$ rpki-client -vvvf rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft File: 6259AAB8ACC12928C43A617CC9988F166C9AF024.mft (raw, json) Hash identifier: pQNreXGwKhaXmLRqgPY4uqz9GMvXENBYakpQZfTcTNc= Subject key identifier: 90:56:0C:EC:9C:23:BA:EE:64:8A:FB:6E:91:65:9E:7A:91:B5:4E:1D Authority key identifier: 62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24 Certificate issuer: /CN=6259AAB8ACC12928C43A617CC9988F166C9AF024 Certificate serial: 7DF04E6418B1CB276A30E3CB32D2EDFEAB432A5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:07:02 +0000 Manifest this update: Thu 24 Sep 2026 05:02:02 +0000 Manifest next update: Fri 25 Sep 2026 08:47:02 +0000 Files and hashes: 1: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: AV5JsX2Stj+seni25dRRWqI/Y+X0x+WhdAnmL2uFeMY=) 2: 6259AAB8ACC12928C43A617CC9988F166C9AF024.crl (hash: xB0Ea927evIbQ5qpsXyYQVkguqCLE8zrIUcSDTk310E=) 3: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: LH3jAEJt2gXKsQX/zjbaNzaUSZMXYsu7qVfx3W9RCWQ=) 4: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: b4ggDV/ZNf+4NQdflqYvb28UdjLCoRXT/ZsbTg3v/fE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f0:4e:64:18:b1:cb:27:6a:30:e3:cb:32:d2:ed:fe:ab:43:2a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6259AAB8ACC12928C43A617CC9988F166C9AF024 Validity Not Before: Sep 24 05:02:02 2026 GMT Not After : Sep 25 08:47:02 2026 GMT Subject: CN=90560CEC9C23BAEE648AFB6E91659E7A91B54E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:f2:49:0d:81:fa:0c:cb:79:c5:47:34:1e: 6e:e6:da:a5:4e:81:1e:fd:ff:f5:b3:76:ff:b6:84: 4a:44:08:25:41:53:63:10:8c:fd:a8:22:05:3c:0e: 48:18:05:bd:6f:68:87:8d:d2:e2:e3:e1:8d:00:3f: fe:c0:cf:de:a2:90:9c:e9:4f:eb:95:b7:b8:85:ac: e0:91:10:c5:b3:00:7b:ea:29:8e:5c:85:55:6a:3b: 0f:09:b6:91:61:44:8d:e0:09:6d:c5:10:79:22:6a: df:1a:c2:b1:d5:4e:a3:39:8f:6e:3c:ab:35:fe:58: 40:e1:4d:2a:45:39:a6:8d:35:bb:88:ce:5f:52:8a: d6:10:43:35:d1:ac:ec:23:2c:d1:d0:2e:06:25:33: fe:c7:3c:35:c4:57:9b:1c:88:a5:1c:e0:34:44:9e: 82:22:c1:f9:80:26:9b:b3:f7:f3:a8:47:d7:e1:8e: 71:ac:f7:7c:01:5a:8b:ba:97:5f:3d:ec:24:62:30: 30:b4:a4:5a:19:12:33:f4:be:f2:96:b6:5c:9b:70: d4:71:22:12:1f:8b:9c:e3:e2:e1:fc:03:ad:b4:bf: be:75:92:59:49:11:9e:fd:54:29:4f:66:db:e9:14: 9f:79:c0:50:48:c6:c9:3a:6d:a0:ef:cd:63:41:1c: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:56:0C:EC:9C:23:BA:EE:64:8A:FB:6E:91:65:9E:7A:91:B5:4E:1D X509v3 Authority Key Identifier: keyid:62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6a:7a:19:c8:c4:1d:f7:cf:a0:82:4e:91:5f:56:31:ec:79: be:60:09:1c:7f:5a:b9:87:39:41:b2:cb:53:2d:30:52:4b:d8: ea:ba:6c:98:8a:f1:96:97:58:0d:8e:e0:d7:42:a3:71:c1:82: 9f:49:81:fb:97:ac:43:14:ea:39:ae:42:01:71:c2:55:84:81: be:44:a1:00:66:31:d8:a8:e0:2e:77:74:d0:6a:4f:8b:92:0b: 50:dd:e6:16:a9:ce:0d:0b:b2:dc:c6:0a:8e:e7:8b:bb:84:9f: a3:33:f4:32:71:cf:f0:72:91:81:82:12:00:91:6e:26:60:8b: 9e:21:ee:09:ba:6d:b2:54:3d:b7:c9:9f:29:63:33:03:83:5d: 2e:54:bd:51:6e:bf:16:a0:23:5a:2c:f1:a7:e7:e5:cd:d6:52: 09:e2:6a:17:3a:3e:e3:c4:eb:17:db:5b:c6:48:e8:5e:cc:22: e3:7d:a8:83:08:14:f2:7a:fe:e1:64:a9:fc:da:cc:41:1f:9d: 6e:f1:df:89:1d:5d:cc:b1:a3:93:9b:98:22:48:72:98:18:9b: e4:f4:6e:17:65:84:44:3e:a4:83:e8:82:ba:47:04:54:47:6d: a5:6a:15:fc:5d:e7:39:20:bd:53:85:fd:f6:e4:48:92:60:f3: 08:21:41:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffBOZBixyydqMOPLMtLt/qtDKlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1OUFBQjhBQ0MxMjkyOEM0M0E2MTdDQzk5ODhGMTY2 QzlBRjAyNDAeFw0yNjA5MjQwNTAyMDJaFw0yNjA5MjUwODQ3MDJaMDMxMTAvBgNV BAMTKDkwNTYwQ0VDOUMyM0JBRUU2NDhBRkI2RTkxNjU5RTdBOTFCNTRFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YPJJDYH6DMt5xUc0Hm7m2qVO gR79//Wzdv+2hEpECCVBU2MQjP2oIgU8DkgYBb1vaIeN0uLj4Y0AP/7Az96ikJzp T+uVt7iFrOCREMWzAHvqKY5chVVqOw8JtpFhRI3gCW3FEHkiat8awrHVTqM5j248 qzX+WEDhTSpFOaaNNbuIzl9SitYQQzXRrOwjLNHQLgYlM/7HPDXEV5sciKUc4DRE noIiwfmAJpuz9/OoR9fhjnGs93wBWou6l1897CRiMDC0pFoZEjP0vvKWtlybcNRx IhIfi5zj4uH8A620v751kllJEZ79VClPZtvpFJ95wFBIxsk6baDvzWNBHBZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkFYM7Jwjuu5kivtukWWeepG1Th0wHwYDVR0j BBgwFoAUYlmquKzBKSjEOmF8yZiPFmya8CQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTdkMjZkZTAtNjhjZi00MjljLThiMGUtOGQ2NGI3NjJmODI0LzAvNjI1OUFBQjhB Q0MxMjkyOEM0M0E2MTdDQzk5ODhGMTY2QzlBRjAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjU5QUFCOEFDQzEyOTI4QzQzQTYxN0NDOTk4OEYxNjZDOUFG MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNjI1OUFBQjhBQ0MxMjkyOEM0M0E2MTdDQzk5ODhG MTY2QzlBRjAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5qehnIxB33z6CCTpFfVjHseb5gCRx/WrmH OUGyy1MtMFJL2Oq6bJiK8ZaXWA2O4NdCo3HBgp9JgfuXrEMU6jmuQgFxwlWEgb5E oQBmMdio4C53dNBqT4uSC1Dd5hapzg0LstzGCo7ni7uEn6Mz9DJxz/BykYGCEgCR biZgi54h7gm6bbJUPbfJnyljMwODXS5UvVFuvxagI1os8afn5c3WUgniahc6PuPE 6xfbW8ZI6F7MIuN9qIMIFPJ6/uFkqfzazEEfnW7x34kdXcyxo5ObmCJIcpgYm+T0 bhdlhEQ+pIPogrpHBFRHbaVqFfxd5zkgvVOF/fbkSJJg8wghQTs= -----END CERTIFICATE-----Generated at Thu Sep 24 13:00:08 2026 by rpki-client