$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: xNsbZ3lMB+EQCljpsnKqyA/LYNgTH7+1Uq6cA2Md1QI= Subject key identifier: 99:39:F8:33:8F:29:40:10:A7:21:1B:4D:66:8E:23:72:38:F6:44:B7 Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 39F2D75FA006F516E664429E61F0CE3BD69F03FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: D1 Signing time: Mon 05 Oct 2026 22:42:29 +0000 Manifest this update: Mon 05 Oct 2026 22:37:29 +0000 Manifest next update: Wed 07 Oct 2026 02:22:29 +0000 Files and hashes: 1: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 2: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: Fac37j3cpxEJMV6AQ22BjyW5jzvoi5bj4MKDMerNclI=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) 4: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) 5: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) 6: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 02:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f2:d7:5f:a0:06:f5:16:e6:64:42:9e:61:f0:ce:3b:d6:9f:03:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: Oct 5 22:37:29 2026 GMT Not After : Oct 7 02:22:29 2026 GMT Subject: CN=9939F8338F294010A7211B4D668E237238F644B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:e0:70:6d:d9:b8:48:1a:41:85:68:d1:69: 85:c4:b0:fd:c2:d2:ae:a9:2c:4c:2c:a1:b3:7f:83: 10:bf:4d:c2:da:f1:9c:85:01:21:ba:75:2b:4e:b8: 15:69:43:a6:ba:b5:dd:d9:49:e3:fc:43:74:26:6b: 70:c9:74:18:ca:98:8b:e3:28:25:0c:b7:63:ef:16: b8:43:de:db:74:e3:25:63:ec:46:b0:6e:6c:25:fe: 51:50:f1:0a:ec:90:78:08:06:13:be:d8:2c:b5:c2: 73:fb:41:b3:39:d8:db:13:85:a6:a5:3f:fa:0a:8c: ea:c8:c8:18:10:ef:6d:66:a6:96:e3:dd:49:53:53: 02:52:59:a1:58:2a:07:12:d3:cc:76:40:f7:85:24: 4c:c2:5d:c5:85:d0:aa:bc:40:f1:7a:4c:ce:b0:d3: c6:ce:16:07:4c:ec:ee:17:c5:fa:3b:c5:44:f3:23: a9:53:41:49:2a:22:aa:bb:cc:04:32:d1:6f:be:6c: 87:e0:81:cd:c6:d1:81:a6:a2:03:68:52:bf:4d:5d: 2e:41:a7:4b:ad:b6:02:26:a4:61:a5:3e:36:22:cb: 22:01:7f:e3:80:55:3a:f9:57:9c:2b:1a:b6:f8:50: a4:ce:c4:c1:34:13:a9:f7:93:24:e0:81:e3:e9:be: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:39:F8:33:8F:29:40:10:A7:21:1B:4D:66:8E:23:72:38:F6:44:B7 X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:12:b5:a7:43:13:fc:d3:6f:13:29:86:81:62:8b:b1:f4:f0: 74:28:6b:b8:e2:ff:8e:6d:d6:2b:07:f7:24:a9:dd:82:05:e4: 84:82:be:48:97:2b:9d:ce:08:dd:9f:f1:70:5b:81:8a:49:62: 5e:68:ab:71:0e:41:1a:22:b6:c2:a3:c8:da:12:80:58:6d:4d: 5d:8a:d9:d3:e9:0b:fc:c8:a0:f5:29:92:33:07:85:0c:9d:fb: 1b:b9:57:f8:46:8f:09:f5:d4:71:89:b6:dd:81:8d:a2:7b:d0: a2:51:45:6a:8b:50:86:52:0d:fe:6d:ec:71:4a:62:03:ae:38: 95:2a:ae:a3:19:c1:e4:45:d9:84:64:8e:0b:5c:38:f1:c9:79: 6a:39:a6:83:1c:69:c5:79:b5:e7:ba:17:38:a9:ea:3c:f3:12: ba:af:a0:73:7f:37:67:8e:2d:dc:53:ec:38:53:c1:09:6e:93: c7:d3:ff:c8:d4:a4:ac:d2:c5:a8:a5:e7:8f:b5:ef:87:78:fc: 5f:c0:b6:55:d7:51:5b:ef:f6:4a:f0:0e:12:74:0e:f6:34:a1: ea:3b:af:9d:53:07:0f:ec:ca:40:e6:a0:1e:1c:c7:04:bd:5b: d7:ce:b4:28:86:58:54:d3:57:89:b2:95:21:de:b0:f6:19:8d: 6f:b6:ca:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOfLXX6AG9RbmZEKeYfDOO9afA/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjEwMDUyMjM3MjlaFw0yNjEwMDcwMjIyMjlaMDMxMTAvBgNV BAMTKDk5MzlGODMzOEYyOTQwMTBBNzIxMUI0RDY2OEUyMzcyMzhGNjQ0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm8uBwbdm4SBpBhWjRaYXEsP3C 0q6pLEwsobN/gxC/TcLa8ZyFASG6dStOuBVpQ6a6td3ZSeP8Q3Qma3DJdBjKmIvj KCUMt2PvFrhD3tt04yVj7Eawbmwl/lFQ8QrskHgIBhO+2Cy1wnP7QbM52NsThaal P/oKjOrIyBgQ721mppbj3UlTUwJSWaFYKgcS08x2QPeFJEzCXcWF0Kq8QPF6TM6w 08bOFgdM7O4Xxfo7xUTzI6lTQUkqIqq7zAQy0W++bIfggc3G0YGmogNoUr9NXS5B p0uttgImpGGlPjYiyyIBf+OAVTr5V5wrGrb4UKTOxME0E6n3kyTggePpvsW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmTn4M48pQBCnIRtNZo4jcjj2RLcwHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFF NTkxRUY2RDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUStadDE/zTbxMphoFii7H08HQoa7ji/45t 1isH9ySp3YIF5ISCvkiXK53OCN2f8XBbgYpJYl5oq3EOQRoitsKjyNoSgFhtTV2K 2dPpC/zIoPUpkjMHhQyd+xu5V/hGjwn11HGJtt2BjaJ70KJRRWqLUIZSDf5t7HFK YgOuOJUqrqMZweRF2YRkjgtcOPHJeWo5poMcacV5tee6Fzip6jzzErqvoHN/N2eO LdxT7DhTwQluk8fT/8jUpKzSxail54+174d4/F/AtlXXUVvv9krwDhJ0DvY0oeo7 r51TBw/sykDmoB4cxwS9W9fOtCiGWFTTV4mylSHesPYZjW+2yis= -----END CERTIFICATE-----Generated at Tue Oct 6 20:19:11 2026 by rpki-client