$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft File: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft (raw, json) Hash identifier: XtXf8KLSZn6Y/peqWz1ca0hy8iYJqtff8RNJe+fyOKo= Subject key identifier: 5F:42:5E:FC:04:86:19:11:98:13:81:D3:C6:27:70:0C:9B:9F:15:64 Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Certificate serial: 5C301057A48D61ADE93387F38E5B2D532B39044B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:19:19 +0000 Manifest this update: Mon 21 Sep 2026 22:14:19 +0000 Manifest next update: Wed 23 Sep 2026 00:44:19 +0000 Files and hashes: 1: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl (hash: wO2D5zXatfGQiLAgm7qnT3uP4h7hrWBF9fZofh7nF0M=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:30:10:57:a4:8d:61:ad:e9:33:87:f3:8e:5b:2d:53:2b:39:04:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Validity Not Before: Sep 21 22:14:19 2026 GMT Not After : Sep 23 00:44:19 2026 GMT Subject: CN=5F425EFC04861911981381D3C627700C9B9F1564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:7e:03:48:f3:6e:bc:a9:ce:6c:24:3a:69: fa:f6:d6:cb:9d:7e:36:d1:d8:7e:08:04:8a:93:49: eb:ad:d1:86:62:88:4b:81:27:d9:69:5e:06:2d:62: e9:5f:f0:20:31:27:d1:46:47:e1:3d:2f:f3:9f:67: eb:d1:56:6f:d7:ca:10:81:11:f0:cc:7d:fa:27:dd: 54:c0:a4:96:ee:a9:62:32:62:c4:61:0e:fa:e9:1f: 1d:3e:ea:d6:72:66:8d:92:a6:5e:6e:7b:a0:5b:fd: 95:d4:9e:4c:34:f5:7d:98:a3:b9:51:1c:d5:3f:32: c5:5d:cd:f3:5d:12:73:f7:61:29:f2:e5:08:20:32: e3:05:da:e9:dd:aa:2a:63:ac:06:ae:75:e2:01:50: c4:90:98:e3:45:42:a9:7c:fa:90:b7:55:7b:22:82: 56:cb:b6:59:93:1b:57:91:99:58:c7:a4:69:71:c8: c0:66:a5:cf:02:d9:be:a8:9e:e6:d0:db:20:1c:6a: 29:82:91:0f:ad:71:03:da:00:25:ec:f4:89:d2:e3: 4f:5b:50:3e:3d:66:46:af:8b:7b:66:5a:d6:53:e6: 7f:ea:67:64:5f:82:cb:46:a5:f8:73:00:6e:ac:29: 13:fb:d6:ae:a8:df:06:21:21:0c:ec:14:1b:c4:ca: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:5E:FC:04:86:19:11:98:13:81:D3:C6:27:70:0C:9B:9F:15:64 X509v3 Authority Key Identifier: keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:47:f9:ab:59:76:ad:0e:a9:d9:5e:08:98:40:51:23:fc:c5: c8:aa:0d:67:42:60:5a:ed:66:85:8f:c3:11:5b:4a:9b:7a:ec: e7:8b:e3:78:41:ed:d4:64:1a:27:5a:dc:dc:1c:2a:7e:79:62: c1:58:b3:c3:f9:1f:eb:8e:47:e3:b8:44:69:e6:a9:f8:88:ed: d5:08:db:4c:3e:83:72:41:3c:15:65:93:bf:0f:2c:f1:3a:9c: d6:d1:cb:a0:82:7e:67:94:02:b5:66:cd:91:b6:32:15:a1:ee: e3:dd:b8:dc:66:8b:27:de:05:6c:79:02:3d:b1:cd:66:ba:b5: 03:a1:30:cd:41:5c:f3:ca:7a:72:e3:00:03:f4:f7:64:51:8f: df:c3:82:8c:cf:99:ce:c9:3d:44:95:fe:ef:89:c6:25:9d:3c: a1:6f:ac:10:5e:03:b7:95:e9:08:a4:a7:ac:29:95:04:d7:a1: 61:18:16:27:32:06:31:20:ed:30:dd:e8:c3:01:d2:59:74:d4: 4b:4e:95:46:69:45:8d:5e:0b:8e:01:b1:ef:7d:71:f0:44:d7: 42:00:c5:c8:6b:9b:ac:dc:f0:61:68:0d:2b:a1:ce:fc:8a:04: e6:3d:c1:4f:4f:02:b7:43:e5:c0:27:22:b8:18:dc:17:34:b4: b8:94:02:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDAQV6SNYa3pM4fzjlstUys5BEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFF RjI1QURBOTAeFw0yNjA5MjEyMjE0MTlaFw0yNjA5MjMwMDQ0MTlaMDMxMTAvBgNV BAMTKDVGNDI1RUZDMDQ4NjE5MTE5ODEzODFEM0M2Mjc3MDBDOUI5RjE1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxX4DSPNuvKnObCQ6afr21sud fjbR2H4IBIqTSeut0YZiiEuBJ9lpXgYtYulf8CAxJ9FGR+E9L/OfZ+vRVm/XyhCB EfDMffon3VTApJbuqWIyYsRhDvrpHx0+6tZyZo2Spl5ue6Bb/ZXUnkw09X2Yo7lR HNU/MsVdzfNdEnP3YSny5QggMuMF2undqipjrAaudeIBUMSQmONFQql8+pC3VXsi glbLtlmTG1eRmVjHpGlxyMBmpc8C2b6onubQ2yAcaimCkQ+tcQPaACXs9InS409b UD49Zkavi3tmWtZT5n/qZ2RfgstGpfhzAG6sKRP71q6o3wYhIQzsFBvEyvSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0Je/ASGGRGYE4HTxidwDJufFWQwHwYDVR0j BBgwFoAUbsqak276gnbkQSXgtMe/Qe8lrakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlkYWU5N2YtMWFkMS00YjM0LThmZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2 RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFFRjI1QURBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RUNBOUE5MzZFRkE4Mjc2RTQ0MTI1RTBCNEM3QkY0MUVGMjVB REE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JG NDFFRjI1QURBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJH+atZdq0OqdleCJhAUSP8xciqDWdCYFrt ZoWPwxFbSpt67OeL43hB7dRkGida3NwcKn55YsFYs8P5H+uOR+O4RGnmqfiI7dUI 20w+g3JBPBVlk78PLPE6nNbRy6CCfmeUArVmzZG2MhWh7uPduNxmiyfeBWx5Aj2x zWa6tQOhMM1BXPPKenLjAAP092RRj9/DgozPmc7JPUSV/u+JxiWdPKFvrBBeA7eV 6Qikp6wplQTXoWEYFicyBjEg7TDd6MMB0ll01EtOlUZpRY1eC44Bse99cfBE10IA xchrm6zc8GFoDSuhzvyKBOY9wU9PArdD5cAnIrgY3Bc0tLiUAlk= -----END CERTIFICATE-----Generated at Tue Sep 22 01:49:41 2026 by rpki-client