$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft File: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft (raw, json) Hash identifier: /AOx/oRK8pK6oHuOPQ5Ry1aMWYFCUcz8MFj1wob3+kU= Subject key identifier: BA:CB:75:3F:E4:24:6C:07:65:B0:3B:0A:C1:CE:51:83:6C:4D:30:0E Authority key identifier: 63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87 Certificate issuer: /CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87 Certificate serial: 397EF1E767F7F5D0E6E2A35E3FB99B6D793E242C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:09:03 +0000 Manifest this update: Wed 16 Sep 2026 16:04:03 +0000 Manifest next update: Thu 17 Sep 2026 16:55:03 +0000 Files and hashes: 1: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: xf+UK/SwcRIX/nRJ4Hg+4DQ/f5k64bhWTyYNX0IjW+4=) 2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: Iu8i3UFA5NfxNCWcLP6UJ8lab0FJ/BYVXvfcqAte7gA=) 3: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl (hash: 0c48xGhHUxPvty8CNzvhCk5pZ/LR5sK/ywbZYmsjRtg=) 4: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: UKBnj/25IlskFYrMWggMls6cOgB4lTLBiHIfSuSGJ+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7e:f1:e7:67:f7:f5:d0:e6:e2:a3:5e:3f:b9:9b:6d:79:3e:24:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87 Validity Not Before: Sep 16 16:04:03 2026 GMT Not After : Sep 17 16:55:03 2026 GMT Subject: CN=BACB753FE4246C0765B03B0AC1CE51836C4D300E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:c2:a8:71:1b:64:fd:44:cc:ff:78:1e:73: 3a:45:96:de:5e:4b:19:0e:89:98:41:5b:66:fc:ee: cd:1a:09:95:63:58:ae:be:dc:d0:b3:ce:f6:f7:b3: 84:90:d1:1e:68:db:af:0a:da:d0:1b:13:f6:0b:06: 42:db:9f:d6:1e:cd:23:b4:ff:00:3c:63:ab:c8:66: 4f:19:47:03:47:3e:d1:ec:b8:1d:76:13:d5:15:00: ef:48:14:f9:87:7e:24:f0:61:9c:36:19:9b:4b:58: 20:f9:8f:ea:ba:81:da:5b:e2:c0:21:a2:53:89:27: bb:1e:b5:c3:3c:b1:41:7f:c7:bb:21:aa:d9:3e:19: b0:76:ec:ec:bc:52:fa:58:28:f7:07:5a:93:42:9a: 04:bd:ae:c4:4b:cd:f1:33:05:9e:03:0f:90:d2:a3: a4:f1:df:2b:83:89:58:19:da:a3:e6:37:29:c9:79: a0:1b:86:ae:a3:d9:1a:ee:fd:b4:a0:a9:c8:11:68: e5:1d:17:69:0a:13:fe:a6:0c:c1:6f:61:b8:5b:97: 6e:75:ce:d7:5b:b1:6d:8d:76:62:3b:6f:81:6d:d0: 70:e5:7f:1f:1e:5c:89:b8:24:73:6b:fe:f5:9d:2a: c8:eb:6c:c4:04:80:ea:37:c8:ec:8b:12:60:92:4e: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CB:75:3F:E4:24:6C:07:65:B0:3B:0A:C1:CE:51:83:6C:4D:30:0E X509v3 Authority Key Identifier: keyid:63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fe:ce:12:50:74:bb:76:8b:d4:b6:77:11:00:63:dc:a1:43: 7d:c5:55:3b:63:d8:87:df:c1:dc:82:bc:cf:4a:ef:5a:34:92: 73:79:a3:49:a3:40:06:30:71:ae:44:56:a8:cd:23:32:5d:44: 1c:e6:50:b3:28:5c:c0:92:82:27:eb:14:42:30:46:41:f8:ac: a6:4b:bd:d9:2c:f8:cc:b9:8d:30:ae:cb:73:6c:28:0b:ba:13: 6a:08:ae:6a:92:eb:c6:16:5b:ab:6d:77:e3:ea:2d:bf:e4:a3: 5b:0e:66:ee:cd:dd:8a:49:22:79:41:e6:9f:50:bd:f2:7c:17: 7b:34:6f:3e:bf:aa:a3:25:eb:96:5b:18:04:87:98:71:43:ad: 77:1d:26:24:c6:2b:6d:98:f5:61:a6:e9:0d:6d:96:3a:37:34: c3:62:67:8c:88:64:e0:ca:dc:83:4a:1e:97:29:90:d0:61:f4: d9:c1:00:23:f4:0c:bd:6a:ef:0e:d9:3d:7e:96:93:fd:e7:52: 69:8d:a7:4a:68:6b:6f:ed:43:be:41:e7:81:2f:ae:87:77:0a: 16:a7:38:f6:6d:c0:2c:86:ea:45:cc:ba:11:39:f7:78:d6:1c: ce:f5:25:22:b1:61:d3:15:5f:49:62:b2:20:37:ac:9f:6d:bd: b4:e4:76:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOX7x52f39dDm4qNeP7mbbXk+JCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2M0I5NkQ5Mjk0RUJCOTg3NkFBQkYyRUExQTJEQjBE RDU1M0Q4NzAeFw0yNjA5MTYxNjA0MDNaFw0yNjA5MTcxNjU1MDNaMDMxMTAvBgNV BAMTKEJBQ0I3NTNGRTQyNDZDMDc2NUIwM0IwQUMxQ0U1MTgzNkM0RDMwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC18KocRtk/UTM/3geczpFlt5e SxkOiZhBW2b87s0aCZVjWK6+3NCzzvb3s4SQ0R5o268K2tAbE/YLBkLbn9YezSO0 /wA8Y6vIZk8ZRwNHPtHsuB12E9UVAO9IFPmHfiTwYZw2GZtLWCD5j+q6gdpb4sAh olOJJ7setcM8sUF/x7shqtk+GbB27Oy8UvpYKPcHWpNCmgS9rsRLzfEzBZ4DD5DS o6Tx3yuDiVgZ2qPmNynJeaAbhq6j2Rru/bSgqcgRaOUdF2kKE/6mDMFvYbhbl251 ztdbsW2NdmI7b4Ft0HDlfx8eXIm4JHNr/vWdKsjrbMQEgOo3yOyLEmCSTn2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUust1P+QkbAdlsDsKwc5Rg2xNMA4wHwYDVR0j BBgwFoAUY2O5bZKU67mHaqvy6hotsN1VPYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZjNmFkNjQtNzU0My00OGFkLWIxNTgtZTgyNjc2YTExYzcwLzAvNjM2M0I5NkQ5 Mjk0RUJCOTg3NkFBQkYyRUExQTJEQjBERDU1M0Q4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzYzQjk2RDkyOTRFQkI5ODc2QUFCRjJFQTFBMkRCMERENTUz RDg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZjNmFkNjQtNzU0My00OGFkLWIx NTgtZTgyNjc2YTExYzcwLzAvNjM2M0I5NkQ5Mjk0RUJCOTg3NkFBQkYyRUExQTJE QjBERDU1M0Q4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX+zhJQdLt2i9S2dxEAY9yhQ33FVTtj2Iff wdyCvM9K71o0knN5o0mjQAYwca5EVqjNIzJdRBzmULMoXMCSgifrFEIwRkH4rKZL vdks+My5jTCuy3NsKAu6E2oIrmqS68YWW6ttd+PqLb/ko1sOZu7N3YpJInlB5p9Q vfJ8F3s0bz6/qqMl65ZbGASHmHFDrXcdJiTGK22Y9WGm6Q1tljo3NMNiZ4yIZODK 3INKHpcpkNBh9NnBACP0DL1q7w7ZPX6Wk/3nUmmNp0poa2/tQ75B54Evrod3Chan OPZtwCyG6kXMuhE593jWHM71JSKxYdMVX0lisiA3rJ9tvbTkdi4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:14:18 2026 by rpki-client