$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft File: 6FBD1F05CFD81D40960E84596F61608A5408054A.mft (raw, json) Hash identifier: FVT3AnZt2/YrRdmarSoTJOXi6D/02l0tAgWf4Sq2Ibo= Subject key identifier: A1:F0:A0:E3:B4:BD:5F:B3:95:97:F5:1D:C0:4E:3A:6C:B7:03:D6:07 Authority key identifier: 6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A Certificate issuer: /CN=6FBD1F05CFD81D40960E84596F61608A5408054A Certificate serial: 75443602B321C34CC05A82E58A4213B0C6F7078E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 11:45:01 +0000 Manifest this update: Fri 25 Sep 2026 11:40:01 +0000 Manifest next update: Sat 26 Sep 2026 13:55:01 +0000 Files and hashes: 1: 6FBD1F05CFD81D40960E84596F61608A5408054A.crl (hash: LykCh+PN4918M+KxCaJDVEiiQdbpRvFvd5ef/PwXk2I=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: ceR7+4PbLSFwnkdZjst5pMwZoHsoUwM163fNIT0NuZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.crl rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:44:36:02:b3:21:c3:4c:c0:5a:82:e5:8a:42:13:b0:c6:f7:07:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FBD1F05CFD81D40960E84596F61608A5408054A Validity Not Before: Sep 25 11:40:01 2026 GMT Not After : Sep 26 13:55:01 2026 GMT Subject: CN=A1F0A0E3B4BD5FB39597F51DC04E3A6CB703D607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:7d:29:fd:c5:e2:b5:40:b6:d1:0a:a7:17: 11:67:3e:06:56:36:69:6c:89:71:00:32:d6:a2:a2: 4d:4b:03:6b:45:b4:6a:76:4f:7e:7d:c8:44:76:dc: ef:f5:aa:fb:61:0c:b9:a2:df:d5:4b:7e:45:50:77: 69:bc:26:0f:8a:d7:b4:aa:6f:2f:be:a9:49:6b:0e: f5:54:38:d8:20:58:d1:08:d6:67:e3:54:69:9c:28: b2:27:e9:08:cd:d9:8f:ba:a1:95:8d:f5:a2:19:0f: 27:69:28:98:d5:59:84:78:82:1e:5b:2d:fa:8e:69: df:86:b2:2e:21:9e:b3:3e:69:1e:de:6e:2e:8d:74: e4:fb:ba:4b:c1:7a:66:94:4f:6b:54:85:10:dc:2e: 57:f1:31:95:1d:2f:b6:69:1f:b1:87:08:d3:10:a4: 87:ab:56:b3:9b:d6:fa:bc:e9:dd:6e:6b:71:e3:66: 7a:42:e6:91:6a:4b:07:c5:41:71:6b:1b:43:f7:db: 9d:2e:da:fb:4d:a8:d0:16:aa:c6:cd:23:0f:dd:e8: 85:b7:5d:0d:e5:62:32:62:ba:96:e2:86:e6:c7:02: fd:92:ca:00:de:e4:db:43:90:51:47:65:c3:8e:38: d8:24:3a:4d:ca:14:3e:4d:cf:b4:e8:cf:97:ba:01: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F0:A0:E3:B4:BD:5F:B3:95:97:F5:1D:C0:4E:3A:6C:B7:03:D6:07 X509v3 Authority Key Identifier: keyid:6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:46:6d:3f:ac:25:2c:79:c8:70:15:50:0b:69:a1:c7:c0:a4: bb:ac:6d:17:5c:ac:fa:55:f9:a1:eb:03:6a:be:43:a0:69:97: 9a:00:b7:aa:a3:ce:68:cd:48:69:24:53:d9:cd:59:94:94:0c: 9f:c5:86:f9:58:c4:9e:6a:64:44:01:24:11:2c:44:fb:c0:7f: 28:d0:2f:5f:9f:97:6b:e9:26:bd:2d:2a:06:95:20:ac:e0:db: af:2f:a7:82:92:d7:2f:0a:ce:92:5f:b3:49:a5:b4:1d:d9:f4: bf:e8:df:f7:d5:7d:62:d0:f0:5f:ae:72:f3:48:30:a4:ad:d4: f7:31:4e:2e:d7:e6:d6:f2:44:58:3c:bb:a9:b6:88:87:14:b5: 6d:b3:ea:81:4e:52:41:58:9b:57:7f:a5:53:a5:47:9c:9a:bb: fb:97:b4:cf:46:96:cd:d9:6c:64:1b:02:17:39:77:14:ea:37: 30:22:a1:54:b8:7c:8a:b8:19:c4:f8:4a:41:0a:26:f2:5c:68: f6:c8:73:23:e2:a1:ef:8c:be:05:2e:62:ff:73:8f:28:f9:1d: 78:95:cd:0e:af:1a:95:e9:c7:b6:6e:0f:b4:e6:46:3f:89:56: c4:8c:25:52:70:33:20:ba:07:01:11:0c:3a:a0:94:6c:7e:9b: 40:7e:f2:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUQ2ArMhw0zAWoLlikITsMb3B44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCRDFGMDVDRkQ4MUQ0MDk2MEU4NDU5NkY2MTYwOEE1 NDA4MDU0QTAeFw0yNjA5MjUxMTQwMDFaFw0yNjA5MjYxMzU1MDFaMDMxMTAvBgNV BAMTKEExRjBBMEUzQjRCRDVGQjM5NTk3RjUxREMwNEUzQTZDQjcwM0Q2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawn0p/cXitUC20QqnFxFnPgZW NmlsiXEAMtaiok1LA2tFtGp2T359yER23O/1qvthDLmi39VLfkVQd2m8Jg+K17Sq by++qUlrDvVUONggWNEI1mfjVGmcKLIn6QjN2Y+6oZWN9aIZDydpKJjVWYR4gh5b LfqOad+Gsi4hnrM+aR7ebi6NdOT7ukvBemaUT2tUhRDcLlfxMZUdL7ZpH7GHCNMQ pIerVrOb1vq86d1ua3HjZnpC5pFqSwfFQXFrG0P3250u2vtNqNAWqsbNIw/d6IW3 XQ3lYjJiupbihubHAv2SygDe5NtDkFFHZcOOONgkOk3KFD5Nz7Toz5e6AcQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUofCg47S9X7OVl/UdwE46bLcD1gcwHwYDVR0j BBgwFoAUb70fBc/YHUCWDoRZb2FgilQIBUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwYmRjYzUtNGNkOS00NmIwLTlkN2ItZDIzMWE5ZTU3YjUwLzAvNkZCRDFGMDVD RkQ4MUQ0MDk2MEU4NDU5NkY2MTYwOEE1NDA4MDU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkJEMUYwNUNGRDgxRDQwOTYwRTg0NTk2RjYxNjA4QTU0MDgw NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvNkZCRDFGMDVDRkQ4MUQ0MDk2MEU4NDU5NkY2MTYw OEE1NDA4MDU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1GbT+sJSx5yHAVUAtpocfApLusbRdcrPpV +aHrA2q+Q6Bpl5oAt6qjzmjNSGkkU9nNWZSUDJ/FhvlYxJ5qZEQBJBEsRPvAfyjQ L1+fl2vpJr0tKgaVIKzg268vp4KS1y8KzpJfs0mltB3Z9L/o3/fVfWLQ8F+ucvNI MKSt1PcxTi7X5tbyRFg8u6m2iIcUtW2z6oFOUkFYm1d/pVOlR5yau/uXtM9Gls3Z bGQbAhc5dxTqNzAioVS4fIq4GcT4SkEKJvJcaPbIcyPioe+MvgUuYv9zjyj5HXiV zQ6vGpXpx7ZuD7TmRj+JVsSMJVJwMyC6BwERDDqglGx+m0B+8p8= -----END CERTIFICATE-----Generated at Fri Sep 25 22:24:17 2026 by rpki-client