$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: 0zG/EUkeVHRxItvzJVVq00PsW5Ni2UaoAjx1bS2zTtI= Subject key identifier: 40:B9:2D:91:C3:41:17:28:56:73:B1:74:13:72:B0:35:AB:4F:CD:C7 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 13697FE886ACDFD8215FBFB8BF25B88EE554253F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 22:56:23 +0000 Manifest this update: Wed 02 Sep 2026 22:51:23 +0000 Manifest next update: Fri 04 Sep 2026 02:35:23 +0000 Files and hashes: 1: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 2: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: Qj09o9PAg4X/W8NMy/TeLtVrV8AGivbuok7rRGRYrJA=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:69:7f:e8:86:ac:df:d8:21:5f:bf:b8:bf:25:b8:8e:e5:54:25:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Sep 2 22:51:23 2026 GMT Not After : Sep 4 02:35:23 2026 GMT Subject: CN=40B92D91C34117285673B1741372B035AB4FCDC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:36:64:f5:9d:ef:9d:be:27:d2:8a:e2:7c: e0:cb:92:0a:9f:ff:3b:96:e6:69:b6:57:e3:c3:33: eb:84:2a:93:f1:49:07:2e:6d:0a:a2:2e:eb:39:f9: ab:6b:86:7e:0a:a2:47:58:34:b0:2b:90:0c:7e:9e: a2:3f:83:c9:94:f6:7f:2d:28:3f:34:90:12:52:82: 62:1b:59:a8:4e:fe:70:37:f5:ed:e9:b3:11:6a:51: 70:5d:db:ce:ee:1a:24:bb:4b:a5:03:77:16:f0:f1: 12:cf:be:43:62:b8:56:0b:1e:77:a7:1f:b8:4b:ad: 09:b4:17:f5:6f:ae:1b:03:3f:ef:64:e1:91:df:ba: 6f:20:ca:8c:46:1e:1a:20:9c:73:29:97:85:dd:bb: 68:f8:8f:b9:17:8e:4d:84:29:2c:39:aa:9c:55:e8: 63:9f:90:98:d7:1d:4a:e4:26:40:97:69:a3:3a:d3: 9d:fb:1b:9a:88:ad:23:74:aa:8e:3e:74:d1:55:d3: fe:ed:a2:02:12:6f:f4:ac:86:64:ae:f6:9e:61:5d: d1:d3:2a:50:ad:c1:b4:c0:4b:fb:d2:6c:61:15:fa: f8:ac:cd:f8:2c:0c:11:6c:2e:09:f5:56:76:50:79: e8:10:fa:71:12:03:be:42:a9:c8:b9:6c:e3:ea:f8: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B9:2D:91:C3:41:17:28:56:73:B1:74:13:72:B0:35:AB:4F:CD:C7 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7b:78:31:6b:38:a1:4f:2a:2f:e0:4a:bc:b8:68:a6:17:89: f4:4f:ec:b2:30:b9:1b:75:2d:8d:24:e5:bd:28:60:bd:5b:66: d6:44:ef:4c:83:20:5c:50:1d:69:8a:e8:86:3a:00:c1:3a:98: 52:59:34:d2:b2:bd:84:d2:09:e2:35:a8:f1:a8:db:dd:68:be: 20:0f:31:b2:70:9f:15:ac:19:ed:81:b0:f4:5d:48:03:b6:aa: 70:29:76:25:99:e0:98:65:30:0e:a3:fa:2a:16:42:3d:04:36: c5:c8:2b:31:30:68:f3:a1:46:40:ee:a6:fc:14:16:4f:81:c1: 6e:5d:10:28:d5:ab:15:aa:4d:c6:2e:6b:ed:1b:a3:61:e6:9d: d3:0e:b0:f6:cb:a1:6f:cf:a6:b3:d8:03:61:0a:bf:ed:cb:b1: ae:24:1a:73:cf:34:94:98:fd:85:8a:29:b7:07:44:bd:3e:e0: 5d:3c:86:ee:96:f5:48:42:b8:8b:da:98:28:4d:91:5a:57:1f: ce:67:8a:a9:ed:21:9a:72:bf:94:08:c4:04:8f:d5:a2:5a:0d: c5:09:c0:28:34:07:ef:8d:29:0e:85:e1:18:39:a8:4f:d4:fe: ad:70:72:dd:fd:f1:5f:c4:bb:69:77:8f:57:2b:a1:5a:64:14: 1d:da:a8:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2l/6Ias39ghX7+4vyW4juVUJT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA5MDIyMjUxMjNaFw0yNjA5MDQwMjM1MjNaMDMxMTAvBgNV BAMTKDQwQjkyRDkxQzM0MTE3Mjg1NjczQjE3NDEzNzJCMDM1QUI0RkNEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimzZk9Z3vnb4n0orifODLkgqf /zuW5mm2V+PDM+uEKpPxSQcubQqiLus5+atrhn4KokdYNLArkAx+nqI/g8mU9n8t KD80kBJSgmIbWahO/nA39e3psxFqUXBd287uGiS7S6UDdxbw8RLPvkNiuFYLHnen H7hLrQm0F/VvrhsDP+9k4ZHfum8gyoxGHhognHMpl4Xdu2j4j7kXjk2EKSw5qpxV 6GOfkJjXHUrkJkCXaaM60537G5qIrSN0qo4+dNFV0/7togISb/SshmSu9p5hXdHT KlCtwbTAS/vSbGEV+viszfgsDBFsLgn1VnZQeegQ+nESA75Cqci5bOPq+G7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLktkcNBFyhWc7F0E3KwNatPzccwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx7eDFrOKFPKi/gSry4aKYXifRP7LIwuRt1 LY0k5b0oYL1bZtZE70yDIFxQHWmK6IY6AME6mFJZNNKyvYTSCeI1qPGo291oviAP MbJwnxWsGe2BsPRdSAO2qnApdiWZ4JhlMA6j+ioWQj0ENsXIKzEwaPOhRkDupvwU Fk+BwW5dECjVqxWqTcYua+0bo2HmndMOsPbLoW/PprPYA2EKv+3Lsa4kGnPPNJSY /YWKKbcHRL0+4F08hu6W9UhCuIvamChNkVpXH85niqntIZpyv5QIxASP1aJaDcUJ wCg0B++NKQ6F4Rg5qE/U/q1wct398V/Eu2l3j1croVpkFB3aqJs= -----END CERTIFICATE-----Generated at Thu Sep 3 14:17:25 2026 by rpki-client