$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft File: 6D157C9F12B387F14489E16709B7918837CC6D0D.mft (raw, json) Hash identifier: 9ZL3c9XQowtLN2W2QxkUM8C4tFtCQQWQGszJJkHolFQ= Subject key identifier: 02:A5:38:31:4B:1A:DF:3A:00:9A:1A:35:93:71:D4:C4:C4:20:1D:38 Authority key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D Certificate issuer: /CN=6D157C9F12B387F14489E16709B7918837CC6D0D Certificate serial: 166B44EBC10698E0AADE9D34788D4AFC6A7A9ECE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:30:15 +0000 Manifest this update: Thu 17 Sep 2026 05:25:15 +0000 Manifest next update: Fri 18 Sep 2026 07:40:15 +0000 Files and hashes: 1: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: VkyPTF+RY+z/p6xoTjLQ0ZWN42gQ1j6IA9bwlr+r6r8=) 2: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: Q1+ewmleGWvKt5GVutrjmiB3bltbmXv4+SV22bkfQSA=) 3: 6D157C9F12B387F14489E16709B7918837CC6D0D.crl (hash: +q/BWoRoeLdMGDJc9x1v/ey103Rkb7Ap6MHJGQaqNVc=) 4: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: NlPuBH9s19urTN9l/ySJyKm6WWO9NdJomGBorLJ9CcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6b:44:eb:c1:06:98:e0:aa:de:9d:34:78:8d:4a:fc:6a:7a:9e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D157C9F12B387F14489E16709B7918837CC6D0D Validity Not Before: Sep 17 05:25:15 2026 GMT Not After : Sep 18 07:40:15 2026 GMT Subject: CN=02A538314B1ADF3A009A1A359371D4C4C4201D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:bb:f4:7a:3c:28:a0:f2:70:ca:cd:9f:cd: a7:9d:e6:3e:2e:11:43:67:20:0e:dc:7d:a8:04:76: b8:73:ac:9c:67:3d:53:ee:fc:4c:4f:9e:12:2e:cb: de:d7:28:5c:38:ab:ce:a0:ec:30:b5:32:74:38:2e: 6a:27:11:ae:7f:f1:b1:d4:f4:cc:15:44:5a:29:63: 6a:a8:2c:55:85:36:ed:68:2b:c0:45:58:fb:f2:42: b1:4c:62:06:e3:0b:9f:0c:bc:db:b4:cf:fb:c6:03: ef:5f:10:ba:47:58:c8:69:13:df:d9:f8:bd:fd:04: 62:82:d4:15:00:59:3c:37:1a:ed:31:fa:5a:b3:34: 6d:d5:e2:3a:cd:b8:53:24:92:ca:0f:c3:0a:bf:ae: d4:9d:0b:80:f7:61:19:09:ab:a6:9c:0f:75:15:fe: cd:78:6f:04:93:18:aa:e1:30:ac:67:82:a9:38:0b: b7:10:19:1b:c1:fc:ed:5a:c3:73:55:ba:d7:d6:43: ad:0b:37:f2:58:9c:8a:b3:2d:33:56:1c:0f:9f:55: 00:2f:31:8a:99:3a:d6:d8:45:46:ab:73:71:98:c8: 77:f0:43:5c:ca:f7:93:1b:9c:73:f4:74:0a:f8:e6: e4:cc:5a:df:e2:f8:a5:8f:a2:37:5f:24:18:06:ef: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A5:38:31:4B:1A:DF:3A:00:9A:1A:35:93:71:D4:C4:C4:20:1D:38 X509v3 Authority Key Identifier: keyid:6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a4:76:e2:8e:46:95:3a:68:f4:79:cd:8d:77:79:69:8c:43: 1b:2c:41:66:fc:d7:f9:1b:45:92:97:9f:bb:d9:6a:71:33:b6: eb:b9:61:e5:31:b4:5e:c7:d5:c8:f9:d4:0a:c7:47:eb:8e:e3: ae:8e:a5:d2:b2:9d:b4:13:0d:7a:1d:16:0a:9c:ad:4d:20:55: 21:a0:1e:ce:0d:2f:d0:fb:97:08:8e:6d:6a:97:b5:76:2d:3c: 10:d6:93:ba:3f:2a:54:46:0e:1b:f1:dc:28:05:a2:69:ab:ce: e9:c9:38:e2:2f:ac:19:a8:bb:35:65:50:32:44:6a:ee:1f:e5: 65:13:7f:38:7b:79:01:c3:26:c0:39:ff:73:7e:5a:b7:4f:82: 29:38:9d:db:42:d5:96:13:e8:01:68:fc:8a:e6:ce:f1:aa:d0: dd:dc:16:d0:58:9c:ce:b8:d8:47:ac:66:b5:77:28:13:b9:10: 25:65:0c:9a:74:da:e6:be:e7:80:65:0c:34:34:68:03:bc:ee: 7a:83:3d:52:0a:b8:d2:4c:c6:21:f3:b7:16:63:2c:17:29:38: 61:c8:7f:94:78:a2:6f:c5:9d:8f:a7:a8:bc:64:6d:2a:9b:a7: e6:96:a2:7e:5f:48:70:49:c5:a4:65:f6:50:ff:da:94:52:2c: b0:87:b7:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmtE68EGmOCq3p00eI1K/Gp6ns4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkxODgz N0NDNkQwRDAeFw0yNjA5MTcwNTI1MTVaFw0yNjA5MTgwNzQwMTVaMDMxMTAvBgNV BAMTKDAyQTUzODMxNEIxQURGM0EwMDlBMUEzNTkzNzFENEM0QzQyMDFEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4c7v0ejwooPJwys2fzaed5j4u EUNnIA7cfagEdrhzrJxnPVPu/ExPnhIuy97XKFw4q86g7DC1MnQ4LmonEa5/8bHU 9MwVRFopY2qoLFWFNu1oK8BFWPvyQrFMYgbjC58MvNu0z/vGA+9fELpHWMhpE9/Z +L39BGKC1BUAWTw3Gu0x+lqzNG3V4jrNuFMkksoPwwq/rtSdC4D3YRkJq6acD3UV /s14bwSTGKrhMKxngqk4C7cQGRvB/O1aw3NVutfWQ60LN/JYnIqzLTNWHA+fVQAv MYqZOtbYRUarc3GYyHfwQ1zK95MbnHP0dAr45uTMWt/i+KWPojdfJBgG788zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqU4MUsa3zoAmho1k3HUxMQgHTgwHwYDVR0j BBgwFoAUbRV8nxKzh/FEieFnCbeRiDfMbQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEyYmZlOWEtMzgyMy00NGU5LTk3YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYx MkIzODdGMTQ0ODlFMTY3MDlCNzkxODgzN0NDNkQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDE1N0M5RjEyQjM4N0YxNDQ4OUUxNjcwOUI3OTE4ODM3Q0M2 RDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkx ODgzN0NDNkQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWkduKORpU6aPR5zY13eWmMQxssQWb81/kb RZKXn7vZanEztuu5YeUxtF7H1cj51ArHR+uO466OpdKynbQTDXodFgqcrU0gVSGg Hs4NL9D7lwiObWqXtXYtPBDWk7o/KlRGDhvx3CgFommrzunJOOIvrBmouzVlUDJE au4f5WUTfzh7eQHDJsA5/3N+WrdPgik4ndtC1ZYT6AFo/IrmzvGq0N3cFtBYnM64 2EesZrV3KBO5ECVlDJp02ua+54BlDDQ0aAO87nqDPVIKuNJMxiHztxZjLBcpOGHI f5R4om/FnY+nqLxkbSqbp+aWon5fSHBJxaRl9lD/2pRSLLCHt0c= -----END CERTIFICATE-----Generated at Thu Sep 17 13:58:21 2026 by rpki-client