$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json) Hash identifier: k1iJLx8oMRR+EtiN0rjpCyFNG6ZXP2fnGsjP3ZnO1cA= Subject key identifier: 43:FF:86:29:D4:96:24:5C:1A:3C:26:41:5B:D9:A0:A2:0C:73:7F:76 Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Certificate serial: 7AB0A4751B05D4236F694668C1BF04E64948C543 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:51:54 +0000 Manifest this update: Wed 23 Sep 2026 16:46:54 +0000 Manifest next update: Thu 24 Sep 2026 17:15:54 +0000 Files and hashes: 1: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=) 2: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: 7riOhbCZzrD+F6VYNYGzXr6IpRGCAcDhzwNQCf5NcoY=) 3: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=) 4: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b0:a4:75:1b:05:d4:23:6f:69:46:68:c1:bf:04:e6:49:48:c5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Validity Not Before: Sep 23 16:46:54 2026 GMT Not After : Sep 24 17:15:54 2026 GMT Subject: CN=43FF8629D496245C1A3C26415BD9A0A20C737F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:02:15:b0:00:8d:37:0e:af:a4:66:1f:89: 32:8a:f4:fe:9e:39:01:f4:80:e1:fd:8f:4f:c5:65: fb:f8:ac:a6:e9:7a:d1:fc:5e:c6:0b:db:5f:f7:39: 26:99:93:6e:5d:7d:b2:67:71:a9:28:c5:6a:f0:0f: 24:7d:d7:66:77:f5:4c:fe:ff:1e:fa:3a:e8:f4:61: 4e:43:dd:e9:35:0c:da:f8:dc:5b:46:53:be:5b:05: 10:c8:5f:51:0b:28:04:cc:7a:75:ee:61:b0:99:b8: 37:5f:bd:97:45:d8:f2:03:76:ec:57:f8:71:e6:a4: 7d:80:6c:9f:29:e4:f9:25:8e:d4:06:80:4b:f2:c0: 0c:ff:7e:29:e4:75:1d:6e:df:4f:f5:13:84:fb:92: 57:bd:14:9c:2b:e9:28:66:59:f6:d8:3a:1e:ef:c1: d5:79:33:f2:df:37:8e:e4:8c:76:cd:0c:dc:61:62: 6b:58:7b:dd:15:90:66:50:c4:9c:16:3a:e9:f3:5c: 58:38:2c:84:a5:47:57:74:85:61:3f:41:56:5a:c4: 71:5d:09:dc:6f:f6:d2:c6:55:01:e4:b8:cf:68:3d: c8:3a:33:0e:7a:bb:4a:9a:30:d6:c9:f2:0f:10:46: b5:61:bf:fb:fc:7b:67:ec:24:41:77:df:36:d7:b6: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FF:86:29:D4:96:24:5C:1A:3C:26:41:5B:D9:A0:A2:0C:73:7F:76 X509v3 Authority Key Identifier: keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bd:63:2d:b4:34:77:4c:cc:98:de:28:2f:33:8a:b6:90:b3: f7:51:74:45:b0:61:25:75:14:45:6e:11:58:cf:52:a8:b2:0f: 4d:7b:5f:af:50:85:ef:51:32:8d:38:dc:a3:34:fe:77:fb:7c: 31:c7:37:02:f1:de:2b:3a:27:c3:f5:68:fe:d3:1a:73:cf:c2: 42:c4:28:08:70:b4:9a:5d:8f:30:46:f0:8c:13:82:f2:65:c0: 2a:38:64:f6:fb:7d:8a:8a:9d:48:fa:ac:4e:65:2d:6e:d2:c6: f8:cc:61:a5:01:09:33:d8:2d:64:f6:38:39:83:8e:5e:2b:de: 2d:2a:10:9d:d5:81:4a:a2:5c:45:6e:69:bd:5d:0e:1a:96:4a: 84:69:a1:48:81:56:f5:3d:c7:85:23:ac:08:6b:9f:07:27:b2: de:28:13:7f:a3:5b:bc:84:7e:40:73:1a:99:40:85:c3:56:5c: f5:7e:c4:71:9f:5f:7b:cf:c2:29:67:9f:ac:52:f4:e3:f2:47: 1c:f6:ac:87:24:06:e1:eb:4d:3d:f4:4c:b3:70:25:8b:b9:e7: 55:cc:d1:a7:d7:5b:a7:2d:80:9c:8e:d6:50:78:e3:b5:ae:d9: 74:45:d1:ff:f5:42:f6:30:4f:54:f8:f8:a6:98:b8:ff:d6:6a: 3f:8c:68:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUerCkdRsF1CNvaUZowb8E5klIxUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5NTFG OTk1MDc5QTAeFw0yNjA5MjMxNjQ2NTRaFw0yNjA5MjQxNzE1NTRaMDMxMTAvBgNV BAMTKDQzRkY4NjI5RDQ5NjI0NUMxQTNDMjY0MTVCRDlBMEEyMEM3MzdGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbgIVsACNNw6vpGYfiTKK9P6e OQH0gOH9j0/FZfv4rKbpetH8XsYL21/3OSaZk25dfbJncakoxWrwDyR912Z39Uz+ /x76Ouj0YU5D3ek1DNr43FtGU75bBRDIX1ELKATMenXuYbCZuDdfvZdF2PIDduxX +HHmpH2AbJ8p5PkljtQGgEvywAz/finkdR1u30/1E4T7kle9FJwr6ShmWfbYOh7v wdV5M/LfN47kjHbNDNxhYmtYe90VkGZQxJwWOunzXFg4LISlR1d0hWE/QVZaxHFd Cdxv9tLGVQHkuM9oPcg6Mw56u0qaMNbJ8g8QRrVhv/v8e2fsJEF33zbXth/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/+GKdSWJFwaPCZBW9mgogxzf3YwHwYDVR0j BBgwFoAUbCHzcfzt0t4prpFLNT9pUfmVB5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVlYzZjZjgtOTY1NS00Mzc5LWJmMzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFG Q0VERDJERTI5QUU5MTRCMzUzRjY5NTFGOTk1MDc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzIxRjM3MUZDRUREMkRFMjlBRTkxNEIzNTNGNjk1MUY5OTUw NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5 NTFGOTk1MDc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC29Yy20NHdMzJjeKC8ziraQs/dRdEWwYSV1 FEVuEVjPUqiyD017X69Qhe9RMo043KM0/nf7fDHHNwLx3is6J8P1aP7TGnPPwkLE KAhwtJpdjzBG8IwTgvJlwCo4ZPb7fYqKnUj6rE5lLW7SxvjMYaUBCTPYLWT2ODmD jl4r3i0qEJ3VgUqiXEVuab1dDhqWSoRpoUiBVvU9x4UjrAhrnwcnst4oE3+jW7yE fkBzGplAhcNWXPV+xHGfX3vPwilnn6xS9OPyRxz2rIckBuHrTT30TLNwJYu551XM 0afXW6ctgJyO1lB447Wu2XRF0f/1QvYwT1T4+KaYuP/Waj+MaPo= -----END CERTIFICATE-----Generated at Thu Sep 24 08:10:56 2026 by rpki-client