$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft File: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft (raw, json) Hash identifier: RBkQPtKm5CLIDGDjMvgA0lMMBSoPJrX5TPtf8VBG3L0= Subject key identifier: 2E:80:D5:BB:3B:2D:60:AE:C3:0D:46:89:DE:44:B2:7C:26:0B:5D:95 Authority key identifier: 6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 Certificate issuer: /CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Certificate serial: 79F1BC69C0142231CAC1083B67EA0EFD3944E0C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft Manifest number: BF Signing time: Wed 23 Sep 2026 20:41:31 +0000 Manifest this update: Wed 23 Sep 2026 20:36:31 +0000 Manifest next update: Thu 24 Sep 2026 20:51:31 +0000 Files and hashes: 1: 3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa (hash: wL8mPbrDXSqS55aHxdLNlPMS48d9sDFxyNKF6bE5qfk=) 2: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl (hash: C9Hs5P51uavWbg/923lcKMsXEZy7y0JKH1DSWP83oTg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f1:bc:69:c0:14:22:31:ca:c1:08:3b:67:ea:0e:fd:39:44:e0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Validity Not Before: Sep 23 20:36:31 2026 GMT Not After : Sep 24 20:51:31 2026 GMT Subject: CN=2E80D5BB3B2D60AEC30D4689DE44B27C260B5D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:8d:00:40:7c:8c:f8:c7:11:4e:86:cf:2d: 01:a3:ee:74:71:d8:e6:aa:60:a3:5d:5d:40:83:17: a3:30:d5:13:a8:15:3a:2f:de:32:10:b8:b3:eb:86: 94:76:23:17:a4:a9:4e:40:7c:5d:2f:f3:23:14:a2: 28:38:fa:67:90:9d:2f:0f:5b:e6:ae:91:34:e5:98: f7:5d:b6:19:d2:9c:6c:4e:db:4e:59:ec:1f:b0:9c: e9:9e:35:7e:b8:80:7c:cb:4b:3b:48:dd:6b:e1:6e: ad:31:7c:c3:6c:45:5f:71:a3:ef:7d:39:68:9b:d3: 8e:d2:75:d2:cc:7e:78:4a:a0:99:ad:1f:b7:b6:80: a8:ae:1a:16:02:5c:1a:0c:3f:24:66:72:d8:a6:38: 43:4c:39:49:85:71:5d:b0:01:1f:ab:64:d7:da:7c: 83:e8:7e:e1:de:5e:0a:75:49:47:2c:1e:d8:4c:3e: 1a:05:65:65:08:a5:a9:d4:c2:23:ae:66:5f:3e:37: 11:21:14:b7:fd:58:e8:70:de:d5:86:10:33:83:c9: fd:86:33:79:48:88:36:5c:1b:0a:c6:b8:e0:79:1d: cc:90:ed:35:10:f2:8f:cd:67:3b:8a:72:5b:ab:d3: 04:ff:15:62:5c:4f:eb:22:d5:56:83:15:95:48:ae: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:80:D5:BB:3B:2D:60:AE:C3:0D:46:89:DE:44:B2:7C:26:0B:5D:95 X509v3 Authority Key Identifier: keyid:6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c5:fe:12:5e:17:0c:41:9f:26:a4:72:bb:cb:55:3c:f5:9c: 69:f2:89:6a:4b:3f:21:15:bf:09:0c:ec:54:26:b5:e5:05:01: ab:0c:e8:55:fa:8f:4e:13:40:27:e0:db:d8:1a:f0:00:24:f9: c0:90:46:72:c7:d5:0a:cc:fc:19:5f:4c:0d:e3:cf:70:64:dc: 9c:08:00:04:cb:73:33:9c:93:85:68:91:76:06:52:d5:89:97: 3c:6b:4d:31:13:b8:ed:64:2c:cb:c7:19:65:7e:fb:dc:fb:3b: 5c:2d:d8:39:67:38:56:c0:43:1a:04:ff:e7:37:d9:0e:ca:5a: e6:1a:f8:4e:a7:d7:71:0d:ce:9f:f2:9a:12:6d:52:f3:9b:d2: 9a:c0:5f:7a:86:d2:eb:f7:4d:aa:40:33:b6:31:5b:33:38:79: 5b:29:12:f7:4c:89:3a:35:8a:c5:db:56:6e:82:6b:df:e5:c7: 80:99:18:f1:ea:e0:5b:33:01:1f:26:e5:99:7a:7d:fe:b4:a9: a9:bf:d2:77:c1:1b:14:f1:dd:c3:7b:d4:59:3d:11:e7:2f:da: 2f:4e:e3:3d:64:45:6a:2c:4c:9e:3a:f6:42:82:9d:77:06:87: 2e:6a:7e:2e:a1:8a:00:2b:dd:6d:82:6d:40:e5:31:2c:16:1e: 6d:7d:9f:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefG8acAUIjHKwQg7Z+oO/TlE4MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCNDQxQ0I0Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQw QUY4OUJCMDAeFw0yNjA5MjMyMDM2MzFaFw0yNjA5MjQyMDUxMzFaMDMxMTAvBgNV BAMTKDJFODBENUJCM0IyRDYwQUVDMzBENDY4OURFNDRCMjdDMjYwQjVEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqKo0AQHyM+McRTobPLQGj7nRx 2OaqYKNdXUCDF6Mw1ROoFTov3jIQuLPrhpR2IxekqU5AfF0v8yMUoig4+meQnS8P W+aukTTlmPddthnSnGxO205Z7B+wnOmeNX64gHzLSztI3Wvhbq0xfMNsRV9xo+99 OWib047SddLMfnhKoJmtH7e2gKiuGhYCXBoMPyRmctimOENMOUmFcV2wAR+rZNfa fIPofuHeXgp1SUcsHthMPhoFZWUIpanUwiOuZl8+NxEhFLf9WOhw3tWGEDODyf2G M3lIiDZcGwrGuOB5HcyQ7TUQ8o/NZzuKclur0wT/FWJcT+si1VaDFZVIrpfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULoDVuzstYK7DDUaJ3kSyfCYLXZUwHwYDVR0j BBgwFoAUbbRBy0z7EWr+iuAwFDx95Ar4m7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM3ODQ0MDktM2Y4Mi00NGMxLWExNGUtNjgxZGY1MWIwMjM0LzAvNkRCNDQxQ0I0 Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQwQUY4OUJCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82REI0NDFDQjRDRkIxMTZBRkU4QUUwMzAxNDNDN0RFNDBBRjg5 QkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmM3ODQ0MDktM2Y4Mi00NGMxLWEx NGUtNjgxZGY1MWIwMjM0LzAvNkRCNDQxQ0I0Q0ZCMTE2QUZFOEFFMDMwMTQzQzdE RTQwQUY4OUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXF/hJeFwxBnyakcrvLVTz1nGnyiWpLPyEV vwkM7FQmteUFAasM6FX6j04TQCfg29ga8AAk+cCQRnLH1QrM/BlfTA3jz3Bk3JwI AATLczOck4VokXYGUtWJlzxrTTETuO1kLMvHGWV++9z7O1wt2DlnOFbAQxoE/+c3 2Q7KWuYa+E6n13ENzp/ymhJtUvOb0prAX3qG0uv3TapAM7YxWzM4eVspEvdMiTo1 isXbVm6Ca9/lx4CZGPHq4FszAR8m5Zl6ff60qam/0nfBGxTx3cN71Fk9Eecv2i9O 4z1kRWosTJ469kKCnXcGhy5qfi6higAr3W2CbUDlMSwWHm19n18= -----END CERTIFICATE-----Generated at Thu Sep 24 05:03:44 2026 by rpki-client