$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft File: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft (raw, json) Hash identifier: 2joITGpTezLnJZVCGTvZGKC1E13wj1sp3JCkYc+1I5s= Subject key identifier: 43:1A:D7:9D:6F:3E:EC:4A:71:AD:86:2C:A7:7D:FF:AE:25:12:34:BB Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 Certificate issuer: /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Certificate serial: 645B63CCDF2D18077E92306F236AC801CFDDF849 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:20:34 +0000 Manifest this update: Fri 25 Sep 2026 00:15:34 +0000 Manifest next update: Sat 26 Sep 2026 01:06:34 +0000 Files and hashes: 1: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=) 2: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=) 3: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl (hash: dVbbtTL7M9hK3OxThTv27n95TlH/1f+vHWwxCpooEDY=) 4: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: 1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=) 5: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=) 6: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=) 7: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=) 8: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5b:63:cc:df:2d:18:07:7e:92:30:6f:23:6a:c8:01:cf:dd:f8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Validity Not Before: Sep 25 00:15:34 2026 GMT Not After : Sep 26 01:06:34 2026 GMT Subject: CN=431AD79D6F3EEC4A71AD862CA77DFFAE251234BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:84:a6:32:ea:f7:f0:98:10:d8:b5:5a:8e: 7a:1c:97:85:12:68:df:a3:6a:aa:52:8f:27:f9:00: 5e:19:9b:36:6a:c1:d7:25:26:08:73:ab:f2:14:91: 6a:a3:2c:71:af:c7:5f:c6:32:85:d1:99:1e:bb:a5: 16:2c:c2:9b:33:b9:30:f8:bb:27:a4:2a:7b:28:00: dd:75:8d:53:59:e6:d2:e7:1f:56:9d:2a:a4:f8:18: 31:db:ce:fe:2b:fb:92:89:b3:53:ca:b7:81:97:21: e0:30:71:25:ef:05:c6:4f:31:ca:28:b5:8f:a8:c7: 33:57:b7:47:01:f6:43:d9:af:e6:d5:9e:d5:f3:d5: 0e:4b:fb:86:1b:01:b8:0a:d5:f1:3a:8b:64:f6:ac: d7:48:04:d5:3f:a4:32:9a:3f:cf:44:40:ab:dc:c5: f7:e5:21:9c:be:ce:1e:b9:44:bf:15:3d:c3:fe:a4: 15:ac:d8:85:de:4c:de:ff:b3:89:e9:6d:e5:22:ce: 2f:12:41:d9:5d:10:b1:40:ba:4a:13:b4:78:91:ef: 63:6d:58:a0:77:e1:fd:b7:1b:dc:16:26:be:53:00: cf:a1:5c:a0:40:d3:d3:75:aa:c2:33:90:c8:5e:83: d2:34:ae:2b:33:33:cd:49:05:cb:cb:a4:9c:e5:7b: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1A:D7:9D:6F:3E:EC:4A:71:AD:86:2C:A7:7D:FF:AE:25:12:34:BB X509v3 Authority Key Identifier: keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ec:f5:6b:5e:7d:95:44:e5:52:f8:e0:0e:5e:42:d8:5c:05: 86:2e:34:2d:2a:f4:61:5c:04:9a:a2:c7:19:b4:c8:91:3f:e1: 8d:01:53:65:7d:2c:af:e1:1a:b9:32:fc:7f:3d:bd:a6:3e:af: ec:3a:6a:86:45:fc:41:f3:89:df:c7:1b:fc:f4:51:37:f4:b4: 08:df:53:7c:2b:af:33:59:cc:17:4b:71:81:b0:a7:c4:03:57: 63:26:97:8b:22:8f:38:46:bc:ca:8c:f8:65:4b:61:9d:f5:77: 39:d7:6f:0f:5c:16:49:56:33:c8:1d:1b:b1:d6:0f:3b:49:7f: 5a:01:bd:1d:ff:4b:fd:10:6b:98:66:a7:7e:ab:c2:6e:5c:d5: 44:08:68:04:23:b5:55:f7:46:f4:1c:da:6b:ff:ab:f8:42:29: e9:bb:79:f9:c4:39:0c:c8:78:e2:cb:18:c8:61:03:36:f4:92: 96:5b:79:5c:19:c1:94:1d:5d:26:20:57:2b:7b:b9:19:4b:2b: 9c:4f:a5:6c:d4:22:dd:13:b4:81:20:2a:b5:56:98:43:53:b9: be:c7:a8:76:52:de:aa:05:4d:51:a4:99:9b:32:24:26:20:13: 98:77:77:53:b9:42:2e:09:50:02:1d:0b:55:3b:32:9d:73:07: 5b:85:ec:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFtjzN8tGAd+kjBvI2rIAc/d+EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFF QURCNjhEMDAeFw0yNjA5MjUwMDE1MzRaFw0yNjA5MjYwMTA2MzRaMDMxMTAvBgNV BAMTKDQzMUFENzlENkYzRUVDNEE3MUFEODYyQ0E3N0RGRkFFMjUxMjM0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClhYSmMur38JgQ2LVajnocl4US aN+jaqpSjyf5AF4ZmzZqwdclJghzq/IUkWqjLHGvx1/GMoXRmR67pRYswpszuTD4 uyekKnsoAN11jVNZ5tLnH1adKqT4GDHbzv4r+5KJs1PKt4GXIeAwcSXvBcZPMcoo tY+oxzNXt0cB9kPZr+bVntXz1Q5L+4YbAbgK1fE6i2T2rNdIBNU/pDKaP89EQKvc xfflIZy+zh65RL8VPcP+pBWs2IXeTN7/s4npbeUizi8SQdldELFAukoTtHiR72Nt WKB34f23G9wWJr5TAM+hXKBA09N1qsIzkMheg9I0riszM81JBcvLpJzle2aLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxrXnW8+7EpxrYYsp33/riUSNLswHwYDVR0j BBgwFoAUxqhNi2VF/JGpKzxyP0FqEerbaNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkZDYxMzUtNTQ4Yy00ODgxLWFmNzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2 NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFFQURCNjhEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkE4NEQ4QjY1NDVGQzkxQTkyQjNDNzIzRjQxNkExMUVBREI2 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZB MTFFQURCNjhEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7s9WtefZVE5VL44A5eQthcBYYuNC0q9GFc BJqixxm0yJE/4Y0BU2V9LK/hGrky/H89vaY+r+w6aoZF/EHzid/HG/z0UTf0tAjf U3wrrzNZzBdLcYGwp8QDV2Mml4sijzhGvMqM+GVLYZ31dznXbw9cFklWM8gdG7HW DztJf1oBvR3/S/0Qa5hmp36rwm5c1UQIaAQjtVX3RvQc2mv/q/hCKem7efnEOQzI eOLLGMhhAzb0kpZbeVwZwZQdXSYgVyt7uRlLK5xPpWzUIt0TtIEgKrVWmENTub7H qHZS3qoFTVGkmZsyJCYgE5h3d1O5Qi4JUAIdC1U7Mp1zB1uF7Lc= -----END CERTIFICATE-----Generated at Fri Sep 25 03:22:52 2026 by rpki-client