$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft File: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft (raw, json) Hash identifier: ltTf74GHZJfElD7MKqwVe9n48TZq1ost1pvO3TB/Fcw= Subject key identifier: 26:D8:D4:0C:04:A0:25:1F:0E:BB:87:5C:85:39:B8:8B:F7:5C:2E:20 Authority key identifier: 6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D Certificate issuer: /CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Certificate serial: 3052505065BBA2FD2E5B19FB84C9DFEEF3E0B183 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:24:34 +0000 Manifest this update: Sun 20 Sep 2026 22:19:34 +0000 Manifest next update: Tue 22 Sep 2026 01:52:34 +0000 Files and hashes: 1: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl (hash: jGdAjYIIJJkkklq/99pHosQg495VhEHz6bKIkGoiRaM=) 2: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: w2x/b2ifWwyHpRZZLutwbvw8gPy4dmo/jJsRdtth0Pg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:52:50:50:65:bb:a2:fd:2e:5b:19:fb:84:c9:df:ee:f3:e0:b1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Validity Not Before: Sep 20 22:19:34 2026 GMT Not After : Sep 22 01:52:34 2026 GMT Subject: CN=26D8D40C04A0251F0EBB875C8539B88BF75C2E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b5:eb:06:5e:f4:9e:1a:5c:72:e9:cf:2e:68: 05:48:66:17:7d:6f:d4:e0:fa:16:04:c6:b5:0f:7b: e0:ae:6d:3a:8d:0d:be:bf:8b:0f:96:a9:5c:51:5b: 9d:40:a5:55:1e:d7:8c:3e:95:93:b9:b3:f1:73:0d: b3:c9:33:37:d2:c1:9c:39:b9:16:ca:50:fb:9f:f7: 76:bd:1b:d1:9a:df:9a:62:1a:8a:a4:2f:96:7f:0d: 18:3a:fb:be:0c:47:a2:1a:47:cf:b3:d3:15:bc:03: a5:42:6a:e6:8a:bc:7b:40:ad:cc:47:f2:bb:24:80: 48:6d:ae:4e:85:5e:c1:4f:8a:5e:1c:1a:89:0d:f8: 28:bc:0c:83:0b:d0:2b:2c:22:ce:e8:f6:8e:6b:0f: 63:69:c5:f3:c2:9b:07:d3:b4:37:98:02:fd:8c:fd: e7:ef:2b:c6:e2:97:bf:da:5e:34:e7:c7:41:b0:15: ea:69:ff:13:22:84:45:84:31:56:09:e0:bf:9d:8b: c1:0a:d7:64:25:a3:d1:6e:f4:1e:96:c0:84:bb:ee: ef:57:72:e0:af:ab:e5:34:bf:11:45:16:17:e8:1f: a4:e4:8d:11:0b:db:2e:fe:8d:6f:fd:37:e4:1f:80: e4:b9:c9:cf:81:85:98:02:1e:81:a1:db:20:57:b5: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D8:D4:0C:04:A0:25:1F:0E:BB:87:5C:85:39:B8:8B:F7:5C:2E:20 X509v3 Authority Key Identifier: keyid:6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:52:4e:93:a9:20:e1:f1:fb:73:93:60:b4:84:32:42:59:47: f2:bc:ec:56:2e:76:d2:bb:fe:03:2d:72:25:57:14:27:1d:9f: 5b:78:9b:5a:08:04:9e:d7:7c:04:31:11:0f:58:ad:7e:2b:9f: 04:6a:21:bb:09:4f:20:96:3b:c7:5c:af:c5:27:9a:d0:c9:3b: 7b:95:65:78:2a:18:24:5c:de:d4:a0:6f:2d:a2:f2:bf:23:55: 50:d4:de:e4:35:09:0e:27:40:96:d7:25:c6:8d:85:91:4f:34: 1e:c2:ff:ad:dd:82:4f:42:f1:ca:c6:81:1e:72:3f:f0:b1:46: 12:92:96:cf:61:2c:14:da:fb:9a:c5:90:6a:2a:cf:aa:41:d9: 9e:f4:8c:58:d8:d0:fc:0e:6b:4d:c1:c1:d4:a0:bd:9d:b2:7f: bf:4c:34:d5:c4:8f:36:a0:7f:7f:00:3b:82:e1:e4:35:a5:63: 98:2e:cf:79:f4:31:fb:6e:ea:53:5c:f8:65:c2:13:20:41:15: f2:7f:46:b5:de:49:1a:33:97:6a:ea:1c:5b:a2:f7:8e:3c:be: 2c:2b:91:0a:08:35:73:ca:d7:42:34:ae:14:00:e7:10:26:96: 09:ea:1e:42:f3:a2:31:1f:00:a1:45:79:9f:3d:fe:7f:93:e3: ed:66:e2:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFJQUGW7ov0uWxn7hMnf7vPgsYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1MzRE MzgwMjc0RDAeFw0yNjA5MjAyMjE5MzRaFw0yNjA5MjIwMTUyMzRaMDMxMTAvBgNV BAMTKDI2RDhENDBDMDRBMDI1MUYwRUJCODc1Qzg1MzlCODhCRjc1QzJFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRtesGXvSeGlxy6c8uaAVIZhd9 b9Tg+hYExrUPe+CubTqNDb6/iw+WqVxRW51ApVUe14w+lZO5s/FzDbPJMzfSwZw5 uRbKUPuf93a9G9Ga35piGoqkL5Z/DRg6+74MR6IaR8+z0xW8A6VCauaKvHtArcxH 8rskgEhtrk6FXsFPil4cGokN+Ci8DIML0CssIs7o9o5rD2NpxfPCmwfTtDeYAv2M /efvK8bil7/aXjTnx0GwFepp/xMihEWEMVYJ4L+di8EK12Qlo9Fu9B6WwIS77u9X cuCvq+U0vxFFFhfoH6TkjREL2y7+jW/9N+QfgOS5yc+BhZgCHoGh2yBXtZlPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJtjUDASgJR8Ou4dchTm4i/dcLiAwHwYDVR0j BBgwFoAUbMnA1z2cPghn6tGmOrDVNNOAJ00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwOTYyZjctNjdlYS00NzBlLWE1MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDcz RDlDM0UwODY3RUFEMUE2M0FCMEQ1MzREMzgwMjc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Q0M5QzBENzNEOUMzRTA4NjdFQUQxQTYzQUIwRDUzNEQzODAy NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1 MzREMzgwMjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5STpOpIOHx+3OTYLSEMkJZR/K87FYudtK7 /gMtciVXFCcdn1t4m1oIBJ7XfAQxEQ9YrX4rnwRqIbsJTyCWO8dcr8UnmtDJO3uV ZXgqGCRc3tSgby2i8r8jVVDU3uQ1CQ4nQJbXJcaNhZFPNB7C/63dgk9C8crGgR5y P/CxRhKSls9hLBTa+5rFkGoqz6pB2Z70jFjY0PwOa03BwdSgvZ2yf79MNNXEjzag f38AO4Lh5DWlY5guz3n0Mftu6lNc+GXCEyBBFfJ/RrXeSRozl2rqHFui9448viwr kQoINXPK10I0rhQA5xAmlgnqHkLzojEfAKFFeZ89/n+T4+1m4po= -----END CERTIFICATE-----Generated at Mon Sep 21 16:05:06 2026 by rpki-client