$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft File: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft (raw, json) Hash identifier: n9g9xXHCilR670a5XFA9pfiSIwvSeEcxZ0DMDF4ljwc= Subject key identifier: 75:AE:83:A0:CC:A9:FD:53:6E:C0:1F:F9:06:C7:B0:3E:3C:FD:E3:2B Authority key identifier: 6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF Certificate issuer: /CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Certificate serial: 7DA37ED37E554E5CF024C1F87074FCBCB6FB79F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:36:50 +0000 Manifest this update: Wed 23 Sep 2026 12:31:50 +0000 Manifest next update: Thu 24 Sep 2026 12:36:50 +0000 Files and hashes: 1: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: 8mfpAqlBNjaIkK/YqdqwM4IvfsvZ409bkNBx3HDJzaQ=) 2: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: yRu2jjYmsdVB4YWUV1S9avXrEbZsjqsyyjcuTEPOAYc=) 3: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl (hash: gs8ehfbARv9B/wi/0Q7VNcrZ+yH+RxIhx3rYAknwyNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:7e:d3:7e:55:4e:5c:f0:24:c1:f8:70:74:fc:bc:b6:fb:79:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Validity Not Before: Sep 23 12:31:50 2026 GMT Not After : Sep 24 12:36:50 2026 GMT Subject: CN=75AE83A0CCA9FD536EC01FF906C7B03E3CFDE32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:e7:59:b6:c9:98:e8:e1:3a:61:80:7f:13: ac:61:25:2a:08:19:62:b0:71:61:b1:53:a8:79:60: 0a:ef:64:69:b7:b6:63:ce:34:20:71:86:a5:0e:dc: cc:2c:9f:50:89:e5:43:50:57:b7:3f:1c:15:86:19: 4a:be:1f:17:79:60:ac:47:7f:b6:02:17:69:38:0d: 30:fe:68:56:c9:64:5a:1a:fe:20:6a:49:ff:95:8a: db:5b:27:d3:c6:9b:31:19:0e:61:97:95:d7:86:ef: 44:2d:3a:ed:e9:08:8a:86:f4:12:2a:2f:01:8f:b3: 9b:97:00:2b:6e:cc:cf:07:8e:82:85:96:b3:9f:46: cc:47:64:9b:88:eb:28:29:e0:d7:32:fb:ca:6f:94: 81:89:a6:9e:f8:bb:00:1d:2b:2e:4c:86:6d:47:aa: 1b:8e:44:96:c9:4f:2a:8f:8a:80:b9:77:9a:73:50: 0d:21:bf:d6:9c:ef:98:8a:fc:fe:43:71:c2:58:4c: 6f:4a:6a:ba:94:a4:10:73:6c:a2:3e:54:3d:a0:b6: fc:2b:e1:37:b9:93:2e:69:d8:90:c2:0c:07:c3:ae: 44:95:a9:3b:57:30:ef:26:8a:f9:25:e7:24:09:e5: f5:4e:08:d4:b8:17:e1:d0:99:99:22:eb:a1:d1:9f: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AE:83:A0:CC:A9:FD:53:6E:C0:1F:F9:06:C7:B0:3E:3C:FD:E3:2B X509v3 Authority Key Identifier: keyid:6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1c:b4:99:83:59:aa:58:8c:5e:f8:3a:14:e5:12:06:38:68: ba:5a:ac:c3:3e:17:f2:99:ae:8b:cf:dc:a6:ff:e3:78:4b:81: a1:da:21:43:85:47:a9:df:f2:71:4b:2a:d3:9c:82:d8:df:23: bc:bb:01:76:a6:04:6f:0c:f8:31:6d:1b:8e:6b:a5:75:a2:89: c0:89:93:d1:72:f1:e2:bf:d1:22:11:84:d3:6d:90:7e:09:3a: 82:a2:a5:7d:c9:c3:42:19:85:aa:cb:9a:2a:9c:05:3d:fd:e6: ac:0d:04:2e:ba:e4:cf:7a:9c:9d:11:8a:4a:f3:7c:c0:66:03: 7b:8e:00:4c:fa:f2:e4:39:aa:27:42:69:c5:67:79:c1:70:db: 02:e8:94:4e:1a:aa:02:af:88:e5:4d:c2:8c:cb:e4:9d:f6:1f: 4b:ad:dc:82:3c:7b:5d:a2:64:a2:94:57:49:c7:0e:44:0b:4c: 48:91:be:2e:45:da:cf:c8:f9:7c:cf:a2:4b:b1:a1:46:72:1d: 8b:09:62:e3:d1:cd:77:6d:67:fc:2d:eb:72:7d:41:98:66:91: f4:ac:d6:b1:e1:ff:0e:9f:b4:3e:ab:9f:59:3b:a8:4a:8d:0f: 18:e0:30:bd:46:d0:03:17:51:aa:0c:b5:b9:7d:27:34:6b:e2: 30:a1:97:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaN+035VTlzwJMH4cHT8vLb7efAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdBQkVF ODNDMjdCRjAeFw0yNjA5MjMxMjMxNTBaFw0yNjA5MjQxMjM2NTBaMDMxMTAvBgNV BAMTKDc1QUU4M0EwQ0NBOUZENTM2RUMwMUZGOTA2QzdCMDNFM0NGREUzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhudZtsmY6OE6YYB/E6xhJSoI GWKwcWGxU6h5YArvZGm3tmPONCBxhqUO3Mwsn1CJ5UNQV7c/HBWGGUq+Hxd5YKxH f7YCF2k4DTD+aFbJZFoa/iBqSf+VittbJ9PGmzEZDmGXldeG70QtOu3pCIqG9BIq LwGPs5uXACtuzM8HjoKFlrOfRsxHZJuI6ygp4Ncy+8pvlIGJpp74uwAdKy5Mhm1H qhuORJbJTyqPioC5d5pzUA0hv9ac75iK/P5DccJYTG9KarqUpBBzbKI+VD2gtvwr 4Te5ky5p2JDCDAfDrkSVqTtXMO8mivkl5yQJ5fVOCNS4F+HQmZki66HRn7iRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUda6DoMyp/VNuwB/5BsewPjz94yswHwYDVR0j BBgwFoAUbIn2+ealGHvhCFRTgH96vug8J78wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ZlMzVmYWEtZWQyYi00MjcxLWI0OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlF NkE1MTg3QkUxMDg1NDUzODA3RjdBQkVFODNDMjdCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Qzg5RjZGOUU2QTUxODdCRTEwODU0NTM4MDdGN0FCRUU4M0My N0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdB QkVFODNDMjdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUctJmDWapYjF74OhTlEgY4aLparMM+F/KZ rovP3Kb/43hLgaHaIUOFR6nf8nFLKtOcgtjfI7y7AXamBG8M+DFtG45rpXWiicCJ k9Fy8eK/0SIRhNNtkH4JOoKipX3Jw0IZharLmiqcBT395qwNBC665M96nJ0Rikrz fMBmA3uOAEz68uQ5qidCacVnecFw2wLolE4aqgKviOVNwozL5J32H0ut3II8e12i ZKKUV0nHDkQLTEiRvi5F2s/I+XzPokuxoUZyHYsJYuPRzXdtZ/wt63J9QZhmkfSs 1rHh/w6ftD6rn1k7qEqNDxjgML1G0AMXUaoMtbl9JzRr4jChl14= -----END CERTIFICATE-----Generated at Thu Sep 24 00:52:54 2026 by rpki-client