$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json) Hash identifier: MCMslRT0tsveLQiTWT+TetbYr9nM1IUVVDMkA09pYLc= Subject key identifier: 2B:7A:64:02:3D:F3:1F:F8:83:3C:6B:A0:4A:AA:1D:F1:01:76:EC:45 Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Certificate serial: 02B5FA2C95D047F9B587D69B5E8080A8BE5C5784 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 13:18:10 +0000 Manifest this update: Thu 03 Sep 2026 13:13:10 +0000 Manifest next update: Fri 04 Sep 2026 13:54:10 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=) 2: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: erwfHI+6ZdT7B6SlOm/ds7VEEbzns+ys5VJeuiHpRcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b5:fa:2c:95:d0:47:f9:b5:87:d6:9b:5e:80:80:a8:be:5c:57:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Validity Not Before: Sep 3 13:13:10 2026 GMT Not After : Sep 4 13:54:10 2026 GMT Subject: CN=2B7A64023DF31FF8833C6BA04AAA1DF10176EC45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:bc:7b:1a:fb:f8:d3:81:36:a8:ae:29:d4: e3:d1:8e:36:b1:e6:1f:b3:bd:2a:ac:02:c7:db:fe: eb:53:90:93:ff:b4:fe:4e:39:10:aa:3a:22:5b:d9: 45:2a:34:59:46:08:39:54:64:ea:60:cd:97:ff:6a: 7f:d6:95:52:86:07:88:21:23:c4:12:d9:90:80:5b: ef:71:4b:2e:2c:10:4e:6c:ee:8e:ef:fa:ce:5b:ac: 42:09:51:6d:3b:fd:55:52:e5:6c:32:8e:21:79:82: ba:30:f1:56:a3:f5:33:71:9f:53:5f:2a:1d:3d:63: 7e:e4:17:96:58:c9:e3:45:e5:22:75:c1:1f:f2:49: ce:67:d7:2f:1e:6a:3b:9f:a7:0c:88:f8:32:69:34: cb:e3:00:9f:d7:2b:35:e4:35:8f:ce:dd:4f:2f:b9: 8d:8b:e8:8b:b5:86:e3:ea:61:0b:e7:89:5c:c9:2a: f2:d9:ec:ef:d5:fc:38:81:01:49:93:a5:41:6c:2b: dc:95:0e:b6:dc:c8:8c:fb:bd:73:8c:24:cb:82:39: 61:79:24:81:2e:df:86:80:d0:20:e9:94:b8:ba:00: d8:d1:f7:68:10:07:c5:8e:c1:11:9c:40:90:37:af: e5:92:67:6d:28:fb:98:3a:e2:ad:16:54:43:19:ab: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7A:64:02:3D:F3:1F:F8:83:3C:6B:A0:4A:AA:1D:F1:01:76:EC:45 X509v3 Authority Key Identifier: keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6e:6e:1e:c8:fb:15:aa:6d:ee:7c:23:0b:eb:08:3c:a0:50: 89:15:66:50:d9:58:5c:7e:52:a6:ff:0f:6c:9f:03:39:2a:47: fb:68:6c:fc:55:cc:10:08:87:6a:bb:8f:20:75:da:a1:30:a3: 00:86:f0:20:84:6d:0e:b2:db:74:bc:89:95:44:26:15:42:6b: c7:f8:34:4b:ef:6b:0c:9f:7f:5c:bf:4b:dd:c5:a0:80:39:ad: 18:a3:ac:2f:3c:43:97:8d:68:53:94:ac:5f:47:0d:e8:f4:25: 0b:c2:2a:f5:97:75:01:f8:82:9b:eb:6f:d1:b9:31:ae:3d:32: 7c:d0:cf:31:20:e4:a1:b9:7e:25:a5:8d:1c:da:db:53:1d:80: 47:fa:6a:ab:42:57:5a:af:0a:80:f6:a8:72:03:bb:4d:23:84: 65:a9:4f:6c:e9:f5:3a:bb:21:2b:b6:89:65:de:2f:fa:6a:38: 2a:65:5f:10:99:20:df:05:81:53:2e:49:43:d7:b4:02:83:c8: cf:a6:06:c7:55:54:97:dd:41:95:93:63:1f:5e:3e:4f:66:5c: 58:e6:59:01:95:9f:8b:c8:ee:a1:02:78:7b:c3:e4:c9:c4:cd: 01:74:b9:9f:bc:44:40:3c:cb:b8:b8:53:28:67:20:2b:2e:45: f8:19:46:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArX6LJXQR/m1h9abXoCAqL5cV4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERCRjlE MjIxRjk2RjAeFw0yNjA5MDMxMzEzMTBaFw0yNjA5MDQxMzU0MTBaMDMxMTAvBgNV BAMTKDJCN0E2NDAyM0RGMzFGRjg4MzNDNkJBMDRBQUExREYxMDE3NkVDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7bx7Gvv404E2qK4p1OPRjjax 5h+zvSqsAsfb/utTkJP/tP5OORCqOiJb2UUqNFlGCDlUZOpgzZf/an/WlVKGB4gh I8QS2ZCAW+9xSy4sEE5s7o7v+s5brEIJUW07/VVS5WwyjiF5grow8Vaj9TNxn1Nf Kh09Y37kF5ZYyeNF5SJ1wR/ySc5n1y8eajufpwyI+DJpNMvjAJ/XKzXkNY/O3U8v uY2L6Iu1huPqYQvniVzJKvLZ7O/V/DiBAUmTpUFsK9yVDrbcyIz7vXOMJMuCOWF5 JIEu34aA0CDplLi6ANjR92gQB8WOwRGcQJA3r+WSZ20o+5g64q0WVEMZq6qHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3pkAj3zH/iDPGugSqod8QF27EUwHwYDVR0j BBgwFoAU9rhv4g5zoi2aNTzJLtjb+dIh+W8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EzNzZhNmUtM2VjYS00ZjczLThkMTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIw RTczQTIyRDlBMzUzQ0M5MkVEOERCRjlEMjIxRjk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNkI4NkZFMjBFNzNBMjJEOUEzNTNDQzkyRUQ4REJGOUQyMjFG OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERC RjlEMjIxRjk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxubh7I+xWqbe58IwvrCDygUIkVZlDZWFx+ Uqb/D2yfAzkqR/tobPxVzBAIh2q7jyB12qEwowCG8CCEbQ6y23S8iZVEJhVCa8f4 NEvvawyff1y/S93FoIA5rRijrC88Q5eNaFOUrF9HDej0JQvCKvWXdQH4gpvrb9G5 Ma49MnzQzzEg5KG5fiWljRza21MdgEf6aqtCV1qvCoD2qHIDu00jhGWpT2zp9Tq7 ISu2iWXeL/pqOCplXxCZIN8FgVMuSUPXtAKDyM+mBsdVVJfdQZWTYx9ePk9mXFjm WQGVn4vI7qECeHvD5MnEzQF0uZ+8REA8y7i4UyhnICsuRfgZRrw= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:09 2026 by rpki-client