$ rpki-client -vvvf rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft File: 6259AAB8ACC12928C43A617CC9988F166C9AF024.mft (raw, json) Hash identifier: 2FhYQRuUZac4h7UqjNB8m6pxGRlgCO+EzqvzujmS/ts= Subject key identifier: EF:AE:D5:CC:54:11:FB:FC:2E:9B:E6:FC:65:0E:1F:5A:0F:82:C8:FF Authority key identifier: 62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24 Certificate issuer: /CN=6259AAB8ACC12928C43A617CC9988F166C9AF024 Certificate serial: 4AAA43AAF9924CAFA3A1E30FFD514860285F69A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:12:15 +0000 Manifest this update: Sun 20 Sep 2026 12:07:15 +0000 Manifest next update: Mon 21 Sep 2026 13:27:15 +0000 Files and hashes: 1: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: AV5JsX2Stj+seni25dRRWqI/Y+X0x+WhdAnmL2uFeMY=) 2: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: LH3jAEJt2gXKsQX/zjbaNzaUSZMXYsu7qVfx3W9RCWQ=) 3: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: b4ggDV/ZNf+4NQdflqYvb28UdjLCoRXT/ZsbTg3v/fE=) 4: 6259AAB8ACC12928C43A617CC9988F166C9AF024.crl (hash: nCbt7fhyDyq6vM15UUewWG25JmbeXJEZ3zUJBWk1A2A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:aa:43:aa:f9:92:4c:af:a3:a1:e3:0f:fd:51:48:60:28:5f:69:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6259AAB8ACC12928C43A617CC9988F166C9AF024 Validity Not Before: Sep 20 12:07:15 2026 GMT Not After : Sep 21 13:27:15 2026 GMT Subject: CN=EFAED5CC5411FBFC2E9BE6FC650E1F5A0F82C8FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:9e:5d:e3:37:00:42:7b:f7:2a:53:39:da: cb:d5:58:79:e3:b7:fe:1e:ea:d6:08:4a:84:c0:25: 48:bf:07:e9:6e:91:c1:9f:b7:a2:8e:94:df:44:65: ca:f2:ba:af:cb:b8:43:5b:c2:9f:dd:24:fe:ee:d1: 68:85:2b:ce:84:b0:09:e8:80:21:3e:2f:0c:cb:5f: 95:20:30:ee:90:39:5d:06:83:19:a4:76:78:82:cd: c5:7e:52:d6:81:1f:20:2e:27:be:05:cf:9e:5a:c3: 2c:78:ca:f0:e1:56:5b:2a:93:66:f8:42:fe:a6:4a: ae:62:23:7a:83:5d:7e:a9:ae:67:3f:b8:e3:a0:9c: a4:36:01:ea:10:eb:eb:01:60:b2:f6:be:a2:63:30: ff:fa:c0:1d:23:6e:b4:92:24:53:ab:85:34:0c:11: 49:84:f0:df:b6:2a:c5:d7:8f:9c:6e:9f:e6:b8:29: 6e:78:c1:bb:13:a2:b3:6c:4f:5f:b7:27:11:c5:9d: 21:3a:22:bd:1e:19:5d:4c:dc:dd:1e:c1:a8:a3:d5: 3f:8c:cc:57:3f:60:1c:37:a5:16:fa:5a:74:a6:58: 6d:d8:4e:17:bd:07:b4:ca:4b:a1:26:9b:40:44:f5: 81:3d:e0:5e:15:7e:a6:37:43:40:6f:49:d9:ad:f5: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AE:D5:CC:54:11:FB:FC:2E:9B:E6:FC:65:0E:1F:5A:0F:82:C8:FF X509v3 Authority Key Identifier: keyid:62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c3:bc:33:0c:3c:27:bd:f0:ad:e3:28:4f:48:a7:95:70:42: 95:20:8e:76:31:65:14:44:d7:fa:3f:d7:5a:ee:30:78:e5:72: e7:6b:bb:69:09:67:eb:ef:48:c8:4b:8a:a3:da:25:13:62:14: 26:8a:5d:47:8e:03:9a:0f:f6:26:48:b0:ec:f0:1a:3a:bc:2f: bb:58:0b:00:93:49:f3:df:99:42:08:a6:73:f9:7e:84:3b:b6: f4:6b:84:d8:83:7a:77:74:d0:c8:c9:5c:b8:4c:99:ec:b5:81: d3:34:33:8f:42:2f:7a:81:c4:6c:70:7d:37:6b:13:6a:f3:56: 36:5e:05:78:8b:89:50:1e:2d:47:fe:da:84:d7:e7:2e:55:2e: f6:6c:9d:1f:76:37:66:33:f5:4d:5b:43:8a:ad:48:e9:04:dc: 3c:44:b7:1e:92:55:26:1c:57:91:e2:54:71:3b:0b:c1:f3:6a: 28:8f:e1:60:53:c3:5f:ef:02:12:98:51:94:af:2b:fc:12:b7: 49:dc:71:9a:2f:57:2f:70:30:21:c0:c1:a7:c5:e7:b7:b2:79: 24:ea:b0:24:77:a9:8c:22:c8:6e:5d:0b:45:ae:b9:d3:10:17: 55:64:35:d1:d9:fa:51:3a:ac:a5:60:36:bf:3d:fe:95:ee:b0: 1f:14:5e:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqpDqvmSTK+joeMP/VFIYChfaaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1OUFBQjhBQ0MxMjkyOEM0M0E2MTdDQzk5ODhGMTY2 QzlBRjAyNDAeFw0yNjA5MjAxMjA3MTVaFw0yNjA5MjExMzI3MTVaMDMxMTAvBgNV BAMTKEVGQUVENUNDNTQxMUZCRkMyRTlCRTZGQzY1MEUxRjVBMEY4MkM4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/J5d4zcAQnv3KlM52svVWHnj t/4e6tYISoTAJUi/B+lukcGft6KOlN9EZcryuq/LuENbwp/dJP7u0WiFK86EsAno gCE+LwzLX5UgMO6QOV0GgxmkdniCzcV+UtaBHyAuJ74Fz55awyx4yvDhVlsqk2b4 Qv6mSq5iI3qDXX6prmc/uOOgnKQ2AeoQ6+sBYLL2vqJjMP/6wB0jbrSSJFOrhTQM EUmE8N+2KsXXj5xun+a4KW54wbsTorNsT1+3JxHFnSE6Ir0eGV1M3N0ewaij1T+M zFc/YBw3pRb6WnSmWG3YThe9B7TKS6Emm0BE9YE94F4VfqY3Q0BvSdmt9dHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU767VzFQR+/wum+b8ZQ4fWg+CyP8wHwYDVR0j BBgwFoAUYlmquKzBKSjEOmF8yZiPFmya8CQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTdkMjZkZTAtNjhjZi00MjljLThiMGUtOGQ2NGI3NjJmODI0LzAvNjI1OUFBQjhB Q0MxMjkyOEM0M0E2MTdDQzk5ODhGMTY2QzlBRjAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjU5QUFCOEFDQzEyOTI4QzQzQTYxN0NDOTk4OEYxNjZDOUFG MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNjI1OUFBQjhBQ0MxMjkyOEM0M0E2MTdDQzk5ODhG MTY2QzlBRjAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7DvDMMPCe98K3jKE9Ip5VwQpUgjnYxZRRE 1/o/11ruMHjlcudru2kJZ+vvSMhLiqPaJRNiFCaKXUeOA5oP9iZIsOzwGjq8L7tY CwCTSfPfmUIIpnP5foQ7tvRrhNiDend00MjJXLhMmey1gdM0M49CL3qBxGxwfTdr E2rzVjZeBXiLiVAeLUf+2oTX5y5VLvZsnR92N2Yz9U1bQ4qtSOkE3DxEtx6SVSYc V5HiVHE7C8HzaiiP4WBTw1/vAhKYUZSvK/wSt0nccZovVy9wMCHAwafF57eyeSTq sCR3qYwiyG5dC0WuudMQF1VkNdHZ+lE6rKVgNr89/pXusB8UXt4= -----END CERTIFICATE-----Generated at Mon Sep 21 06:17:39 2026 by rpki-client