$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: GpIjwcceEgnrE8uFH3LjJg8gwKLOICiDq7/oVmsmksU= Subject key identifier: 0E:D2:ED:3B:3C:03:A2:B1:9A:53:EF:2F:32:A9:1D:7C:20:E1:FC:6A Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 19741ACE1963400CAF26DDE8F8DC2A817BDEE8DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 00:50:24 +0000 Manifest this update: Sun 27 Sep 2026 00:45:24 +0000 Manifest next update: Mon 28 Sep 2026 04:26:24 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) 2: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: pQl3B1i6O3/9VQoD5ZAPPcNN0l+DkjTSx1KuOTosQ8M=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:74:1a:ce:19:63:40:0c:af:26:dd:e8:f8:dc:2a:81:7b:de:e8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: Sep 27 00:45:24 2026 GMT Not After : Sep 28 04:26:24 2026 GMT Subject: CN=0ED2ED3B3C03A2B19A53EF2F32A91D7C20E1FC6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:e7:5c:a2:7e:d6:aa:c4:0d:de:a5:cc:40: 70:ae:d5:b6:de:a6:bb:77:77:98:d2:fc:70:0c:0e: af:c0:82:7e:d9:d0:25:b6:40:0c:30:8e:11:82:c4: e6:c8:37:4d:be:20:f2:eb:2c:6a:ed:9f:2d:28:4e: b0:69:07:33:2b:4b:ba:ae:72:5f:7f:49:96:f0:9e: 09:3d:db:01:c8:b1:b7:b5:cc:54:ea:c3:4c:e1:aa: a4:c3:84:ab:a3:41:95:4f:fa:40:1f:8e:04:34:12: 72:91:95:d1:59:a2:19:8f:e4:54:ef:f2:30:80:f5: 8a:e2:da:a6:7a:e3:f3:12:d7:65:13:14:e5:43:6e: be:0b:54:0d:67:2a:7d:d1:07:b1:c1:0c:0d:4e:d5: 0a:75:7e:89:0b:7e:65:90:97:c9:75:7e:19:69:5d: ea:10:97:7d:4f:b8:a4:19:a9:ad:f8:d1:95:57:22: 9f:02:c2:89:fc:9f:f4:a1:fd:41:2b:f9:c1:4b:e4: e9:26:ec:84:3d:a4:55:6f:77:8a:85:fb:45:0d:0f: 55:a7:16:f0:87:e5:21:e0:15:03:11:a2:57:02:f4: 7b:da:cf:1d:5a:17:09:1b:ba:8c:78:a3:7b:78:4f: 19:d8:67:9a:0e:04:19:d7:b3:eb:11:14:43:5f:60: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D2:ED:3B:3C:03:A2:B1:9A:53:EF:2F:32:A9:1D:7C:20:E1:FC:6A X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2b:dd:e3:78:01:92:c4:c6:73:06:fe:8d:cd:df:2a:09:e1: 15:0f:8d:24:c8:0a:e8:f9:5c:09:d1:9d:43:13:cb:95:e1:ac: 7a:e8:1c:07:f3:f1:c8:57:71:03:cd:32:51:21:d4:b2:26:df: 79:57:e5:d1:93:20:b5:4c:92:13:25:27:aa:4e:8a:ec:13:39: 85:86:bf:46:de:91:f4:54:87:a0:ce:5f:a0:80:e7:d2:b0:d9: af:81:77:0b:32:50:b5:5a:89:bb:db:f8:77:ea:0a:b1:41:a2: 25:cc:ae:27:38:c8:a7:f4:88:95:8d:a8:17:4f:d9:ac:d9:30: b3:37:c1:03:5b:71:ff:fd:44:26:43:89:37:1a:3c:2e:41:5b: 5c:f6:59:90:b3:cb:d7:47:e3:f9:c4:98:40:a1:b2:2b:4c:08: 95:8b:74:82:68:23:21:bb:eb:cd:3f:d1:a7:40:69:68:c1:94: 38:e7:d2:4a:33:32:a9:03:81:90:61:77:09:dd:5b:71:82:5a: 6a:93:b6:d2:f7:94:75:28:2c:7f:68:2a:c5:e9:4c:23:04:af: 89:52:3a:06:ae:2a:73:45:bd:03:67:19:a4:e6:f9:19:58:24: 29:d9:3b:66:9d:73:11:69:61:bd:0f:9c:e2:da:84:de:31:63: b6:3b:8f:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXQazhljQAyvJt3o+NwqgXve6NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA5MjcwMDQ1MjRaFw0yNjA5MjgwNDI2MjRaMDMxMTAvBgNV BAMTKDBFRDJFRDNCM0MwM0EyQjE5QTUzRUYyRjMyQTkxRDdDMjBFMUZDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4edcon7WqsQN3qXMQHCu1bbe prt3d5jS/HAMDq/Agn7Z0CW2QAwwjhGCxObIN02+IPLrLGrtny0oTrBpBzMrS7qu cl9/SZbwngk92wHIsbe1zFTqw0zhqqTDhKujQZVP+kAfjgQ0EnKRldFZohmP5FTv 8jCA9Yri2qZ64/MS12UTFOVDbr4LVA1nKn3RB7HBDA1O1Qp1fokLfmWQl8l1fhlp XeoQl31PuKQZqa340ZVXIp8Cwon8n/Sh/UEr+cFL5Okm7IQ9pFVvd4qF+0UND1Wn FvCH5SHgFQMRolcC9Hvazx1aFwkbuox4o3t4TxnYZ5oOBBnXs+sRFENfYF/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtLtOzwDorGaU+8vMqkdfCDh/GowHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4r3eN4AZLExnMG/o3N3yoJ4RUPjSTICuj5 XAnRnUMTy5XhrHroHAfz8chXcQPNMlEh1LIm33lX5dGTILVMkhMlJ6pOiuwTOYWG v0bekfRUh6DOX6CA59Kw2a+BdwsyULVaibvb+HfqCrFBoiXMric4yKf0iJWNqBdP 2azZMLM3wQNbcf/9RCZDiTcaPC5BW1z2WZCzy9dH4/nEmEChsitMCJWLdIJoIyG7 680/0adAaWjBlDjn0kozMqkDgZBhdwndW3GCWmqTttL3lHUoLH9oKsXpTCMEr4lS OgauKnNFvQNnGaTm+RlYJCnZO2adcxFpYb0PnOLahN4xY7Y7j+k= -----END CERTIFICATE-----Generated at Sun Sep 27 11:51:30 2026 by rpki-client