$ rpki-client -vvvf rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft File: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft (raw, json) Hash identifier: yFgzUD2O8xa1OV/70VmZrFkuoh/eiU1ipnNO22VVors= Subject key identifier: C2:CD:44:C8:76:1A:F4:66:F9:7A:D9:13:BD:F9:10:14:23:17:19:77 Authority key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 Certificate issuer: /CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5 Certificate serial: 58592579F92FA393FF3AA60262B13C4FE87312EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 16:26:07 +0000 Manifest this update: Thu 24 Sep 2026 16:21:07 +0000 Manifest next update: Fri 25 Sep 2026 19:50:07 +0000 Files and hashes: 1: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: y9avoo0XnwxjsH45wOCvll+IYaXWnM223zX3g6ZS9kU=) 2: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl (hash: clI1eKoYdo8VQreEWPu3+MVIPrRqACUM8DI8ejppvDQ=) 3: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: S9Rn028mN4RxKRfk1o8rZH0hTRoX3/5ujuVLyQFUwsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:59:25:79:f9:2f:a3:93:ff:3a:a6:02:62:b1:3c:4f:e8:73:12:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5 Validity Not Before: Sep 24 16:21:07 2026 GMT Not After : Sep 25 19:50:07 2026 GMT Subject: CN=C2CD44C8761AF466F97AD913BDF9101423171977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:79:dc:f2:06:88:f2:ac:3a:4a:73:44:dc: 94:ee:c0:e0:86:e1:8d:e8:dc:36:e4:56:de:da:75: 9b:0e:46:7a:88:8f:52:89:76:8f:35:86:59:c9:9a: e3:9a:48:f6:79:bd:28:c0:30:ad:2c:dd:00:55:e5: b1:2b:73:3f:38:8f:eb:da:9e:39:8d:ac:71:f0:df: b2:b4:11:fa:af:b6:b0:2d:d4:e7:ee:62:26:4d:fe: 46:7b:10:79:f8:41:fe:2f:5c:5f:ec:11:30:48:83: 50:f0:bf:6a:92:80:80:82:60:34:6b:86:71:e0:f8: 2f:e6:17:6e:ef:c2:a7:77:40:e7:97:98:0f:ee:04: d2:fc:a1:76:d7:15:80:60:35:bf:07:7b:97:0b:56: 63:c3:fd:32:36:68:da:5a:1d:d6:4c:bc:83:86:83: 98:0a:a3:3c:93:13:31:c8:9b:4f:54:5c:5b:ed:7c: 4c:62:7c:f4:11:22:03:74:31:d2:8f:d9:67:bf:e6: 2d:f0:71:2c:a6:20:86:9a:56:6b:35:bf:3b:2b:86: f6:33:6a:e9:d4:11:95:3a:14:7b:59:e2:f2:2b:ee: 54:af:cb:3e:12:79:a8:df:c3:b5:1d:13:a3:2a:b9: c2:dc:6b:3d:f1:33:60:b6:09:b9:f0:52:4b:96:6f: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CD:44:C8:76:1A:F4:66:F9:7A:D9:13:BD:F9:10:14:23:17:19:77 X509v3 Authority Key Identifier: keyid:6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ea:1f:45:de:9d:14:6a:1a:f4:4f:e3:9b:f1:78:c3:95:0a: cd:a1:38:a8:49:c7:d9:60:25:ca:9a:ee:a0:44:d3:8c:e6:02: 62:64:54:13:70:21:f6:ab:d5:c2:1c:ea:67:a6:8a:07:f9:a8: 76:9a:1d:8a:01:ed:88:04:4d:97:47:83:5a:ad:fa:9b:df:be: 44:c1:5b:b8:68:7e:41:54:ef:ea:85:23:00:f9:6d:f0:51:48: fa:0a:0b:74:d9:93:ac:89:aa:d1:f6:46:a8:f4:00:3e:c9:6b: ad:cb:06:67:4b:a5:88:24:54:f9:69:e4:81:ba:48:db:a8:54: 61:9c:95:24:06:8d:e3:64:5e:76:bc:f2:da:81:89:74:41:a1: 51:fe:5f:87:c5:17:2e:34:db:d0:5c:ed:cd:a8:ee:e3:34:df: 7d:5a:5b:b2:b2:91:bf:47:85:47:8b:08:be:dd:cd:71:19:e8: 5e:01:d1:bf:1c:ad:00:81:2b:1a:1b:2f:b3:be:27:44:6a:84: c4:ba:f7:52:d2:8d:97:fa:73:c9:f4:d8:3a:b9:ab:bd:14:11: 65:6f:e7:e0:51:10:31:a8:01:bf:08:c9:0b:c7:02:0b:7a:45: ec:02:a3:7e:08:10:79:c3:e7:24:bd:68:a2:20:2d:5f:de:76: 88:5d:8c:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFklefkvo5P/OqYCYrE8T+hzEuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGQ0ExQUE3NDUyRjU4M0I0MzMxN0U1NjBDQzkzRjhD OUNCOERDNTAeFw0yNjA5MjQxNjIxMDdaFw0yNjA5MjUxOTUwMDdaMDMxMTAvBgNV BAMTKEMyQ0Q0NEM4NzYxQUY0NjZGOTdBRDkxM0JERjkxMDE0MjMxNzE5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfo3nc8gaI8qw6SnNE3JTuwOCG 4Y3o3DbkVt7adZsORnqIj1KJdo81hlnJmuOaSPZ5vSjAMK0s3QBV5bErcz84j+va njmNrHHw37K0EfqvtrAt1OfuYiZN/kZ7EHn4Qf4vXF/sETBIg1Dwv2qSgICCYDRr hnHg+C/mF27vwqd3QOeXmA/uBNL8oXbXFYBgNb8He5cLVmPD/TI2aNpaHdZMvIOG g5gKozyTEzHIm09UXFvtfExifPQRIgN0MdKP2We/5i3wcSymIIaaVms1vzsrhvYz aunUEZU6FHtZ4vIr7lSvyz4Seajfw7UdE6MqucLcaz3xM2C2CbnwUkuWb3NXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUws1EyHYa9Gb5etkTvfkQFCMXGXcwHwYDVR0j BBgwFoAUbvyhqnRS9YO0MxflYMyT+MnLjcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ2YjUyNDgtY2UzMy00ZTk3LTg4MmYtZjYxNDVmMzE5MDI2LzAvNkVGQ0ExQUE3 NDUyRjU4M0I0MzMxN0U1NjBDQzkzRjhDOUNCOERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUZDQTFBQTc0NTJGNTgzQjQzMzE3RTU2MENDOTNGOEM5Q0I4 REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvNkVGQ0ExQUE3NDUyRjU4M0I0MzMxN0U1NjBDQzkz RjhDOUNCOERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzqH0XenRRqGvRP45vxeMOVCs2hOKhJx9lg Jcqa7qBE04zmAmJkVBNwIfar1cIc6memigf5qHaaHYoB7YgETZdHg1qt+pvfvkTB W7hofkFU7+qFIwD5bfBRSPoKC3TZk6yJqtH2Rqj0AD7Ja63LBmdLpYgkVPlp5IG6 SNuoVGGclSQGjeNkXna88tqBiXRBoVH+X4fFFy4029Bc7c2o7uM0331aW7Kykb9H hUeLCL7dzXEZ6F4B0b8crQCBKxobL7O+J0RqhMS691LSjZf6c8n02Dq5q70UEWVv 5+BREDGoAb8IyQvHAgt6RewCo34IEHnD5yS9aKIgLV/edohdjMM= -----END CERTIFICATE-----Generated at Thu Sep 24 18:29:28 2026 by rpki-client