$ rpki-client -vvvf rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft File: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft (raw, json) Hash identifier: ZYnRjfsnw8XjGI13YrPV14GkToIfn/2cpLfuxjRPelw= Subject key identifier: 65:48:06:E4:1A:03:86:58:9C:27:2D:BA:A6:8F:AD:38:C4:22:FD:1E Authority key identifier: 6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1 Certificate issuer: /CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1 Certificate serial: 0FE9DFEE493CB7982C4A769D25F4E040D453F9B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 01:58:35 +0000 Manifest this update: Wed 23 Sep 2026 01:53:35 +0000 Manifest next update: Thu 24 Sep 2026 02:51:35 +0000 Files and hashes: 1: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl (hash: lPJmJxrYR6T11fuCDK6fUIrjHLppMZXPsd+8ixPl/Yo=) 2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: 1yZQJfUMIdupzXA1ljHpU5mWQfYGWg8xMYH2Yx/jRFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e9:df:ee:49:3c:b7:98:2c:4a:76:9d:25:f4:e0:40:d4:53:f9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1 Validity Not Before: Sep 23 01:53:35 2026 GMT Not After : Sep 24 02:51:35 2026 GMT Subject: CN=654806E41A0386589C272DBAA68FAD38C422FD1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:87:f7:2b:e9:c6:36:d6:ff:f7:f8:b3:ee: 6e:ce:09:56:31:b4:8d:07:4f:80:67:6f:1f:ec:ed: b8:de:4e:ad:73:8a:a5:59:af:39:7c:b4:d1:93:8a: 73:0b:c9:54:ce:fe:61:c7:01:67:cc:dd:74:f6:f1: 3c:16:6e:5a:f6:dc:a1:10:d5:48:8f:61:55:fb:97: 88:b4:d6:c2:27:aa:1a:05:b9:a5:5d:5e:13:db:81: 10:0e:c8:fa:a4:97:87:29:bd:14:46:23:20:c0:fc: 18:41:f3:d4:af:f3:d9:35:e4:81:59:04:0f:a1:e4: 2c:e6:a2:83:fa:fb:65:28:44:80:c1:02:bb:f2:a0: 6d:cc:f3:ba:e3:10:bb:98:48:9d:b6:a5:77:96:c6: cd:0c:79:0a:f9:25:04:7d:4f:e3:aa:fa:5b:6c:68: 61:3c:91:26:b6:23:e2:bc:ab:6d:99:3c:a1:dd:18: 4a:80:2a:db:a6:bc:04:90:a9:5f:44:84:c9:ff:ee: cd:ef:4b:0f:c1:17:2a:8d:2a:c5:53:6a:21:17:b4: 87:4b:fa:e3:3b:70:49:75:38:39:df:3a:56:1c:38: 12:39:9e:19:b7:0a:82:d1:6a:62:5d:1a:fb:18:24: 0a:ab:a2:88:de:a8:cb:68:cd:f7:af:1b:ad:bc:f7: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:48:06:E4:1A:03:86:58:9C:27:2D:BA:A6:8F:AD:38:C4:22:FD:1E X509v3 Authority Key Identifier: keyid:6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f8:69:4f:69:28:fc:2b:c4:89:36:8e:3e:34:a8:13:82:c7: 06:42:23:07:19:05:84:a8:c2:c0:0e:02:e9:4e:7e:b6:f2:eb: 21:47:b2:44:e0:ae:5a:fd:ff:ba:08:37:69:3a:ec:55:25:62: e8:a6:58:94:e6:86:d0:1f:cb:bf:4d:88:13:28:fc:99:f1:78: c2:6a:5f:da:07:70:ec:21:41:84:3c:b8:20:56:e2:d8:43:fa: c9:12:50:be:37:c3:5a:6f:a2:46:7c:b8:8c:62:af:94:9d:85: 81:a5:a2:71:b9:a1:ea:b1:2e:70:cd:78:d5:07:ce:0a:1b:1f: 90:1e:6c:25:fa:a5:76:3a:4e:3b:0b:61:d1:4e:27:5a:b5:52: 9c:19:2b:a1:bc:93:38:45:06:d8:ca:a6:13:da:a5:19:b4:b6: 7f:75:f3:28:d2:be:dc:96:4f:d6:89:16:16:8e:1e:25:10:43: 9f:10:15:08:27:3c:d9:82:d3:2a:cd:42:17:67:26:9d:cc:43: 82:a1:6d:50:a5:84:3d:9a:4d:b1:d9:6f:10:a0:f1:61:a3:9d: 85:53:9b:34:16:bd:d0:13:ec:1e:4a:5d:49:d4:23:a8:fd:66: 95:57:6b:f7:71:cd:b5:e3:d9:34:23:dc:26:fd:17:9a:34:07: d8:4f:f5:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+nf7kk8t5gsSnadJfTgQNRT+bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0RTFCM0Y5MjRCREU3OUVEQUZDNjI4MTczRkFEMjZE RUI3MkNFMTAeFw0yNjA5MjMwMTUzMzVaFw0yNjA5MjQwMjUxMzVaMDMxMTAvBgNV BAMTKDY1NDgwNkU0MUEwMzg2NTg5QzI3MkRCQUE2OEZBRDM4QzQyMkZEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5Yf3K+nGNtb/9/iz7m7OCVYx tI0HT4Bnbx/s7bjeTq1ziqVZrzl8tNGTinMLyVTO/mHHAWfM3XT28TwWblr23KEQ 1UiPYVX7l4i01sInqhoFuaVdXhPbgRAOyPqkl4cpvRRGIyDA/BhB89Sv89k15IFZ BA+h5CzmooP6+2UoRIDBArvyoG3M87rjELuYSJ22pXeWxs0MeQr5JQR9T+Oq+lts aGE8kSa2I+K8q22ZPKHdGEqAKtumvASQqV9EhMn/7s3vSw/BFyqNKsVTaiEXtIdL +uM7cEl1ODnfOlYcOBI5nhm3CoLRamJdGvsYJAqroojeqMtozfevG6289yn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZUgG5BoDhlicJy26po+tOMQi/R4wHwYDVR0j BBgwFoAUbU4bP5JL3nntr8YoFz+tJt63LOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQyNDIzNTUtYTdlMi00Y2I5LThjZmYtOWUxN2M3NDJjMmVmLzAvNkQ0RTFCM0Y5 MjRCREU3OUVEQUZDNjI4MTczRkFEMjZERUI3MkNFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDRFMUIzRjkyNEJERTc5RURBRkM2MjgxNzNGQUQyNkRFQjcy Q0UxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvNkQ0RTFCM0Y5MjRCREU3OUVEQUZDNjI4MTczRkFE MjZERUI3MkNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT4aU9pKPwrxIk2jj40qBOCxwZCIwcZBYSo wsAOAulOfrby6yFHskTgrlr9/7oIN2k67FUlYuimWJTmhtAfy79NiBMo/JnxeMJq X9oHcOwhQYQ8uCBW4thD+skSUL43w1pvokZ8uIxir5SdhYGlonG5oeqxLnDNeNUH zgobH5AebCX6pXY6TjsLYdFOJ1q1UpwZK6G8kzhFBtjKphPapRm0tn918yjSvtyW T9aJFhaOHiUQQ58QFQgnPNmC0yrNQhdnJp3MQ4KhbVClhD2aTbHZbxCg8WGjnYVT mzQWvdAT7B5KXUnUI6j9ZpVXa/dxzbXj2TQj3Cb9F5o0B9hP9RU= -----END CERTIFICATE-----Generated at Wed Sep 23 07:34:15 2026 by rpki-client