$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft (raw, json) Hash identifier: NPN0JXKOy1bMJ1MKFOJySBzKGYbWfZ71UcKwPXxZ1fM= Subject key identifier: 67:11:E9:E8:AF:14:19:12:37:59:0C:5B:18:70:C4:E9:6F:E9:D3:77 Authority key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC Certificate issuer: /CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Certificate serial: 042058E6496F6253D3596A515047EE48BC5561DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft Manifest number: BF Signing time: Tue 22 Sep 2026 12:42:05 +0000 Manifest this update: Tue 22 Sep 2026 12:37:05 +0000 Manifest next update: Wed 23 Sep 2026 13:56:05 +0000 Files and hashes: 1: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl (hash: 7tlk+56chqXL1qeEw4IcgUyLGMQNtuUbAXQc3hid5fg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:20:58:e6:49:6f:62:53:d3:59:6a:51:50:47:ee:48:bc:55:61:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Validity Not Before: Sep 22 12:37:05 2026 GMT Not After : Sep 23 13:56:05 2026 GMT Subject: CN=6711E9E8AF14191237590C5B1870C4E96FE9D377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:5c:2e:5b:be:0c:c3:6b:ed:6f:4a:8b:90: 4d:2e:b5:ae:8b:e7:bd:ae:82:7a:da:a8:41:c3:20: 2c:35:cb:4c:08:26:41:8e:2a:44:83:79:f1:fe:0b: 67:91:09:fa:72:6c:f8:3f:90:8d:67:1d:25:e9:12: 85:7d:bd:9c:16:e9:14:32:f6:94:76:3b:3e:1c:9c: 95:dc:48:f3:cf:d4:cd:0b:32:8d:a5:74:21:00:63: 86:b7:63:6d:7a:76:b4:39:cb:96:34:03:e4:07:cf: 77:66:7f:6c:d2:cd:e0:78:7c:b8:d1:0f:60:df:7a: 4a:b0:28:ce:33:00:2f:04:ac:24:a0:8e:ee:91:b9: 7a:70:66:95:af:8f:6a:8a:eb:4c:88:8d:4d:da:ad: b3:1d:7e:7f:1a:0d:d0:c7:56:53:0e:5c:a2:ea:7c: b9:4d:eb:83:60:3c:6a:9f:18:15:ca:8b:2a:e2:ae: 43:d8:03:e2:bc:7d:a7:77:a8:23:23:51:1e:54:98: 4a:e8:4f:91:8c:dc:c2:3e:af:af:38:34:3d:fa:67: bd:a6:bb:c4:44:e7:89:3e:ff:82:7d:a6:e0:8e:20: 03:f4:7f:da:47:94:75:df:26:00:86:82:c5:3b:ad: bf:22:25:88:8f:bc:a0:ef:9d:c6:60:81:3e:04:71: 24:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:E9:E8:AF:14:19:12:37:59:0C:5B:18:70:C4:E9:6F:E9:D3:77 X509v3 Authority Key Identifier: keyid:D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d1:a7:3d:79:ec:b6:d5:78:0b:af:5b:22:7a:21:6a:32:25: a2:f1:11:3c:41:a5:2c:3b:9f:97:f0:e8:a9:bc:4b:28:30:8c: 22:5b:bf:71:0a:be:e9:b8:db:bc:fe:13:b9:11:1e:ec:0e:1d: 0f:c3:7f:35:76:e8:f9:05:28:a2:24:2e:f8:c5:a9:1d:68:23: 37:7d:ae:d8:42:88:ca:0b:0a:43:7d:7a:1f:1a:f2:c6:20:db: e1:5d:9c:b3:0c:3d:d5:fb:3e:cc:a7:a3:10:d0:76:d3:95:23: fc:77:ce:7c:e0:20:c4:8d:b9:f9:aa:9b:5a:7b:62:0a:f7:ab: 1c:76:5b:23:71:4c:af:1b:49:5e:26:88:99:65:15:66:10:ed: fe:60:9b:25:ae:35:d1:7e:ec:d7:d7:ea:84:3b:01:f7:ba:7c: 46:de:8c:38:4c:aa:2a:b0:fe:da:43:25:51:ae:22:6a:a8:54: bd:2b:00:e5:ee:17:6b:46:a0:4c:4f:2a:a3:f2:d4:8e:4b:ed: 76:90:e4:64:eb:2e:d7:d3:26:5e:23:37:f6:20:ce:89:7a:ee: df:11:18:c9:ca:5e:91:d9:20:45:69:5f:57:fe:f5:b8:45:b3: 63:71:bb:ad:51:5f:5a:6f:47:3d:5c:1a:a3:ce:c5:5d:df:e4: 8c:f3:f8:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCBY5klvYlPTWWpRUEfuSLxVYdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYyODEz N0MxOTdEQzAeFw0yNjA5MjIxMjM3MDVaFw0yNjA5MjMxMzU2MDVaMDMxMTAvBgNV BAMTKDY3MTFFOUU4QUYxNDE5MTIzNzU5MEM1QjE4NzBDNEU5NkZFOUQzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEVwuW74Mw2vtb0qLkE0uta6L 572ugnraqEHDICw1y0wIJkGOKkSDefH+C2eRCfpybPg/kI1nHSXpEoV9vZwW6RQy 9pR2Oz4cnJXcSPPP1M0LMo2ldCEAY4a3Y216drQ5y5Y0A+QHz3dmf2zSzeB4fLjR D2DfekqwKM4zAC8ErCSgju6RuXpwZpWvj2qK60yIjU3arbMdfn8aDdDHVlMOXKLq fLlN64NgPGqfGBXKiyrirkPYA+K8fad3qCMjUR5UmEroT5GM3MI+r684ND36Z72m u8RE54k+/4J9puCOIAP0f9pHlHXfJgCGgsU7rb8iJYiPvKDvncZggT4EcSSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxHp6K8UGRI3WQxbGHDE6W/p03cwHwYDVR0j BBgwFoAU1sCVcVeh7aJPDe/20P7ygTfBl9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzOTE2OTgtMDhlYy00NzkwLWExODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1 N0ExRURBMjRGMERFRkY2RDBGRUYyODEzN0MxOTdEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkMwOTU3MTU3QTFFREEyNEYwREVGRjZEMEZFRjI4MTM3QzE5 N0RDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYy ODEzN0MxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTRpz157LbVeAuvWyJ6IWoyJaLxETxBpSw7 n5fw6Km8SygwjCJbv3EKvum427z+E7kRHuwOHQ/DfzV26PkFKKIkLvjFqR1oIzd9 rthCiMoLCkN9eh8a8sYg2+FdnLMMPdX7PsynoxDQdtOVI/x3znzgIMSNufmqm1p7 Ygr3qxx2WyNxTK8bSV4miJllFWYQ7f5gmyWuNdF+7NfX6oQ7Afe6fEbejDhMqiqw /tpDJVGuImqoVL0rAOXuF2tGoExPKqPy1I5L7XaQ5GTrLtfTJl4jN/Ygzol67t8R GMnKXpHZIEVpX1f+9bhFs2Nxu61RX1pvRz1cGqPOxV3f5Izz+Eg= -----END CERTIFICATE-----Generated at Wed Sep 23 06:45:42 2026 by rpki-client