$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft File: 06AAF713D939AC6C090B6343B6905318B83A1DE3.mft (raw, json) Hash identifier: +wpUTsZiKPFXdjlj0iPnjEuHM+3+h/Gr+PlQemVi9jw= Subject key identifier: D6:6A:62:62:0C:15:E5:D4:0D:BA:75:AB:90:74:01:CB:89:BB:1D:BE Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3 Certificate issuer: /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3 Certificate serial: 568DD25468D2A0AA7F6C10EF962F68DA80EC090A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 16:25:13 +0000 Manifest this update: Sat 26 Sep 2026 16:20:13 +0000 Manifest next update: Sun 27 Sep 2026 17:38:13 +0000 Files and hashes: 1: 06AAF713D939AC6C090B6343B6905318B83A1DE3.crl (hash: mESuT3wpbLv1ZZXw2z5fqvSjnqLVnEbEijdfIHg4lwE=) 2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=) 3: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=) 4: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: 4RQga7sC7v8Tfsu3sFFTumIkJvaZxGdgZNTnQPnNeyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8d:d2:54:68:d2:a0:aa:7f:6c:10:ef:96:2f:68:da:80:ec:09:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3 Validity Not Before: Sep 26 16:20:13 2026 GMT Not After : Sep 27 17:38:13 2026 GMT Subject: CN=D66A62620C15E5D40DBA75AB907401CB89BB1DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:f9:96:ee:cd:fc:97:16:14:38:35:c3:65: 31:3c:07:93:79:6e:7d:d3:bf:74:ae:54:15:15:4e: 41:03:39:e7:89:10:4b:91:e9:30:c8:3a:61:a2:69: 9b:71:70:5f:8f:bb:be:7b:5f:da:eb:0a:b0:fb:51: f4:ff:51:a5:8d:bc:a2:59:b4:51:f7:1a:a3:0b:12: 0f:c2:c3:f4:e0:e4:00:ef:31:79:77:17:1a:72:d6: 6c:47:27:16:34:a1:39:53:d4:9e:9b:31:e6:2f:6d: cc:7f:58:6b:6c:63:52:76:4e:68:9c:20:ac:3b:ab: c4:de:41:55:8a:10:5f:1f:02:29:c6:56:28:37:73: 57:61:43:d9:b1:af:ac:ba:0d:69:31:38:c7:40:72: 83:90:23:0e:ff:e8:eb:7d:79:ae:59:d8:f6:c2:89: 99:36:7e:de:d3:27:9f:d4:97:7c:68:eb:5a:c4:cc: 2e:9d:45:25:01:ed:ab:9e:3c:f3:b9:49:4f:da:bc: ff:39:5f:18:de:61:4d:c3:96:c0:37:f3:6d:b5:3d: f0:19:aa:62:b4:7f:6d:83:f9:8f:3e:f4:26:b7:67: 03:87:0c:3b:e5:3b:e6:6f:f1:1d:bf:82:29:40:a8: 52:75:47:1c:e9:15:82:b9:ea:15:b1:3e:d2:5e:25: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6A:62:62:0C:15:E5:D4:0D:BA:75:AB:90:74:01:CB:89:BB:1D:BE X509v3 Authority Key Identifier: keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e0:18:ba:5a:72:2a:7d:03:4d:26:b6:1e:40:54:72:4a:52: 72:0d:69:09:b1:75:7b:18:46:a5:97:42:e8:79:83:46:7f:88: 9f:17:9f:5c:8d:a3:92:24:54:bf:30:c3:a6:a8:fb:4d:6a:8b: 0d:09:65:c4:e3:5e:85:9a:f1:31:2a:69:9e:3f:63:1d:18:ea: 76:a7:41:d2:31:66:c7:6d:b5:7f:f1:0f:ef:40:59:87:52:9d: d3:b4:32:2f:77:06:11:52:6a:f5:05:0c:f8:36:2e:8b:39:a3: 85:94:56:1f:24:10:7c:5c:f3:9a:ad:80:32:17:f4:c4:ad:e4: 7d:5b:77:fd:36:39:89:88:2c:e7:00:39:5e:16:17:6f:a0:ae: b5:39:5d:46:d6:58:88:64:57:51:82:f6:12:6b:72:14:11:bf: c0:ce:0c:2c:a1:39:c3:b2:3f:cd:5c:4d:22:49:f9:58:36:b6: f5:91:d8:81:6e:2d:2d:01:d9:a4:ed:c2:b4:d1:31:32:de:52: aa:28:34:49:81:db:40:7c:09:75:10:01:d0:35:6a:0b:9a:1f: 5b:65:20:f0:3f:2c:eb:46:04:cb:7f:f3:60:25:db:cc:fb:25: 17:2a:36:70:84:18:5e:d0:ce:57:4d:f4:b6:3d:46:d6:04:04: 78:d0:34:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVo3SVGjSoKp/bBDvli9o2oDsCQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUzMThC ODNBMURFMzAeFw0yNjA5MjYxNjIwMTNaFw0yNjA5MjcxNzM4MTNaMDMxMTAvBgNV BAMTKEQ2NkE2MjYyMEMxNUU1RDQwREJBNzVBQjkwNzQwMUNCODlCQjFEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwPmW7s38lxYUODXDZTE8B5N5 bn3Tv3SuVBUVTkEDOeeJEEuR6TDIOmGiaZtxcF+Pu757X9rrCrD7UfT/UaWNvKJZ tFH3GqMLEg/Cw/Tg5ADvMXl3Fxpy1mxHJxY0oTlT1J6bMeYvbcx/WGtsY1J2Tmic IKw7q8TeQVWKEF8fAinGVig3c1dhQ9mxr6y6DWkxOMdAcoOQIw7/6Ot9ea5Z2PbC iZk2ft7TJ5/Ul3xo61rEzC6dRSUB7auePPO5SU/avP85XxjeYU3DlsA38221PfAZ qmK0f22D+Y8+9Ca3ZwOHDDvlO+Zv8R2/gilAqFJ1RxzpFYK56hWxPtJeJattAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1mpiYgwV5dQNunWrkHQBy4m7Hb4wHwYDVR0j BBgwFoAUBqr3E9k5rGwJC2NDtpBTGLg6HeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA0NDIwNDMtMjQ0ZS00Yjg3LWIwMGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNE OTM5QUM2QzA5MEI2MzQzQjY5MDUzMThCODNBMURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNkFBRjcxM0Q5MzlBQzZDMDkwQjYzNDNCNjkwNTMxOEI4M0Ex REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUz MThCODNBMURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLgGLpacip9A00mth5AVHJKUnINaQmxdXsY RqWXQuh5g0Z/iJ8Xn1yNo5IkVL8ww6ao+01qiw0JZcTjXoWa8TEqaZ4/Yx0Y6nan QdIxZsdttX/xD+9AWYdSndO0Mi93BhFSavUFDPg2Los5o4WUVh8kEHxc85qtgDIX 9MSt5H1bd/02OYmILOcAOV4WF2+grrU5XUbWWIhkV1GC9hJrchQRv8DODCyhOcOy P81cTSJJ+Vg2tvWR2IFuLS0B2aTtwrTRMTLeUqooNEmB20B8CXUQAdA1aguaH1tl IPA/LOtGBMt/82Al28z7JRcqNnCEGF7QzldN9LY9RtYEBHjQNNI= -----END CERTIFICATE-----Generated at Sun Sep 27 08:19:30 2026 by rpki-client