$ rpki-client -vvvf rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft File: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft (raw, json) Hash identifier: M1fhAQ6UejQ2Svwqe/ehGcAoi/RgBg9L88w34GNmz4w= Subject key identifier: AF:21:C7:68:F8:81:0B:1D:E2:F7:A8:FB:EB:9D:3B:37:F7:75:AC:B8 Authority key identifier: 6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 Certificate issuer: /CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Certificate serial: 5964FA899CF6E3046971ED6C73896A380719483D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:27:36 +0000 Manifest this update: Thu 24 Sep 2026 01:22:36 +0000 Manifest next update: Fri 25 Sep 2026 04:32:36 +0000 Files and hashes: 1: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl (hash: J/WBclEjW4gUB/R0UrD9iKPVDFo9SaiKMjNMGqADqvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:64:fa:89:9c:f6:e3:04:69:71:ed:6c:73:89:6a:38:07:19:48:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Validity Not Before: Sep 24 01:22:36 2026 GMT Not After : Sep 25 04:32:36 2026 GMT Subject: CN=AF21C768F8810B1DE2F7A8FBEB9D3B37F775ACB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:99:2a:3e:af:d2:e6:cb:cb:78:7f:79:07: f5:1e:3f:fe:f3:0e:80:58:6e:8f:ea:f9:12:86:9c: ea:87:3c:ee:8c:4b:ee:5e:b4:1f:cb:25:00:77:71: 1f:18:c4:bd:b4:1e:32:56:97:e9:4b:fa:2f:05:88: cb:d2:73:cb:54:7f:9e:87:6f:6d:fc:57:67:5b:e6: 36:fa:c5:1e:77:35:fe:7c:8d:dd:c4:64:ab:46:c0: 0c:0e:e7:16:45:64:1c:bc:0b:d6:f2:b8:9c:17:e9: b8:14:7b:c4:0c:b1:99:a0:5a:3e:7c:24:af:51:3c: ba:01:c2:76:e0:0f:f1:eb:80:b2:64:26:1a:69:ce: 6c:af:b9:f5:4d:29:56:25:90:d1:34:87:9b:19:5f: 09:e8:a0:83:e3:10:02:4f:c8:32:ad:01:e6:b9:53: 06:d5:0f:b6:14:c4:04:8b:63:54:0d:23:cf:69:d0: ec:8e:f4:77:19:e1:76:1e:d3:99:bb:90:96:d3:1c: f4:87:6f:62:00:45:2f:9f:b6:49:55:65:18:08:53: 6a:89:18:ea:3d:2e:2f:e3:2f:4f:a9:e1:7e:44:87: 17:9b:02:a5:10:41:9e:2b:96:23:32:3e:7b:ac:cd: 57:df:19:2e:f5:3d:34:91:e3:5a:29:f3:f6:9d:46: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:C7:68:F8:81:0B:1D:E2:F7:A8:FB:EB:9D:3B:37:F7:75:AC:B8 X509v3 Authority Key Identifier: keyid:6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:12:00:ee:f8:dd:ee:9f:17:ba:82:5b:c4:6b:11:44:b5:be: ed:c2:71:22:47:9b:1f:07:26:df:ca:3c:58:b1:15:b4:d5:22: da:c2:d2:f3:b7:23:a1:00:ec:9e:31:32:e9:af:01:e0:a5:9a: 69:0a:05:f6:0b:f8:68:f0:68:13:be:c9:05:f1:03:d4:ca:8d: 94:6d:f0:6f:0f:e3:e4:e0:98:46:7f:1a:1a:94:4a:75:53:d2: 50:f6:5e:ab:d1:e5:b4:56:c6:3d:92:f5:cd:47:ca:97:80:1c: 11:d8:17:d1:f4:66:7c:20:c7:7b:c8:40:7b:86:1d:39:f9:13: 90:e4:43:1f:2f:d7:9f:b4:04:08:cf:f4:e9:e1:34:0e:5c:f0: cf:73:4d:18:3f:4b:81:17:37:1d:9f:14:1f:00:23:99:c4:51: 6d:24:bc:09:46:dd:b5:99:6b:1f:fa:0f:c0:b5:a5:35:0c:1a: d3:cf:bf:02:11:28:5d:23:95:5e:cd:05:ce:e7:88:94:4f:83: f2:9d:af:06:29:99:5a:2a:48:12:de:ca:ac:d3:9d:5f:9f:d1: 9a:fc:22:b8:fb:25:59:88:24:51:03:3d:a3:04:11:a8:a2:c1: da:5a:fd:5c:6b:0e:b8:1b:93:3f:9a:fc:9a:60:87:5c:06:a1: 5a:07:89:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWT6iZz24wRpce1sc4lqOAcZSD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0Qx QzFFNTdENzAeFw0yNjA5MjQwMTIyMzZaFw0yNjA5MjUwNDMyMzZaMDMxMTAvBgNV BAMTKEFGMjFDNzY4Rjg4MTBCMURFMkY3QThGQkVCOUQzQjM3Rjc3NUFDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClf5kqPq/S5svLeH95B/UeP/7z DoBYbo/q+RKGnOqHPO6MS+5etB/LJQB3cR8YxL20HjJWl+lL+i8FiMvSc8tUf56H b238V2db5jb6xR53Nf58jd3EZKtGwAwO5xZFZBy8C9byuJwX6bgUe8QMsZmgWj58 JK9RPLoBwnbgD/HrgLJkJhppzmyvufVNKVYlkNE0h5sZXwnooIPjEAJPyDKtAea5 UwbVD7YUxASLY1QNI89p0OyO9HcZ4XYe05m7kJbTHPSHb2IARS+ftklVZRgIU2qJ GOo9Li/jL0+p4X5EhxebAqUQQZ4rliMyPnuszVffGS71PTSR41op8/adRnF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUryHHaPiBCx3i96j76507N/d1rLgwHwYDVR0j BBgwFoAUb11i7XGbrCYyK4DnMp8wfRweV9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA5YzIyYjEtMWI3Yi00NjcxLWFiOTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3 MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0QxQzFFNTdENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjVENjJFRDcxOUJBQzI2MzIyQjgwRTczMjlGMzA3RDFDMUU1 N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMw N0QxQzFFNTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0SAO743e6fF7qCW8RrEUS1vu3CcSJHmx8H Jt/KPFixFbTVItrC0vO3I6EA7J4xMumvAeClmmkKBfYL+GjwaBO+yQXxA9TKjZRt 8G8P4+TgmEZ/GhqUSnVT0lD2XqvR5bRWxj2S9c1HypeAHBHYF9H0Znwgx3vIQHuG HTn5E5DkQx8v15+0BAjP9OnhNA5c8M9zTRg/S4EXNx2fFB8AI5nEUW0kvAlG3bWZ ax/6D8C1pTUMGtPPvwIRKF0jlV7NBc7niJRPg/KdrwYpmVoqSBLeyqzTnV+f0Zr8 Irj7JVmIJFEDPaMEEaiiwdpa/VxrDrgbkz+a/Jpgh1wGoVoHiZw= -----END CERTIFICATE-----Generated at Thu Sep 24 20:20:29 2026 by rpki-client