$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft File: 6D508CF79A65F098AC311FE1079E8840C240F1E0.mft (raw, json) Hash identifier: GZIikDKsun9iMa7lNtFlnKNSM1X6cdBEl6JebwtxUOs= Subject key identifier: B1:AC:BD:54:B3:A9:2C:27:25:D2:E6:C0:42:C4:69:6D:68:32:AD:F5 Authority key identifier: 6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0 Certificate issuer: /CN=6D508CF79A65F098AC311FE1079E8840C240F1E0 Certificate serial: 429FA85AFF8663730574A59DFECF3092463A3EF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft Manifest number: B0 Signing time: Tue 01 Sep 2026 00:24:48 +0000 Manifest this update: Tue 01 Sep 2026 00:19:48 +0000 Manifest next update: Wed 02 Sep 2026 01:03:48 +0000 Files and hashes: 1: AS4761.roa (hash: ADAJv0tCjqrkfl7kHKQQa/gmh2pyLICyQ2Yo1anWdAk=) 2: AS45727.roa (hash: JWbgX1M1q+71PRDBOd57Nlx5oFlmJNwWVtzgl8TYURE=) 3: 6D508CF79A65F098AC311FE1079E8840C240F1E0.crl (hash: wJgYAOGTmVVgbiwYEQNGJP70FplZ3NN/5w0n1qHsL8Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 01:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9f:a8:5a:ff:86:63:73:05:74:a5:9d:fe:cf:30:92:46:3a:3e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D508CF79A65F098AC311FE1079E8840C240F1E0 Validity Not Before: Sep 1 00:19:48 2026 GMT Not After : Sep 2 01:03:48 2026 GMT Subject: CN=B1ACBD54B3A92C2725D2E6C042C4696D6832ADF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:0d:c2:a3:0c:29:85:74:14:35:93:e1:e5: 51:32:0c:55:c1:38:15:21:75:69:78:a6:df:74:bb: 7e:0d:de:96:46:65:42:dc:53:1f:a5:0d:d5:16:5b: 6a:6d:62:17:04:10:cc:c1:1e:a2:97:96:a7:3d:57: 86:9e:cc:e4:e8:0a:38:3a:a2:c2:e6:2f:ad:11:d3: 68:ba:81:7e:2d:07:62:e7:11:4f:f5:82:bd:e3:77: 72:f5:52:00:0e:fb:79:a4:ab:61:a2:e8:66:96:08: 87:a3:81:bf:d2:49:3f:2a:1e:9e:2a:08:ba:bd:34: 36:01:cd:06:4c:98:87:31:ad:fa:2c:67:8e:63:6d: 1c:bf:e1:6c:ac:a5:03:0d:d6:6f:52:b4:87:31:7b: 80:61:78:ff:5e:86:47:a5:87:13:2e:95:ab:3c:da: 97:d3:1d:e4:24:7a:e8:e3:bb:6d:7e:ac:0d:99:cf: 76:b9:97:e8:ff:c0:f1:7c:8f:37:e3:bb:8f:79:0c: 30:70:59:ee:55:58:53:42:63:fd:89:fb:9b:bb:de: 10:70:bf:e3:c4:e4:fb:44:c1:ec:57:01:85:a0:c9: 61:8e:68:63:0e:5a:53:12:90:dc:9c:10:2b:c0:ff: 50:96:62:42:9d:bd:bc:7b:e6:f1:eb:79:01:1b:0c: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AC:BD:54:B3:A9:2C:27:25:D2:E6:C0:42:C4:69:6D:68:32:AD:F5 X509v3 Authority Key Identifier: keyid:6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:a4:4b:6d:73:52:ec:60:9d:f4:05:4a:85:e5:fb:ad:9c: d8:54:5e:17:cf:2b:9b:2f:67:ff:f3:f8:14:6e:64:d2:8c:f4: b2:9c:33:32:e7:f8:7b:6f:9b:b6:b5:06:aa:28:cd:57:78:ab: 8c:39:01:28:ae:2c:2d:1a:88:9c:24:14:b0:67:7d:c0:e7:60: eb:7c:61:a3:87:fc:13:33:76:87:76:6d:67:48:74:41:a8:60: e0:3b:e3:c1:8e:56:b5:11:57:6f:ab:ca:96:dd:5d:1f:e5:53: 96:fd:67:26:c3:66:5c:79:66:df:6f:d1:4c:b5:af:7e:38:af: 0e:90:60:6b:ea:c0:f9:cb:d5:71:2b:b9:8c:ca:a6:6b:e6:cc: 32:8a:79:32:ef:69:77:45:ca:49:b0:b1:1f:8b:8a:68:88:fb: d4:91:2e:50:4b:54:8f:23:db:94:7d:6b:a2:a2:18:9d:cf:0b: 6e:b4:52:3c:eb:26:c0:a8:61:43:29:2b:6d:4d:72:96:a3:36: b5:4c:01:31:c9:16:2f:e0:6e:b6:33:a1:20:78:74:d5:45:c8: 58:c1:d2:a2:a9:56:c4:88:ef:af:46:f4:aa:25:26:e0:2d:c7: 6b:48:f9:33:c3:ef:d4:ab:21:8b:a5:10:f1:29:d3:1a:f9:43: 82:b7:98:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQp+oWv+GY3MFdKWd/s8wkkY6PvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ1MDhDRjc5QTY1RjA5OEFDMzExRkUxMDc5RTg4NDBD MjQwRjFFMDAeFw0yNjA5MDEwMDE5NDhaFw0yNjA5MDIwMTAzNDhaMDMxMTAvBgNV BAMTKEIxQUNCRDU0QjNBOTJDMjcyNUQyRTZDMDQyQzQ2OTZENjgzMkFERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeA3CowwphXQUNZPh5VEyDFXB OBUhdWl4pt90u34N3pZGZULcUx+lDdUWW2ptYhcEEMzBHqKXlqc9V4aezOToCjg6 osLmL60R02i6gX4tB2LnEU/1gr3jd3L1UgAO+3mkq2Gi6GaWCIejgb/SST8qHp4q CLq9NDYBzQZMmIcxrfosZ45jbRy/4WyspQMN1m9StIcxe4BheP9ehkelhxMulas8 2pfTHeQkeujju21+rA2Zz3a5l+j/wPF8jzfju495DDBwWe5VWFNCY/2J+5u73hBw v+PE5PtEwexXAYWgyWGOaGMOWlMSkNycECvA/1CWYkKdvbx75vHreQEbDIyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsay9VLOpLCcl0ubAQsRpbWgyrfUwHwYDVR0j BBgwFoAUbVCM95pl8JisMR/hB56IQMJA8eAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWVjNmVlZjktNzEzYy00ZTZiLWIyYmMtNGMwNDUyODkwMzQ1LzAvNkQ1MDhDRjc5 QTY1RjA5OEFDMzExRkUxMDc5RTg4NDBDMjQwRjFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDUwOENGNzlBNjVGMDk4QUMzMTFGRTEwNzlFODg0MEMyNDBG MUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWVjNmVlZjktNzEzYy00ZTZiLWIy YmMtNGMwNDUyODkwMzQ1LzAvNkQ1MDhDRjc5QTY1RjA5OEFDMzExRkUxMDc5RTg4 NDBDMjQwRjFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7PpEttc1LsYJ30BUqF5futnNhUXhfPK5sv Z//z+BRuZNKM9LKcMzLn+Htvm7a1BqoozVd4q4w5ASiuLC0aiJwkFLBnfcDnYOt8 YaOH/BMzdod2bWdIdEGoYOA748GOVrURV2+rypbdXR/lU5b9ZybDZlx5Zt9v0Uy1 r344rw6QYGvqwPnL1XEruYzKpmvmzDKKeTLvaXdFykmwsR+LimiI+9SRLlBLVI8j 25R9a6KiGJ3PC260UjzrJsCoYUMpK21NcpajNrVMATHJFi/gbrYzoSB4dNVFyFjB 0qKpVsSI769G9KolJuAtx2tI+TPD79SrIYulEPEp0xr5Q4K3mLA= -----END CERTIFICATE-----Generated at Tue Sep 1 06:23:19 2026 by rpki-client