$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft File: 6C522A0D52C49C10792E181CCBBD22B72AF10088.mft (raw, json) Hash identifier: AKKJo1pUh4HFXq2phodxaFz8ui8XqG944wUQNhhZ5gA= Subject key identifier: 20:EE:D2:D4:D1:CD:F7:77:8B:EB:7C:85:F8:E9:90:B8:3A:35:41:15 Authority key identifier: 6C:52:2A:0D:52:C4:9C:10:79:2E:18:1C:CB:BD:22:B7:2A:F1:00:88 Certificate issuer: /CN=6C522A0D52C49C10792E181CCBBD22B72AF10088 Certificate serial: 42E55C2A0E309AD5CFCC1D7580E2A6EBA22E00FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 08:47:04 +0000 Manifest this update: Wed 23 Sep 2026 08:42:04 +0000 Manifest next update: Thu 24 Sep 2026 12:22:04 +0000 Files and hashes: 1: 3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa (hash: f1SJQsx9nWUKUwBQBAdqsLt2lHNLlTlJwU4N68CRn+4=) 2: 6C522A0D52C49C10792E181CCBBD22B72AF10088.crl (hash: dMQyn4T/gRBrj1WJVZUbXl9t9Kkdy7vkLd68USLpGTo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.crl rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e5:5c:2a:0e:30:9a:d5:cf:cc:1d:75:80:e2:a6:eb:a2:2e:00:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C522A0D52C49C10792E181CCBBD22B72AF10088 Validity Not Before: Sep 23 08:42:04 2026 GMT Not After : Sep 24 12:22:04 2026 GMT Subject: CN=20EED2D4D1CDF7778BEB7C85F8E990B83A354115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:c2:e8:79:07:7a:95:25:e8:bd:81:39:34: 15:5a:ef:46:ed:91:ad:a2:55:eb:2d:b4:72:75:38: a7:93:96:dd:cc:a0:ce:22:7d:be:33:7a:8d:bb:c3: 63:d4:f5:2a:87:fd:b9:82:e0:a4:6f:90:fd:76:9a: 88:ad:8f:b5:b6:d4:75:4e:9b:fa:29:e8:77:06:ec: 97:63:3e:50:ad:10:97:9e:23:95:9c:b6:b9:dd:b9: 8e:e3:c7:3a:23:db:6e:5e:53:4a:ca:01:4d:6c:a4: 55:95:f1:76:c1:dc:e2:53:1e:0c:c6:3a:e3:61:fe: 6f:96:1b:11:0f:73:e6:c7:ae:6e:b9:df:a6:be:a3: 85:aa:b8:0f:16:30:f8:ff:4c:0b:93:94:77:48:88: f5:90:4f:3d:c0:1b:08:d9:b0:34:bf:2e:f7:52:4d: 91:ab:96:66:14:30:ec:7e:11:07:cb:dc:cb:fe:f5: 7a:5a:b9:f4:8b:03:a6:3c:2c:80:69:a8:e1:e3:b7: 08:2c:02:a6:e7:0c:e7:f4:0d:06:01:4a:99:61:b1: b0:33:71:ad:07:18:e3:6d:eb:03:73:7d:ef:84:4f: 94:39:08:2e:29:bb:2b:c8:85:c0:ba:ea:78:aa:87: 4d:6a:80:08:2e:86:5f:d7:4e:11:06:b3:b1:c7:40: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:D2:D4:D1:CD:F7:77:8B:EB:7C:85:F8:E9:90:B8:3A:35:41:15 X509v3 Authority Key Identifier: keyid:6C:52:2A:0D:52:C4:9C:10:79:2E:18:1C:CB:BD:22:B7:2A:F1:00:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:91:25:e4:43:5d:af:a2:c1:91:0a:79:5b:47:81:8d:82:a6: 2a:e8:7d:ee:87:3d:75:7a:a8:bb:db:3f:2f:01:ed:30:b9:08: 60:ad:d0:4a:54:c3:e8:64:11:6a:ea:10:9f:50:59:02:90:cd: 62:2c:16:89:f2:1d:2d:91:fe:c7:3e:26:2b:38:29:e2:f8:88: 69:81:2b:0c:71:ec:af:cd:d4:2f:2b:85:16:d8:8d:d0:00:75: 2e:38:7f:a9:da:03:ab:16:43:9f:f0:25:e4:a5:28:c8:d9:6b: 7c:bd:22:ad:30:cd:f6:f9:96:ea:82:21:cb:c8:53:4c:2c:c4: 05:19:04:14:84:87:7a:b2:9b:03:0c:b8:ce:64:e6:64:30:8c: 93:9c:ba:d3:e9:46:50:aa:f5:e1:bc:78:02:0b:fc:bf:66:5a: ab:6c:35:f5:14:93:60:61:3e:47:d1:9e:02:4e:8a:fa:b0:df: 77:8e:86:d8:6e:b1:f7:85:bf:97:b2:3e:f9:02:49:c9:21:89: 0a:cb:02:09:c4:d0:33:56:02:0c:61:85:17:a8:55:16:f3:f6: da:82:af:d7:25:a0:9f:f1:d9:20:0e:e5:70:5a:95:60:cd:19: 6b:98:dc:b8:88:82:a6:34:02:31:1c:7d:a9:e1:d4:ee:7d:c6: b4:24:b9:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuVcKg4wmtXPzB11gOKm66IuAP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM1MjJBMEQ1MkM0OUMxMDc5MkUxODFDQ0JCRDIyQjcy QUYxMDA4ODAeFw0yNjA5MjMwODQyMDRaFw0yNjA5MjQxMjIyMDRaMDMxMTAvBgNV BAMTKDIwRUVEMkQ0RDFDREY3Nzc4QkVCN0M4NUY4RTk5MEI4M0EzNTQxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gcLoeQd6lSXovYE5NBVa70bt ka2iVesttHJ1OKeTlt3MoM4ifb4zeo27w2PU9SqH/bmC4KRvkP12moitj7W21HVO m/op6HcG7JdjPlCtEJeeI5WctrnduY7jxzoj225eU0rKAU1spFWV8XbB3OJTHgzG OuNh/m+WGxEPc+bHrm6536a+o4WquA8WMPj/TAuTlHdIiPWQTz3AGwjZsDS/LvdS TZGrlmYUMOx+EQfL3Mv+9XpaufSLA6Y8LIBpqOHjtwgsAqbnDOf0DQYBSplhsbAz ca0HGONt6wNzfe+ET5Q5CC4puyvIhcC66niqh01qgAguhl/XThEGs7HHQL7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIO7S1NHN93eL63yF+OmQuDo1QRUwHwYDVR0j BBgwFoAUbFIqDVLEnBB5Lhgcy70ityrxAIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU0YmFhNzItNjU0Zi00YjgwLThmYzctZjNmMjdiY2RkMzQwLzAvNkM1MjJBMEQ1 MkM0OUMxMDc5MkUxODFDQ0JCRDIyQjcyQUYxMDA4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzUyMkEwRDUyQzQ5QzEwNzkyRTE4MUNDQkJEMjJCNzJBRjEw MDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU0YmFhNzItNjU0Zi00YjgwLThm YzctZjNmMjdiY2RkMzQwLzAvNkM1MjJBMEQ1MkM0OUMxMDc5MkUxODFDQ0JCRDIy QjcyQUYxMDA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiRJeRDXa+iwZEKeVtHgY2Cpirofe6HPXV6 qLvbPy8B7TC5CGCt0EpUw+hkEWrqEJ9QWQKQzWIsFonyHS2R/sc+Jis4KeL4iGmB Kwxx7K/N1C8rhRbYjdAAdS44f6naA6sWQ5/wJeSlKMjZa3y9Iq0wzfb5luqCIcvI U0wsxAUZBBSEh3qymwMMuM5k5mQwjJOcutPpRlCq9eG8eAIL/L9mWqtsNfUUk2Bh PkfRngJOivqw33eOhthusfeFv5eyPvkCSckhiQrLAgnE0DNWAgxhhReoVRbz9tqC r9cloJ/x2SAO5XBalWDNGWuY3LiIgqY0AjEcfanh1O59xrQkuYo= -----END CERTIFICATE-----Generated at Wed Sep 23 11:48:45 2026 by rpki-client