$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft File: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft (raw, json) Hash identifier: UivBnDj0M0g3CZ9POC3bxl0r1Lw5RDtTpbPjiMVxxEA= Subject key identifier: 9F:21:03:6B:2B:0E:60:99:6E:E2:C5:ED:23:BE:50:A5:D4:B5:1C:8E Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Certificate serial: 1AFA9484A5436C36B4363E10C8325AB3781EE33A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:50:49 +0000 Manifest this update: Thu 17 Sep 2026 01:45:49 +0000 Manifest next update: Fri 18 Sep 2026 04:01:49 +0000 Files and hashes: 1: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: bx3Jz5RMo6M/oNMchr0+LwmSKVwAEYYJfafpXARS4Ho=) 2: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl (hash: jZ4wavlf4ANJUBdLTYeYwkccE4E+UGmLke2J4B0UdTE=) 3: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=) 4: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=) 5: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=) 6: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 1n9vrO/e00jv7CzxxHzwEFPz/e1n9uFRka2H9k4SRco=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fa:94:84:a5:43:6c:36:b4:36:3e:10:c8:32:5a:b3:78:1e:e3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Validity Not Before: Sep 17 01:45:49 2026 GMT Not After : Sep 18 04:01:49 2026 GMT Subject: CN=9F21036B2B0E60996EE2C5ED23BE50A5D4B51C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8c:4b:ca:f2:1f:51:d5:f0:b1:6d:d8:d9:8b: 22:19:b7:d4:7c:b3:83:04:21:ab:7a:8d:61:29:6f: ea:d9:c9:63:78:ca:76:f1:e0:fa:52:77:ef:2a:84: 1c:6e:3a:54:8c:3c:92:1e:91:8a:c0:91:48:32:27: cd:89:b2:43:60:64:e9:37:c8:07:af:f2:f2:56:28: ca:41:87:e4:5b:47:49:fa:50:71:7f:c7:65:17:66: ca:e1:55:bd:dc:06:b1:39:89:4c:88:7c:04:95:49: 48:7e:7a:f7:9a:17:d3:00:b5:1a:de:5c:30:58:d1: df:d0:00:c2:70:72:56:1d:a3:e3:b4:9a:eb:11:61: f5:5f:3f:df:dd:3a:a5:e6:30:86:56:30:99:7d:f6: df:55:d4:8e:54:24:bd:b5:cf:e4:05:b9:31:53:d7: 53:f6:4f:26:8b:06:1d:92:38:51:f3:78:0f:ee:72: 7a:79:2c:80:96:a4:af:7c:af:8e:0f:ad:3e:17:57: 6f:52:14:16:b8:6c:2c:48:9c:fe:d2:50:83:42:a3: f9:d2:0b:86:a2:e4:82:d5:e6:b3:8a:00:a5:67:d8: 03:66:cf:54:a8:62:25:27:1f:91:0b:71:e8:b9:87: ab:a3:5c:7e:b4:01:fb:c8:06:f1:b7:92:8e:a2:36: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:21:03:6B:2B:0E:60:99:6E:E2:C5:ED:23:BE:50:A5:D4:B5:1C:8E X509v3 Authority Key Identifier: keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fa:56:63:d2:09:d8:7e:7b:63:90:be:92:76:13:87:bc:31: 71:9c:43:7e:d9:7d:78:c4:e6:0b:c6:35:b3:29:c4:e1:30:e9: 63:6e:8a:a1:06:0e:35:2a:44:04:98:3a:31:24:55:11:e8:51: c7:44:66:d5:17:bf:92:2f:c6:6b:35:bc:e8:96:39:59:30:88: b8:8a:cd:d4:7d:fe:80:a5:4a:a3:43:8e:d1:70:64:9a:d2:c8: bf:10:f1:93:cf:ed:38:86:bc:79:4b:82:1f:bf:82:36:c9:39: 1c:26:d3:77:0e:c8:79:1e:ac:89:cc:52:2f:e6:64:d3:a3:57: 81:cf:2d:e2:14:9f:9a:97:b1:5e:31:4b:46:b8:a6:97:68:23: 72:19:52:39:97:2b:04:2e:58:86:91:71:76:5c:68:f5:c1:1c: 3b:bf:c3:6f:4f:91:c0:07:c4:35:f7:b5:94:f9:2e:89:5f:41: a5:1b:92:6c:fb:af:a2:fe:a2:01:e7:01:63:00:89:15:19:6a: 58:b1:e6:67:9e:27:c0:de:32:4c:ea:91:df:b5:b6:df:b7:c5: cc:ac:39:74:6c:e2:da:55:f2:f5:46:86:a8:6a:f9:9a:ea:b9: 28:8a:f8:4d:58:2b:b6:8f:75:11:f9:8d:a2:c0:93:14:c9:61: 4e:8d:47:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvqUhKVDbDa0Nj4QyDJas3ge4zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND OTFGRURCRjAeFw0yNjA5MTcwMTQ1NDlaFw0yNjA5MTgwNDAxNDlaMDMxMTAvBgNV BAMTKDlGMjEwMzZCMkIwRTYwOTk2RUUyQzVFRDIzQkU1MEE1RDRCNTFDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDojEvK8h9R1fCxbdjZiyIZt9R8 s4MEIat6jWEpb+rZyWN4ynbx4PpSd+8qhBxuOlSMPJIekYrAkUgyJ82JskNgZOk3 yAev8vJWKMpBh+RbR0n6UHF/x2UXZsrhVb3cBrE5iUyIfASVSUh+eveaF9MAtRre XDBY0d/QAMJwclYdo+O0musRYfVfP9/dOqXmMIZWMJl99t9V1I5UJL21z+QFuTFT 11P2TyaLBh2SOFHzeA/ucnp5LICWpK98r44PrT4XV29SFBa4bCxInP7SUINCo/nS C4ai5ILV5rOKAKVn2ANmz1SoYiUnH5ELcei5h6ujXH60AfvIBvG3ko6iNhunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyEDaysOYJlu4sXtI75QpdS1HI4wHwYDVR0j BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0 RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThF NkNDOTFGRURCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb6VmPSCdh+e2OQvpJ2E4e8MXGcQ37ZfXjE 5gvGNbMpxOEw6WNuiqEGDjUqRASYOjEkVRHoUcdEZtUXv5Ivxms1vOiWOVkwiLiK zdR9/oClSqNDjtFwZJrSyL8Q8ZPP7TiGvHlLgh+/gjbJORwm03cOyHkerInMUi/m ZNOjV4HPLeIUn5qXsV4xS0a4ppdoI3IZUjmXKwQuWIaRcXZcaPXBHDu/w29PkcAH xDX3tZT5LolfQaUbkmz7r6L+ogHnAWMAiRUZalix5meeJ8DeMkzqkd+1tt+3xcys OXRs4tpV8vVGhqhq+ZrquSiK+E1YK7aPdRH5jaLAkxTJYU6NR+I= -----END CERTIFICATE-----Generated at Thu Sep 17 15:10:40 2026 by rpki-client