$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json) Hash identifier: M8xhwrz2wuNBUPfE8O+D9/R9V3GHLDNmJZWnj8iJKsc= Subject key identifier: AF:04:7C:E8:EC:9D:95:F0:B9:E8:78:E4:BD:49:31:42:D7:2F:1A:F8 Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Certificate issuer: /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Certificate serial: 248A2F5F2CDAC20F0A18D37F313F621C3D22886C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft Manifest number: C7 Signing time: Sun 27 Sep 2026 09:41:27 +0000 Manifest this update: Sun 27 Sep 2026 09:36:27 +0000 Manifest next update: Mon 28 Sep 2026 10:42:27 +0000 Files and hashes: 1: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: eYKF4vilVvtmU+RkMJupy5f5TnX0wdpmr9+tL35AjQg=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8a:2f:5f:2c:da:c2:0f:0a:18:d3:7f:31:3f:62:1c:3d:22:88:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Validity Not Before: Sep 27 09:36:27 2026 GMT Not After : Sep 28 10:42:27 2026 GMT Subject: CN=AF047CE8EC9D95F0B9E878E4BD493142D72F1AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:a8:83:00:c2:36:4f:a2:47:0b:67:63:e4: 4a:cf:c6:04:21:a0:14:9c:d5:e6:b4:66:29:12:db: ad:12:fe:63:8d:d5:db:86:6a:d8:b1:1c:a7:f7:4e: 33:90:b9:1f:2e:06:45:e9:b9:41:b3:a7:f3:4b:53: d0:53:e7:4e:2b:d6:6d:9f:14:39:e0:a2:95:69:5c: e0:ed:4f:d6:7a:bc:02:5d:ee:e7:7a:8b:db:6a:1f: 60:92:fc:a3:ab:be:0e:bb:96:85:b8:26:14:ec:86: af:83:2c:ac:fb:96:0c:9b:41:f7:47:e6:eb:09:4f: 24:e2:0e:a6:11:21:27:df:45:9f:42:7b:02:a4:32: 4b:d9:df:d6:a3:5f:61:07:e3:54:6f:2b:c5:1a:d7: a0:9e:da:e9:6a:1b:a7:a7:5e:08:db:6d:28:bd:33: 47:52:1d:66:bf:9f:69:c4:3e:fd:9f:18:0c:ca:bc: 07:bd:d0:89:7b:01:99:0c:f6:2a:8a:13:54:9b:9a: c3:d5:1f:c3:8d:53:96:a6:a4:a4:4f:fa:cb:86:39: 6f:fa:da:b7:ae:c3:38:39:fd:06:85:e3:aa:e6:81: 25:1a:92:2e:45:dd:a1:4f:f4:7d:de:a4:d8:b2:14: 89:16:56:ca:2c:2f:ea:41:77:2b:74:53:f6:e0:32: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:04:7C:E8:EC:9D:95:F0:B9:E8:78:E4:BD:49:31:42:D7:2F:1A:F8 X509v3 Authority Key Identifier: keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cd:ce:00:64:57:7b:c9:12:d5:a6:24:6b:d3:6d:dd:15:91: 64:24:a7:4e:17:7b:1e:de:0c:be:e6:8b:a3:ac:cc:05:6c:7d: 88:43:54:96:4a:d7:53:fe:fb:7c:7e:3a:59:ed:b5:22:5a:97: 0d:58:ba:d0:75:2a:ea:6b:a4:3d:8d:a0:c1:64:33:ad:57:15: d2:4a:cf:d3:36:6a:33:bb:89:1f:3e:54:a4:cd:32:6d:23:9f: 7b:df:02:b4:f2:18:eb:0d:da:c6:b3:78:15:46:30:ad:87:64: df:7b:7f:a5:de:92:4c:51:49:33:77:f7:87:37:e9:cc:0f:a7: 1f:f1:6d:70:de:97:62:fd:bd:fc:22:2c:ab:04:85:da:33:cf: 2e:bd:a9:b0:02:a3:30:1a:48:5a:17:6e:45:2c:b6:ee:be:01: fe:c2:74:3a:55:be:6c:e5:6a:d1:2f:1a:6d:96:4a:1f:7c:8b: d6:74:6d:5a:80:db:61:9e:58:09:c8:dd:38:98:73:fe:1a:29: 57:f7:cd:92:75:0d:33:88:30:11:33:7f:8b:73:cc:0d:1f:c4: 26:32:47:dc:f5:54:b6:71:67:63:9c:70:73:b8:9b:09:05:88: 25:9a:0f:c0:04:63:5d:2c:6f:3b:64:fa:b5:14:93:93:94:07: d5:47:fe:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIovXyzawg8KGNN/MT9iHD0iiGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3 NUZDQzEwRDAeFw0yNjA5MjcwOTM2MjdaFw0yNjA5MjgxMDQyMjdaMDMxMTAvBgNV BAMTKEFGMDQ3Q0U4RUM5RDk1RjBCOUU4NzhFNEJENDkzMTQyRDcyRjFBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaKiDAMI2T6JHC2dj5ErPxgQh oBSc1ea0ZikS260S/mON1duGatixHKf3TjOQuR8uBkXpuUGzp/NLU9BT504r1m2f FDngopVpXODtT9Z6vAJd7ud6i9tqH2CS/KOrvg67loW4JhTshq+DLKz7lgybQfdH 5usJTyTiDqYRISffRZ9CewKkMkvZ39ajX2EH41RvK8Ua16Ce2ulqG6enXgjbbSi9 M0dSHWa/n2nEPv2fGAzKvAe90Il7AZkM9iqKE1SbmsPVH8ONU5ampKRP+suGOW/6 2reuwzg5/QaF46rmgSUaki5F3aFP9H3epNiyFIkWVsosL+pBdyt0U/bgMh+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrwR86OydlfC56HjkvUkxQtcvGvgwHwYDVR0j BBgwFoAUzWrtsCn6MgnVunBGt7j1JHX8wQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmI0YzcwYTEtNTAzNi00NTBiLWI5MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAy OUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3NUZDQzEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDZBRURCMDI5RkEzMjA5RDVCQTcwNDZCN0I4RjUyNDc1RkND MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1 MjQ3NUZDQzEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErNzgBkV3vJEtWmJGvTbd0VkWQkp04Xex7e DL7mi6OszAVsfYhDVJZK11P++3x+OlnttSJalw1YutB1KuprpD2NoMFkM61XFdJK z9M2ajO7iR8+VKTNMm0jn3vfArTyGOsN2sazeBVGMK2HZN97f6XekkxRSTN394c3 6cwPpx/xbXDel2L9vfwiLKsEhdozzy69qbACozAaSFoXbkUstu6+Af7CdDpVvmzl atEvGm2WSh98i9Z0bVqA22GeWAnI3TiYc/4aKVf3zZJ1DTOIMBEzf4tzzA0fxCYy R9z1VLZxZ2OccHO4mwkFiCWaD8AEY10sbztk+rUUk5OUB9VH/pM= -----END CERTIFICATE-----Generated at Sun Sep 27 17:17:48 2026 by rpki-client