$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: MVv4MLcOYi+St5lKiiM6Q97lUHjM6yDrI15RWybwqfI= Subject key identifier: 80:B8:B0:1D:D0:62:9E:2D:8D:62:E1:63:86:89:6A:F3:26:9E:B7:E5 Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 14057F7EC3F379DDEE55FCC09FD5ECC8ED00D58B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:37:59 +0000 Manifest this update: Thu 17 Sep 2026 07:32:59 +0000 Manifest next update: Fri 18 Sep 2026 08:20:59 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) 3: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: CmSk/fZ9/kqomxMG6AUG96+DKOJ9o/BdeCBhEG/Enm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:05:7f:7e:c3:f3:79:dd:ee:55:fc:c0:9f:d5:ec:c8:ed:00:d5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: Sep 17 07:32:59 2026 GMT Not After : Sep 18 08:20:59 2026 GMT Subject: CN=80B8B01DD0629E2D8D62E16386896AF3269EB7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fa:ca:ee:9a:2c:df:49:b0:52:f1:9a:8e:15: 98:c3:40:93:92:96:b0:ae:a8:3e:b1:08:90:8a:7a: c1:62:0e:05:bb:63:48:55:09:51:1d:c0:11:85:5b: 50:49:8f:e6:c2:4b:74:08:c3:f5:8a:e0:91:cc:3a: cf:8a:6b:03:66:25:ee:52:2c:f0:79:b7:aa:b2:ff: 32:70:93:70:8a:2c:ac:d6:c0:10:a7:e1:4e:51:b8: 9e:72:d8:9d:9f:4e:4e:65:35:c9:5b:28:fa:41:e3: 4e:54:ba:81:5c:98:34:f6:e1:0c:3c:38:3e:06:ca: 00:6d:ea:cc:13:e6:f7:e7:44:8d:51:e9:9a:f3:24: 4f:4e:81:f2:c0:05:b9:34:92:50:cf:91:11:d7:58: 8e:5a:cd:41:fb:73:dc:f6:1a:a7:fd:f2:e5:7c:61: a8:8c:18:31:4f:2b:3f:26:54:e5:73:06:0f:55:e6: ff:a3:91:47:5c:a4:a9:42:fc:89:71:76:c1:c0:ad: 02:b6:ee:fe:63:9c:4a:03:63:a2:f2:68:7c:21:dc: aa:0a:8d:19:2f:f0:eb:6a:26:6b:cb:3e:fc:0b:86: 83:81:6c:60:75:16:f8:0c:eb:6e:78:7b:a1:a5:c1: 1b:79:ee:66:81:2a:f7:83:4c:d0:95:fa:c3:27:5c: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B8:B0:1D:D0:62:9E:2D:8D:62:E1:63:86:89:6A:F3:26:9E:B7:E5 X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:da:ab:fe:ee:b3:1f:e1:ce:89:62:9d:ba:7c:ab:75:6f:9d: e2:0b:52:03:67:94:63:af:53:a7:dd:a5:45:a3:48:f7:2a:f3: 42:b8:a4:af:6f:43:b7:c8:9c:6d:3e:14:34:43:22:f2:bd:aa: e6:d3:33:db:c3:43:c1:ed:09:05:68:c3:7a:68:d1:d6:77:b9: cd:ff:fd:6f:6b:40:c5:d9:9b:98:8e:1b:6b:20:5c:11:95:f3: b2:2f:53:ae:09:1d:e6:c9:91:b4:ea:31:d0:6b:41:34:4e:cc: 16:5e:d5:c9:64:ef:b2:c0:35:65:f6:9f:87:0b:dc:e2:00:45: 08:f9:15:88:69:b9:5e:1f:3e:a9:1f:03:07:5b:49:53:69:20: 80:69:68:0d:0d:79:59:52:b0:e0:b0:de:82:d9:0c:68:c7:39: 7b:23:3b:6b:1d:f4:42:fb:a7:54:38:26:ba:bd:f4:05:34:f5: db:10:4b:f5:a9:46:a1:1e:4a:d9:b5:86:2f:0f:53:40:62:36: 32:6f:93:4d:e6:be:0a:37:d6:3f:bc:86:2c:50:a6:b5:f9:a0: 38:f9:2a:4e:4c:44:8a:7f:91:50:57:7d:a5:ec:ee:56:f9:37: bb:de:69:1a:24:fa:68:1a:d0:f8:76:b0:66:67:61:d1:2f:9a: df:0d:de:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAV/fsPzed3uVfzAn9XsyO0A1YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA5MTcwNzMyNTlaFw0yNjA5MTgwODIwNTlaMDMxMTAvBgNV BAMTKDgwQjhCMDFERDA2MjlFMkQ4RDYyRTE2Mzg2ODk2QUYzMjY5RUI3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx+srumizfSbBS8ZqOFZjDQJOS lrCuqD6xCJCKesFiDgW7Y0hVCVEdwBGFW1BJj+bCS3QIw/WK4JHMOs+KawNmJe5S LPB5t6qy/zJwk3CKLKzWwBCn4U5RuJ5y2J2fTk5lNclbKPpB405UuoFcmDT24Qw8 OD4GygBt6swT5vfnRI1R6ZrzJE9OgfLABbk0klDPkRHXWI5azUH7c9z2Gqf98uV8 YaiMGDFPKz8mVOVzBg9V5v+jkUdcpKlC/IlxdsHArQK27v5jnEoDY6LyaHwh3KoK jRkv8OtqJmvLPvwLhoOBbGB1FvgM6254e6GlwRt57maBKveDTNCV+sMnXP07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLiwHdBini2NYuFjholq8yaet+UwHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfaq/7usx/hzolinbp8q3VvneILUgNnlGOv U6fdpUWjSPcq80K4pK9vQ7fInG0+FDRDIvK9qubTM9vDQ8HtCQVow3po0dZ3uc3/ /W9rQMXZm5iOG2sgXBGV87IvU64JHebJkbTqMdBrQTROzBZe1clk77LANWX2n4cL 3OIARQj5FYhpuV4fPqkfAwdbSVNpIIBpaA0NeVlSsOCw3oLZDGjHOXsjO2sd9EL7 p1Q4Jrq99AU09dsQS/WpRqEeStm1hi8PU0BiNjJvk03mvgo31j+8hixQprX5oDj5 Kk5MRIp/kVBXfaXs7lb5N7veaRok+mga0Ph2sGZnYdEvmt8N3u8= -----END CERTIFICATE-----Generated at Thu Sep 17 11:32:13 2026 by rpki-client