$ rpki-client -vvvf rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft File: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft (raw, json) Hash identifier: iZBt6IQkHsDu084Faur2775BRXRIjlMdjZdSGrhszMw= Subject key identifier: DA:E5:9F:CB:45:1A:9D:B6:29:0E:1B:77:3B:82:B6:F1:D6:CF:02:AE Authority key identifier: 6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 Certificate issuer: /CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Certificate serial: 1E757640066E85AAB4F9F1E4B569F21C8942E1DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 07:13:43 +0000 Manifest this update: Sat 26 Sep 2026 07:08:43 +0000 Manifest next update: Sun 27 Sep 2026 11:09:43 +0000 Files and hashes: 1: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl (hash: OMrj9J5JaxxG8yoGH25sehXaguDvqkjWCNVJm1feHj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:75:76:40:06:6e:85:aa:b4:f9:f1:e4:b5:69:f2:1c:89:42:e1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Validity Not Before: Sep 26 07:08:43 2026 GMT Not After : Sep 27 11:09:43 2026 GMT Subject: CN=DAE59FCB451A9DB6290E1B773B82B6F1D6CF02AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:84:c7:24:1a:e3:41:d8:eb:41:46:8a:dd: 55:a0:35:83:31:72:69:3e:30:e0:bd:41:34:44:89: be:ba:dc:e3:72:a7:4d:3f:72:2c:de:bc:1c:3a:d8: 6f:d4:ad:8f:65:de:7c:db:93:95:1d:c5:74:98:67: 34:f7:d2:50:d4:3e:f4:95:1d:f2:cd:46:fe:f9:5d: ea:50:9e:43:57:4c:45:03:91:a3:89:a1:4e:7c:dc: eb:67:34:f5:57:6c:4e:4f:56:51:ea:2a:da:9a:d6: 34:0f:06:73:01:98:73:50:9d:9b:1c:46:cf:23:68: e0:67:55:d4:2a:b9:2d:21:14:fb:99:36:98:78:c2: e9:ed:38:1d:e0:c4:ac:f1:c3:e1:6a:10:cb:ba:29: e0:2f:da:e0:e3:89:65:86:b4:35:b6:85:d0:6f:d8: 1f:fd:fe:4b:d3:d2:9d:a5:17:c0:23:5c:fd:7a:f7: 25:95:75:44:cd:8e:ad:f1:f2:9a:d8:00:92:8e:1a: 82:15:a0:e9:b5:f2:7a:b4:6b:55:c6:60:f0:4b:a4: 89:73:34:e6:a1:68:20:87:d4:cd:94:e8:73:72:da: eb:19:7d:1a:d1:91:d0:39:58:03:51:26:4b:1c:94: c0:fb:e3:1d:a8:b9:0f:c3:a3:b0:0e:14:44:4e:20: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E5:9F:CB:45:1A:9D:B6:29:0E:1B:77:3B:82:B6:F1:D6:CF:02:AE X509v3 Authority Key Identifier: keyid:6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1c:2a:65:08:85:ea:a1:41:61:83:75:4e:22:cd:75:af:2f: e6:2f:a8:d3:96:e8:62:e8:14:ea:61:06:58:57:10:08:43:91: 04:e8:50:38:7f:36:b0:d3:ec:8a:80:e2:52:9d:ef:b2:80:18: ee:d1:8b:2b:f2:db:07:03:cf:13:12:cb:59:d5:46:a9:50:bf: 67:17:1c:d2:59:bb:38:fa:dc:1a:b0:f4:5c:db:9f:1e:26:bb: 88:a8:4b:f4:54:7c:e4:cf:4a:15:91:20:5d:90:e8:d4:3d:10: 6b:a3:36:f8:24:ef:ee:ae:f6:66:77:a0:bc:c0:81:c2:76:91: 83:d5:06:2c:2c:52:0c:ec:a2:18:c4:f8:67:43:98:49:ce:0c: db:d5:00:da:f4:77:82:8f:c6:58:f4:e2:2e:ad:32:ff:ff:12: a8:24:21:1a:2c:dc:f0:4c:de:77:18:a7:89:56:c2:50:59:09: ea:1d:97:e0:32:17:fe:2a:25:1d:c9:ca:d2:dd:33:7b:12:b6: 75:f3:a3:04:4a:ec:39:af:36:35:48:05:05:89:51:c5:4c:ac: ee:43:a7:07:31:80:bd:aa:b1:0d:93:35:2b:10:07:f3:31:a2: 18:a4:ce:cd:1b:95:31:03:ca:fd:9f:bb:3f:5b:f2:f7:e6:22: 9c:b8:65:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnV2QAZuhaq0+fHktWnyHIlC4dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0Qx QzFFNTdENzAeFw0yNjA5MjYwNzA4NDNaFw0yNjA5MjcxMTA5NDNaMDMxMTAvBgNV BAMTKERBRTU5RkNCNDUxQTlEQjYyOTBFMUI3NzNCODJCNkYxRDZDRjAyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7YTHJBrjQdjrQUaK3VWgNYMx cmk+MOC9QTREib663ONyp00/cizevBw62G/UrY9l3nzbk5UdxXSYZzT30lDUPvSV HfLNRv75XepQnkNXTEUDkaOJoU583OtnNPVXbE5PVlHqKtqa1jQPBnMBmHNQnZsc Rs8jaOBnVdQquS0hFPuZNph4wuntOB3gxKzxw+FqEMu6KeAv2uDjiWWGtDW2hdBv 2B/9/kvT0p2lF8AjXP169yWVdUTNjq3x8prYAJKOGoIVoOm18nq0a1XGYPBLpIlz NOahaCCH1M2U6HNy2usZfRrRkdA5WANRJksclMD74x2ouQ/Do7AOFEROIHM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2uWfy0UanbYpDht3O4K28dbPAq4wHwYDVR0j BBgwFoAUb11i7XGbrCYyK4DnMp8wfRweV9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA5YzIyYjEtMWI3Yi00NjcxLWFiOTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3 MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0QxQzFFNTdENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjVENjJFRDcxOUJBQzI2MzIyQjgwRTczMjlGMzA3RDFDMUU1 N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMw N0QxQzFFNTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0cKmUIheqhQWGDdU4izXWvL+YvqNOW6GLo FOphBlhXEAhDkQToUDh/NrDT7IqA4lKd77KAGO7Riyvy2wcDzxMSy1nVRqlQv2cX HNJZuzj63Bqw9Fzbnx4mu4ioS/RUfOTPShWRIF2Q6NQ9EGujNvgk7+6u9mZ3oLzA gcJ2kYPVBiwsUgzsohjE+GdDmEnODNvVANr0d4KPxlj04i6tMv//EqgkIRos3PBM 3ncYp4lWwlBZCeodl+AyF/4qJR3JytLdM3sStnXzowRK7DmvNjVIBQWJUcVMrO5D pwcxgL2qsQ2TNSsQB/Mxohikzs0blTEDyv2fuz9b8vfmIpy4ZYE= -----END CERTIFICATE-----Generated at Sat Sep 26 09:40:37 2026 by rpki-client