$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft File: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft (raw, json) Hash identifier: kq+YQbJAF9AQkZkJ03rG/MT7PKqFp1w34NVKtgsUoLE= Subject key identifier: 3B:EB:02:E3:FF:55:DD:CC:9E:66:93:A5:87:A3:09:2D:2C:9E:B6:F9 Authority key identifier: 6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 Certificate issuer: /CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Certificate serial: 2EE55B036511138C5EAE5657A58231A2AD3B8035 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft Manifest number: BD Signing time: Tue 22 Sep 2026 09:28:13 +0000 Manifest this update: Tue 22 Sep 2026 09:23:13 +0000 Manifest next update: Wed 23 Sep 2026 11:11:13 +0000 Files and hashes: 1: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl (hash: x4gqUgK2k86R1v876Hed4EDwfeIFNXcdEF9xVQ2k12c=) 2: 3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa (hash: wL8mPbrDXSqS55aHxdLNlPMS48d9sDFxyNKF6bE5qfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e5:5b:03:65:11:13:8c:5e:ae:56:57:a5:82:31:a2:ad:3b:80:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Validity Not Before: Sep 22 09:23:13 2026 GMT Not After : Sep 23 11:11:13 2026 GMT Subject: CN=3BEB02E3FF55DDCC9E6693A587A3092D2C9EB6F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:57:aa:7c:85:56:7c:c7:cb:3d:66:0e:c5: 3f:a4:c2:59:56:3b:7c:c6:20:c5:5b:58:56:f7:f0: a3:6f:7f:aa:2e:de:4b:b5:1a:95:99:19:90:6c:3c: 0b:dd:5c:dc:d7:dd:2d:5b:06:e4:8d:54:c3:53:92: 95:f3:0f:d2:1a:5f:1b:7b:a8:e0:6a:c7:78:13:45: 0d:32:00:80:7f:44:cc:5d:88:3d:61:7b:e6:4c:0a: 79:5d:c9:70:19:14:87:ca:f4:ea:51:65:4d:55:d8: f2:47:86:e8:63:28:1b:36:1c:be:ca:40:56:c0:ec: dc:16:88:a0:a4:f5:a4:8e:33:8b:d2:89:26:04:8b: 33:9f:85:43:05:eb:4f:28:c6:2f:e2:62:5c:be:fb: ed:0e:53:77:65:d7:42:2e:82:a9:1b:72:d4:c8:3a: fd:fd:24:8f:d2:49:f4:00:44:f3:0d:3b:b8:ab:3f: f2:a8:ca:1d:14:d5:71:1c:b5:16:f1:91:18:05:ae: 83:4a:2e:d1:a2:1c:d5:de:78:ed:39:b9:a5:27:5c: d8:94:c6:4d:51:04:9c:61:81:38:21:69:fe:0d:d8: 92:6c:97:50:97:8d:9d:20:79:3b:5d:eb:fb:22:4e: e2:5f:73:b8:05:57:72:a3:4e:69:eb:25:22:5e:15: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EB:02:E3:FF:55:DD:CC:9E:66:93:A5:87:A3:09:2D:2C:9E:B6:F9 X509v3 Authority Key Identifier: keyid:6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:6c:3b:0b:dc:04:98:2b:70:39:14:da:59:da:85:4a:c4: e3:7a:b4:fa:62:42:db:a1:03:37:98:0a:29:ec:ac:2d:da:16: 50:63:ec:29:e1:e0:d1:87:3f:b2:17:48:29:47:75:ae:e7:02: 1a:1d:16:1d:99:88:09:98:25:50:94:99:34:94:db:fc:4d:ca: 4e:9c:fd:c5:b1:bc:38:17:67:51:fc:09:fc:05:49:f9:27:04: a6:88:fc:d0:91:94:83:0a:ef:e9:ed:db:fb:73:29:6e:49:9f: 87:2e:cb:18:1b:43:60:0d:d6:a8:35:6c:5d:ce:18:82:cd:6b: e9:36:50:44:fb:e0:20:46:a7:89:4f:fa:d7:38:2e:4a:60:fd: 4c:ca:e4:d7:f9:9e:59:e9:6f:fa:ab:95:44:73:44:e8:02:6e: 5d:5c:2f:c3:61:ec:ed:dc:31:99:a8:e0:ee:74:60:86:05:7c: b9:1f:34:09:6c:7c:51:3a:da:0d:8f:c1:9b:f1:4a:3b:e0:5e: db:6a:d9:15:b5:bd:ee:e9:1a:fa:07:b2:6a:6b:71:62:c0:9e: c9:84:af:d2:ee:f4:1a:f7:a6:cb:87:95:b2:0e:bc:37:fe:24: 18:dd:3e:34:74:1f:b6:f6:51:80:36:c2:ef:fc:bc:1e:18:fb: fe:70:2f:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuVbA2URE4xerlZXpYIxoq07gDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCNDQxQ0I0Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQw QUY4OUJCMDAeFw0yNjA5MjIwOTIzMTNaFw0yNjA5MjMxMTExMTNaMDMxMTAvBgNV BAMTKDNCRUIwMkUzRkY1NUREQ0M5RTY2OTNBNTg3QTMwOTJEMkM5RUI2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcK1eqfIVWfMfLPWYOxT+kwllW O3zGIMVbWFb38KNvf6ou3ku1GpWZGZBsPAvdXNzX3S1bBuSNVMNTkpXzD9IaXxt7 qOBqx3gTRQ0yAIB/RMxdiD1he+ZMCnldyXAZFIfK9OpRZU1V2PJHhuhjKBs2HL7K QFbA7NwWiKCk9aSOM4vSiSYEizOfhUMF608oxi/iYly+++0OU3dl10IugqkbctTI Ov39JI/SSfQARPMNO7irP/Koyh0U1XEctRbxkRgFroNKLtGiHNXeeO05uaUnXNiU xk1RBJxhgTghaf4N2JJsl1CXjZ0geTtd6/siTuJfc7gFV3KjTmnrJSJeFc3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+sC4/9V3cyeZpOlh6MJLSyetvkwHwYDVR0j BBgwFoAUbbRBy0z7EWr+iuAwFDx95Ar4m7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM3ODQ0MDktM2Y4Mi00NGMxLWExNGUtNjgxZGY1MWIwMjM0LzAvNkRCNDQxQ0I0 Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQwQUY4OUJCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82REI0NDFDQjRDRkIxMTZBRkU4QUUwMzAxNDNDN0RFNDBBRjg5 QkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmM3ODQ0MDktM2Y4Mi00NGMxLWEx NGUtNjgxZGY1MWIwMjM0LzAvNkRCNDQxQ0I0Q0ZCMTE2QUZFOEFFMDMwMTQzQzdE RTQwQUY4OUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA05bDsL3ASYK3A5FNpZ2oVKxON6tPpiQtuh AzeYCinsrC3aFlBj7Cnh4NGHP7IXSClHda7nAhodFh2ZiAmYJVCUmTSU2/xNyk6c /cWxvDgXZ1H8CfwFSfknBKaI/NCRlIMK7+nt2/tzKW5Jn4cuyxgbQ2AN1qg1bF3O GILNa+k2UET74CBGp4lP+tc4Lkpg/UzK5Nf5nlnpb/qrlURzROgCbl1cL8Nh7O3c MZmo4O50YIYFfLkfNAlsfFE62g2PwZvxSjvgXttq2RW1ve7pGvoHsmprcWLAnsmE r9Lu9Br3psuHlbIOvDf+JBjdPjR0H7b2UYA2wu/8vB4Y+/5wL/Y= -----END CERTIFICATE-----Generated at Tue Sep 22 14:59:47 2026 by rpki-client