$ rpki-client -vvvf rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft File: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft (raw, json) Hash identifier: NAipC8GMWSlcHNjQyGpLPi8vHNG8hstgSqL6EUzIuDU= Subject key identifier: 6B:21:59:E2:D5:32:00:55:D5:6E:7C:BF:1E:D7:01:18:6F:7F:F3:11 Authority key identifier: 00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 Certificate issuer: /CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Certificate serial: 565D5403EFED37CDFBD4F6105CBF27629CB47039 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 04:34:03 +0000 Manifest this update: Thu 17 Sep 2026 04:29:03 +0000 Manifest next update: Fri 18 Sep 2026 07:28:03 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: Q/80xzITob9EDyGUauN9lSkFfskt31UxgEkyUCmZLOE=) 2: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl (hash: D7xBgApYhzbQhWzgWOfKWG3c+QYPtg4wfmwotYYnu8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5d:54:03:ef:ed:37:cd:fb:d4:f6:10:5c:bf:27:62:9c:b4:70:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Validity Not Before: Sep 17 04:29:03 2026 GMT Not After : Sep 18 07:28:03 2026 GMT Subject: CN=6B2159E2D5320055D56E7CBF1ED701186F7FF311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:ec:d8:b3:ab:65:77:7a:87:b2:5b:2f:b0: 16:53:c4:75:af:9e:99:81:c5:5a:d9:f5:91:ff:a9: 3b:b1:15:63:38:7f:98:9f:af:95:3c:38:ef:c2:b8: c3:99:88:30:85:d6:1c:f7:99:f6:1b:55:8e:dd:26: 7d:50:26:65:be:8a:3c:08:d8:86:f5:53:8f:6e:b4: a4:41:35:ad:9c:45:b3:15:c1:e9:af:5c:f6:9c:2a: 21:57:c7:38:20:f6:1b:14:6b:16:53:9c:a0:ca:5d: 11:93:85:c5:15:96:e1:19:64:a2:f1:4f:49:ab:c5: fa:87:b4:03:8c:41:1f:a1:7e:a7:61:c1:19:f0:da: 6f:60:26:27:a0:ec:39:3c:b1:40:ec:a2:77:7f:a2: 53:51:46:31:ae:a1:cf:26:28:a3:90:0b:d5:e1:fa: 3e:dd:89:5a:62:5b:8d:62:a7:8c:be:c8:46:b1:58: aa:1e:e8:af:c4:da:6c:8b:00:23:9e:a8:a0:12:f9: c5:6e:05:91:a1:c7:14:a9:79:88:6b:f5:94:7e:a2: 86:8c:8c:69:6b:ed:13:e5:04:43:ee:6d:18:07:9c: dc:59:c1:c3:12:88:fc:3f:bc:c9:b3:bd:69:41:70: f4:62:2f:b7:27:78:87:c6:95:a1:61:64:84:9f:e1: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:21:59:E2:D5:32:00:55:D5:6E:7C:BF:1E:D7:01:18:6F:7F:F3:11 X509v3 Authority Key Identifier: keyid:00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d2:10:c0:af:9e:52:1d:19:08:99:5b:1e:e5:9e:6a:0e:be: b2:14:d2:90:a8:e2:2d:94:64:c0:1d:b2:18:f7:ae:d1:1a:74: 55:c6:f4:21:d0:b5:c4:c7:5c:0a:66:98:b3:3e:b1:95:c9:0c: a0:7e:57:50:b1:bc:c5:20:1f:f3:fe:80:fc:72:1e:79:de:10: 38:e1:b3:c9:8f:b8:43:55:f2:fc:a2:d7:fa:ae:66:07:d2:3d: 49:3b:ef:c8:29:e9:ac:e5:e2:15:6d:30:7d:01:7c:db:18:3d: c4:98:5d:11:ee:71:19:5f:79:93:e6:91:0b:60:c9:db:a6:13: e3:b0:3b:7c:c3:60:bf:08:4a:96:8a:7c:9b:84:3e:a7:eb:a9: ff:a7:56:4a:55:60:f8:14:1e:0f:9c:51:a0:9f:1e:71:92:f1: 50:25:1f:e7:f5:84:a1:3a:7e:0b:76:76:47:e1:15:18:52:68: d0:3c:02:e8:ba:73:47:3d:43:36:da:c9:0f:05:c5:61:43:31: 1e:fd:50:d3:f8:e4:cf:2e:c9:7f:26:ea:27:81:f8:ad:e9:02: 6e:a1:1c:4b:0a:fc:73:79:8e:aa:5b:5f:1e:a3:68:32:86:c1: f4:ec:cc:f1:9a:99:12:ec:e5:8c:6e:bc:a1:e1:9d:69:14:8f: 7a:b7:34:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl1UA+/tN8371PYQXL8nYpy0cDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBB MkY0RDlFODAeFw0yNjA5MTcwNDI5MDNaFw0yNjA5MTgwNzI4MDNaMDMxMTAvBgNV BAMTKDZCMjE1OUUyRDUzMjAwNTVENTZFN0NCRjFFRDcwMTE4NkY3RkYzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87+zYs6tld3qHslsvsBZTxHWv npmBxVrZ9ZH/qTuxFWM4f5ifr5U8OO/CuMOZiDCF1hz3mfYbVY7dJn1QJmW+ijwI 2Ib1U49utKRBNa2cRbMVwemvXPacKiFXxzgg9hsUaxZTnKDKXRGThcUVluEZZKLx T0mrxfqHtAOMQR+hfqdhwRnw2m9gJieg7Dk8sUDsond/olNRRjGuoc8mKKOQC9Xh +j7diVpiW41ip4y+yEaxWKoe6K/E2myLACOeqKAS+cVuBZGhxxSpeYhr9ZR+ooaM jGlr7RPlBEPubRgHnNxZwcMSiPw/vMmzvWlBcPRiL7cneIfGlaFhZISf4de9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUayFZ4tUyAFXVbny/HtcBGG9/8xEwHwYDVR0j BBgwFoAUAGuOhbb865lK0Aum5k6vIKL02egwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM3NTA2YzUtNWVmMS00Mjk0LTg5MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVC NkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBBMkY0RDlFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDZCOEU4NUI2RkNFQjk5NEFEMDBCQTZFNjRFQUYyMEEyRjRE OUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFG MjBBMkY0RDlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDSEMCvnlIdGQiZWx7lnmoOvrIU0pCo4i2U ZMAdshj3rtEadFXG9CHQtcTHXApmmLM+sZXJDKB+V1CxvMUgH/P+gPxyHnneEDjh s8mPuENV8vyi1/quZgfSPUk778gp6azl4hVtMH0BfNsYPcSYXRHucRlfeZPmkQtg ydumE+OwO3zDYL8ISpaKfJuEPqfrqf+nVkpVYPgUHg+cUaCfHnGS8VAlH+f1hKE6 fgt2dkfhFRhSaNA8Aui6c0c9QzbayQ8FxWFDMR79UNP45M8uyX8m6ieB+K3pAm6h HEsK/HN5jqpbXx6jaDKGwfTszPGamRLs5YxuvKHhnWkUj3q3NEk= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:18 2026 by rpki-client