$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft File: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft (raw, json) Hash identifier: vylIDQr6xRyl8kvHvk878aEdWvj8XR0E0bJnZVhnyfI= Subject key identifier: 38:EB:E8:5F:58:41:9E:9B:6F:C9:B5:FA:63:94:86:49:3B:35:85:1E Authority key identifier: B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 Certificate issuer: /CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Certificate serial: 29B52964C4D033705682EC778AB9334950DDC390 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 13:09:44 +0000 Manifest this update: Wed 19 Aug 2026 13:04:44 +0000 Manifest next update: Thu 20 Aug 2026 14:13:44 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: XBc3ZVVKXIlCbURfHv+y5tJpz8Y5k76pERxRfF4D1As=) 2: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: v0xv6ts8xNGmfAQ65ctkAG3Fqvb6dUvN83XOnaYe2GA=) 3: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl (hash: MoSlam5vdOAEB8N7qbSPahZZG5uipFuSgFSofse90AU=) 4: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 8e9FrxOA/xN95Yot7Ymznk0AodzlekAylsbbF3Artc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 14:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b5:29:64:c4:d0:33:70:56:82:ec:77:8a:b9:33:49:50:dd:c3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Validity Not Before: Aug 19 13:04:44 2026 GMT Not After : Aug 20 14:13:44 2026 GMT Subject: CN=38EBE85F58419E9B6FC9B5FA639486493B35851E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ea:a6:b8:f6:9b:4b:a7:90:ff:2a:16:b9:1c: 17:e6:c8:0b:28:2c:7e:8f:22:c3:1b:40:df:29:b7: 7f:68:e8:94:c6:bf:0c:d5:34:b8:a6:a2:67:d0:25: 60:b8:b9:fa:3b:05:96:3e:30:7d:51:44:ea:91:17: 07:12:57:31:ff:ec:f5:04:8a:de:8a:a9:68:f5:c0: 7b:77:55:ff:b3:c6:db:82:97:75:88:2f:ee:86:30: f2:73:7b:8b:7c:7b:78:3f:cf:09:26:31:e6:bf:18: dc:e7:ab:fa:7c:f4:9d:71:4c:10:2a:29:46:b1:07: 38:f5:f8:b3:78:c4:e5:98:82:72:96:95:69:a3:e0: 0a:bc:1b:a5:b6:f8:c3:af:a5:d8:a8:6b:e2:1d:75: c3:38:85:c5:95:61:b2:06:b2:f8:59:ef:2b:84:f2: 8f:32:63:4b:85:7c:c9:1e:0f:52:9c:69:c5:2a:7d: 24:9e:75:21:7c:fd:75:0c:ac:1d:8a:13:58:a6:6b: e1:ba:9a:96:10:a0:db:cb:d3:05:c8:a7:b3:8c:8f: 79:b1:6c:a6:c7:ad:f3:48:ff:88:68:95:3f:1b:82: 81:e5:ed:1b:47:3b:13:07:88:cb:2e:90:b2:d5:3b: ca:f0:87:2d:62:3e:2d:76:9c:07:68:87:70:54:c8: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EB:E8:5F:58:41:9E:9B:6F:C9:B5:FA:63:94:86:49:3B:35:85:1E X509v3 Authority Key Identifier: keyid:B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:02:bf:24:b7:d5:03:a0:ff:f5:cc:ef:fe:b3:75:3c:d2:54: 5c:f2:dd:58:98:be:a7:ed:f3:09:8a:9d:f5:25:6b:f6:f9:03: bc:f1:83:bd:13:7d:42:97:2c:50:0d:a1:84:1a:84:b7:cc:76: f1:98:37:f2:d1:99:00:ac:b3:01:0c:63:8f:32:bd:4c:5b:3b: 01:90:f9:c3:1c:04:ad:f5:a8:75:b1:f6:7a:97:95:9d:84:19: c3:43:84:21:5f:31:79:52:ec:50:22:d3:a1:11:f3:ba:c7:d2: f7:8e:a4:bf:93:85:ca:44:84:38:e2:81:fc:a8:42:f6:99:6a: 4c:68:3b:71:40:0a:16:dd:af:41:e0:cb:8a:89:ef:4f:62:47: 17:13:49:1f:ab:cf:1b:bc:73:3c:cf:02:e5:fa:e9:c8:b1:9a: 8d:8d:de:33:7a:c9:1f:7f:e2:78:1e:8b:89:e5:96:3d:73:c1: dd:8a:1a:fc:79:96:90:ec:72:4d:fa:24:bd:01:ff:88:a0:94: a8:5a:d2:8b:f6:c5:54:a0:18:b0:80:45:41:2a:27:21:cb:77: 95:04:d5:14:fd:af:46:96:83:44:f5:09:9a:ac:b0:90:b6:5e: d5:52:56:74:c6:02:26:ac:d5:e9:60:be:44:8e:45:08:59:c4: 3d:9f:eb:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbUpZMTQM3BWgux3irkzSVDdw5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5 NkIzMDEwODAeFw0yNjA4MTkxMzA0NDRaFw0yNjA4MjAxNDEzNDRaMDMxMTAvBgNV BAMTKDM4RUJFODVGNTg0MTlFOUI2RkM5QjVGQTYzOTQ4NjQ5M0IzNTg1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR6qa49ptLp5D/Kha5HBfmyAso LH6PIsMbQN8pt39o6JTGvwzVNLimomfQJWC4ufo7BZY+MH1RROqRFwcSVzH/7PUE it6KqWj1wHt3Vf+zxtuCl3WIL+6GMPJze4t8e3g/zwkmMea/GNznq/p89J1xTBAq KUaxBzj1+LN4xOWYgnKWlWmj4Aq8G6W2+MOvpdioa+IddcM4hcWVYbIGsvhZ7yuE 8o8yY0uFfMkeD1KcacUqfSSedSF8/XUMrB2KE1ima+G6mpYQoNvL0wXIp7OMj3mx bKbHrfNI/4holT8bgoHl7RtHOxMHiMsukLLVO8rwhy1iPi12nAdoh3BUyNo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOvoX1hBnptvybX6Y5SGSTs1hR4wHwYDVR0j BBgwFoAUtvgQ8ik8v9vD1vqpKIjpx5azAQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY2NTk5MDQtMzcwMi00Nzk3LWJkMWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIy OTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5NkIzMDEwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkY4MTBGMjI5M0NCRkRCQzNENkZBQTkyODg4RTlDNzk2QjMw MTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5 Qzc5NkIzMDEwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgCvyS31QOg//XM7/6zdTzSVFzy3ViYvqft 8wmKnfUla/b5A7zxg70TfUKXLFANoYQahLfMdvGYN/LRmQCsswEMY48yvUxbOwGQ +cMcBK31qHWx9nqXlZ2EGcNDhCFfMXlS7FAi06ER87rH0veOpL+ThcpEhDjigfyo QvaZakxoO3FAChbdr0Hgy4qJ709iRxcTSR+rzxu8czzPAuX66cixmo2N3jN6yR9/ 4ngei4nllj1zwd2KGvx5lpDsck36JL0B/4iglKha0ov2xVSgGLCARUEqJyHLd5UE 1RT9r0aWg0T1CZqssJC2XtVSVnTGAias1elgvkSORQhZxD2f61A= -----END CERTIFICATE-----Generated at Thu Aug 20 07:05:42 2026 by rpki-client