$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft File: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft (raw, json) Hash identifier: GbkHz8dZiQdochefpezIroiTxaP+ASiQ6WlAIFfYo48= Subject key identifier: 04:A9:82:F6:A9:59:27:3A:67:7C:56:D6:7C:CF:82:73:C5:7A:02:BC Authority key identifier: 6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF Certificate issuer: /CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Certificate serial: 3DD9B309139FD7F7E835393F726D46BA00541EAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:08:55 +0000 Manifest this update: Thu 17 Sep 2026 00:03:55 +0000 Manifest next update: Fri 18 Sep 2026 02:58:55 +0000 Files and hashes: 1: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: 8mfpAqlBNjaIkK/YqdqwM4IvfsvZ409bkNBx3HDJzaQ=) 2: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: yRu2jjYmsdVB4YWUV1S9avXrEbZsjqsyyjcuTEPOAYc=) 3: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl (hash: iUvH56YpmEygg5xkSIJzuoN6rwAqbd9oA08z+9NUsjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d9:b3:09:13:9f:d7:f7:e8:35:39:3f:72:6d:46:ba:00:54:1e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Validity Not Before: Sep 17 00:03:55 2026 GMT Not After : Sep 18 02:58:55 2026 GMT Subject: CN=04A982F6A959273A677C56D67CCF8273C57A02BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:4c:02:37:57:53:01:93:82:21:d4:26:c3: 2a:1b:20:f0:e6:04:43:0a:92:a8:45:36:ef:9a:3c: 7c:22:8b:59:8d:bd:79:13:40:99:ae:af:88:2f:95: 4b:9b:de:1d:19:b3:55:9d:58:0b:ad:e0:44:3e:be: db:c2:64:ee:80:51:4b:55:59:9c:16:12:16:e7:2c: e3:f7:bb:50:f6:65:78:cd:68:e0:3c:b5:2e:3f:ec: 86:88:e4:94:7e:42:7f:4e:f4:08:90:b4:48:05:36: 98:b3:cd:39:88:2c:49:82:06:60:25:bb:e7:c6:ef: 11:08:0b:35:b6:8d:d2:39:a5:4d:cc:19:d9:d7:68: ff:1f:96:82:29:56:b9:fb:e6:cb:08:71:86:52:23: 5e:95:90:1f:c7:ea:14:79:bb:8f:60:4f:61:a4:b2: 63:79:18:30:85:ca:81:46:ca:ef:3f:bc:c5:8a:aa: 8f:36:a4:5d:33:12:6d:f2:88:7b:86:d9:7b:51:e9: c7:30:f0:1c:6f:8d:db:b1:16:2e:af:78:34:82:08: 9d:8f:01:24:8a:70:4f:b7:8b:4a:97:44:0d:2b:35: b3:c3:13:7b:05:d2:1f:5c:0f:86:01:b4:7a:1e:3b: a9:47:9d:e1:85:10:22:d4:20:11:da:6c:0e:21:f9: 72:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A9:82:F6:A9:59:27:3A:67:7C:56:D6:7C:CF:82:73:C5:7A:02:BC X509v3 Authority Key Identifier: keyid:6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:47:ef:06:7f:17:08:f5:d7:22:a6:21:63:72:d3:60:40:8a: ad:a8:8b:5c:d7:a8:c4:18:d8:19:60:c8:07:69:b7:53:4b:b2: a9:e0:56:9b:ef:74:39:03:38:45:4e:25:6b:6e:bd:d0:fe:44: a8:d0:04:1d:21:a1:73:69:c4:2b:ee:0c:2e:05:ea:6d:b0:a2: 28:d0:44:46:bb:0e:ff:ed:de:53:ae:d9:8b:9f:47:ac:09:e4: 7c:6f:d9:61:2b:17:ef:f4:0f:1c:4b:d4:93:2c:2b:02:43:45: 60:8a:9b:b9:54:37:cb:d0:e9:6b:b6:92:c9:db:d5:37:a8:b3: 07:03:bf:72:3b:0e:77:a3:df:5d:06:e2:a8:63:b0:c1:91:18: 39:1f:7b:fb:8e:04:4b:f3:f3:d4:a5:0c:76:3b:4e:b0:a4:91: af:4d:75:b3:fe:ec:98:66:12:a7:56:0e:9e:c3:60:06:6a:95: 51:8f:0e:b7:6b:0a:93:a7:d6:8b:82:f8:0d:bf:2d:14:7f:ce: 4f:52:45:5b:49:14:cc:88:f0:0e:1e:55:3e:f3:ec:7c:0e:4e: 43:3b:6c:84:6e:38:28:85:97:fa:c1:fb:5a:de:e6:63:de:2b: 54:8a:2b:96:b9:be:1a:50:aa:ba:a2:aa:57:5d:0a:34:1b:8b: 39:94:b0:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdmzCROf1/foNTk/cm1GugBUHq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdBQkVF ODNDMjdCRjAeFw0yNjA5MTcwMDAzNTVaFw0yNjA5MTgwMjU4NTVaMDMxMTAvBgNV BAMTKDA0QTk4MkY2QTk1OTI3M0E2NzdDNTZENjdDQ0Y4MjczQzU3QTAyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW0UwCN1dTAZOCIdQmwyobIPDm BEMKkqhFNu+aPHwii1mNvXkTQJmur4gvlUub3h0Zs1WdWAut4EQ+vtvCZO6AUUtV WZwWEhbnLOP3u1D2ZXjNaOA8tS4/7IaI5JR+Qn9O9AiQtEgFNpizzTmILEmCBmAl u+fG7xEICzW2jdI5pU3MGdnXaP8floIpVrn75ssIcYZSI16VkB/H6hR5u49gT2Gk smN5GDCFyoFGyu8/vMWKqo82pF0zEm3yiHuG2XtR6ccw8BxvjduxFi6veDSCCJ2P ASSKcE+3i0qXRA0rNbPDE3sF0h9cD4YBtHoeO6lHneGFECLUIBHabA4h+XLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBKmC9qlZJzpnfFbWfM+Cc8V6ArwwHwYDVR0j BBgwFoAUbIn2+ealGHvhCFRTgH96vug8J78wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ZlMzVmYWEtZWQyYi00MjcxLWI0OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlF NkE1MTg3QkUxMDg1NDUzODA3RjdBQkVFODNDMjdCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Qzg5RjZGOUU2QTUxODdCRTEwODU0NTM4MDdGN0FCRUU4M0My N0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdB QkVFODNDMjdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5H7wZ/Fwj11yKmIWNy02BAiq2oi1zXqMQY 2BlgyAdpt1NLsqngVpvvdDkDOEVOJWtuvdD+RKjQBB0hoXNpxCvuDC4F6m2woijQ REa7Dv/t3lOu2YufR6wJ5Hxv2WErF+/0DxxL1JMsKwJDRWCKm7lUN8vQ6Wu2ksnb 1TeoswcDv3I7Dnej310G4qhjsMGRGDkfe/uOBEvz89SlDHY7TrCkka9NdbP+7Jhm EqdWDp7DYAZqlVGPDrdrCpOn1ouC+A2/LRR/zk9SRVtJFMyI8A4eVT7z7HwOTkM7 bIRuOCiFl/rB+1re5mPeK1SKK5a5vhpQqrqiqlddCjQbizmUsC0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:53 2026 by rpki-client