$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft File: 6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft (raw, json) Hash identifier: jA4+4sZ7vqHzuzjsVx0oKaA2t/RvTsR6gyDaC1DtI38= Subject key identifier: A8:5E:DB:56:0B:9D:F0:B1:7A:5C:31:BF:21:F0:98:0F:1D:8D:73:01 Authority key identifier: 6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6 Certificate issuer: /CN=6D31A573DDCC9E2C71AAB2614AE715DB44453EC6 Certificate serial: 631B1064013B30BCF2E4D7F4DD13737C939D673E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:21:08 +0000 Manifest this update: Wed 23 Sep 2026 20:16:08 +0000 Manifest next update: Thu 24 Sep 2026 23:44:08 +0000 Files and hashes: 1: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: hrdfr2TRiO52apNfgacLA8RJIeVUyTA2DCEK6uEcGVs=) 2: 6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.crl (hash: sA+7hnXiDTOPB70xWQRvu33jY/FfI1Z9B1l9VFiSErI=) 3: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: 8q2j3tRiCSRC9Gc9YgqPefi0jllhnuKq7xV3+fKHJB0=) 4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: jL+nUyA+GguJPeOWnZy98MfRRLnSz3vqJp7gXX3PDSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.crl rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1b:10:64:01:3b:30:bc:f2:e4:d7:f4:dd:13:73:7c:93:9d:67:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D31A573DDCC9E2C71AAB2614AE715DB44453EC6 Validity Not Before: Sep 23 20:16:08 2026 GMT Not After : Sep 24 23:44:08 2026 GMT Subject: CN=A85EDB560B9DF0B17A5C31BF21F0980F1D8D7301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:6b:f2:0d:ed:2f:37:cc:62:d2:3d:c4:c2: b5:c4:15:20:de:6b:94:7c:1d:aa:26:e4:01:e2:10: fb:16:37:a7:fa:3f:13:c4:10:06:fd:fa:e6:2d:c4: 94:59:7e:ed:4a:2f:7f:ae:d7:5c:b3:43:45:8b:21: 85:bd:ec:47:6e:43:32:1d:3c:41:35:b0:5c:c5:61: dc:08:1d:b4:a2:88:ba:19:ac:85:a0:90:a9:0c:dd: 2c:76:5e:4a:32:19:a5:81:ef:6b:a8:cf:d0:09:5c: a6:6c:2b:57:6a:59:67:91:d2:12:a8:f3:59:b5:f1: 49:6f:9c:3b:75:73:b3:5c:c6:dc:a3:98:4a:df:55: 8b:6e:13:4a:ce:2e:2a:23:70:65:c7:21:a5:40:e8: 40:a3:5f:46:3f:c0:da:8e:95:79:7f:99:a7:e0:8b: db:0a:80:2f:ea:36:cc:b0:be:81:8c:7d:d9:29:14: 35:50:c9:a5:a3:10:2d:3c:ba:63:23:b5:dc:85:24: 40:00:bd:c9:31:dd:ca:e2:9c:0f:37:f8:5c:13:fd: 50:be:02:2b:cc:d7:e4:c4:36:4d:41:21:6d:d4:4d: b3:0a:63:bc:21:32:c0:ac:ed:ba:a9:bc:65:3b:6a: 1c:42:62:5b:2f:74:3b:e4:21:4c:85:bb:f5:46:db: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:DB:56:0B:9D:F0:B1:7A:5C:31:BF:21:F0:98:0F:1D:8D:73:01 X509v3 Authority Key Identifier: keyid:6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:79:b9:7e:d9:5b:d7:e7:15:39:37:91:77:7a:0e:1c:4d:ce: 70:84:65:cc:45:c0:a3:9e:e0:15:ea:29:5a:21:53:c2:4b:81: 74:0f:a7:9c:a3:2a:62:cb:0d:be:95:47:b5:f7:fb:00:f6:20: b3:20:22:41:2d:c9:40:fe:22:0b:12:e3:e8:43:28:8e:72:2d: 0f:02:42:a8:7e:ed:c0:77:51:35:2b:52:57:06:f9:a8:5f:7e: 76:75:55:7c:14:27:6c:24:4f:eb:dc:7a:26:a3:00:03:b2:43: 26:60:f8:2c:c1:c6:e0:4c:33:0c:49:c2:19:21:de:2b:5f:dc: de:ed:3b:5a:61:5f:b5:e1:6c:61:65:03:fc:50:bd:8a:6a:86: 57:12:2f:8c:03:b4:6f:31:51:88:1e:e2:f4:bb:20:49:d0:f9: 9b:fe:af:63:6d:99:60:59:8c:d3:c6:9f:92:24:82:fc:15:9b: 8e:5e:13:b6:e9:e0:4b:9c:f9:f1:b6:e5:4f:52:1a:09:42:21: 4f:7e:50:bb:ef:16:96:f4:e8:c6:aa:79:cd:de:38:d6:88:18: 00:50:3f:bd:6b:d1:3a:1b:85:f8:65:bd:0e:73:e5:e3:9c:27: a5:a9:ef:a9:b7:15:79:31:29:9d:98:b2:87:77:f3:7e:4d:e1: d0:09:d3:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxsQZAE7MLzy5Nf03RNzfJOdZz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzMUE1NzNERENDOUUyQzcxQUFCMjYxNEFFNzE1REI0 NDQ1M0VDNjAeFw0yNjA5MjMyMDE2MDhaFw0yNjA5MjQyMzQ0MDhaMDMxMTAvBgNV BAMTKEE4NUVEQjU2MEI5REYwQjE3QTVDMzFCRjIxRjA5ODBGMUQ4RDczMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa5GvyDe0vN8xi0j3EwrXEFSDe a5R8Haom5AHiEPsWN6f6PxPEEAb9+uYtxJRZfu1KL3+u11yzQ0WLIYW97EduQzId PEE1sFzFYdwIHbSiiLoZrIWgkKkM3Sx2XkoyGaWB72uoz9AJXKZsK1dqWWeR0hKo 81m18UlvnDt1c7NcxtyjmErfVYtuE0rOLiojcGXHIaVA6ECjX0Y/wNqOlXl/mafg i9sKgC/qNsywvoGMfdkpFDVQyaWjEC08umMjtdyFJEAAvckx3crinA83+FwT/VC+ AivM1+TENk1BIW3UTbMKY7whMsCs7bqpvGU7ahxCYlsvdDvkIUyFu/VG2zRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqF7bVgud8LF6XDG/IfCYDx2NcwEwHwYDVR0j BBgwFoAUbTGlc93MnixxqrJhSucV20RFPsYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmU0YWNlMTEtOTEzOS00NDg1LWFiYTktMDRiZWRkYzViYzI2LzAvNkQzMUE1NzNE RENDOUUyQzcxQUFCMjYxNEFFNzE1REI0NDQ1M0VDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDMxQTU3M0REQ0M5RTJDNzFBQUIyNjE0QUU3MTVEQjQ0NDUz RUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvNkQzMUE1NzNERENDOUUyQzcxQUFCMjYxNEFFNzE1 REI0NDQ1M0VDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADd5uX7ZW9fnFTk3kXd6DhxNznCEZcxFwKOe 4BXqKVohU8JLgXQPp5yjKmLLDb6VR7X3+wD2ILMgIkEtyUD+IgsS4+hDKI5yLQ8C Qqh+7cB3UTUrUlcG+ahffnZ1VXwUJ2wkT+vceiajAAOyQyZg+CzBxuBMMwxJwhkh 3itf3N7tO1phX7XhbGFlA/xQvYpqhlcSL4wDtG8xUYge4vS7IEnQ+Zv+r2NtmWBZ jNPGn5IkgvwVm45eE7bp4Euc+fG25U9SGglCIU9+ULvvFpb06Maqec3eONaIGABQ P71r0TobhfhlvQ5z5eOcJ6Wp76m3FXkxKZ2Ysod3835N4dAJ04I= -----END CERTIFICATE-----Generated at Wed Sep 23 23:59:46 2026 by rpki-client