$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: AYPCQ2pbJRzzE1UjarOlqQv9pkTYPp2l6cnRXOcpTHw= Subject key identifier: E5:C1:4E:A9:03:CB:C2:4F:BC:B9:EE:B6:3E:25:5A:4A:7E:22:53:59 Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 3C86038656AC2C4D321E1D5FAA673DB3069FFD1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 02:08:22 +0000 Manifest this update: Thu 24 Sep 2026 02:03:22 +0000 Manifest next update: Fri 25 Sep 2026 04:52:22 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) 2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) 3: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: wm2lO9YTA5yq/p4A08U1fuICQIG5wICXXQnyTIDOqhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:86:03:86:56:ac:2c:4d:32:1e:1d:5f:aa:67:3d:b3:06:9f:fd:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: Sep 24 02:03:22 2026 GMT Not After : Sep 25 04:52:22 2026 GMT Subject: CN=E5C14EA903CBC24FBCB9EEB63E255A4A7E225359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:ac:bb:d9:ec:a5:a3:f8:c3:1f:80:8b:87: 2c:f1:df:f7:a9:00:ee:5d:45:49:2e:17:0e:72:03: cc:14:78:45:98:02:0c:56:5c:8c:d2:8b:37:9c:73: 9d:31:88:3d:71:46:40:17:94:66:0b:d3:06:89:c9: e4:52:7c:5a:d9:6f:af:c8:4a:1e:08:e6:b3:45:3f: 08:9a:52:51:ca:61:a9:8a:bb:81:58:86:23:9b:e8: ab:d4:af:0d:20:25:c8:23:fa:25:33:d8:75:47:2b: de:53:5b:35:85:de:ac:54:a0:87:35:50:ae:f4:de: 7a:2e:ba:af:f5:55:64:31:1b:18:be:92:fe:ce:b1: 4d:a3:29:17:ce:3e:93:dd:d8:8a:1f:e5:f0:93:d4: 0d:49:38:6c:ff:a7:eb:3e:5c:cc:05:a3:1f:39:d5: 2e:09:41:de:04:d7:55:c6:bc:2e:4a:7c:20:15:26: 2d:ee:78:df:d6:06:12:0c:1b:b4:78:df:c9:a1:d0: 40:3b:ba:c3:00:9b:ba:37:df:5a:13:3e:09:25:9f: d6:0b:ff:17:7b:ac:8e:b8:26:b6:a6:4d:63:e4:94: 74:5e:ee:8f:38:d0:90:25:5c:9e:bd:0d:0f:3e:ab: 30:26:fc:24:c4:e6:27:13:28:d1:ae:82:4b:92:51: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C1:4E:A9:03:CB:C2:4F:BC:B9:EE:B6:3E:25:5A:4A:7E:22:53:59 X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:33:10:b1:56:33:ba:4f:ad:9e:28:eb:d9:7a:d9:62:6c:a8: 81:6d:6f:31:11:3d:a7:d6:f0:a5:69:d5:ff:59:7f:58:4f:c6: f7:d9:2e:91:f9:09:0b:0c:29:04:b5:47:c9:53:c1:82:d5:75: 12:7f:4d:4d:f3:ee:b6:3a:dd:51:3d:58:28:69:f7:9b:36:7f: 10:d3:ea:f7:ee:13:a0:b2:0d:4c:6b:e0:45:ba:45:50:f2:7a: d6:f6:63:3f:1f:50:c2:7e:8f:02:b5:3b:cf:40:2d:a2:00:c8: df:dc:48:25:8f:03:8f:2e:26:a9:95:3c:e3:d4:20:38:3d:a3: 44:1c:7e:c6:2c:04:47:05:56:13:1d:3e:4a:f8:fc:8d:a7:64: 0b:51:3c:31:e8:cf:c6:55:b5:d1:28:d8:ce:d2:5b:4c:8d:bc: c5:f4:7a:34:0c:d9:c4:8d:64:80:ab:52:b0:b4:fe:4b:93:02: 09:46:51:9d:a2:85:c8:b6:5b:dc:7f:82:b9:72:ed:c9:98:b6: b6:a8:5f:83:3c:7a:3c:ce:d6:06:75:e4:f2:b4:aa:1b:4d:15: 36:c8:14:ff:a7:f3:e3:74:35:9b:6a:60:dc:79:f3:13:6e:f9: ee:8c:85:fe:73:13:82:7d:20:67:2e:01:a8:a7:a7:74:fc:1e: 56:72:9d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIYDhlasLE0yHh1fqmc9swaf/R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjA5MjQwMjAzMjJaFw0yNjA5MjUwNDUyMjJaMDMxMTAvBgNV BAMTKEU1QzE0RUE5MDNDQkMyNEZCQ0I5RUVCNjNFMjU1QTRBN0UyMjUzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Yqy72eylo/jDH4CLhyzx3/ep AO5dRUkuFw5yA8wUeEWYAgxWXIzSizecc50xiD1xRkAXlGYL0waJyeRSfFrZb6/I Sh4I5rNFPwiaUlHKYamKu4FYhiOb6KvUrw0gJcgj+iUz2HVHK95TWzWF3qxUoIc1 UK703nouuq/1VWQxGxi+kv7OsU2jKRfOPpPd2Iof5fCT1A1JOGz/p+s+XMwFox85 1S4JQd4E11XGvC5KfCAVJi3ueN/WBhIMG7R438mh0EA7usMAm7o331oTPgkln9YL /xd7rI64JramTWPklHRe7o840JAlXJ69DQ8+qzAm/CTE5icTKNGugkuSUcNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5cFOqQPLwk+8ue62PiVaSn4iU1kwHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUzELFWM7pPrZ4o69l62WJsqIFtbzERPafW 8KVp1f9Zf1hPxvfZLpH5CQsMKQS1R8lTwYLVdRJ/TU3z7rY63VE9WChp95s2fxDT 6vfuE6CyDUxr4EW6RVDyetb2Yz8fUMJ+jwK1O89ALaIAyN/cSCWPA48uJqmVPOPU IDg9o0QcfsYsBEcFVhMdPkr4/I2nZAtRPDHoz8ZVtdEo2M7SW0yNvMX0ejQM2cSN ZICrUrC0/kuTAglGUZ2ihci2W9x/grly7cmYtraoX4M8ejzO1gZ15PK0qhtNFTbI FP+n8+N0NZtqYNx58xNu+e6Mhf5zE4J9IGcuAainp3T8HlZynVA= -----END CERTIFICATE-----Generated at Thu Sep 24 13:00:53 2026 by rpki-client