$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft File: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft (raw, json) Hash identifier: 4qwt8vWFFbN7Azes+j1sMUsVGlPRvP1GuBJmUQeA3Wk= Subject key identifier: AE:58:A0:7B:C6:47:5C:CD:93:77:85:7B:42:E6:35:60:BD:0E:79:61 Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F Certificate issuer: /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Certificate serial: 7D2FE4101CF481BEB2D2F446922F7B53E9AD297B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 08:26:40 +0000 Manifest this update: Wed 23 Sep 2026 08:21:40 +0000 Manifest next update: Thu 24 Sep 2026 11:21:40 +0000 Files and hashes: 1: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl (hash: p7yYHtlLleTRev/gQpoPBgpAjQvyOmb92IcSsHWl2Xw=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: 5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2f:e4:10:1c:f4:81:be:b2:d2:f4:46:92:2f:7b:53:e9:ad:29:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Validity Not Before: Sep 23 08:21:40 2026 GMT Not After : Sep 24 11:21:40 2026 GMT Subject: CN=AE58A07BC6475CCD9377857B42E63560BD0E7961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:f5:e4:96:12:c4:37:5d:f4:45:c7:ca:56: f8:d3:b8:be:d7:d6:5a:36:5b:08:44:8e:d6:00:9b: 12:27:ad:5b:9d:d9:c3:09:9b:cb:11:6c:2d:00:6d: 3c:65:c9:6d:4a:ee:c4:c8:d6:f5:85:2d:b6:dd:71: 7f:28:0e:a3:32:22:c2:35:ad:cd:1c:f7:2e:13:19: 3a:46:1b:6d:73:3f:5f:da:ac:db:7c:cd:d9:74:79: bc:e1:7e:a4:72:65:7f:ee:6a:42:63:5c:c1:08:09: fd:81:f6:3d:96:f6:01:ac:e5:90:61:77:85:ad:9f: 7b:06:3f:c3:b6:b6:88:d6:48:60:93:ef:e8:2e:f2: eb:99:90:d4:f7:5b:a0:b3:32:8e:d0:69:8c:49:8e: 1c:3b:c6:a5:40:74:2f:d9:14:8a:48:d7:09:89:06: 6c:27:86:0d:43:c6:5a:55:5a:30:ea:5b:ee:f1:86: 98:31:a2:1b:5b:bd:fe:29:69:4d:95:ae:54:dd:42: 9e:bc:ba:1e:72:3a:97:77:bc:8f:82:49:b4:fd:46: 72:46:26:89:fd:2b:ba:b2:fd:98:ad:2c:eb:7f:8c: 13:ec:a9:f4:d5:a1:c9:67:0e:47:85:bf:a0:cf:55: 7f:20:f8:10:db:e7:09:7e:60:14:e7:64:fb:6a:1c: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:A0:7B:C6:47:5C:CD:93:77:85:7B:42:E6:35:60:BD:0E:79:61 X509v3 Authority Key Identifier: keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b3:26:5b:20:be:14:20:67:38:bc:86:b9:8a:16:56:b3:96: 07:f0:ec:72:1c:99:18:f5:6b:bf:cd:0e:fe:b6:98:1b:20:7f: 61:02:db:5e:e4:6e:01:26:e2:3d:4a:9a:7f:6a:04:89:50:7b: da:d9:dc:9e:dc:27:28:15:f4:47:c9:82:b9:13:9c:49:c2:b4: 72:a2:99:e7:06:b7:ee:ee:66:ce:bf:1a:89:9a:71:00:ea:3f: 7c:14:99:50:d7:fa:aa:07:16:d6:e2:0a:42:89:4e:dc:62:19: bd:11:cf:20:4c:53:b8:60:75:46:5c:c8:8b:84:de:7e:b1:ba: 66:d6:22:f0:8c:dc:f4:ee:f6:6c:4b:4d:c4:a2:cf:04:40:a1: 2d:fd:cb:b4:6c:9d:f3:c4:a0:51:51:82:50:ba:eb:e9:7f:2c: de:4a:f2:a8:eb:5a:e0:6e:2b:4f:05:00:89:c4:cc:d2:ea:46: 88:20:36:fa:f4:d0:b3:6c:fb:8e:3d:37:a7:77:dc:a6:d9:f4: 68:7b:2a:4c:fd:3c:18:22:c4:57:71:65:e0:b5:32:b7:83:e1: 09:db:07:68:e2:e2:11:09:ce:96:d6:7a:53:1d:a1:e7:d4:9e: 44:97:54:d6:7c:d6:65:51:4a:4b:75:2a:df:51:34:62:97:f2: 2e:9c:0c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfS/kEBz0gb6y0vRGki97U+mtKXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNEQzJG OTI2RkI3RjAeFw0yNjA5MjMwODIxNDBaFw0yNjA5MjQxMTIxNDBaMDMxMTAvBgNV BAMTKEFFNThBMDdCQzY0NzVDQ0Q5Mzc3ODU3QjQyRTYzNTYwQkQwRTc5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuPXklhLEN130RcfKVvjTuL7X 1lo2WwhEjtYAmxInrVud2cMJm8sRbC0AbTxlyW1K7sTI1vWFLbbdcX8oDqMyIsI1 rc0c9y4TGTpGG21zP1/arNt8zdl0ebzhfqRyZX/uakJjXMEICf2B9j2W9gGs5ZBh d4Wtn3sGP8O2tojWSGCT7+gu8uuZkNT3W6CzMo7QaYxJjhw7xqVAdC/ZFIpI1wmJ Bmwnhg1DxlpVWjDqW+7xhpgxohtbvf4paU2VrlTdQp68uh5yOpd3vI+CSbT9RnJG Jon9K7qy/ZitLOt/jBPsqfTVoclnDkeFv6DPVX8g+BDb5wl+YBTnZPtqHJGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlige8ZHXM2Td4V7QuY1YL0OeWEwHwYDVR0j BBgwFoAUYwkJG499SmroxqEWhdg9wvkm+38wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU0NmUwOWEtYzAwNy00YjBjLTk0NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4 RjdENEE2QUU4QzZBMTE2ODVEODNEQzJGOTI2RkI3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MzA5MDkxQjhGN0Q0QTZBRThDNkExMTY4NUQ4M0RDMkY5MjZG QjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNE QzJGOTI2RkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2zJlsgvhQgZzi8hrmKFlazlgfw7HIcmRj1 a7/NDv62mBsgf2EC217kbgEm4j1Kmn9qBIlQe9rZ3J7cJygV9EfJgrkTnEnCtHKi mecGt+7uZs6/GomacQDqP3wUmVDX+qoHFtbiCkKJTtxiGb0RzyBMU7hgdUZcyIuE 3n6xumbWIvCM3PTu9mxLTcSizwRAoS39y7RsnfPEoFFRglC66+l/LN5K8qjrWuBu K08FAInEzNLqRoggNvr00LNs+449N6d33KbZ9Gh7Kkz9PBgixFdxZeC1MreD4Qnb B2ji4hEJzpbWelMdoefUnkSXVNZ81mVRSkt1Kt9RNGKX8i6cDHQ= -----END CERTIFICATE-----Generated at Wed Sep 23 13:21:29 2026 by rpki-client