$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft File: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft (raw, json) Hash identifier: rJxBPt0ZP9RSK1RZh06IkeCivaSaJit9nPQI6hpgtyI= Subject key identifier: 5E:85:34:02:EA:AB:94:9B:46:2C:60:C3:48:71:6D:6E:30:56:1A:C9 Authority key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD Certificate issuer: /CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Certificate serial: 6254D8AD75E1F44AA9F5CE5CB5E1243392D1CB16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:57:08 +0000 Manifest this update: Thu 17 Sep 2026 02:52:08 +0000 Manifest next update: Fri 18 Sep 2026 05:14:08 +0000 Files and hashes: 1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: E+hRgGJJ8C/Srz5/ghgOOJ3QwYrgYhMnvxLJoD14unU=) 2: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl (hash: 7Pw8CTPBWxdN8RWLfm14QMuxlQSCDmACSeCYdHKSa7c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:54:d8:ad:75:e1:f4:4a:a9:f5:ce:5c:b5:e1:24:33:92:d1:cb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Validity Not Before: Sep 17 02:52:08 2026 GMT Not After : Sep 18 05:14:08 2026 GMT Subject: CN=5E853402EAAB949B462C60C348716D6E30561AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:f6:f5:21:10:ce:f0:fd:b9:12:f6:97:2c: 3c:15:26:62:e5:fc:e7:17:f9:f4:a8:a5:e2:cb:9a: 20:96:98:d4:24:f1:48:79:81:ee:3e:d6:b1:11:9d: 01:e4:f5:f0:f5:12:74:10:6f:5d:e5:87:67:d0:27: d6:6f:45:9a:89:d9:05:fc:b4:94:01:27:a7:70:85: dd:45:01:73:07:af:54:0a:c9:36:2d:bb:6a:b7:66: 8e:5b:c8:c2:eb:4e:c4:02:68:34:e5:4b:4b:fc:a7: 8e:83:1b:44:8b:a4:58:cf:f3:36:b9:e2:5c:1a:db: 7a:ec:e5:a3:50:fa:a0:87:56:ec:02:52:43:21:89: df:b4:9f:f5:71:15:12:3c:b6:d6:98:b5:d9:cf:45: c9:95:b4:16:6c:6f:80:f1:52:b3:38:db:27:c9:4d: 84:3f:57:16:e0:b8:b9:d0:55:b0:16:6d:70:f9:b0: a6:14:5c:59:dd:a4:ac:96:fa:d3:db:7d:bf:3c:aa: 7e:0d:a9:92:29:33:93:02:e6:75:2a:c6:74:cc:87: 66:7c:38:9a:15:3e:ef:30:1d:2a:7a:49:a1:3e:26: 73:83:b1:2d:86:97:d8:b0:70:c9:21:e2:e4:50:e8: d7:d5:83:ec:d7:6e:62:07:2b:c5:e7:db:5a:fb:22: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:85:34:02:EA:AB:94:9B:46:2C:60:C3:48:71:6D:6E:30:56:1A:C9 X509v3 Authority Key Identifier: keyid:6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2d:aa:b5:94:b1:ef:38:df:06:c0:98:c5:d5:43:22:5f:29: 18:ca:5f:48:7a:31:f1:18:ac:df:a3:38:b1:81:29:1f:48:bd: 98:8f:47:07:3f:b5:b3:cd:ca:3a:9b:57:a3:85:24:dc:6e:68: a1:3b:a3:0a:89:88:cb:b6:7c:a3:4d:29:cd:b5:ba:8a:5f:e8: 7d:4f:f9:c1:9b:7d:91:ab:8f:92:73:09:81:cc:ef:de:47:95: 2e:b4:fd:03:49:60:21:f0:ef:6e:8a:43:bb:87:58:8e:81:98: c9:c1:79:aa:5a:94:6e:a7:a4:87:27:b3:00:58:ab:10:83:d2: 8a:a0:80:b5:25:aa:05:ce:1f:67:4d:e6:83:5f:72:80:3e:aa: 3e:b7:e0:30:2c:ee:ae:5e:59:b8:e7:68:b1:e8:9d:78:d3:7d: 5a:3a:45:10:23:d9:54:56:77:47:37:c8:82:db:f4:53:c1:f2: 7a:c5:6b:fa:17:f8:64:56:d1:b0:1f:59:19:a9:3b:c0:c9:06: 20:1c:21:4c:a0:8f:80:a4:30:bc:20:a2:7c:b2:69:65:0f:71: 43:da:a3:de:66:40:56:64:56:19:87:2b:1b:e2:be:d2:9d:36: 24:4b:b1:af:2d:96:38:fd:59:a0:31:f3:07:1b:c9:b1:94:d4: c2:c3:7d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlTYrXXh9Eqp9c5cteEkM5LRyxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5 RTYzOUFDRDAeFw0yNjA5MTcwMjUyMDhaFw0yNjA5MTgwNTE0MDhaMDMxMTAvBgNV BAMTKDVFODUzNDAyRUFBQjk0OUI0NjJDNjBDMzQ4NzE2RDZFMzA1NjFBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNvb1IRDO8P25EvaXLDwVJmLl /OcX+fSopeLLmiCWmNQk8Uh5ge4+1rERnQHk9fD1EnQQb13lh2fQJ9ZvRZqJ2QX8 tJQBJ6dwhd1FAXMHr1QKyTYtu2q3Zo5byMLrTsQCaDTlS0v8p46DG0SLpFjP8za5 4lwa23rs5aNQ+qCHVuwCUkMhid+0n/VxFRI8ttaYtdnPRcmVtBZsb4DxUrM42yfJ TYQ/VxbguLnQVbAWbXD5sKYUXFndpKyW+tPbfb88qn4NqZIpM5MC5nUqxnTMh2Z8 OJoVPu8wHSp6SaE+JnODsS2Gl9iwcMkh4uRQ6NfVg+zXbmIHK8Xn21r7Imi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXoU0AuqrlJtGLGDDSHFtbjBWGskwHwYDVR0j BBgwFoAUbziDE0uux8EAyLKkk31T3p5jms0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVkNzM2ZGMtZTVkYi00MzgxLTk3MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0 QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5RTYzOUFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RjM4ODMxMzRCQUVDN0MxMDBDOEIyQTQ5MzdENTNERTlFNjM5 QUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVkNzM2ZGMtZTVkYi00MzgxLTk3 MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUz REU5RTYzOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHotqrWUse843wbAmMXVQyJfKRjKX0h6MfEY rN+jOLGBKR9IvZiPRwc/tbPNyjqbV6OFJNxuaKE7owqJiMu2fKNNKc21uopf6H1P +cGbfZGrj5JzCYHM795HlS60/QNJYCHw726KQ7uHWI6BmMnBeapalG6npIcnswBY qxCD0oqggLUlqgXOH2dN5oNfcoA+qj634DAs7q5eWbjnaLHonXjTfVo6RRAj2VRW d0c3yILb9FPB8nrFa/oX+GRW0bAfWRmpO8DJBiAcIUygj4CkMLwgonyyaWUPcUPa o95mQFZkVhmHKxvivtKdNiRLsa8tljj9WaAx8wcbybGU1MLDfQg= -----END CERTIFICATE-----Generated at Thu Sep 17 13:57:07 2026 by rpki-client