$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft File: 6F45041EB7929E02B86768C39A786F570301BD76.mft (raw, json) Hash identifier: g9H8BGcZs59rsOzx99nirGcvGLf8XzdPl4BZH9CCtLU= Subject key identifier: 24:A2:71:78:E9:F3:9D:CA:60:B3:AF:FB:53:CF:D2:83:9B:42:7B:63 Authority key identifier: 6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76 Certificate issuer: /CN=6F45041EB7929E02B86768C39A786F570301BD76 Certificate serial: 7D7EC3499E01B4E2C79C81F61E227B82A7896B4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:48:19 +0000 Manifest this update: Wed 16 Sep 2026 23:43:19 +0000 Manifest next update: Fri 18 Sep 2026 03:26:19 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: MoKOK1axg8ykdgPvCQ12UuAuHp6wG4DqBfh3f87ints=) 2: 6F45041EB7929E02B86768C39A786F570301BD76.crl (hash: QSOVMPbTVWMyzZ7uGq0RuS6Z0daHng6UVKDKeFm1ZV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7e:c3:49:9e:01:b4:e2:c7:9c:81:f6:1e:22:7b:82:a7:89:6b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F45041EB7929E02B86768C39A786F570301BD76 Validity Not Before: Sep 16 23:43:19 2026 GMT Not After : Sep 18 03:26:19 2026 GMT Subject: CN=24A27178E9F39DCA60B3AFFB53CFD2839B427B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fb:fa:54:15:f1:45:f3:2a:50:19:e6:74:a2: b5:81:f0:57:b2:ad:06:7b:07:1a:11:19:fe:90:b3: 66:04:be:1d:04:5f:77:78:83:8d:2a:d9:88:12:f3: 83:3a:79:fc:23:c0:0d:08:b6:5a:c3:8b:05:23:98: 1a:ea:0b:8c:c6:b2:67:19:f4:50:69:3c:49:58:93: 7c:65:e9:90:b5:02:bc:e5:1d:ed:1d:ef:c9:95:74: d6:e4:84:ed:94:f6:2a:89:4f:02:3c:2d:d4:6b:81: fb:bc:69:eb:58:3b:5a:80:51:4d:23:be:b3:55:ba: 21:0a:36:49:77:68:0a:b6:ef:53:a8:f1:b1:e3:2d: 44:3b:15:59:53:cd:55:23:9b:3a:f9:86:d6:60:22: ff:d4:38:ea:bd:4d:cc:36:a6:18:81:74:c5:cb:5d: 97:88:bc:12:29:09:0c:68:7b:32:84:b7:2d:0c:85: bc:98:64:4d:41:71:5e:90:71:f0:33:f0:f8:e1:c6: 9b:22:fe:7e:19:b9:ff:a5:90:01:a1:b9:a8:6e:65: 4b:13:1e:54:0f:5d:64:fc:23:3e:37:4c:e4:5a:ef: 5b:82:62:fd:ff:25:28:25:57:dc:cc:d4:8b:8b:49: 66:b5:43:e0:28:09:18:d8:af:ea:86:1c:38:bc:e1: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A2:71:78:E9:F3:9D:CA:60:B3:AF:FB:53:CF:D2:83:9B:42:7B:63 X509v3 Authority Key Identifier: keyid:6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0d:70:4f:87:58:36:b1:29:ae:cc:d8:1c:0f:ca:d3:4e:12: a2:ed:c3:74:f9:fd:d0:98:22:df:1a:a5:da:4b:df:01:5c:ad: 68:19:f6:e2:c0:68:0d:fb:d6:68:b8:87:08:3a:1b:ce:c2:33: d9:f5:41:2b:41:d6:98:6a:c5:7e:f3:22:3b:9f:3d:25:e3:fa: 2a:28:6d:e5:c1:27:85:e9:c9:5e:ee:0b:a8:82:6e:0a:11:03: 5b:d4:3f:be:e3:17:1b:2e:5d:aa:e9:75:47:48:fb:f0:a2:33: 62:bb:a7:54:8e:40:83:a8:dc:cb:73:99:00:78:7a:17:c3:16: 2b:f2:af:ea:9e:77:2e:0a:42:f7:1c:30:ca:6c:c8:2b:1d:7d: 86:a6:98:ca:1c:95:a9:ca:20:df:f7:14:f7:61:75:b4:39:30: 56:b4:e6:ac:5f:cd:be:c2:c4:a2:ea:52:64:7a:5b:0f:f7:92: b3:48:c4:8b:d4:ca:19:b0:40:d6:7a:b6:cf:66:b9:c1:d6:cf: f0:a2:be:84:bd:6f:21:97:f4:6a:7a:2b:5d:54:1b:83:89:ba: a0:3d:53:a6:da:d3:b6:9c:8b:41:10:7d:6d:f0:27:40:f2:80: 5f:a9:71:09:4b:f4:2f:df:2e:75:4e:f0:1c:17:d6:e6:95:10: 49:95:9e:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfX7DSZ4BtOLHnIH2HiJ7gqeJa00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0NTA0MUVCNzkyOUUwMkI4Njc2OEMzOUE3ODZGNTcw MzAxQkQ3NjAeFw0yNjA5MTYyMzQzMTlaFw0yNjA5MTgwMzI2MTlaMDMxMTAvBgNV BAMTKDI0QTI3MTc4RTlGMzlEQ0E2MEIzQUZGQjUzQ0ZEMjgzOUI0MjdCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+/pUFfFF8ypQGeZ0orWB8Fey rQZ7BxoRGf6Qs2YEvh0EX3d4g40q2YgS84M6efwjwA0ItlrDiwUjmBrqC4zGsmcZ 9FBpPElYk3xl6ZC1ArzlHe0d78mVdNbkhO2U9iqJTwI8LdRrgfu8aetYO1qAUU0j vrNVuiEKNkl3aAq271Oo8bHjLUQ7FVlTzVUjmzr5htZgIv/UOOq9Tcw2phiBdMXL XZeIvBIpCQxoezKEty0MhbyYZE1BcV6QcfAz8Pjhxpsi/n4Zuf+lkAGhuahuZUsT HlQPXWT8Iz43TORa71uCYv3/JSglV9zM1IuLSWa1Q+AoCRjYr+qGHDi84XmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJKJxeOnzncpgs6/7U8/Sg5tCe2MwHwYDVR0j BBgwFoAUb0UEHreSngK4Z2jDmnhvVwMBvXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBhODU5MGUtZTRkYy00NDE2LWE2ZmEtZmI3OGQ2ZGQxMmQ3LzAvNkY0NTA0MUVC NzkyOUUwMkI4Njc2OEMzOUE3ODZGNTcwMzAxQkQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RjQ1MDQxRUI3OTI5RTAyQjg2NzY4QzM5QTc4NkY1NzAzMDFC RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNkY0NTA0MUVCNzkyOUUwMkI4Njc2OEMzOUE3ODZG NTcwMzAxQkQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0NcE+HWDaxKa7M2BwPytNOEqLtw3T5/dCY It8apdpL3wFcrWgZ9uLAaA371mi4hwg6G87CM9n1QStB1phqxX7zIjufPSXj+ioo beXBJ4XpyV7uC6iCbgoRA1vUP77jFxsuXarpdUdI+/CiM2K7p1SOQIOo3MtzmQB4 ehfDFivyr+qedy4KQvccMMpsyCsdfYammMoclanKIN/3FPdhdbQ5MFa05qxfzb7C xKLqUmR6Ww/3krNIxIvUyhmwQNZ6ts9mucHWz/CivoS9byGX9Gp6K11UG4OJuqA9 U6ba07aci0EQfW3wJ0DygF+pcQlL9C/fLnVO8BwX1uaVEEmVnnA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:03 2026 by rpki-client