Ll2glXxAEavlXcBMn1WW10AicmLnLEdYAN8hxYmvaqmp8kLKHnxSzo9w0plAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsTxErabCiMSoxc089uf6MFuK10wHwYDVR0j BBgwFoAUbYwiAsYC1Ly5WG9jh0S6ZDkIo4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFlZTM3NjUtMGFiYi00YmEzLWEwMGQtY2JjZWM4Mzk5OTI4LzAvNkQ4QzIyMDJD NjAyRDRCQ0I5NTg2RjYzODc0NEJBNjQzOTA4QTM4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDhDMjIwMkM2MDJENEJDQjk1ODZGNjM4NzQ0QkE2NDM5MDhB Mzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNkQ4QzIyMDJDNjAyRDRCQ0I5NTg2RjYzODc0NEJB NjQzOTA4QTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIid2nFvzznyHw0Swj74szHtFtsRz5QU34n uEPZGZm3tv9JxVPPhQQV1V3NfbxJb4GymIEjWj11FYklQQGSkDFhat6+Mz4b2LFY ieM4mUA1aa46RrOYhm/ASSdSnvBDwayVegtv+tvGWsAHOKTrdv7UsmLd5Igdce4f GtndhNuiITrMi5zVyF0gYeSWA2qaqdNQEuCZw84G4MB6bhZxqLFI00qaOyV483lT dgKAIWc6hc6SFxV1kX6ogP/6zYR9PrHvHECoFZWtmndBA1Jfz9h0EQvEpC5mMqtJ Y8jKJF6hzH3SRNgobYHrWObGv9D7yAVZp9mW7MgyTu6yE6UVoxQ= -----END CERTIFICATE-----Generated at Thu Sep 3 12:40:59 2026 by rpki-client