$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft File: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft (raw, json) Hash identifier: 2F+NIpzH5/fkDPl3nql7lHc3qc+ZObxG+KzAN9U2kes= Subject key identifier: 60:72:A3:0A:DB:C7:D3:5E:03:17:E0:1D:C3:3E:FF:8A:64:4A:58:9B Authority key identifier: 6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD Certificate issuer: /CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD Certificate serial: 58DC7FFD438A5AE42F391967DBAAB381BE98B60F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:03:07 +0000 Manifest this update: Thu 24 Sep 2026 09:58:07 +0000 Manifest next update: Fri 25 Sep 2026 10:42:07 +0000 Files and hashes: 1: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl (hash: iTaNjnE+W4bmFiPSHEto1pjC6c06vCt89avEa8oCgx4=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: Td28/CJkhSrDBpr5GMD46a5qt8s5yGrgfbAD8PtUEzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:dc:7f:fd:43:8a:5a:e4:2f:39:19:67:db:aa:b3:81:be:98:b6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD Validity Not Before: Sep 24 09:58:07 2026 GMT Not After : Sep 25 10:42:07 2026 GMT Subject: CN=6072A30ADBC7D35E0317E01DC33EFF8A644A589B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:f8:dd:1b:d7:b6:e7:78:5a:c4:3e:78:30: 79:d1:3f:4b:59:34:99:e2:05:ee:3b:52:70:fe:a1: 4e:0a:5c:de:29:d0:48:85:54:31:e2:dc:b3:f4:ef: 5c:8a:8e:a5:ea:ce:01:c6:dd:c0:2c:6f:7d:c2:e0: ea:f6:6d:04:1d:fb:dc:ee:57:2a:7c:5b:01:24:6d: 1e:b8:4a:9c:65:f5:fa:83:35:b4:e9:5f:40:b7:d7: 1b:a9:3a:55:1d:d9:a1:52:10:17:78:03:21:72:26: 58:e6:89:31:f9:8d:07:0f:6b:94:4a:bf:34:17:fc: 81:a2:34:ee:6e:e9:1c:80:9e:88:96:da:27:0a:87: 7e:56:8b:a0:11:cf:8d:87:71:9f:4e:a4:89:7f:d0: fc:c4:55:d8:ac:c3:fe:cd:22:87:7e:6a:65:34:0a: ba:04:98:a3:8c:b5:85:4f:ca:a1:8d:77:2a:fd:e7: dc:c3:f5:b9:82:82:0a:15:e7:fc:23:9e:0a:0e:bc: 68:59:1c:c1:a1:7b:d2:55:6a:24:2f:5a:d9:84:39: 04:1d:2d:17:95:28:8a:97:fd:65:f1:d1:ba:df:e4: a4:c4:44:61:f3:f5:57:ec:4a:1e:99:30:4d:b3:ca: ec:68:e5:ef:b3:91:d9:1a:42:1e:ad:8d:ae:81:46: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:72:A3:0A:DB:C7:D3:5E:03:17:E0:1D:C3:3E:FF:8A:64:4A:58:9B X509v3 Authority Key Identifier: keyid:6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:18:5f:83:b1:bd:7f:ef:08:f1:39:a0:68:81:da:38:87:1c: 83:c6:28:2b:58:28:60:4a:d8:7a:9e:3c:b8:04:28:e8:5e:a8: 73:31:80:2a:33:8c:78:77:1c:fa:74:9d:d0:56:6a:7e:f9:19: 7e:70:b0:9e:0f:0e:cb:c8:63:69:d5:49:ab:b0:b1:c8:23:85: 42:8e:78:d0:d8:cb:89:d0:06:6b:b0:2d:da:cf:61:6b:59:85: d1:99:06:d8:6a:27:43:e7:22:a8:af:1d:50:92:94:91:bd:ea: 6b:56:22:ee:87:bf:ae:c8:f2:aa:c0:c9:3f:86:85:19:b8:36: 3a:94:cb:f1:1e:d6:9c:e9:bf:15:f5:bb:e7:80:ac:8a:24:f5: 50:23:3d:e8:82:61:4e:8e:1c:1f:a8:28:7d:97:b4:88:1a:dc: 91:fd:bc:a8:6a:bd:53:a5:bf:48:89:12:3a:77:88:7f:7c:67: 24:3f:5e:78:f0:12:a1:d8:87:9b:2f:7b:03:36:c1:97:a2:9c: 00:92:c7:91:62:1b:ab:b4:00:44:4c:fd:e8:36:ab:e5:73:55: ed:65:1b:e9:8f:15:e8:d3:d1:3c:a8:41:f1:29:51:94:b6:fe: b9:07:8c:6f:d0:ed:7d:65:68:88:a8:a8:91:a6:77:6b:67:5e: 9d:52:c8:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNx//UOKWuQvORln26qzgb6Ytg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5QkYxRTE5RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2 RjZGQkJCRDAeFw0yNjA5MjQwOTU4MDdaFw0yNjA5MjUxMDQyMDdaMDMxMTAvBgNV BAMTKDYwNzJBMzBBREJDN0QzNUUwMzE3RTAxREMzM0VGRjhBNjQ0QTU4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQ/jdG9e253haxD54MHnRP0tZ NJniBe47UnD+oU4KXN4p0EiFVDHi3LP071yKjqXqzgHG3cAsb33C4Or2bQQd+9zu Vyp8WwEkbR64Spxl9fqDNbTpX0C31xupOlUd2aFSEBd4AyFyJljmiTH5jQcPa5RK vzQX/IGiNO5u6RyAnoiW2icKh35Wi6ARz42HcZ9OpIl/0PzEVdisw/7NIod+amU0 CroEmKOMtYVPyqGNdyr959zD9bmCggoV5/wjngoOvGhZHMGhe9JVaiQvWtmEOQQd LReVKIqX/WXx0brf5KTERGHz9VfsSh6ZME2zyuxo5e+zkdkaQh6tja6BRmblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHKjCtvH014DF+Adwz7/imRKWJswHwYDVR0j BBgwFoAUa5vx4Z97qo/Eu0cK4Z7EGG9vu70wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY5ZTFhOGEtMzlmMS00ZmUyLTgzMmEtYmIyZjIwOTJmYmY2LzAvNkI5QkYxRTE5 RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2RjZGQkJCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QjlCRjFFMTlGN0JBQThGQzRCQjQ3MEFFMTlFQzQxODZGNkZC QkJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvNkI5QkYxRTE5RjdCQUE4RkM0QkI0NzBBRTE5RUM0 MTg2RjZGQkJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcYX4OxvX/vCPE5oGiB2jiHHIPGKCtYKGBK 2HqePLgEKOheqHMxgCozjHh3HPp0ndBWan75GX5wsJ4PDsvIY2nVSauwscgjhUKO eNDYy4nQBmuwLdrPYWtZhdGZBthqJ0PnIqivHVCSlJG96mtWIu6Hv67I8qrAyT+G hRm4NjqUy/Ee1pzpvxX1u+eArIok9VAjPeiCYU6OHB+oKH2XtIga3JH9vKhqvVOl v0iJEjp3iH98ZyQ/XnjwEqHYh5svewM2wZeinACSx5FiG6u0AERM/eg2q+VzVe1l G+mPFejT0TyoQfEpUZS2/rkHjG/Q7X1laIioqJGmd2tnXp1SyMU= -----END CERTIFICATE-----Generated at Thu Sep 24 13:00:16 2026 by rpki-client