$ rpki-client -vvvf rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft File: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft (raw, json) Hash identifier: AaMUurHLeHooW3dWjiRB9l5/LhtGgsHeE5pMKFxdYcs= Subject key identifier: 99:DD:F8:BD:8B:C4:4E:61:EF:3E:10:C5:24:7A:11:65:F2:6D:00:D6 Authority key identifier: 6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 Certificate issuer: /CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1 Certificate serial: 487A6FE8522C7F3D7E69104B3708EA3EFA91CE5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 14:02:14 +0000 Manifest this update: Sat 26 Sep 2026 13:57:14 +0000 Manifest next update: Sun 27 Sep 2026 15:53:14 +0000 Files and hashes: 1: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl (hash: MaRyAcuIASytmFTX/e+xLo+jPzCsUVzHQSanNjHTliA=) 2: 3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (hash: jBjn/26T9nOLxs1yUlk7/z6hpoVPKoLHthzCZsrv0gk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7a:6f:e8:52:2c:7f:3d:7e:69:10:4b:37:08:ea:3e:fa:91:ce:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1 Validity Not Before: Sep 26 13:57:14 2026 GMT Not After : Sep 27 15:53:14 2026 GMT Subject: CN=99DDF8BD8BC44E61EF3E10C5247A1165F26D00D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:34:29:6e:91:e9:09:3b:a4:93:82:96:b3: 3f:fd:b2:b3:a2:cf:0f:54:6d:a2:dc:e1:69:8f:79: 3c:fd:e4:a5:47:6c:e2:f3:01:c5:da:16:16:21:1d: 17:6d:65:82:d3:e6:1c:af:40:60:49:8d:f6:ce:7e: 89:06:67:a0:c1:f9:86:aa:6c:fb:55:bd:1b:a8:5d: 36:80:da:ed:65:14:7a:6e:1a:cc:71:5f:4f:17:4c: 90:3c:78:fb:20:b8:65:5b:52:3b:d5:fd:96:56:1c: d0:07:42:85:aa:a1:6e:d5:8d:e5:09:bd:f0:4b:d0: 3a:66:43:c4:42:5b:7d:75:89:9a:ee:16:60:75:33: a8:9d:b2:2e:9c:8d:40:68:fe:06:b9:91:9e:f0:cf: 3b:e3:37:3f:89:f2:8b:02:d3:23:45:d2:12:1f:b8: 93:99:f6:4e:55:c9:bf:77:a8:75:71:c0:ad:2c:a3: 08:28:b6:12:b8:5e:02:be:0e:8c:a9:63:00:ff:68: 9b:a8:fb:8a:76:9b:18:57:e2:8b:6b:2f:d9:92:6e: fb:ef:d0:da:7e:06:f7:e7:24:56:fe:a6:e1:f1:92: cd:ad:6c:3f:4e:e7:17:4f:6b:61:70:85:35:c0:53: af:12:71:97:a1:fa:46:fb:69:58:67:90:e4:ca:a1: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DD:F8:BD:8B:C4:4E:61:EF:3E:10:C5:24:7A:11:65:F2:6D:00:D6 X509v3 Authority Key Identifier: keyid:6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d9:1c:15:b5:3c:3e:9e:fc:b3:60:ed:4c:a9:03:7f:75:6b: 9a:52:86:1a:82:a4:66:b9:10:33:03:e2:b9:fd:61:8e:1e:f5: 4b:e8:63:7a:d6:03:8c:64:43:21:16:40:ae:c2:1e:15:98:13: ed:93:b7:23:f6:71:c1:82:2a:da:9d:7c:21:6d:61:63:48:b0: 97:3e:04:33:e9:a7:d4:9e:e0:30:59:40:28:b7:af:c5:e6:4a: 71:4f:88:d6:fc:55:ae:ef:7b:23:c4:03:2b:16:42:7b:f1:37: 66:fe:4b:d4:48:b6:1b:b8:34:ac:95:64:c8:4e:df:e5:4c:c3: f1:d9:e1:e9:8a:70:c5:7b:fe:b8:85:3f:4d:bb:dc:8f:0d:4c: f4:c9:3d:41:a8:66:ba:49:ff:18:5a:98:fd:2c:42:0d:89:04: 43:86:c2:24:f3:f0:bd:34:11:94:8a:e7:9d:71:1a:92:36:3d: 30:2e:c5:1a:10:4b:6e:23:bc:11:e7:bf:a8:61:d3:60:dd:32: 68:42:be:75:db:95:db:a8:cb:7e:ca:47:92:f0:25:ab:18:c7: 07:e3:92:7b:91:b4:b6:fd:13:f0:cb:7c:80:71:e8:0a:5a:18: 54:3a:e9:b1:5d:05:7c:9d:77:fa:c6:f6:c2:68:c6:f7:c3:74: 8c:ef:c7:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHpv6FIsfz1+aRBLNwjqPvqRzlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZBRTVENDREREU5OTdERjBBMDhDNTVEREZCRTEyRDI2 RjFGRDlCMTAeFw0yNjA5MjYxMzU3MTRaFw0yNjA5MjcxNTUzMTRaMDMxMTAvBgNV BAMTKDk5RERGOEJEOEJDNDRFNjFFRjNFMTBDNTI0N0ExMTY1RjI2RDAwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoTQpbpHpCTukk4KWsz/9srOi zw9UbaLc4WmPeTz95KVHbOLzAcXaFhYhHRdtZYLT5hyvQGBJjfbOfokGZ6DB+Yaq bPtVvRuoXTaA2u1lFHpuGsxxX08XTJA8ePsguGVbUjvV/ZZWHNAHQoWqoW7VjeUJ vfBL0DpmQ8RCW311iZruFmB1M6idsi6cjUBo/ga5kZ7wzzvjNz+J8osC0yNF0hIf uJOZ9k5Vyb93qHVxwK0sowgothK4XgK+DoypYwD/aJuo+4p2mxhX4otrL9mSbvvv 0Np+BvfnJFb+puHxks2tbD9O5xdPa2FwhTXAU68ScZeh+kb7aVhnkOTKoRV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmd34vYvETmHvPhDFJHoRZfJtANYwHwYDVR0j BBgwFoAUb65dRN3pl98KCMVd374S0m8f2bEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxZTMwNWItMDAzOS00YjBlLThjNTktMjQyMzI4MGI3YzNjLzAvNkZBRTVENDRE REU5OTdERjBBMDhDNTVEREZCRTEyRDI2RjFGRDlCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkFFNUQ0NERERTk5N0RGMEEwOEM1NURERkJFMTJEMjZGMUZE OUIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxZTMwNWItMDAzOS00YjBlLThj NTktMjQyMzI4MGI3YzNjLzAvNkZBRTVENDREREU5OTdERjBBMDhDNTVEREZCRTEy RDI2RjFGRDlCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvZHBW1PD6e/LNg7UypA391a5pShhqCpGa5 EDMD4rn9YY4e9UvoY3rWA4xkQyEWQK7CHhWYE+2TtyP2ccGCKtqdfCFtYWNIsJc+ BDPpp9Se4DBZQCi3r8XmSnFPiNb8Va7veyPEAysWQnvxN2b+S9RIthu4NKyVZMhO 3+VMw/HZ4emKcMV7/riFP0273I8NTPTJPUGoZrpJ/xhamP0sQg2JBEOGwiTz8L00 EZSK551xGpI2PTAuxRoQS24jvBHnv6hh02DdMmhCvnXblduoy37KR5LwJasYxwfj knuRtLb9E/DLfIBx6ApaGFQ66bFdBXydd/rG9sJoxvfDdIzvxxk= -----END CERTIFICATE-----Generated at Sun Sep 27 04:31:19 2026 by rpki-client