$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: oLK7cUs71dRjokMiOBtQgb3S6yt/Ln/j9elOyu1VtBg= Subject key identifier: D8:C8:CC:7B:1B:95:5D:58:ED:C4:50:A0:A6:03:44:F1:7D:68:1B:F3 Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 75D42906C678473FA3C2AC511429B98FB15FF6E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: BF Signing time: Tue 22 Sep 2026 12:52:22 +0000 Manifest this update: Tue 22 Sep 2026 12:47:22 +0000 Manifest next update: Wed 23 Sep 2026 12:54:22 +0000 Files and hashes: 1: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: oGa+5gDpwZluqM8NKMOF5cIwjrzb5FnOFwWjMc6/cVo=) 2: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d4:29:06:c6:78:47:3f:a3:c2:ac:51:14:29:b9:8f:b1:5f:f6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: Sep 22 12:47:22 2026 GMT Not After : Sep 23 12:54:22 2026 GMT Subject: CN=D8C8CC7B1B955D58EDC450A0A60344F17D681BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:63:45:68:1c:33:c7:14:3b:52:09:1d:96: d1:b8:6b:cf:07:e2:3d:7e:48:0d:37:10:ac:d3:89: 4e:44:3e:35:96:c7:04:0e:00:b4:5a:d3:7c:93:70: f3:80:36:4d:7a:3d:2b:cf:f3:59:f5:c3:80:1f:39: 6d:26:08:4f:fd:c5:76:48:84:96:42:b0:7f:fa:5d: c1:1d:39:a5:83:85:bc:33:c4:64:d7:9f:31:5b:bd: b0:67:b6:de:00:16:4e:0f:c7:d1:36:75:ee:96:84: 3c:0e:2a:17:44:4e:cf:4c:64:20:3d:d9:12:f1:3b: ac:d0:1c:55:aa:e3:41:cb:a9:2c:38:0b:c4:39:ef: 0c:e5:73:74:f6:cf:a7:fe:5d:3d:63:61:78:2f:c7: a9:22:d5:fd:12:f1:c0:e6:5f:e1:53:2d:bf:5f:09: 77:8e:7c:14:bf:2f:0c:47:42:52:08:b9:dd:41:e5: 56:84:b9:c4:2f:9f:a9:0c:fd:5f:3d:61:d1:03:f5: 7d:5e:f9:62:a3:15:3a:95:82:b0:a7:4e:3e:b9:cd: 98:d5:2f:2d:4f:bf:4e:53:f3:39:c4:7d:2a:52:b5: b7:44:df:f8:44:cb:6c:07:bf:a1:a0:4c:f6:73:0a: b3:c1:a8:ec:33:c3:c9:2a:3f:d4:97:aa:1b:be:6e: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C8:CC:7B:1B:95:5D:58:ED:C4:50:A0:A6:03:44:F1:7D:68:1B:F3 X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:61:6d:56:d7:5d:a2:74:da:b3:4a:9e:2a:38:13:55:7a:e6: e8:96:f4:fb:1d:45:b0:31:36:f9:ef:b2:a4:92:8f:3d:3a:cb: 98:f3:5c:22:64:bd:fa:55:ee:4b:1d:e6:d3:8f:d3:65:85:f7: be:36:42:90:42:96:fb:c0:86:24:21:16:b3:22:62:cc:34:c2: fa:9e:8b:9b:17:de:29:d3:7c:20:54:ef:ea:fd:27:32:68:63: 13:15:2e:c2:15:f0:5f:92:94:cb:63:14:ef:f8:44:7c:b1:f1: 97:86:e7:d0:55:98:0e:d9:37:1b:33:c4:89:c7:3a:c2:20:1d: ea:29:2c:d2:97:cf:43:56:d5:48:22:c2:69:45:2a:86:9b:64: 56:1b:31:26:85:15:d1:e5:12:4e:31:82:bf:39:6b:90:c8:18: a4:37:cd:79:89:2e:59:ef:cb:0f:30:2a:a1:8e:80:46:5a:97: e3:c6:ab:b0:1a:d5:bd:91:2a:47:1e:82:e6:5c:ec:16:72:31: 93:b3:77:c1:4c:64:5d:9d:9a:47:39:4b:2e:e7:d3:9b:48:87: cf:99:a4:16:e8:9c:c2:04:3e:ea:25:d9:12:bf:ef:bf:f8:7c: 80:e1:ef:4a:e9:1a:86:b6:ad:21:07:08:90:41:77:79:61:35: b2:c4:76:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddQpBsZ4Rz+jwqxRFCm5j7Ff9uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA5MjIxMjQ3MjJaFw0yNjA5MjMxMjU0MjJaMDMxMTAvBgNV BAMTKEQ4QzhDQzdCMUI5NTVENThFREM0NTBBMEE2MDM0NEYxN0Q2ODFCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPGNFaBwzxxQ7UgkdltG4a88H 4j1+SA03EKzTiU5EPjWWxwQOALRa03yTcPOANk16PSvP81n1w4AfOW0mCE/9xXZI hJZCsH/6XcEdOaWDhbwzxGTXnzFbvbBntt4AFk4Px9E2de6WhDwOKhdETs9MZCA9 2RLxO6zQHFWq40HLqSw4C8Q57wzlc3T2z6f+XT1jYXgvx6ki1f0S8cDmX+FTLb9f CXeOfBS/LwxHQlIIud1B5VaEucQvn6kM/V89YdED9X1e+WKjFTqVgrCnTj65zZjV Ly1Pv05T8znEfSpStbdE3/hEy2wHv6GgTPZzCrPBqOwzw8kqP9SXqhu+btQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MjMexuVXVjtxFCgpgNE8X1oG/MwHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJthbVbXXaJ02rNKnio4E1V65uiW9PsdRbAx NvnvsqSSjz06y5jzXCJkvfpV7ksd5tOP02WF9742QpBClvvAhiQhFrMiYsw0wvqe i5sX3inTfCBU7+r9JzJoYxMVLsIV8F+SlMtjFO/4RHyx8ZeG59BVmA7ZNxszxInH OsIgHeopLNKXz0NW1UgiwmlFKoabZFYbMSaFFdHlEk4xgr85a5DIGKQ3zXmJLlnv yw8wKqGOgEZal+PGq7Aa1b2RKkceguZc7BZyMZOzd8FMZF2dmkc5Sy7n05tIh8+Z pBbonMIEPuol2RK/77/4fIDh70rpGoa2rSEHCJBBd3lhNbLEdjM= -----END CERTIFICATE-----Generated at Tue Sep 22 22:08:39 2026 by rpki-client