$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft File: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft (raw, json) Hash identifier: XNWIxzAxI6vYMc6HcXrtYi1El4d5PRsMTzsNt309XeY= Subject key identifier: 69:BE:78:DC:38:8A:09:F3:CB:89:32:4C:89:9C:60:02:3B:5B:4F:C3 Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 Certificate issuer: /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Certificate serial: 3768F774A8E8B5ACFDA4CA7FB1C551A53FF6FB16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:17:31 +0000 Manifest this update: Thu 17 Sep 2026 11:12:31 +0000 Manifest next update: Fri 18 Sep 2026 14:22:31 +0000 Files and hashes: 1: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: 1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=) 2: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=) 3: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=) 4: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=) 5: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=) 6: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl (hash: XteVEq6z1LZxudM9riKigcFZbmJcLdREcbOJLt6pH3o=) 7: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=) 8: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:68:f7:74:a8:e8:b5:ac:fd:a4:ca:7f:b1:c5:51:a5:3f:f6:fb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Validity Not Before: Sep 17 11:12:31 2026 GMT Not After : Sep 18 14:22:31 2026 GMT Subject: CN=69BE78DC388A09F3CB89324C899C60023B5B4FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:aa:b4:43:90:15:1a:b5:33:76:47:9d:e1:f7: 9d:c7:b0:c6:c4:7b:a2:01:31:ce:80:22:27:31:6f: da:a5:28:1b:f5:53:8b:bc:5e:22:c5:d0:2f:5d:70: e6:be:cf:22:98:de:29:58:0e:49:cb:6a:0a:58:5e: f5:bf:b2:dd:c2:83:68:79:bb:ed:55:8c:9d:6c:09: 94:71:41:15:ff:24:37:9e:e6:d8:2e:3a:52:17:75: c6:c0:9f:96:ae:b1:71:44:61:ed:69:ed:52:38:8b: 25:06:c5:5a:01:64:69:31:31:bb:25:61:3b:b4:17: 95:29:f6:48:bd:dd:7f:d4:ce:c5:ec:d9:be:20:f0: b6:18:02:47:ec:8a:ba:bc:cd:4c:00:31:6c:d0:ae: 29:5a:17:db:02:54:6f:d4:d6:76:57:ea:85:9d:7b: f4:79:d4:40:48:dd:de:c5:c1:c0:77:ac:4b:2e:e6: 24:ed:b5:d3:88:4a:05:b2:26:aa:00:60:67:1a:e4: 89:98:1b:ee:78:80:ea:0a:63:c6:55:83:46:b5:3b: 12:b3:c8:fb:45:11:e5:e9:9c:cd:f2:b7:18:ac:ac: 65:31:f5:56:78:ff:7c:35:b5:6a:b0:97:82:40:5c: cc:1d:82:a3:d6:10:b8:aa:93:9f:01:1f:e3:2d:f4: da:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BE:78:DC:38:8A:09:F3:CB:89:32:4C:89:9C:60:02:3B:5B:4F:C3 X509v3 Authority Key Identifier: keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7c:b0:85:5b:39:f6:07:53:dd:00:82:f1:94:11:6e:67:c8: 36:a0:f3:5e:b9:c0:1b:6f:f3:55:29:33:6b:89:f1:50:64:19: 27:ec:86:a1:95:f8:ed:7d:fb:48:43:20:64:9a:46:be:61:d7: 9a:17:f9:13:47:fe:3b:e9:82:f6:2f:da:67:5f:16:6b:72:7d: b4:19:24:8d:28:ab:60:12:a0:32:0f:af:6a:3a:d5:98:af:9e: e2:68:8d:4f:12:a5:a7:5f:ef:12:10:3b:41:e4:13:e6:a7:36: 21:5b:55:07:f6:34:88:09:65:b8:bd:bd:e2:c1:04:b0:28:df: 68:05:74:a4:f0:b4:50:3e:58:76:3c:52:e2:a9:36:b6:63:66: c7:38:7a:f0:5e:fb:93:d0:3a:f1:e5:ec:60:81:cd:b1:70:f4: f1:da:47:fc:59:01:aa:60:85:ad:eb:f6:6d:f2:87:fc:cd:af: 7e:d8:54:04:37:04:0e:3d:fc:ff:33:cd:b9:55:ad:f2:9d:7c: ec:11:28:e8:31:2a:e2:71:03:ee:c2:9b:8b:cf:4a:09:d4:5f: 0e:4e:80:9d:5b:d0:0b:93:5a:ca:42:c9:23:fb:42:1c:54:19: 24:e2:fe:97:c9:85:09:b8:a4:16:8d:f4:ed:26:59:de:6a:c0: 23:80:62:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2j3dKjotaz9pMp/scVRpT/2+xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFF QURCNjhEMDAeFw0yNjA5MTcxMTEyMzFaFw0yNjA5MTgxNDIyMzFaMDMxMTAvBgNV BAMTKDY5QkU3OERDMzg4QTA5RjNDQjg5MzI0Qzg5OUM2MDAyM0I1QjRGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOqrRDkBUatTN2R53h953HsMbE e6IBMc6AIicxb9qlKBv1U4u8XiLF0C9dcOa+zyKY3ilYDknLagpYXvW/st3Cg2h5 u+1VjJ1sCZRxQRX/JDee5tguOlIXdcbAn5ausXFEYe1p7VI4iyUGxVoBZGkxMbsl YTu0F5Up9ki93X/UzsXs2b4g8LYYAkfsirq8zUwAMWzQrilaF9sCVG/U1nZX6oWd e/R51EBI3d7FwcB3rEsu5iTttdOISgWyJqoAYGca5ImYG+54gOoKY8ZVg0a1OxKz yPtFEeXpnM3ytxisrGUx9VZ4/3w1tWqwl4JAXMwdgqPWELiqk58BH+Mt9NpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUab543DiKCfPLiTJMiZxgAjtbT8MwHwYDVR0j BBgwFoAUxqhNi2VF/JGpKzxyP0FqEerbaNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkZDYxMzUtNTQ4Yy00ODgxLWFmNzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2 NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFFQURCNjhEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkE4NEQ4QjY1NDVGQzkxQTkyQjNDNzIzRjQxNkExMUVBREI2 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZB MTFFQURCNjhEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd8sIVbOfYHU90AgvGUEW5nyDag8165wBtv 81UpM2uJ8VBkGSfshqGV+O19+0hDIGSaRr5h15oX+RNH/jvpgvYv2mdfFmtyfbQZ JI0oq2ASoDIPr2o61ZivnuJojU8Spadf7xIQO0HkE+anNiFbVQf2NIgJZbi9veLB BLAo32gFdKTwtFA+WHY8UuKpNrZjZsc4evBe+5PQOvHl7GCBzbFw9PHaR/xZAapg ha3r9m3yh/zNr37YVAQ3BA49/P8zzblVrfKdfOwRKOgxKuJxA+7Cm4vPSgnUXw5O gJ1b0AuTWspCySP7QhxUGSTi/pfJhQm4pBaN9O0mWd5qwCOAYqI= -----END CERTIFICATE-----Generated at Thu Sep 17 16:24:08 2026 by rpki-client