$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: Dvi1Yp13AW/EcDh0UoUQXoZRnMWez/tR/AoyOaCK1YQ= Subject key identifier: E6:54:A5:1F:9D:24:EB:E9:9C:2E:A6:2F:82:A9:0D:7C:16:85:33:88 Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 2694E021B114FF5A1BAF81B6B20DF6FF0850AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:08:01 +0000 Manifest this update: Fri 24 Jul 2026 11:03:01 +0000 Manifest next update: Sat 25 Jul 2026 14:59:01 +0000 Files and hashes: 1: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) 2: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) 4: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 5: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: ZRCPTtfRGYXBrXqyoutZJfbMDQ1/0/EEdF+uYhFvDuk=) 6: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:94:e0:21:b1:14:ff:5a:1b:af:81:b6:b2:0d:f6:ff:08:50:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: Jul 24 11:03:01 2026 GMT Not After : Jul 25 14:59:01 2026 GMT Subject: CN=E654A51F9D24EBE99C2EA62F82A90D7C16853388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:57:a5:7b:29:f0:86:cb:b8:45:80:8b:3e: 68:6f:a4:0d:64:7d:3e:ee:a8:f6:c5:a8:32:ee:2a: c1:00:1a:d9:82:d3:11:77:0f:7b:c8:ce:f8:76:ac: b5:ab:5f:00:0c:63:21:31:85:d8:a4:43:c8:30:a5: 7a:1d:43:a8:61:fa:4a:7f:56:bf:16:c8:51:67:61: b1:74:bd:db:c8:df:d7:2b:4a:be:a6:10:77:d8:ba: ba:39:fc:f2:1c:49:d9:a9:5a:8b:32:8b:f4:21:8d: 4b:d7:c9:63:70:2d:08:f1:58:11:a4:6a:53:b7:d5: 98:4d:31:12:31:81:b3:3a:93:5f:13:ec:72:e9:ac: ec:5f:02:f6:96:b7:80:60:7c:22:39:3c:15:71:61: e9:f4:71:dd:c3:9d:15:c0:d3:cd:62:b7:95:6e:00: d2:a9:73:c8:26:1a:4c:6f:44:9e:2e:b4:a9:a1:d9: 88:96:d7:e2:2c:47:bf:64:32:bb:2d:06:cc:7d:07: 5a:4b:6b:b1:d6:ef:33:57:7f:8e:5e:98:e7:19:98: c6:c6:05:ea:e1:27:41:66:61:e1:a1:81:fd:f2:bd: 28:47:7a:61:71:76:98:21:ed:79:74:81:4b:a7:9b: 26:8f:89:cb:2c:ce:2a:1e:1f:c4:a2:64:f5:b2:a3: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:A5:1F:9D:24:EB:E9:9C:2E:A6:2F:82:A9:0D:7C:16:85:33:88 X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:01:b9:77:36:97:81:d4:63:7f:46:18:c5:cf:6f:fb:15:e3: 85:4c:08:40:e9:73:1a:4b:7c:c6:df:6e:96:a7:52:8e:d4:b0: 07:9c:2a:9e:b2:7b:a0:f1:7e:39:01:41:f9:a4:fe:b8:43:31: 29:9d:80:46:76:ee:3b:80:8e:9f:bb:75:fc:2d:01:5e:f4:e0: 78:86:39:27:8a:1e:fb:39:a7:34:99:99:d8:1c:e8:61:ce:2f: 15:ee:43:2b:cc:ed:dc:78:1c:d2:1f:73:9a:9d:35:5a:d6:6e: 7a:97:24:ad:c5:2a:13:b3:f4:75:43:2d:e0:a1:11:a2:b0:24: 69:0e:8f:82:45:6c:8d:b4:13:86:ea:98:e6:91:93:89:64:aa: c5:e9:e0:c9:5d:ed:39:f3:b2:fd:d1:9d:5a:f8:05:88:b6:c6: a5:33:ce:72:1a:1e:64:ed:0a:40:e3:72:75:01:43:88:cd:cb: 32:27:79:c9:e9:92:da:92:81:29:cd:e5:f0:90:07:73:e0:ee: d7:0c:9a:f7:60:f6:61:f3:2c:8a:33:ee:c1:c4:0b:ce:9f:da: 4d:a0:7c:d6:e0:bd:fa:89:91:a9:47:a7:ae:9a:c2:e2:91:f2: 6e:5c:8d:21:e8:90:55:32:fd:60:1f:56:0b:8a:02:cf:a4:3c: 95:cf:95:82 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITJpTgIbEU/1obr4G2sg32/whQrjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFF RjZEMzI1MB4XDTI2MDcyNDExMDMwMVoXDTI2MDcyNTE0NTkwMVowMzExMC8GA1UE AxMoRTY1NEE1MUY5RDI0RUJFOTlDMkVBNjJGODJBOTBEN0MxNjg1MzM4ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2sV6V7KfCGy7hFgIs+aG+kDWR9 Pu6o9sWoMu4qwQAa2YLTEXcPe8jO+HastatfAAxjITGF2KRDyDCleh1DqGH6Sn9W vxbIUWdhsXS928jf1ytKvqYQd9i6ujn88hxJ2alaizKL9CGNS9fJY3AtCPFYEaRq U7fVmE0xEjGBszqTXxPscums7F8C9pa3gGB8Ijk8FXFh6fRx3cOdFcDTzWK3lW4A 0qlzyCYaTG9Eni60qaHZiJbX4ixHv2Qyuy0GzH0HWktrsdbvM1d/jl6Y5xmYxsYF 6uEnQWZh4aGB/fK9KEd6YXF2mCHteXSBS6ebJo+JyyzOKh4fxKJk9bKjrj8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTmVKUfnSTr6Zwupi+CqQ18FoUziDAfBgNVHSME GDAWgBTKami84gnCgzj8PAqmWa5ZHvbTJTAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC9DQTZBNjhCQ0Uy MDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZEMzI1LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0NBNkE2OEJDRTIwOUMyODMzOEZDM0MwQUE2NTlBRTU5MUVGNkQz MjUuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jOWUzNjA1Ni1mMDk3LTQ5YTctYmQy My0zZDcxMWU4OWYzMDUvMC9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1 OTFFRjZEMzI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAJQG5dzaXgdRjf0YYxc9v+xXjhUwIQOlzGkt8 xt9ulqdSjtSwB5wqnrJ7oPF+OQFB+aT+uEMxKZ2ARnbuO4COn7t1/C0BXvTgeIY5 J4oe+zmnNJmZ2BzoYc4vFe5DK8zt3Hgc0h9zmp01WtZuepckrcUqE7P0dUMt4KER orAkaQ6PgkVsjbQThuqY5pGTiWSqxengyV3tOfOy/dGdWvgFiLbGpTPOchoeZO0K QONydQFDiM3LMid5yemS2pKBKc3l8JAHc+Du1wya92D2YfMsijPuwcQLzp/aTaB8 1uC9+omRqUenrprC4pHyblyNIeiQVTL9YB9WC4oCz6Q8lc+Vgg== -----END CERTIFICATE-----Generated at Fri Jul 24 14:25:29 2026 by rpki-client