$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft File: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft (raw, json) Hash identifier: 2Lym9XV0zBttkheyUgwThhrtiw32rqJKZtzCdh/wO20= Subject key identifier: 4D:A3:F8:0D:6F:72:FE:60:BB:3E:C3:EE:A0:B7:3A:31:7A:81:50:B4 Authority key identifier: 60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23 Certificate issuer: /CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223 Certificate serial: 6E894A70BF32A685321FBEF456F2CCC87BD97DB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 22:19:01 +0000 Manifest this update: Tue 22 Sep 2026 22:14:01 +0000 Manifest next update: Wed 23 Sep 2026 22:38:01 +0000 Files and hashes: 1: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl (hash: OWqVkMFyRtluH4uEYCbbqZfrAO80U9MYYkmY/QmoSBY=) 2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: rfB6zIUPCXAZ3rM7YYBLHBGPxWnBvq/A8DFJMLeaqGo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:89:4a:70:bf:32:a6:85:32:1f:be:f4:56:f2:cc:c8:7b:d9:7d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223 Validity Not Before: Sep 22 22:14:01 2026 GMT Not After : Sep 23 22:38:01 2026 GMT Subject: CN=4DA3F80D6F72FE60BB3EC3EEA0B73A317A8150B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:f9:16:ba:73:f1:a2:24:76:32:e5:aa:03: 90:a0:88:70:12:8e:4c:f9:8f:b7:d6:59:fb:d2:9b: 6f:79:94:08:00:67:63:c9:41:f7:ea:ef:06:a3:39: f7:27:f9:1f:ee:50:15:ba:9f:56:89:67:1c:59:44: 51:a7:9a:ca:c5:1c:64:31:95:a5:95:fa:21:97:d6: f5:48:d4:93:bc:72:45:ee:53:ff:08:7b:c6:80:b1: 52:19:e7:b4:9d:12:e8:28:35:c4:04:d1:b2:df:2e: 30:df:62:ef:95:20:a0:89:b4:f8:43:9d:19:9e:d9: 3b:7f:5d:af:bf:52:7a:06:31:7e:2e:fa:d9:0a:9d: 46:bb:7f:c0:60:2c:71:e3:6b:fe:dd:3b:2c:ae:48: cd:a2:52:16:78:e3:63:2b:03:97:dd:35:85:62:03: 5c:f6:ba:80:85:fe:8a:1b:3a:6b:5d:d8:8a:9e:63: 9f:40:72:3b:af:f8:3c:51:3c:b6:c5:da:cd:24:91: b2:c7:0f:2c:36:82:4f:39:d2:9d:91:11:8c:03:12: 0e:2d:92:78:c5:fc:fb:24:2a:0d:6c:64:77:4b:3a: 1f:5b:40:1c:ca:1d:b3:8e:e9:2a:05:f8:79:6c:0c: 08:8c:68:51:b2:9c:61:3a:48:0d:a0:25:8e:54:09: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A3:F8:0D:6F:72:FE:60:BB:3E:C3:EE:A0:B7:3A:31:7A:81:50:B4 X509v3 Authority Key Identifier: keyid:60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c6:5b:7c:ad:c1:28:40:c9:ff:61:02:03:1d:49:02:18:bd: 14:77:47:63:79:79:38:9f:a4:57:dd:bd:27:38:29:e4:19:e7: 28:1a:cc:d8:3d:0f:42:a6:51:a1:b9:84:dc:6e:6a:a7:6e:b5: aa:d2:14:5f:c2:78:b0:da:32:2b:ec:c7:43:12:cd:64:f1:16: 4d:97:cf:ec:77:91:78:21:16:a8:b7:49:7a:12:2b:2f:60:ab: 8a:a3:5a:26:51:6b:5a:0b:09:c6:ae:72:3c:37:43:a5:3a:17: 61:06:e9:7d:89:b6:7c:95:ae:cb:16:a7:98:28:74:3e:16:f6: c0:43:92:dc:2d:1d:7d:17:20:2e:37:5b:08:91:62:75:d9:0c: 75:de:4d:a3:96:56:66:76:16:8c:5f:12:d2:90:86:b4:b1:30: f7:48:02:bc:cd:52:6d:09:f2:d1:87:ab:92:7d:11:fc:85:81: f2:74:e4:78:1f:19:be:b2:dd:ce:59:04:10:8f:5e:64:10:bd: 24:c6:e9:88:74:50:1c:c6:e9:ed:2d:1d:a2:9a:dc:01:ad:1c: 97:45:be:af:a5:a3:c1:a1:3c:40:7e:6e:52:69:d7:a8:6e:53: 6d:78:59:c5:f0:c7:0a:21:98:eb:aa:e2:df:30:62:3a:40:ed: a0:80:02:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbolKcL8ypoUyH770VvLMyHvZfbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5OUI3NEQ1QzlCRDFCN0FFMERDNjc1RTk4ODhGOTRF QTc4MDIyMzAeFw0yNjA5MjIyMjE0MDFaFw0yNjA5MjMyMjM4MDFaMDMxMTAvBgNV BAMTKDREQTNGODBENkY3MkZFNjBCQjNFQzNFRUEwQjczQTMxN0E4MTUwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOvkWunPxoiR2MuWqA5CgiHAS jkz5j7fWWfvSm295lAgAZ2PJQffq7wajOfcn+R/uUBW6n1aJZxxZRFGnmsrFHGQx laWV+iGX1vVI1JO8ckXuU/8Ie8aAsVIZ57SdEugoNcQE0bLfLjDfYu+VIKCJtPhD nRme2Tt/Xa+/UnoGMX4u+tkKnUa7f8BgLHHja/7dOyyuSM2iUhZ442MrA5fdNYVi A1z2uoCF/oobOmtd2IqeY59Acjuv+DxRPLbF2s0kkbLHDyw2gk850p2REYwDEg4t knjF/PskKg1sZHdLOh9bQBzKHbOO6SoF+HlsDAiMaFGynGE6SA2gJY5UCQ07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTaP4DW9y/mC7PsPuoLc6MXqBULQwHwYDVR0j BBgwFoAUYJm3TVyb0beuDcZ16YiPlOp4AiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZmYTk1ODQtNmY5Ny00MDQxLTljOGQtOGIzOTU5ZTRmOWIzLzAvNjA5OUI3NEQ1 QzlCRDFCN0FFMERDNjc1RTk4ODhGOTRFQTc4MDIyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDk5Qjc0RDVDOUJEMUI3QUUwREM2NzVFOTg4OEY5NEVBNzgw MjIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvNjA5OUI3NEQ1QzlCRDFCN0FFMERDNjc1RTk4ODhG OTRFQTc4MDIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrGW3ytwShAyf9hAgMdSQIYvRR3R2N5eTif pFfdvSc4KeQZ5ygazNg9D0KmUaG5hNxuaqdutarSFF/CeLDaMivsx0MSzWTxFk2X z+x3kXghFqi3SXoSKy9gq4qjWiZRa1oLCcaucjw3Q6U6F2EG6X2JtnyVrssWp5go dD4W9sBDktwtHX0XIC43WwiRYnXZDHXeTaOWVmZ2FoxfEtKQhrSxMPdIArzNUm0J 8tGHq5J9EfyFgfJ05HgfGb6y3c5ZBBCPXmQQvSTG6Yh0UBzG6e0tHaKa3AGtHJdF vq+lo8GhPEB+blJp16huU214WcXwxwohmOuq4t8wYjpA7aCAAv4= -----END CERTIFICATE-----Generated at Wed Sep 23 02:28:14 2026 by rpki-client