$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft File: 6A18E24186A3D3ED8D5089777A2464365FF00A27.mft (raw, json) Hash identifier: GppGK+8Y4qaBp2NC7WPa4Ic4JhC+7UdOSsnTpvK9I3k= Subject key identifier: 11:67:8E:A6:29:45:70:36:B2:48:AB:FF:A9:66:06:65:CD:1B:83:D2 Authority key identifier: 6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27 Certificate issuer: /CN=6A18E24186A3D3ED8D5089777A2464365FF00A27 Certificate serial: 2C6854AB42C8CDE2E128527B318B5E7CA59D044E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft Manifest number: C4 Signing time: Sun 27 Sep 2026 02:37:21 +0000 Manifest this update: Sun 27 Sep 2026 02:32:21 +0000 Manifest next update: Mon 28 Sep 2026 03:25:21 +0000 Files and hashes: 1: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: h3C8yms9g4R1YiVLRu6ZS9/9U4FvJR5pkKQb8FutKck=) 2: 6A18E24186A3D3ED8D5089777A2464365FF00A27.crl (hash: dnL0lZr1iQvwc98lH2WpDCRUcUQ6V0MAvQF2du5odt8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:68:54:ab:42:c8:cd:e2:e1:28:52:7b:31:8b:5e:7c:a5:9d:04:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A18E24186A3D3ED8D5089777A2464365FF00A27 Validity Not Before: Sep 27 02:32:21 2026 GMT Not After : Sep 28 03:25:21 2026 GMT Subject: CN=11678EA629457036B248ABFFA9660665CD1B83D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:9f:3f:1b:19:60:88:16:ec:db:59:b9:63: 73:08:8d:b2:00:ae:cc:05:e7:56:77:be:ad:ab:d4: 1e:e7:cf:ca:bc:90:ce:12:3f:d9:10:2a:e0:cb:71: 9a:ce:e9:bd:b5:15:26:99:22:68:89:ba:c5:46:ef: c9:5c:2c:58:de:88:5a:28:72:c1:c8:ea:70:f5:91: 2c:b4:1b:65:42:49:9a:7f:fd:8e:09:dd:8f:b6:e8: 82:44:1f:07:c5:ab:6c:50:ed:2b:fb:05:1b:ff:a1: 9a:c6:09:d3:c1:f5:d0:79:e1:a6:d7:b1:8a:38:d7: 64:1b:2d:be:62:59:d7:28:1c:1a:f1:3c:aa:fe:82: 8b:60:52:bf:67:50:b9:9d:bc:46:05:56:77:1c:63: e1:16:29:a4:07:f6:d0:22:40:a9:b0:94:db:5f:1b: b4:0e:f2:f6:14:32:f3:7c:22:02:6b:1f:e2:2b:62: b3:3c:ee:26:af:43:54:49:b5:d6:d0:6f:7b:8a:a2: 3b:a6:77:35:8b:19:ac:d1:da:ea:15:9a:a9:59:5a: 0e:ff:ec:e8:59:bb:51:4b:a3:45:b1:00:41:8e:3f: df:47:36:53:fe:e0:cc:68:36:5c:8c:ea:bc:ea:76: c4:c5:e1:6b:72:9a:7a:13:c2:85:f7:b3:8c:f4:09: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:67:8E:A6:29:45:70:36:B2:48:AB:FF:A9:66:06:65:CD:1B:83:D2 X509v3 Authority Key Identifier: keyid:6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a9:04:6d:c5:0d:2a:81:d5:ab:05:42:7d:f3:17:4f:41:75: 31:33:a6:cd:c4:bf:83:19:ce:a7:e9:fb:51:01:49:7f:3a:c7: 73:f9:92:89:a3:e7:b6:a9:83:5a:c9:f4:37:ef:15:cd:46:57: 7e:d6:45:99:5f:78:3a:80:8c:9f:ee:25:24:ff:65:2f:86:c9: 22:79:a0:e4:06:22:27:66:48:f1:77:a4:53:17:9f:b2:b8:e0: 39:1e:96:7c:88:43:c2:db:97:93:55:bf:fb:4a:b2:99:f5:74: 48:72:23:6c:6c:3c:2c:7b:45:19:1c:92:42:5f:6a:19:74:b7: 7a:2f:fc:99:0d:be:a1:8f:93:b2:5b:76:62:39:9f:7f:1d:eb: c2:e7:5b:17:57:c6:e2:ee:4a:e0:b2:44:68:47:9c:43:df:1e: d0:2f:bf:1e:4a:5e:d2:5d:7e:a5:7f:44:06:71:10:8c:29:c4: 34:33:90:f4:27:5c:bb:f2:98:44:7b:a1:06:fa:eb:3d:2c:c3: 4c:bb:0d:61:a5:26:a2:e7:4c:0c:27:9f:65:04:40:af:01:ca: 1f:8f:21:06:2c:12:ef:a0:fb:14:59:9b:90:d4:7f:7b:b0:50: fc:91:6c:d9:68:40:fb:14:61:2b:60:3d:25:35:61:53:ec:82: 7a:5b:39:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULGhUq0LIzeLhKFJ7MYtefKWdBE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkExOEUyNDE4NkEzRDNFRDhENTA4OTc3N0EyNDY0MzY1 RkYwMEEyNzAeFw0yNjA5MjcwMjMyMjFaFw0yNjA5MjgwMzI1MjFaMDMxMTAvBgNV BAMTKDExNjc4RUE2Mjk0NTcwMzZCMjQ4QUJGRkE5NjYwNjY1Q0QxQjgzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0w58/GxlgiBbs21m5Y3MIjbIA rswF51Z3vq2r1B7nz8q8kM4SP9kQKuDLcZrO6b21FSaZImiJusVG78lcLFjeiFoo csHI6nD1kSy0G2VCSZp//Y4J3Y+26IJEHwfFq2xQ7Sv7BRv/oZrGCdPB9dB54abX sYo412QbLb5iWdcoHBrxPKr+gotgUr9nULmdvEYFVnccY+EWKaQH9tAiQKmwlNtf G7QO8vYUMvN8IgJrH+IrYrM87iavQ1RJtdbQb3uKojumdzWLGazR2uoVmqlZWg7/ 7OhZu1FLo0WxAEGOP99HNlP+4MxoNlyM6rzqdsTF4WtymnoTwoX3s4z0CROlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWeOpilFcDaySKv/qWYGZc0bg9IwHwYDVR0j BBgwFoAUahjiQYaj0+2NUIl3eiRkNl/wCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzEvNkExOEUyNDE4 NkEzRDNFRDhENTA4OTc3N0EyNDY0MzY1RkYwMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QTE4RTI0MTg2QTNEM0VEOEQ1MDg5Nzc3QTI0NjQzNjVGRjAw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvNkExOEUyNDE4NkEzRDNFRDhENTA4OTc3N0EyNDY0 MzY1RkYwMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+pBG3FDSqB1asFQn3zF09BdTEzps3Ev4MZ zqfp+1EBSX86x3P5komj57apg1rJ9DfvFc1GV37WRZlfeDqAjJ/uJST/ZS+GySJ5 oOQGIidmSPF3pFMXn7K44DkelnyIQ8Lbl5NVv/tKspn1dEhyI2xsPCx7RRkckkJf ahl0t3ov/JkNvqGPk7JbdmI5n38d68LnWxdXxuLuSuCyRGhHnEPfHtAvvx5KXtJd fqV/RAZxEIwpxDQzkPQnXLvymER7oQb66z0sw0y7DWGlJqLnTAwnn2UEQK8Byh+P IQYsEu+g+xRZm5DUf3uwUPyRbNloQPsUYStgPSU1YVPsgnpbOV0= -----END CERTIFICATE-----Generated at Sun Sep 27 08:37:48 2026 by rpki-client