$ rpki-client -vvvf rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft File: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft (raw, json) Hash identifier: pyAQ18dWybuCFk8W771Enq0hE5WVdUCAWRYCxcIrq8c= Subject key identifier: 7A:A8:F4:CB:88:EE:78:AA:3D:5E:5A:13:33:7E:7C:3D:3A:F4:BE:D9 Authority key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24 Certificate issuer: /CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824 Certificate serial: 5E3BAD9D0FB879487DC79F16EAEC019861C38A53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft Manifest number: A4 Signing time: Mon 31 Aug 2026 09:51:46 +0000 Manifest this update: Mon 31 Aug 2026 09:46:46 +0000 Manifest next update: Tue 01 Sep 2026 10:01:46 +0000 Files and hashes: 1: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: /UiS0/YqAJP6vBXmUjstv/RqhsN7l6a5S8YjTvqIQ1U=) 2: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl (hash: +ia0BVftzkbrK6sjkfQOpcAaCxQ1U6YiXmdh5GCt/R8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 10:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3b:ad:9d:0f:b8:79:48:7d:c7:9f:16:ea:ec:01:98:61:c3:8a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824 Validity Not Before: Aug 31 09:46:46 2026 GMT Not After : Sep 1 10:01:46 2026 GMT Subject: CN=7AA8F4CB88EE78AA3D5E5A13337E7C3D3AF4BED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:03:c7:ad:60:a5:fb:5e:b5:d5:17:7e:f8: 6a:29:02:c5:89:77:d3:39:9b:c3:75:a4:a5:fd:01: 38:d4:ed:12:43:5e:fe:9f:07:a2:85:b2:51:c2:52: f7:cd:01:84:2b:d9:a2:a9:17:bd:d1:a7:2b:37:2f: 21:e3:7b:39:85:5c:c9:2a:4b:e2:0a:25:22:8d:c2: 14:51:55:f9:34:55:d8:88:fe:9f:15:ea:44:a9:6b: e8:5e:9a:4b:55:7f:e5:af:c2:78:e1:b6:07:e7:ab: e3:85:e0:4a:93:65:1d:fe:2b:44:ea:bd:9c:e6:15: 40:5d:59:93:5c:26:5e:07:b4:5e:82:28:81:39:7e: 14:1f:20:32:9b:56:0e:16:82:c5:ca:97:d5:b7:26: c6:a5:ed:10:ca:1e:00:de:85:ea:2b:b5:6e:d4:3b: 66:38:32:17:4e:b4:40:3f:e2:ea:ca:e0:56:cc:c0: 04:aa:65:79:3e:ed:39:df:dd:8a:5c:27:1c:5c:1f: 76:d1:79:2c:04:29:66:4b:73:d0:a4:eb:e6:1c:6b: 1c:af:5d:32:ff:92:b7:f9:45:87:4c:b1:b9:10:64: e2:e3:b3:6c:eb:88:c7:8a:46:92:43:76:72:41:cc: 12:55:00:12:50:f6:bd:db:d2:c3:df:3d:8d:8c:d2: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A8:F4:CB:88:EE:78:AA:3D:5E:5A:13:33:7E:7C:3D:3A:F4:BE:D9 X509v3 Authority Key Identifier: keyid:6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:10:27:63:29:8b:46:0f:14:be:d1:6a:9b:aa:cd:f2:92: 34:9f:73:92:5f:e7:f6:3f:eb:27:88:69:a5:7b:76:39:3e:ab: f9:bf:8d:1e:11:0a:06:e3:67:e6:97:cd:ef:33:19:2d:99:59: 5e:62:96:42:74:11:b3:f3:08:9d:8b:27:93:5c:f7:f9:5b:44: ee:0c:26:87:5c:5d:fe:1e:e5:7f:a8:63:6d:97:d9:f9:78:46: 5d:03:89:05:c9:4d:3e:62:4d:c9:6a:f7:1f:b2:b9:64:92:df: af:70:e2:6f:12:5f:3d:0a:ac:f4:e8:80:b8:76:04:29:9c:fd: 8e:d6:18:91:0b:09:1e:62:ac:a3:6e:b1:3b:b3:ca:b9:a5:62: 5f:87:dd:3f:3c:71:30:79:ef:e5:2e:66:3f:28:70:93:00:5d: ab:fe:2d:e9:d6:47:37:bd:62:7f:94:98:20:af:94:24:82:b2: 85:30:ef:ff:96:e1:3c:86:aa:f4:00:46:6a:34:e6:34:4c:39: 65:e8:c1:22:72:a3:03:3f:7a:f5:e9:a3:dd:dd:2f:74:81:8a: ae:df:79:d0:da:4a:91:75:20:6a:0c:35:1b:00:3f:65:8d:02: ea:d0:a9:1f:b0:3b:a8:d1:c9:74:17:e0:ad:0a:80:35:a6:6d: e6:a4:a2:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjutnQ+4eUh9x58W6uwBmGHDilMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyNUIwODQ0QTUxRUZDMUY5Qzk1M0EzRDQwODY4QUFE MjE5NjgyNDAeFw0yNjA4MzEwOTQ2NDZaFw0yNjA5MDExMDAxNDZaMDMxMTAvBgNV BAMTKDdBQThGNENCODhFRTc4QUEzRDVFNUExMzMzN0U3QzNEM0FGNEJFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgwPHrWCl+1611Rd++GopAsWJ d9M5m8N1pKX9ATjU7RJDXv6fB6KFslHCUvfNAYQr2aKpF73Rpys3LyHjezmFXMkq S+IKJSKNwhRRVfk0VdiI/p8V6kSpa+hemktVf+Wvwnjhtgfnq+OF4EqTZR3+K0Tq vZzmFUBdWZNcJl4HtF6CKIE5fhQfIDKbVg4WgsXKl9W3Jsal7RDKHgDeheortW7U O2Y4MhdOtEA/4urK4FbMwASqZXk+7Tnf3YpcJxxcH3bReSwEKWZLc9Ck6+Ycaxyv XTL/krf5RYdMsbkQZOLjs2zriMeKRpJDdnJBzBJVABJQ9r3b0sPfPY2M0v6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqj0y4jueKo9XloTM358PTr0vtkwHwYDVR0j BBgwFoAUbSWwhEpR78H5yVOj1AhoqtIZaCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg2NTk5YTYtZDg2Yi00NzFhLWEwNWItYTlmYWZlM2JiNjlhLzAvNkQyNUIwODQ0 QTUxRUZDMUY5Qzk1M0EzRDQwODY4QUFEMjE5NjgyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDI1QjA4NDRBNTFFRkMxRjlDOTUzQTNENDA4NjhBQUQyMTk2 ODI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg2NTk5YTYtZDg2Yi00NzFhLWEw NWItYTlmYWZlM2JiNjlhLzAvNkQyNUIwODQ0QTUxRUZDMUY5Qzk1M0EzRDQwODY4 QUFEMjE5NjgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgNECdjKYtGDxS+0Wqbqs3ykjSfc5Jf5/Y/ 6yeIaaV7djk+q/m/jR4RCgbjZ+aXze8zGS2ZWV5ilkJ0EbPzCJ2LJ5Nc9/lbRO4M JodcXf4e5X+oY22X2fl4Rl0DiQXJTT5iTclq9x+yuWSS369w4m8SXz0KrPTogLh2 BCmc/Y7WGJELCR5irKNusTuzyrmlYl+H3T88cTB57+UuZj8ocJMAXav+LenWRze9 Yn+UmCCvlCSCsoUw7/+W4TyGqvQARmo05jRMOWXowSJyowM/evXpo93dL3SBiq7f edDaSpF1IGoMNRsAP2WNAurQqR+wO6jRyXQX4K0KgDWmbeakogg= -----END CERTIFICATE-----Generated at Tue Sep 1 03:41:21 2026 by rpki-client