$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft File: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft (raw, json) Hash identifier: Lk/JKE49AHsq88PuKtsf1E07ciEcSXMBpDmn2iQ1/eg= Subject key identifier: EB:7B:1A:B0:4C:74:D8:76:EB:ED:52:29:80:C4:78:8D:E3:D8:72:09 Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC Certificate issuer: /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Certificate serial: 58103E33A9CB19FF2E8516EB8597D9B42389DD7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft Manifest number: 9D Signing time: Thu 27 Aug 2026 13:11:49 +0000 Manifest this update: Thu 27 Aug 2026 13:06:49 +0000 Manifest next update: Fri 28 Aug 2026 16:19:49 +0000 Files and hashes: 1: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: qG2bUOWwTNZiIfdaTpDPVpMrBFbrT7QpU559kWrN28I=) 2: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl (hash: wqBtNYz7M6pW6E0wwYrHyPuWuWPv9gadUrrtP0CKb84=) 3: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:10:3e:33:a9:cb:19:ff:2e:85:16:eb:85:97:d9:b4:23:89:dd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Validity Not Before: Aug 27 13:06:49 2026 GMT Not After : Aug 28 16:19:49 2026 GMT Subject: CN=EB7B1AB04C74D876EBED522980C4788DE3D87209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:b2:56:9b:a4:5b:96:69:d9:07:d4:25:ac: f4:1d:67:54:0a:49:5c:cd:8e:91:4b:93:81:bd:fa: 40:c8:23:29:66:a3:f7:1e:25:5b:da:03:02:db:28: 54:96:44:04:a9:75:d4:a2:06:eb:db:4d:93:59:e5: 77:62:6d:1c:cf:c1:b3:f3:96:d9:ff:9d:22:a9:87: 8a:ec:7f:c7:28:9d:79:42:ca:ad:40:da:24:65:c0: c5:52:b3:ea:da:4d:01:cb:76:a8:6d:a9:19:60:62: 33:0e:c6:22:4e:ce:17:d4:fa:b5:c1:e6:8e:a2:73: 69:72:01:d2:0d:64:e0:63:99:81:94:44:4f:c1:c6: 41:39:81:2f:96:97:74:ee:0a:86:85:e2:3d:91:56: 99:c4:a1:e3:34:ff:2d:8d:22:64:09:7f:52:63:bf: 89:55:ba:bf:a9:af:19:8b:a5:d6:3f:cc:08:53:bd: 1b:90:ad:3d:3a:d4:68:28:80:f7:1b:fa:5e:81:40: 86:2c:d5:f9:73:d4:e3:49:5e:0e:9c:86:45:2b:e6: c5:eb:37:f1:0a:88:82:a8:db:88:9e:d7:5e:ac:15: 1e:00:ce:36:c0:ab:b4:51:0a:4e:7d:be:47:40:57: 49:a7:6e:c3:29:c2:0a:29:d9:fa:15:3b:2c:84:b1: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7B:1A:B0:4C:74:D8:76:EB:ED:52:29:80:C4:78:8D:E3:D8:72:09 X509v3 Authority Key Identifier: keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a2:ef:a2:b1:08:6f:d8:7c:db:b0:c7:25:96:c2:62:0b:59: 82:ff:f4:a7:db:76:db:e2:c4:5f:57:a2:00:aa:c1:f9:42:10: 1f:c7:0a:49:ba:06:41:81:1f:6c:a6:ef:e2:3b:bd:1a:51:76: 35:79:64:59:f9:15:63:67:bf:7c:f3:d5:06:0a:75:1d:de:12: 7a:a2:e0:01:fd:54:77:fb:10:e0:50:73:5e:dd:86:b9:37:1e: 0f:62:68:e0:c9:91:e7:85:3a:c5:2e:82:36:77:49:27:d4:69: 06:7f:2f:fa:c0:0b:a6:9b:0e:d2:2a:ff:4f:74:fb:3e:9b:06: be:f9:0a:c1:e9:13:78:1a:55:ea:aa:2e:2b:23:e7:86:32:39: 4e:f7:4b:f6:77:fc:e9:9c:81:83:76:24:83:10:1f:9c:f0:97: 2f:53:91:d2:cc:c5:b1:58:d0:8e:5a:38:4c:a0:fa:58:fc:bf: 0e:20:28:3b:69:5b:8b:cc:ca:12:32:51:f4:77:fa:62:c3:fa: 90:8e:13:fa:61:d8:d6:6a:23:15:30:c9:33:d6:6c:c4:6f:3b: 65:a6:9f:a1:16:7b:10:d9:a8:92:58:ce:9e:3c:07:eb:12:e7: d0:09:3c:2c:61:67:eb:ef:b6:c4:59:94:2f:9e:03:ab:83:95: 7a:05:7f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBA+M6nLGf8uhRbrhZfZtCOJ3X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZC N0ZBMTBCQzAeFw0yNjA4MjcxMzA2NDlaFw0yNjA4MjgxNjE5NDlaMDMxMTAvBgNV BAMTKEVCN0IxQUIwNEM3NEQ4NzZFQkVENTIyOTgwQzQ3ODhERTNEODcyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe6bJWm6RblmnZB9QlrPQdZ1QK SVzNjpFLk4G9+kDIIylmo/ceJVvaAwLbKFSWRASpddSiBuvbTZNZ5XdibRzPwbPz ltn/nSKph4rsf8conXlCyq1A2iRlwMVSs+raTQHLdqhtqRlgYjMOxiJOzhfU+rXB 5o6ic2lyAdINZOBjmYGURE/BxkE5gS+Wl3TuCoaF4j2RVpnEoeM0/y2NImQJf1Jj v4lVur+prxmLpdY/zAhTvRuQrT061GgogPcb+l6BQIYs1flz1ONJXg6chkUr5sXr N/EKiIKo24ie116sFR4AzjbAq7RRCk59vkdAV0mnbsMpwgop2foVOyyEsZM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63sasEx02Hbr7VIpgMR4jePYcgkwHwYDVR0j BBgwFoAUbt0nblgPQBOeCvpKH6snVrf6ELwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0YjIwZDgtNTkxYi00MTUyLTk3NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1 ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZCN0ZBMTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUREMjc2RTU4MEY0MDEzOUUwQUZBNEExRkFCMjc1NkI3RkEx MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3 NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3 NTZCN0ZBMTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAui76KxCG/YfNuwxyWWwmILWYL/9Kfbdtvi xF9XogCqwflCEB/HCkm6BkGBH2ym7+I7vRpRdjV5ZFn5FWNnv3zz1QYKdR3eEnqi 4AH9VHf7EOBQc17dhrk3Hg9iaODJkeeFOsUugjZ3SSfUaQZ/L/rAC6abDtIq/090 +z6bBr75CsHpE3gaVeqqLisj54YyOU73S/Z3/OmcgYN2JIMQH5zwly9TkdLMxbFY 0I5aOEyg+lj8vw4gKDtpW4vMyhIyUfR3+mLD+pCOE/ph2NZqIxUwyTPWbMRvO2Wm n6EWexDZqJJYzp48B+sS59AJPCxhZ+vvtsRZlC+eA6uDlXoFf+A= -----END CERTIFICATE-----Generated at Thu Aug 27 17:41:05 2026 by rpki-client