$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft File: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft (raw, json) Hash identifier: FV2dFxLImcbmwpKDpxMDSSsbMjTDVDqlrPXOS3YHY14= Subject key identifier: F3:4B:DE:5A:47:C2:02:8B:76:C4:0A:09:2F:FA:33:BB:68:E5:62:C5 Authority key identifier: 6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 Certificate issuer: /CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Certificate serial: 6DC78345D7400C7A4DA3312A12A65B55871FC30F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 03:55:02 +0000 Manifest this update: Fri 25 Sep 2026 03:50:02 +0000 Manifest next update: Sat 26 Sep 2026 06:45:02 +0000 Files and hashes: 1: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl (hash: bFSr4oxFdefrdZ284BaGwOtKuuHEZ3LAGUL5JXbj2Pk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c7:83:45:d7:40:0c:7a:4d:a3:31:2a:12:a6:5b:55:87:1f:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Validity Not Before: Sep 25 03:50:02 2026 GMT Not After : Sep 26 06:45:02 2026 GMT Subject: CN=F34BDE5A47C2028B76C40A092FFA33BB68E562C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:c0:b5:87:00:b5:a6:6c:71:31:bb:f1:aa: 9a:f1:1a:06:43:46:f1:a1:87:8f:5f:f8:ea:5b:ec: 42:a2:4f:d2:b4:86:49:3a:05:e3:be:e2:ef:11:81: 8c:f9:90:5f:c6:16:a3:84:5e:bf:ca:84:31:ed:29: 3a:6b:16:f1:ee:2f:e9:f4:9a:c7:37:6e:43:fa:28: 55:67:37:19:90:d1:a4:c6:23:62:82:be:25:07:92: ba:79:9a:4a:b1:d5:cc:73:a8:75:5a:7f:6a:aa:bb: 24:78:ab:ee:0d:a1:c6:70:ff:25:79:ea:c4:27:cf: 32:68:53:70:7f:41:10:3c:4d:f2:55:f8:bc:87:56: 74:f9:f6:69:ee:d6:85:8c:09:88:0c:22:60:d5:c2: c1:ee:0c:5b:87:08:f2:cc:5f:7c:61:33:84:fc:b8: 4b:5a:f6:cf:ba:a1:db:c1:11:b6:49:75:23:58:c6: fd:14:de:0d:f0:55:9c:d3:84:d9:91:0f:2a:2b:ba: 1a:5b:7e:00:ef:a5:07:1e:c6:0c:a8:a2:33:ca:5d: d1:25:b6:82:f5:1a:5d:fe:49:68:0a:57:0b:cf:c6: 73:8c:65:f5:3d:c6:a1:96:4f:65:a0:48:a9:b0:7a: 19:47:cc:42:31:fc:9a:80:b9:ac:fe:46:e9:aa:e2: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4B:DE:5A:47:C2:02:8B:76:C4:0A:09:2F:FA:33:BB:68:E5:62:C5 X509v3 Authority Key Identifier: keyid:6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:81:90:3e:2b:64:22:47:43:01:51:22:76:c8:1b:74:bf:5d: f4:81:5d:2a:94:5b:b9:e9:a4:7b:8f:d2:60:a9:1a:e0:f1:dc: 93:bc:fa:9f:8b:6c:42:6e:e3:7e:01:9b:29:10:70:da:07:45: a6:22:ed:2e:d3:ad:1f:33:e4:ba:8e:da:16:96:1f:5c:ca:13: 6a:47:71:fc:9f:c2:d3:a8:00:c0:92:85:e7:72:d3:2e:e2:5b: 36:6d:cb:1a:c7:11:07:3a:2e:3e:4c:c6:d4:3a:9d:a0:f0:49: f7:5d:e6:95:cf:03:9c:fe:ff:66:80:91:5d:3b:1c:a5:7b:38: 5b:13:37:8c:08:15:6f:85:84:f9:aa:da:a5:ba:bc:5b:e4:64: 21:67:e6:ce:18:99:bc:23:18:60:97:86:63:b7:e2:88:d3:84: 58:a6:a6:70:57:68:27:71:c8:9e:58:d8:42:ce:8d:f0:8a:90: 2e:15:6a:44:d5:a5:85:e9:3e:78:4a:25:a4:ca:df:96:a9:57: 6b:ff:c0:69:47:8d:e9:9e:b1:8b:43:2c:33:ce:76:f0:ef:31: d4:f4:fa:01:7b:92:7a:9a:55:a7:53:59:e3:5d:41:e3:98:da: 5f:c6:b0:4e:7e:5c:34:a3:9d:82:20:e5:15:19:ca:63:75:72: cf:53:92:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbceDRddADHpNozEqEqZbVYcfww8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFF NENENjUyMzAeFw0yNjA5MjUwMzUwMDJaFw0yNjA5MjYwNjQ1MDJaMDMxMTAvBgNV BAMTKEYzNEJERTVBNDdDMjAyOEI3NkM0MEEwOTJGRkEzM0JCNjhFNTYyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzF8C1hwC1pmxxMbvxqprxGgZD RvGhh49f+Opb7EKiT9K0hkk6BeO+4u8RgYz5kF/GFqOEXr/KhDHtKTprFvHuL+n0 msc3bkP6KFVnNxmQ0aTGI2KCviUHkrp5mkqx1cxzqHVaf2qquyR4q+4NocZw/yV5 6sQnzzJoU3B/QRA8TfJV+LyHVnT59mnu1oWMCYgMImDVwsHuDFuHCPLMX3xhM4T8 uEta9s+6odvBEbZJdSNYxv0U3g3wVZzThNmRDyoruhpbfgDvpQcexgyoojPKXdEl toL1Gl3+SWgKVwvPxnOMZfU9xqGWT2WgSKmwehlHzEIx/JqAuaz+Rumq4i/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU80veWkfCAot2xAoJL/ozu2jlYsUwHwYDVR0j BBgwFoAUbwaxfDj7ehmeSoUyE8BS6uTNZSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0Mz OEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFFNENENjUyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjA2QjE3QzM4RkI3QTE5OUU0QTg1MzIxM0MwNTJFQUU0Q0Q2 NTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUy RUFFNENENjUyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmBkD4rZCJHQwFRInbIG3S/XfSBXSqUW7np pHuP0mCpGuDx3JO8+p+LbEJu434BmykQcNoHRaYi7S7TrR8z5LqO2haWH1zKE2pH cfyfwtOoAMCShedy0y7iWzZtyxrHEQc6Lj5MxtQ6naDwSfdd5pXPA5z+/2aAkV07 HKV7OFsTN4wIFW+FhPmq2qW6vFvkZCFn5s4YmbwjGGCXhmO34ojThFimpnBXaCdx yJ5Y2ELOjfCKkC4VakTVpYXpPnhKJaTK35apV2v/wGlHjemesYtDLDPOdvDvMdT0 +gF7knqaVadTWeNdQeOY2l/GsE5+XDSjnYIg5RUZymN1cs9Tknc= -----END CERTIFICATE-----Generated at Fri Sep 25 23:50:35 2026 by rpki-client