$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft File: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft (raw, json) Hash identifier: S69l1pFfcmk4Hy2CbDnaUiMMxeRjxDryTvNpuGcjX5E= Subject key identifier: EF:30:31:8D:BB:9F:54:A9:6E:B5:2E:96:7F:38:3E:76:92:8B:4A:8F Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Certificate serial: 52C25D8C32F4C54E21DD85E3707F052BE1E9C275 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 14:47:59 +0000 Manifest this update: Mon 28 Sep 2026 14:42:59 +0000 Manifest next update: Tue 29 Sep 2026 16:17:59 +0000 Files and hashes: 1: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl (hash: 8Fn/PXrF4gEG+dlehAIkfx8Z13169nw9YsvaXf4H55U=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c2:5d:8c:32:f4:c5:4e:21:dd:85:e3:70:7f:05:2b:e1:e9:c2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Validity Not Before: Sep 28 14:42:59 2026 GMT Not After : Sep 29 16:17:59 2026 GMT Subject: CN=EF30318DBB9F54A96EB52E967F383E76928B4A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:8a:bb:bf:f6:75:6f:ef:59:c5:6f:ee:43: 60:21:87:d8:0c:e6:43:4a:a1:f7:58:ea:ad:63:f0: c5:70:37:c5:4f:62:39:5e:d4:d7:f4:70:3d:22:3b: b8:13:85:4c:26:ce:70:ec:7b:7c:6f:ec:25:41:dc: ca:7b:28:9e:e9:8c:a4:35:a8:93:57:22:a4:de:0b: 22:ca:31:b4:cc:25:48:e4:11:58:d4:59:77:56:da: 1b:78:b1:39:53:8a:1b:fa:29:db:1f:74:e3:54:69: 15:69:a7:4d:69:7b:eb:1c:e6:66:c1:e2:dd:09:b6: 51:d3:4c:3c:55:3c:33:0a:2e:ef:d0:61:26:80:e0: 1b:2c:7f:5d:99:fb:d9:84:f5:32:15:b7:65:b6:6d: 1a:41:6f:25:a8:65:c8:0d:0b:bc:05:81:29:b5:42: 32:21:6a:5d:97:86:bc:4a:48:be:4b:65:da:ed:b1: c6:19:9c:93:3e:34:29:ea:2c:18:27:29:b0:70:a9: 38:49:d8:63:f6:9d:4d:14:36:c1:f6:3e:65:74:0b: 7e:c4:c2:0f:e7:8f:71:a3:bd:41:1a:1e:21:05:3f: e1:11:12:e1:49:0c:39:f0:f2:96:51:35:da:3d:e6: 00:c8:0a:a3:f0:0d:cd:e8:ed:7a:95:99:cc:ae:4f: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:30:31:8D:BB:9F:54:A9:6E:B5:2E:96:7F:38:3E:76:92:8B:4A:8F X509v3 Authority Key Identifier: keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:22:74:32:b8:9f:37:bb:f6:ec:45:64:ec:9a:24:f8:0e:d7: c1:a8:80:81:2a:b0:d6:57:3f:a2:16:66:47:42:ab:36:69:81: 45:cd:da:3d:3d:4c:0c:2c:86:71:11:e4:45:35:b9:43:58:38: d0:27:32:ed:89:4b:ee:4e:83:a6:40:a7:b4:f4:90:69:45:7a: cf:35:4a:c9:b6:3a:03:5a:b6:c3:d4:27:8b:f0:93:4b:8f:40: 4f:5a:3c:7f:04:73:dd:32:2e:6f:f2:66:f6:92:32:50:34:21: 89:ac:7d:5d:d1:3e:a3:32:11:e9:e2:14:66:59:a5:db:7e:d0: 16:ed:bb:67:00:c1:6a:87:86:af:a8:77:f3:69:dd:1d:8a:d1: be:76:4c:7d:f5:cb:64:d0:34:c7:9c:63:0b:46:83:fb:c2:4e: 07:f8:2b:eb:80:e9:22:58:e9:02:a1:c6:66:38:6d:6b:f3:21: fd:90:5a:6c:c2:70:2d:ad:cb:69:27:dd:64:fa:9e:ea:b8:1f: a1:17:a9:3b:aa:80:c2:be:5d:2c:48:88:64:7f:12:6c:bf:7e: 10:25:33:48:f6:c2:af:e2:36:12:26:34:fb:77:5f:2c:48:7b: 86:27:13:c7:60:c4:ce:28:e1:1b:2c:ce:e1:ad:ce:6e:79:1b: fe:d6:c8:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsJdjDL0xU4h3YXjcH8FK+HpwnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFF RjI1QURBOTAeFw0yNjA5MjgxNDQyNTlaFw0yNjA5MjkxNjE3NTlaMDMxMTAvBgNV BAMTKEVGMzAzMThEQkI5RjU0QTk2RUI1MkU5NjdGMzgzRTc2OTI4QjRBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3Iq7v/Z1b+9ZxW/uQ2Ahh9gM 5kNKofdY6q1j8MVwN8VPYjle1Nf0cD0iO7gThUwmznDse3xv7CVB3Mp7KJ7pjKQ1 qJNXIqTeCyLKMbTMJUjkEVjUWXdW2ht4sTlTihv6KdsfdONUaRVpp01pe+sc5mbB 4t0JtlHTTDxVPDMKLu/QYSaA4Bssf12Z+9mE9TIVt2W2bRpBbyWoZcgNC7wFgSm1 QjIhal2XhrxKSL5LZdrtscYZnJM+NCnqLBgnKbBwqThJ2GP2nU0UNsH2PmV0C37E wg/nj3GjvUEaHiEFP+EREuFJDDnw8pZRNdo95gDICqPwDc3o7XqVmcyuT3+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7zAxjbufVKlutS6Wfzg+dpKLSo8wHwYDVR0j BBgwFoAUbsqak276gnbkQSXgtMe/Qe8lrakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlkYWU5N2YtMWFkMS00YjM0LThmZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2 RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFFRjI1QURBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RUNBOUE5MzZFRkE4Mjc2RTQ0MTI1RTBCNEM3QkY0MUVGMjVB REE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JG NDFFRjI1QURBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIidDK4nze79uxFZOyaJPgO18GogIEqsNZX P6IWZkdCqzZpgUXN2j09TAwshnER5EU1uUNYONAnMu2JS+5Og6ZAp7T0kGlFes81 Ssm2OgNatsPUJ4vwk0uPQE9aPH8Ec90yLm/yZvaSMlA0IYmsfV3RPqMyEeniFGZZ pdt+0Bbtu2cAwWqHhq+od/Np3R2K0b52TH31y2TQNMecYwtGg/vCTgf4K+uA6SJY 6QKhxmY4bWvzIf2QWmzCcC2ty2kn3WT6nuq4H6EXqTuqgMK+XSxIiGR/Emy/fhAl M0j2wq/iNhImNPt3XyxIe4YnE8dgxM4o4RsszuGtzm55G/7WyBw= -----END CERTIFICATE-----Generated at Tue Sep 29 11:31:05 2026 by rpki-client