$ rpki-client -vvvf rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft File: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft (raw, json) Hash identifier: 5xKy/QBoTGMoUOaS52IolOOToHR+ouptT+6JD40UEVM= Subject key identifier: DF:AA:E9:D4:BB:63:B5:96:36:D6:38:9D:69:20:74:E5:26:BA:03:2A Authority key identifier: 6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 Certificate issuer: /CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1 Certificate serial: 2C13EF5AA9FB81D24B3C69E5B781E194B1C26366 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:24:31 +0000 Manifest this update: Mon 21 Sep 2026 02:19:31 +0000 Manifest next update: Tue 22 Sep 2026 05:16:31 +0000 Files and hashes: 1: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl (hash: kn/IE088JhfGBoa6cXGGinawfqk6pXrjUClf8ojM/TA=) 2: 3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (hash: jBjn/26T9nOLxs1yUlk7/z6hpoVPKoLHthzCZsrv0gk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:13:ef:5a:a9:fb:81:d2:4b:3c:69:e5:b7:81:e1:94:b1:c2:63:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1 Validity Not Before: Sep 21 02:19:31 2026 GMT Not After : Sep 22 05:16:31 2026 GMT Subject: CN=DFAAE9D4BB63B59636D6389D692074E526BA032A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:f2:09:bf:04:4d:01:ca:06:14:78:c7:84: 92:b9:c4:db:37:82:5d:01:a1:5e:17:12:4f:b6:08: ef:b3:3a:ad:37:ab:b1:79:6b:14:ac:84:ee:d4:3a: c8:a9:b5:e2:0e:45:07:11:a6:1c:3a:bd:32:04:bf: 06:a4:7e:73:61:ae:fc:3d:7d:81:c4:c1:4f:b5:98: 6b:7e:82:05:03:a1:84:9e:fd:5f:d7:ac:96:0a:86: 26:c5:52:14:ff:a8:0b:7e:c9:e7:77:bd:de:d8:85: fa:53:f6:a2:52:12:5f:e0:e4:14:92:2f:d3:13:d7: e0:19:5f:38:a0:6c:e0:16:81:8b:c8:df:31:8e:df: 3c:b1:bc:00:69:37:65:6b:fc:b5:f3:3f:24:1a:4c: 5d:a2:c6:6f:78:5f:17:fb:76:17:48:b4:76:87:6c: 0f:12:28:6c:31:c9:a2:72:4b:c6:d4:95:c4:ed:0f: 4b:33:43:30:93:9b:24:ff:8d:fd:05:f8:cd:ff:7a: f1:4e:47:10:8c:8f:87:32:ee:3f:47:ce:97:c9:5c: 5c:be:aa:1a:59:b8:52:b4:0a:a7:bb:6b:76:ef:91: dc:4a:0d:5f:93:fc:b8:23:6d:15:f7:17:5e:e3:41: 70:a9:2f:d9:8d:52:98:73:e9:2d:64:7e:3d:f2:51: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:E9:D4:BB:63:B5:96:36:D6:38:9D:69:20:74:E5:26:BA:03:2A X509v3 Authority Key Identifier: keyid:6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:49:65:1c:d4:74:e3:b5:f6:f7:d7:6f:62:44:73:ff:60:45: ff:45:c2:ff:5b:5d:cd:85:17:b9:03:06:d5:ec:c0:d7:bd:d7: c7:ad:b1:09:db:80:92:fe:76:31:9c:bc:4e:22:6f:25:c7:bf: 49:de:13:c2:65:a8:46:0e:29:49:94:06:c3:30:5f:9d:a1:73: e4:47:09:98:a4:46:ed:2f:66:28:4e:22:7d:71:7f:f8:a6:ae: 72:dc:8b:7c:7e:2e:f4:9c:78:cb:f1:a8:1d:68:a2:7d:42:66: 2d:99:dd:5d:ea:a9:0b:cc:28:ae:e3:30:d6:0a:70:b4:89:7a: 32:e2:e0:c7:5b:20:6f:b5:14:d7:f6:2d:3f:7b:56:52:95:76: 85:e6:0f:42:85:48:8b:05:05:fa:7f:35:74:16:75:8e:e6:57: f7:5f:43:0c:f1:64:78:cb:15:8e:5b:e5:c1:cb:8b:bc:a0:9a: 6e:11:f9:7f:ac:7a:f8:27:b0:c7:3c:05:24:f4:62:a6:53:e1: ce:42:b9:08:08:b0:a2:5d:1f:21:4c:2d:58:ff:c2:73:9c:92: 17:c7:38:9b:66:41:02:30:7b:4c:40:e6:58:ca:65:0b:d4:32: 2d:4d:47:47:2f:d5:65:d3:17:58:19:ce:f2:96:22:4c:d8:15: 34:60:a5:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBPvWqn7gdJLPGnlt4HhlLHCY2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZBRTVENDREREU5OTdERjBBMDhDNTVEREZCRTEyRDI2 RjFGRDlCMTAeFw0yNjA5MjEwMjE5MzFaFw0yNjA5MjIwNTE2MzFaMDMxMTAvBgNV BAMTKERGQUFFOUQ0QkI2M0I1OTYzNkQ2Mzg5RDY5MjA3NEU1MjZCQTAzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPvIJvwRNAcoGFHjHhJK5xNs3 gl0BoV4XEk+2CO+zOq03q7F5axSshO7UOsipteIORQcRphw6vTIEvwakfnNhrvw9 fYHEwU+1mGt+ggUDoYSe/V/XrJYKhibFUhT/qAt+yed3vd7YhfpT9qJSEl/g5BSS L9MT1+AZXzigbOAWgYvI3zGO3zyxvABpN2Vr/LXzPyQaTF2ixm94Xxf7dhdItHaH bA8SKGwxyaJyS8bUlcTtD0szQzCTmyT/jf0F+M3/evFORxCMj4cy7j9HzpfJXFy+ qhpZuFK0Cqe7a3bvkdxKDV+T/LgjbRX3F17jQXCpL9mNUphz6S1kfj3yUeHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU36rp1LtjtZY21jidaSB05Sa6AyowHwYDVR0j BBgwFoAUb65dRN3pl98KCMVd374S0m8f2bEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxZTMwNWItMDAzOS00YjBlLThjNTktMjQyMzI4MGI3YzNjLzAvNkZBRTVENDRE REU5OTdERjBBMDhDNTVEREZCRTEyRDI2RjFGRDlCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkFFNUQ0NERERTk5N0RGMEEwOEM1NURERkJFMTJEMjZGMUZE OUIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxZTMwNWItMDAzOS00YjBlLThj NTktMjQyMzI4MGI3YzNjLzAvNkZBRTVENDREREU5OTdERjBBMDhDNTVEREZCRTEy RDI2RjFGRDlCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZJZRzUdOO19vfXb2JEc/9gRf9Fwv9bXc2F F7kDBtXswNe918etsQnbgJL+djGcvE4ibyXHv0neE8JlqEYOKUmUBsMwX52hc+RH CZikRu0vZihOIn1xf/imrnLci3x+LvSceMvxqB1oon1CZi2Z3V3qqQvMKK7jMNYK cLSJejLi4MdbIG+1FNf2LT97VlKVdoXmD0KFSIsFBfp/NXQWdY7mV/dfQwzxZHjL FY5b5cHLi7ygmm4R+X+sevgnsMc8BST0YqZT4c5CuQgIsKJdHyFMLVj/wnOckhfH OJtmQQIwe0xA5ljKZQvUMi1NR0cv1WXTF1gZzvKWIkzYFTRgpcw= -----END CERTIFICATE-----Generated at Mon Sep 21 09:19:59 2026 by rpki-client