$ rpki-client -vvvf rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft File: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft (raw, json) Hash identifier: nzcEA6D42EezpM/4ArjDRGUhbfQbNrqWgIpuJsFRUoI= Subject key identifier: 66:B8:BF:2B:8E:1D:83:55:CF:DA:2A:BB:16:FD:58:A2:44:38:17:F8 Authority key identifier: 6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1 Certificate issuer: /CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1 Certificate serial: 5E8A6F6498505DD5A366CA6DC7D7777C6E6F088F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:54:21 +0000 Manifest this update: Wed 23 Sep 2026 18:49:21 +0000 Manifest next update: Thu 24 Sep 2026 20:00:21 +0000 Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: 1yZQJfUMIdupzXA1ljHpU5mWQfYGWg8xMYH2Yx/jRFc=) 2: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl (hash: Jj+jgs8N6wzEoGr2jnMXc66SnlMpv9CvYOdHTw649kw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8a:6f:64:98:50:5d:d5:a3:66:ca:6d:c7:d7:77:7c:6e:6f:08:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1 Validity Not Before: Sep 23 18:49:21 2026 GMT Not After : Sep 24 20:00:21 2026 GMT Subject: CN=66B8BF2B8E1D8355CFDA2ABB16FD58A2443817F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:3c:0f:50:1b:b4:a4:44:09:6d:b1:05:32: d0:68:61:1b:ac:17:85:42:eb:c4:a7:70:fb:3e:bd: a9:87:a2:94:7c:ce:65:a1:bc:c4:cd:cf:96:90:c4: a7:86:2a:7a:32:d1:0f:40:23:9f:04:73:8f:81:72: 85:5a:69:49:5f:ff:e1:76:7a:07:33:e0:13:24:52: ba:63:21:e1:b7:45:44:a3:33:72:ce:5c:f8:79:48: c1:b7:7c:06:03:16:f7:fb:91:74:f7:20:d6:6b:ab: c8:35:ab:54:e8:58:f7:b9:ad:00:3d:c9:9f:c6:dc: d7:8b:7b:83:fd:61:46:ad:e6:b3:52:10:f3:00:8a: 97:fc:ce:a9:75:e5:b4:92:d2:e5:49:0a:cd:53:0e: e3:fe:52:d3:f6:a5:b2:f6:bc:d0:df:e9:15:07:d7: b0:f7:e5:42:b1:76:da:78:e0:eb:78:a0:19:d6:25: b3:79:e3:cf:8d:ed:6b:82:61:74:99:e2:88:52:b7: 48:95:27:33:84:e3:76:e8:4a:b5:43:f5:43:98:56: c0:cc:97:07:77:56:d5:70:31:a5:aa:41:c7:aa:12: 3e:a6:44:30:fc:81:f9:c2:96:90:7f:11:1a:be:ed: 70:4a:37:1f:01:0e:cc:f5:a6:a3:1b:91:3a:a9:28: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B8:BF:2B:8E:1D:83:55:CF:DA:2A:BB:16:FD:58:A2:44:38:17:F8 X509v3 Authority Key Identifier: keyid:6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6d:dc:0b:8a:2f:fa:11:21:e5:46:d1:ec:60:90:7d:f3:f2: 30:f1:e3:20:d2:4a:05:bf:29:5d:75:60:13:ca:82:31:68:b2: 95:8d:3d:58:88:f8:5d:bd:31:11:63:36:a6:5b:28:de:9a:81: b4:35:b6:5e:d7:8e:56:8c:ad:35:77:23:79:d3:63:86:1a:af: bb:2e:6e:40:d8:f6:f4:8b:2c:f2:dc:c1:d3:9a:ca:82:40:bf: a5:94:2a:de:ff:64:c1:8f:b6:5c:92:7f:51:8c:0f:a1:54:93: af:26:89:e3:35:4e:e9:ac:29:8e:d7:22:70:81:0b:61:77:44: 76:db:a4:ee:3a:07:ac:c7:c2:a5:c5:a6:eb:70:ff:1b:f2:02: e5:02:f8:9a:21:48:42:3d:8b:5a:70:95:4a:4d:83:3f:59:6c: c1:fc:a4:87:de:0f:07:43:9a:41:6f:f7:54:48:47:7c:66:d6: 64:63:9e:d9:60:af:98:49:11:0e:90:e9:78:e0:57:89:3b:35: 31:f7:73:40:f6:19:b9:14:dd:1b:af:5e:d2:96:33:1f:f9:60: 9c:8f:35:f7:d4:df:06:dc:39:b2:61:fd:06:fb:7a:b9:85:1b: ec:4d:95:e4:be:e6:97:a6:28:9c:81:66:64:93:fd:d3:0a:9b: e8:90:40:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXopvZJhQXdWjZsptx9d3fG5vCI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0RTFCM0Y5MjRCREU3OUVEQUZDNjI4MTczRkFEMjZE RUI3MkNFMTAeFw0yNjA5MjMxODQ5MjFaFw0yNjA5MjQyMDAwMjFaMDMxMTAvBgNV BAMTKDY2QjhCRjJCOEUxRDgzNTVDRkRBMkFCQjE2RkQ1OEEyNDQzODE3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqDwPUBu0pEQJbbEFMtBoYRus F4VC68SncPs+vamHopR8zmWhvMTNz5aQxKeGKnoy0Q9AI58Ec4+BcoVaaUlf/+F2 egcz4BMkUrpjIeG3RUSjM3LOXPh5SMG3fAYDFvf7kXT3INZrq8g1q1ToWPe5rQA9 yZ/G3NeLe4P9YUat5rNSEPMAipf8zql15bSS0uVJCs1TDuP+UtP2pbL2vNDf6RUH 17D35UKxdtp44Ot4oBnWJbN548+N7WuCYXSZ4ohSt0iVJzOE43boSrVD9UOYVsDM lwd3VtVwMaWqQceqEj6mRDD8gfnClpB/ERq+7XBKNx8BDsz1pqMbkTqpKO7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZri/K44dg1XP2iq7Fv1YokQ4F/gwHwYDVR0j BBgwFoAUbU4bP5JL3nntr8YoFz+tJt63LOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQyNDIzNTUtYTdlMi00Y2I5LThjZmYtOWUxN2M3NDJjMmVmLzAvNkQ0RTFCM0Y5 MjRCREU3OUVEQUZDNjI4MTczRkFEMjZERUI3MkNFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDRFMUIzRjkyNEJERTc5RURBRkM2MjgxNzNGQUQyNkRFQjcy Q0UxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvNkQ0RTFCM0Y5MjRCREU3OUVEQUZDNjI4MTczRkFE MjZERUI3MkNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFt3AuKL/oRIeVG0exgkH3z8jDx4yDSSgW/ KV11YBPKgjFospWNPViI+F29MRFjNqZbKN6agbQ1tl7XjlaMrTV3I3nTY4Yar7su bkDY9vSLLPLcwdOayoJAv6WUKt7/ZMGPtlySf1GMD6FUk68mieM1TumsKY7XInCB C2F3RHbbpO46B6zHwqXFputw/xvyAuUC+JohSEI9i1pwlUpNgz9ZbMH8pIfeDwdD mkFv91RIR3xm1mRjntlgr5hJEQ6Q6XjgV4k7NTH3c0D2GbkU3RuvXtKWMx/5YJyP NffU3wbcObJh/Qb7ermFG+xNleS+5pemKJyBZmST/dMKm+iQQLA= -----END CERTIFICATE-----Generated at Thu Sep 24 11:13:32 2026 by rpki-client