$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft File: 6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft (raw, json) Hash identifier: y0TmaxptCd8Pv+eabbZA6UM3jM19AXjgKVbTedoL8E4= Subject key identifier: 1E:1E:86:AF:F3:91:D6:3B:A7:35:3C:80:DA:68:5A:99:84:49:DE:C3 Authority key identifier: 6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43 Certificate issuer: /CN=6D00F9E4E09CA61520260BEFBC9B7654699D1743 Certificate serial: 3BD097D222DEE3D4E0C0F60B32468C919A9EBD5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:27:51 +0000 Manifest this update: Wed 23 Sep 2026 09:22:51 +0000 Manifest next update: Thu 24 Sep 2026 12:26:51 +0000 Files and hashes: 1: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: D91F44iAtcWZE5ZPf8YuoNDIxLpGpmtmGkzs14Ogsnw=) 2: 6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl (hash: 9JMR/n4hrXQ/UZPLoF27AB5jddDDeW5XkSHQ9UEqpRM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d0:97:d2:22:de:e3:d4:e0:c0:f6:0b:32:46:8c:91:9a:9e:bd:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D00F9E4E09CA61520260BEFBC9B7654699D1743 Validity Not Before: Sep 23 09:22:51 2026 GMT Not After : Sep 24 12:26:51 2026 GMT Subject: CN=1E1E86AFF391D63BA7353C80DA685A998449DEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:52:4c:72:f1:cf:1d:b5:1e:b4:da:95:57:bb: 7f:6f:62:11:d6:8b:c3:97:18:3f:3c:e3:be:66:83: 7e:67:97:11:a0:af:0b:01:1e:29:45:4f:fb:c1:85: af:83:e8:81:ee:41:3a:8e:15:40:98:46:00:55:40: 7d:46:2b:cb:cc:37:98:05:a0:ce:f6:67:1f:ff:5d: 9c:59:4c:b1:e7:6f:c1:f7:da:51:4f:47:45:97:6b: 68:7d:2a:ee:15:1d:ae:6a:b6:37:64:87:a1:83:15: 51:7a:ee:06:06:c3:04:3c:9a:35:fa:5b:68:07:78: db:0f:cf:a9:a0:32:7d:f3:25:81:34:08:07:4f:39: 4b:f3:5f:3c:38:24:82:5b:76:63:15:7a:91:28:06: 3f:d2:4f:95:a2:ce:80:77:c8:99:d6:b7:67:77:0f: a3:88:19:f2:68:ff:15:ce:f9:96:da:f6:c1:7b:d8: ee:6e:77:c1:5b:2a:b0:22:30:82:75:48:ac:a6:7d: 85:d7:db:09:0e:66:82:e5:dc:9d:a3:4b:94:95:3e: 75:00:47:d2:e4:1d:7d:82:0e:8c:a3:32:f6:42:ac: 1a:c7:ad:d8:1d:d3:97:5d:38:1b:29:c2:26:2b:e7: bc:90:a0:16:46:c6:80:7b:a5:11:61:88:81:b1:d5: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1E:86:AF:F3:91:D6:3B:A7:35:3C:80:DA:68:5A:99:84:49:DE:C3 X509v3 Authority Key Identifier: keyid:6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:64:d2:8f:89:9e:03:9b:7c:e9:da:05:7b:06:16:24:ba:66: a0:56:16:a0:e7:c6:13:10:07:6b:38:65:6d:71:db:79:c9:3c: e7:7c:ff:3e:42:69:12:28:75:76:14:81:6e:56:49:01:77:77: ba:e5:ef:95:dc:ba:0e:c2:24:80:04:60:56:18:23:9c:a2:08: c2:3e:8e:50:50:03:58:84:de:79:9a:a6:51:fe:bd:6b:03:19: 33:7f:67:6e:a0:46:2d:4d:b0:21:06:97:0a:2b:31:95:25:31: cc:a0:15:05:d6:2e:e3:1c:e9:ef:5c:ee:d9:0b:45:dd:bc:6c: ea:10:34:7f:e7:3d:31:ae:4f:c6:fa:f7:13:51:61:a1:93:f6: 7b:dc:15:84:b3:d9:81:8b:89:2f:2e:22:c4:24:b3:ea:e1:a5: c4:74:41:6e:a3:38:ac:36:1a:5d:9e:69:ff:1b:5b:fc:5b:c0: ec:06:89:6a:b9:83:67:8a:7f:c1:c3:65:fa:18:34:1e:5e:51: b0:df:9f:44:7e:ec:60:93:72:f6:0b:42:83:e8:bc:20:73:34: 77:01:6f:cc:02:e6:33:87:15:f9:63:7d:cf:1a:e3:a4:c0:79: 04:cf:66:d4:e3:8a:b4:cd:52:fd:5c:bc:d6:2b:4d:ca:78:c6: cf:c1:e6:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9CX0iLe49TgwPYLMkaMkZqevV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQwMEY5RTRFMDlDQTYxNTIwMjYwQkVGQkM5Qjc2NTQ2 OTlEMTc0MzAeFw0yNjA5MjMwOTIyNTFaFw0yNjA5MjQxMjI2NTFaMDMxMTAvBgNV BAMTKDFFMUU4NkFGRjM5MUQ2M0JBNzM1M0M4MERBNjg1QTk5ODQ0OURFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfUkxy8c8dtR602pVXu39vYhHW i8OXGD88475mg35nlxGgrwsBHilFT/vBha+D6IHuQTqOFUCYRgBVQH1GK8vMN5gF oM72Zx//XZxZTLHnb8H32lFPR0WXa2h9Ku4VHa5qtjdkh6GDFVF67gYGwwQ8mjX6 W2gHeNsPz6mgMn3zJYE0CAdPOUvzXzw4JIJbdmMVepEoBj/ST5WizoB3yJnWt2d3 D6OIGfJo/xXO+Zba9sF72O5ud8FbKrAiMIJ1SKymfYXX2wkOZoLl3J2jS5SVPnUA R9LkHX2CDoyjMvZCrBrHrdgd05ddOBspwiYr57yQoBZGxoB7pRFhiIGx1SHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHh6Gr/OR1junNTyA2mhamYRJ3sMwHwYDVR0j BBgwFoAUbQD55OCcphUgJgvvvJt2VGmdF0MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGUzMWM2OWEtYjc5Mi00MGE0LWExNDQtMjM0YjVhMWRkZTUyLzAvNkQwMEY5RTRF MDlDQTYxNTIwMjYwQkVGQkM5Qjc2NTQ2OTlEMTc0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDAwRjlFNEUwOUNBNjE1MjAyNjBCRUZCQzlCNzY1NDY5OUQx NzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGUzMWM2OWEtYjc5Mi00MGE0LWEx NDQtMjM0YjVhMWRkZTUyLzAvNkQwMEY5RTRFMDlDQTYxNTIwMjYwQkVGQkM5Qjc2 NTQ2OTlEMTc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRk0o+JngObfOnaBXsGFiS6ZqBWFqDnxhMQ B2s4ZW1x23nJPOd8/z5CaRIodXYUgW5WSQF3d7rl75Xcug7CJIAEYFYYI5yiCMI+ jlBQA1iE3nmaplH+vWsDGTN/Z26gRi1NsCEGlworMZUlMcygFQXWLuMc6e9c7tkL Rd28bOoQNH/nPTGuT8b69xNRYaGT9nvcFYSz2YGLiS8uIsQks+rhpcR0QW6jOKw2 Gl2eaf8bW/xbwOwGiWq5g2eKf8HDZfoYNB5eUbDfn0R+7GCTcvYLQoPovCBzNHcB b8wC5jOHFfljfc8a46TAeQTPZtTjirTNUv1cvNYrTcp4xs/B5pk= -----END CERTIFICATE-----Generated at Thu Sep 24 03:54:58 2026 by rpki-client