$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json) Hash identifier: I0sgtH/BKjfLuZg4MXR54U4E+QQ7z1ZuK5s2cgwa6TU= Subject key identifier: 2D:CA:DF:1B:59:A5:98:DF:44:0A:BC:E4:12:D8:FC:90:FC:1E:5E:E2 Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Certificate serial: 3475FE615E6CD9FD22D399C1F9E1E5808817256E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 07:49:31 +0000 Manifest this update: Sat 26 Sep 2026 07:44:31 +0000 Manifest next update: Sun 27 Sep 2026 09:58:31 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=) 2: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: rVnJbA8pFxObDGTvHc4f8I5logf+QEr+7RHlzWtrpcc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:75:fe:61:5e:6c:d9:fd:22:d3:99:c1:f9:e1:e5:80:88:17:25:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Validity Not Before: Sep 26 07:44:31 2026 GMT Not After : Sep 27 09:58:31 2026 GMT Subject: CN=2DCADF1B59A598DF440ABCE412D8FC90FC1E5EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:93:e2:23:3c:53:8a:5e:21:b7:ea:3f:ad:6b: 39:10:eb:9e:14:b0:58:8e:28:50:aa:40:a2:16:6f: bc:e7:22:8b:a8:15:71:f3:e7:fd:d1:b0:05:16:30: 90:2d:92:8d:a5:17:52:57:9d:de:00:38:f3:58:b4: 4a:80:15:0f:ab:ef:7f:eb:9d:33:df:38:7c:25:95: 62:c9:44:0b:7b:1b:71:f2:42:39:af:13:69:91:fc: ad:36:70:21:cc:43:76:c9:b1:0a:cf:b5:e4:e2:3a: 00:0d:e2:3b:34:5a:f3:b3:71:d0:be:23:53:36:73: cd:13:20:73:06:25:6d:89:3e:de:02:fa:9e:d6:5d: 00:8a:b6:10:7b:9a:d1:b1:14:b1:59:92:1b:37:ea: 3e:39:99:87:d0:cc:10:45:38:16:4b:76:d5:b4:49: 12:45:da:bd:60:33:ba:57:e9:d5:0a:82:87:03:37: 9b:f6:c9:60:aa:89:7d:b7:43:bc:c1:22:d4:83:c2: d4:59:54:a0:6d:64:e3:5f:9e:fd:46:df:5a:75:e3: f4:71:ac:5f:e9:da:1f:1d:5a:81:ee:79:79:b7:bc: 8c:96:94:62:80:41:5f:31:32:f4:94:f5:7a:df:b7: a2:2b:a3:b4:07:3d:4f:e6:84:5c:94:d9:2c:e7:43: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:DF:1B:59:A5:98:DF:44:0A:BC:E4:12:D8:FC:90:FC:1E:5E:E2 X509v3 Authority Key Identifier: keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7f:58:3f:b4:2b:95:c1:5b:68:44:9a:94:b4:e6:b1:f0:2e: 61:85:5c:82:e2:7d:8a:a0:e7:96:f3:63:61:be:fd:4b:2c:7a: 99:85:2e:30:3e:a6:bd:6e:7d:97:8b:fd:0a:6b:ce:9d:6d:96: 21:d1:17:95:6f:5f:ed:a0:25:48:fa:95:34:c0:fd:24:6f:cc: 8b:84:a5:c0:0c:f0:55:84:d8:f4:1a:b9:4e:1a:43:4c:4a:ef: c0:5f:7a:77:83:b8:12:ca:bf:d7:e5:22:51:a2:1a:7a:78:7c: 42:14:87:6e:bb:15:85:76:e4:bf:f1:91:50:09:e7:b2:07:dd: ee:ab:23:cf:a6:67:26:a5:b2:5d:ff:55:fc:19:19:92:31:eb: 67:37:7d:37:95:2d:21:d3:7e:68:2a:8a:ad:f0:d6:56:72:20: 7b:cb:4d:7d:83:83:72:a3:08:12:c0:a1:ca:ff:1f:13:a9:e0: e1:34:7b:ab:5f:b7:92:1b:ea:d7:e3:99:fc:38:fe:fa:5d:e6: 29:96:b0:84:f4:34:6b:54:a6:94:ec:48:f9:f1:ad:a2:36:79: 5a:9f:52:fe:67:b8:46:40:0f:56:8e:f2:ca:ac:a7:f6:8c:84: 7b:27:45:bc:df:4d:65:c1:d5:b6:a7:40:74:e5:13:3c:b7:ba: 99:57:9d:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHX+YV5s2f0i05nB+eHlgIgXJW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0QzFC ODFFOEIyRTAeFw0yNjA5MjYwNzQ0MzFaFw0yNjA5MjcwOTU4MzFaMDMxMTAvBgNV BAMTKDJEQ0FERjFCNTlBNTk4REY0NDBBQkNFNDEyRDhGQzkwRkMxRTVFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSk+IjPFOKXiG36j+tazkQ654U sFiOKFCqQKIWb7znIouoFXHz5/3RsAUWMJAtko2lF1JXnd4AOPNYtEqAFQ+r73/r nTPfOHwllWLJRAt7G3HyQjmvE2mR/K02cCHMQ3bJsQrPteTiOgAN4js0WvOzcdC+ I1M2c80TIHMGJW2JPt4C+p7WXQCKthB7mtGxFLFZkhs36j45mYfQzBBFOBZLdtW0 SRJF2r1gM7pX6dUKgocDN5v2yWCqiX23Q7zBItSDwtRZVKBtZONfnv1G31p14/Rx rF/p2h8dWoHueXm3vIyWlGKAQV8xMvSU9Xrft6Iro7QHPU/mhFyU2SznQwqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULcrfG1mlmN9ECrzkEtj8kPweXuIwHwYDVR0j BBgwFoAUAgQD9t1W8NXFLFk3tRekwbgeiy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU5NTRmNDItOTQ1Mi00MjQ3LTk5YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZE RDU2RjBENUM1MkM1OTM3QjUxN0E0QzFCODFFOEIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjA0MDNGNkRENTZGMEQ1QzUyQzU5MzdCNTE3QTRDMUI4MUU4 QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0 QzFCODFFOEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR/WD+0K5XBW2hEmpS05rHwLmGFXILifYqg 55bzY2G+/UssepmFLjA+pr1ufZeL/Qprzp1tliHRF5VvX+2gJUj6lTTA/SRvzIuE pcAM8FWE2PQauU4aQ0xK78BfeneDuBLKv9flIlGiGnp4fEIUh267FYV25L/xkVAJ 57IH3e6rI8+mZyalsl3/VfwZGZIx62c3fTeVLSHTfmgqiq3w1lZyIHvLTX2Dg3Kj CBLAocr/HxOp4OE0e6tft5Ib6tfjmfw4/vpd5imWsIT0NGtUppTsSPnxraI2eVqf Uv5nuEZAD1aO8sqsp/aMhHsnRbzfTWXB1banQHTlEzy3uplXnXo= -----END CERTIFICATE-----Generated at Sat Sep 26 12:35:08 2026 by rpki-client