$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft File: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft (raw, json) Hash identifier: KUSynRJ14hjKkYP+BNYp19coYYJxVG5uxPkt9DmFudE= Subject key identifier: E2:91:52:69:EB:0A:74:F1:CE:61:74:5D:EC:7D:DE:8B:76:12:9A:4B Authority key identifier: 63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC Certificate issuer: /CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC Certificate serial: 5C2CB8D5AACF9217883CD570FB72050C7B463686 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 11:09:18 +0000 Manifest this update: Fri 25 Sep 2026 11:04:18 +0000 Manifest next update: Sat 26 Sep 2026 14:27:18 +0000 Files and hashes: 1: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl (hash: qiaiTTsnsplVg1K1AvPsiLvL9puYQeJWWQvIF0A+gUg=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: C1l+SKZdvmsGoFL66tN6deMpQsnd5mLdq6lfMgLgcng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2c:b8:d5:aa:cf:92:17:88:3c:d5:70:fb:72:05:0c:7b:46:36:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC Validity Not Before: Sep 25 11:04:18 2026 GMT Not After : Sep 26 14:27:18 2026 GMT Subject: CN=E2915269EB0A74F1CE61745DEC7DDE8B76129A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:3a:7f:b6:35:f3:83:55:7c:d2:69:60:2e: 69:cc:03:1b:fd:7b:e5:94:bc:35:ad:7c:42:2e:d9: 70:03:e6:12:93:31:6a:da:ec:66:42:1a:a4:b7:6e: 4d:d7:de:80:11:7b:f5:45:de:b2:9c:e8:43:6c:16: dd:8f:80:63:10:e2:24:48:f5:26:cb:2c:b0:cc:aa: 07:32:89:a8:70:d1:0d:15:9f:38:ee:67:a5:0b:8e: 86:73:34:95:55:c2:32:89:a0:ad:67:33:b6:3e:90: df:50:c7:ea:02:7e:06:df:9d:e1:84:32:1d:cb:2f: fa:da:23:a9:e3:1f:dc:59:de:17:b6:31:43:aa:97: f4:d7:3d:79:d1:83:15:c1:cc:35:5b:43:49:fb:17: 69:45:b0:cc:df:59:07:bb:54:43:80:b4:be:a5:d1: 6a:8f:5b:7c:c5:c8:c7:3b:61:c8:8c:79:5c:30:aa: cb:60:b3:98:b1:93:5a:65:ae:87:2b:f4:18:0b:f8: e6:21:c2:99:fc:45:eb:88:c8:a0:b3:18:38:fb:3a: 02:a0:a3:22:17:c2:ff:bb:a1:3d:81:3d:45:b9:e2: ff:b3:de:9d:04:f3:2c:83:b5:95:ec:bb:2b:e3:95: d6:43:1d:57:03:ad:76:bc:08:b2:bd:9a:e6:b2:b0: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:91:52:69:EB:0A:74:F1:CE:61:74:5D:EC:7D:DE:8B:76:12:9A:4B X509v3 Authority Key Identifier: keyid:63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d1:a6:7f:6e:73:21:70:4f:4e:f4:75:29:3d:65:d6:5f:0d: 0d:c5:c1:54:11:8b:ce:67:cd:aa:f4:b9:cb:8a:d8:52:be:81: ad:eb:4a:1f:da:8b:ba:b6:85:2e:13:d8:5e:99:f5:08:8d:fa: b1:ca:ff:6b:19:18:5a:99:75:53:0e:03:2a:34:00:50:36:b9: 80:73:e6:ea:c3:59:2d:a7:e1:89:3d:4c:a7:a0:35:6f:3e:54: fb:28:0d:e4:b4:80:dc:0f:d3:d3:b9:3b:34:d9:cf:3e:34:ab: de:9f:a3:e4:74:fc:ca:d5:c1:ef:f4:0a:04:70:a6:8a:62:0e: 96:18:9f:e6:de:8a:ae:3e:0a:b3:a3:2a:78:ba:98:1f:c8:ed: ae:e8:75:91:dc:e8:70:9f:16:85:3c:14:76:e7:d2:35:77:0c: 74:f7:67:80:c3:ea:fb:f5:cb:2e:ce:58:ed:c5:f1:cd:7d:0e: 9b:f1:22:2c:70:44:6a:46:04:9c:19:04:b5:b2:d9:ee:95:53: d5:fa:ce:0d:f8:19:ac:0a:be:7c:6c:ff:ed:c8:a0:d1:a1:00: e2:da:6a:94:78:1a:5b:ac:8e:32:b2:a0:93:e4:6b:71:38:5b: 87:a5:04:fd:0f:52:35:c4:dc:74:a0:32:47:68:73:81:b7:ca: 62:91:96:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCy41arPkheIPNVw+3IFDHtGNoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0MEI4NUI4MTdFMDcxQ0ExMDg3MDgwREU4Q0NCOUVE ODlCQzlDQzAeFw0yNjA5MjUxMTA0MThaFw0yNjA5MjYxNDI3MThaMDMxMTAvBgNV BAMTKEUyOTE1MjY5RUIwQTc0RjFDRTYxNzQ1REVDN0RERThCNzYxMjlBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiDp/tjXzg1V80mlgLmnMAxv9 e+WUvDWtfEIu2XAD5hKTMWra7GZCGqS3bk3X3oARe/VF3rKc6ENsFt2PgGMQ4iRI 9SbLLLDMqgcyiahw0Q0VnzjuZ6ULjoZzNJVVwjKJoK1nM7Y+kN9Qx+oCfgbfneGE Mh3LL/raI6njH9xZ3he2MUOql/TXPXnRgxXBzDVbQ0n7F2lFsMzfWQe7VEOAtL6l 0WqPW3zFyMc7YciMeVwwqstgs5ixk1plrocr9BgL+OYhwpn8ReuIyKCzGDj7OgKg oyIXwv+7oT2BPUW54v+z3p0E8yyDtZXsuyvjldZDHVcDrXa8CLK9muaysPdRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pFSaesKdPHOYXRd7H3ei3YSmkswHwYDVR0j BBgwFoAUY0C4W4F+BxyhCHCA3ozLntibycwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJjZDljZWEtM2JmNC00YTljLWFlZTYtMDAzMzljMDY1NTBiLzAvNjM0MEI4NUI4 MTdFMDcxQ0ExMDg3MDgwREU4Q0NCOUVEODlCQzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzQwQjg1QjgxN0UwNzFDQTEwODcwODBERThDQ0I5RUQ4OUJD OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvNjM0MEI4NUI4MTdFMDcxQ0ExMDg3MDgwREU4Q0NC OUVEODlCQzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALRpn9ucyFwT070dSk9ZdZfDQ3FwVQRi85n zar0ucuK2FK+ga3rSh/ai7q2hS4T2F6Z9QiN+rHK/2sZGFqZdVMOAyo0AFA2uYBz 5urDWS2n4Yk9TKegNW8+VPsoDeS0gNwP09O5OzTZzz40q96fo+R0/MrVwe/0CgRw popiDpYYn+beiq4+CrOjKni6mB/I7a7odZHc6HCfFoU8FHbn0jV3DHT3Z4DD6vv1 yy7OWO3F8c19DpvxIixwRGpGBJwZBLWy2e6VU9X6zg34GawKvnxs/+3IoNGhAOLa apR4GlusjjKyoJPka3E4W4elBP0PUjXE3HSgMkdoc4G3ymKRlu8= -----END CERTIFICATE-----Generated at Fri Sep 25 19:47:33 2026 by rpki-client