$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft File: 6C9BE2712174A61A708F557544E696FFDBDA757D.mft (raw, json) Hash identifier: cujOGG4oPmc1ptqVNvr1JHzzCrzIJ45laogA4noYntw= Subject key identifier: 20:B0:1A:49:E3:3C:D3:26:A3:DC:D2:1E:65:48:AB:25:24:32:62:24 Authority key identifier: 6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D Certificate issuer: /CN=6C9BE2712174A61A708F557544E696FFDBDA757D Certificate serial: 5D53313D75EACB515CF50B753422EC05D6642A1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 14:34:29 +0000 Manifest this update: Tue 22 Sep 2026 14:29:29 +0000 Manifest next update: Wed 23 Sep 2026 14:46:29 +0000 Files and hashes: 1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: fXvqiR82gi7YB7d/7jQ2cdvdZ/4SJXXC4hBrVNhlfUA=) 2: 6C9BE2712174A61A708F557544E696FFDBDA757D.crl (hash: 1KBsRaN74qFFszZWqc7GOC9yJs4lFQpATCxoAcWav5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.crl rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:53:31:3d:75:ea:cb:51:5c:f5:0b:75:34:22:ec:05:d6:64:2a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C9BE2712174A61A708F557544E696FFDBDA757D Validity Not Before: Sep 22 14:29:29 2026 GMT Not After : Sep 23 14:46:29 2026 GMT Subject: CN=20B01A49E33CD326A3DCD21E6548AB2524326224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:25:22:30:a7:a0:e6:9e:c3:6b:d6:ae:3d:31: 92:13:e8:73:25:fc:8d:f2:4f:c1:e4:14:75:6e:fe: 64:5a:e7:5b:4a:69:97:77:5b:c0:3c:67:19:72:de: ac:7e:47:a3:65:dd:2d:c3:1e:08:f4:a9:45:3d:26: 81:ef:cc:31:f3:33:b0:39:d5:b8:b6:94:aa:04:3c: 24:0f:3b:6d:97:ea:65:a4:1e:98:f3:93:7b:43:a0: f3:d0:2f:6e:0f:cd:56:64:41:d7:4c:a6:15:11:2c: 65:7f:04:d9:25:a2:8a:ff:1b:c5:d4:95:73:14:2c: 88:3f:b2:fb:e2:3c:d6:65:cb:68:20:2e:d1:cb:c3: 25:aa:b9:82:bc:9d:5f:10:75:f6:61:23:1b:ee:bb: 39:9a:24:2f:54:9a:09:88:50:31:a3:3b:9b:66:a7: c2:c0:38:15:9a:76:29:58:e6:7a:76:6f:a7:12:cd: 2d:38:e3:9a:b5:9a:b8:53:80:26:ee:b1:61:c5:4e: ff:d7:d6:8d:5f:6c:9e:fc:e5:7b:6b:22:4c:ca:8f: 92:de:4e:49:b6:9d:25:d3:3e:ad:7b:cc:d3:4d:0e: ad:f2:65:39:41:81:b2:c5:bb:c2:2e:f7:3b:1a:47: 3f:69:22:1b:87:d6:4c:ea:a2:98:d0:40:ff:4a:93: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B0:1A:49:E3:3C:D3:26:A3:DC:D2:1E:65:48:AB:25:24:32:62:24 X509v3 Authority Key Identifier: keyid:6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:42:34:07:4d:e3:32:34:fa:02:fa:6d:4a:20:ed:72:3c:b6: c0:c5:46:23:40:05:ed:ed:3d:69:68:e5:9b:05:3d:a0:1d:6c: 36:4d:e3:fb:c1:9c:66:9b:f0:f0:f3:79:8f:1f:b2:d5:08:b4: e9:96:42:bd:a2:f2:44:34:7a:c0:78:e2:5f:ca:62:b3:d6:fc: 07:7f:17:9c:23:76:13:a6:6d:69:fd:fd:19:c4:f7:87:b5:09: b1:6d:7c:e5:29:bf:3c:f7:19:20:18:59:81:57:f8:4b:ce:f0: ca:3d:0f:88:c2:98:1c:33:94:8b:fd:58:de:44:4f:2d:2e:11: b6:7f:ec:21:30:83:15:76:b4:0a:46:3f:b2:27:4b:87:24:f7: e0:93:48:b9:79:30:c9:b3:55:ad:16:c6:c7:5e:f8:74:f8:01: 8d:5f:0c:a2:05:2e:8b:fe:be:14:11:74:d3:55:6d:4e:28:54: 44:01:d8:d1:be:06:93:e8:75:29:fa:fd:7f:63:87:62:2d:9f: c4:95:63:ec:99:9a:07:95:4a:dd:e9:4e:67:b9:4a:55:24:a2: 49:e3:22:e7:a8:50:cd:3e:09:a8:30:1f:e0:bf:c6:c1:23:b9: 91:86:0d:28:39:a9:9d:69:a2:08:43:18:e5:41:4a:d9:0c:c4: 93:2b:b1:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVMxPXXqy1Fc9Qt1NCLsBdZkKhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM5QkUyNzEyMTc0QTYxQTcwOEY1NTc1NDRFNjk2RkZE QkRBNzU3RDAeFw0yNjA5MjIxNDI5MjlaFw0yNjA5MjMxNDQ2MjlaMDMxMTAvBgNV BAMTKDIwQjAxQTQ5RTMzQ0QzMjZBM0RDRDIxRTY1NDhBQjI1MjQzMjYyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJSIwp6DmnsNr1q49MZIT6HMl /I3yT8HkFHVu/mRa51tKaZd3W8A8Zxly3qx+R6Nl3S3DHgj0qUU9JoHvzDHzM7A5 1bi2lKoEPCQPO22X6mWkHpjzk3tDoPPQL24PzVZkQddMphURLGV/BNkloor/G8XU lXMULIg/svviPNZly2ggLtHLwyWquYK8nV8QdfZhIxvuuzmaJC9UmgmIUDGjO5tm p8LAOBWadilY5np2b6cSzS0445q1mrhTgCbusWHFTv/X1o1fbJ785XtrIkzKj5Le Tkm2nSXTPq17zNNNDq3yZTlBgbLFu8Iu9zsaRz9pIhuH1kzqopjQQP9Kk/31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUILAaSeM80yaj3NIeZUirJSQyYiQwHwYDVR0j BBgwFoAUbJvicSF0phpwj1V1ROaW/9vadX0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhkN2EwMzgtZjhhMS00ZWQwLWExYWYtNTQ5NTJlNTQzYzQzLzAvNkM5QkUyNzEy MTc0QTYxQTcwOEY1NTc1NDRFNjk2RkZEQkRBNzU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzlCRTI3MTIxNzRBNjFBNzA4RjU1NzU0NEU2OTZGRkRCREE3 NTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvNkM5QkUyNzEyMTc0QTYxQTcwOEY1NTc1NDRFNjk2 RkZEQkRBNzU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxCNAdN4zI0+gL6bUog7XI8tsDFRiNABe3t PWlo5ZsFPaAdbDZN4/vBnGab8PDzeY8fstUItOmWQr2i8kQ0esB44l/KYrPW/Ad/ F5wjdhOmbWn9/RnE94e1CbFtfOUpvzz3GSAYWYFX+EvO8Mo9D4jCmBwzlIv9WN5E Ty0uEbZ/7CEwgxV2tApGP7InS4ck9+CTSLl5MMmzVa0Wxsde+HT4AY1fDKIFLov+ vhQRdNNVbU4oVEQB2NG+BpPodSn6/X9jh2Itn8SVY+yZmgeVSt3pTme5SlUkoknj IueoUM0+CagwH+C/xsEjuZGGDSg5qZ1poghDGOVBStkMxJMrsUM= -----END CERTIFICATE-----Generated at Tue Sep 22 23:27:19 2026 by rpki-client