$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: amJ04DFjOkhXuyT72dCD30XsTOSntFHp6vFlrNwUeoE= Subject key identifier: 2F:1E:19:0A:4F:72:2A:38:88:BF:4D:04:53:DF:7F:F0:80:A5:75:64 Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 66C22CB4A2415183EBBEE27F49946374A599384D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 01:04:11 +0000 Manifest this update: Thu 20 Aug 2026 00:59:11 +0000 Manifest next update: Fri 21 Aug 2026 03:52:11 +0000 Files and hashes: 1: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: Js56cp6Sw6zfh7rcX67A4LsazRxNYJmFC8OEyeKjk/g=) 2: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 03:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c2:2c:b4:a2:41:51:83:eb:be:e2:7f:49:94:63:74:a5:99:38:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: Aug 20 00:59:11 2026 GMT Not After : Aug 21 03:52:11 2026 GMT Subject: CN=2F1E190A4F722A3888BF4D0453DF7FF080A57564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:fa:b1:fe:0c:6d:8f:e8:2f:0a:41:33:d8: 83:74:27:ff:3a:34:d6:87:a8:60:3c:d2:e2:23:fb: 80:f7:22:0f:8a:f0:cf:90:2c:1b:14:c7:6b:b7:27: 9f:bf:ab:8f:8b:26:d9:53:36:c0:72:af:90:c1:27: 29:a7:77:76:d9:ba:a4:dd:a7:dd:d7:56:27:5b:26: e9:25:72:dc:1a:6e:b3:2a:a8:0c:4d:c0:81:73:72: 39:7e:5f:db:f0:33:a0:d7:b0:d3:4e:03:37:26:84: c2:cd:37:36:24:86:ed:46:f6:ab:d7:f3:bc:b7:f4: 8f:ed:b2:88:34:ff:0d:e2:89:53:a8:11:53:2e:92: 46:28:08:6c:b2:2b:b9:cb:1e:73:19:ac:26:8f:ff: 43:58:42:b0:58:7a:db:35:dd:b8:95:47:c2:6a:8d: d8:40:22:80:92:7f:a0:9f:b9:2f:56:70:fa:5a:7e: d6:26:97:9f:99:89:da:c4:ec:18:ac:cd:60:6b:c4: 2c:98:1d:a3:e1:4e:f4:61:30:ba:71:a9:cf:bc:0b: 5a:a5:88:58:22:57:85:ee:21:74:2d:3e:0e:46:11: be:2a:e6:4e:6c:3d:8d:d2:d5:24:e9:c7:73:48:12: a4:83:99:f9:d5:01:4c:4d:94:cb:2d:4c:7b:d4:5b: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1E:19:0A:4F:72:2A:38:88:BF:4D:04:53:DF:7F:F0:80:A5:75:64 X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:99:bf:6f:a2:fe:b0:44:ee:f9:a3:a0:eb:3d:97:97:46:fa: 18:bd:8a:f0:9d:7f:5d:86:4b:a7:2e:8a:4c:52:c7:98:4a:ff: ac:94:0d:3e:a3:2c:bd:08:df:1a:3c:f9:e8:8b:24:d3:60:44: 10:83:eb:52:0e:5d:7b:0f:bb:2e:3d:2e:6b:da:17:02:10:20: 66:77:21:64:7f:30:f9:82:bd:4d:af:5b:3a:22:ac:e6:e3:f6: df:e8:06:30:16:e5:bb:93:bc:52:6b:b1:29:76:b1:0d:f2:48: 45:3d:65:32:e1:86:f9:88:d2:74:b0:d6:4e:ce:b7:7e:b9:00: 58:84:b4:e8:43:ff:16:80:d5:da:16:de:10:e8:b9:53:77:bc: 0b:40:64:ea:14:9f:b4:a9:ba:a8:db:23:0b:73:e0:de:88:dd: 5a:b8:bd:d5:28:0b:c7:05:34:9d:36:a7:fb:53:04:7d:77:cb: c6:01:50:3a:24:a4:b1:65:ff:6a:1b:40:94:21:c9:18:a5:f5: 37:7f:4f:76:8d:5e:cb:02:88:ce:45:e5:02:88:ff:58:76:1f: 72:18:3a:6d:42:b0:82:1e:82:41:56:d2:13:c7:5e:65:5e:d3: fb:d5:55:5c:b4:06:ca:05:8b:d1:be:c8:cf:1f:81:94:91:e8: 3e:cb:6d:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsIstKJBUYPrvuJ/SZRjdKWZOE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjA4MjAwMDU5MTFaFw0yNjA4MjEwMzUyMTFaMDMxMTAvBgNV BAMTKDJGMUUxOTBBNEY3MjJBMzg4OEJGNEQwNDUzREY3RkYwODBBNTc1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpwvqx/gxtj+gvCkEz2IN0J/86 NNaHqGA80uIj+4D3Ig+K8M+QLBsUx2u3J5+/q4+LJtlTNsByr5DBJymnd3bZuqTd p93XVidbJuklctwabrMqqAxNwIFzcjl+X9vwM6DXsNNOAzcmhMLNNzYkhu1G9qvX 87y39I/tsog0/w3iiVOoEVMukkYoCGyyK7nLHnMZrCaP/0NYQrBYets13biVR8Jq jdhAIoCSf6CfuS9WcPpaftYml5+ZidrE7BiszWBrxCyYHaPhTvRhMLpxqc+8C1ql iFgiV4XuIXQtPg5GEb4q5k5sPY3S1STpx3NIEqSDmfnVAUxNlMstTHvUW7oNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULx4ZCk9yKjiIv00EU99/8ICldWQwHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqZv2+i/rBE7vmjoOs9l5dG+hi9ivCdf12G S6cuikxSx5hK/6yUDT6jLL0I3xo8+eiLJNNgRBCD61IOXXsPuy49LmvaFwIQIGZ3 IWR/MPmCvU2vWzoirObj9t/oBjAW5buTvFJrsSl2sQ3ySEU9ZTLhhvmI0nSw1k7O t365AFiEtOhD/xaA1doW3hDouVN3vAtAZOoUn7SpuqjbIwtz4N6I3Vq4vdUoC8cF NJ02p/tTBH13y8YBUDokpLFl/2obQJQhyRil9Td/T3aNXssCiM5F5QKI/1h2H3IY Om1CsIIegkFW0hPHXmVe0/vVVVy0BsoFi9G+yM8fgZSR6D7LbZM= -----END CERTIFICATE-----Generated at Thu Aug 20 10:23:37 2026 by rpki-client