$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json) Hash identifier: 6Ln4p848SXCGNebbrz3i1DivsQFc9g3qskCY5MYMXYA= Subject key identifier: 56:63:36:C6:61:B7:17:43:E7:10:EF:12:23:67:B2:DD:70:1F:51:49 Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 Certificate issuer: /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Certificate serial: 2F9B9D05C4252140D3DBF89F9A7E97652D61A4A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:56:31 +0000 Manifest this update: Tue 22 Sep 2026 07:51:31 +0000 Manifest next update: Wed 23 Sep 2026 09:04:31 +0000 Files and hashes: 1: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: +EgMHcoVQfk2TvJ5wLF99ceUh3mAbc/+xO6o+2PJTj0=) 2: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=) 3: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9b:9d:05:c4:25:21:40:d3:db:f8:9f:9a:7e:97:65:2d:61:a4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Validity Not Before: Sep 22 07:51:31 2026 GMT Not After : Sep 23 09:04:31 2026 GMT Subject: CN=566336C661B71743E710EF122367B2DD701F5149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:de:6f:f0:6e:cb:28:a3:e1:54:73:34:0e:fd: 74:c5:57:88:f0:d2:4f:65:4d:ac:78:b6:59:68:dd: 5c:99:cd:0f:48:1a:c5:8d:0e:9a:de:ec:be:4a:a2: 81:06:6b:79:e4:36:1d:c4:1b:ea:ac:38:97:de:19: c7:2a:dd:fe:88:1d:1e:89:af:7d:c0:5c:56:43:d5: 17:d5:10:5e:65:be:57:4d:57:fe:88:d1:4e:6c:d5: 3f:85:f1:74:6d:9a:2b:40:d5:fd:60:63:92:c9:38: b6:05:d8:33:55:e7:a4:3f:16:ec:31:6d:11:ca:67: b1:db:09:74:58:bb:de:73:d5:5d:70:58:41:87:13: ea:a8:d4:37:f4:f2:08:61:56:95:2e:2c:ec:45:d4: b3:65:ac:dd:c7:7d:18:c8:8e:d2:3e:cc:c4:40:09: 96:6e:b2:19:ae:8a:23:70:db:1a:59:95:7f:1f:8e: ce:31:b4:33:c8:90:bc:db:d7:d5:f8:11:98:c4:b2: ba:94:5f:7f:84:05:bb:fe:81:21:ff:b9:e0:b2:9a: 78:31:bd:df:29:d0:67:3d:87:eb:93:c3:66:e4:5f: e9:3c:d2:b8:de:c0:48:6c:10:8d:1c:91:9b:c1:ea: 90:e6:5a:80:70:2c:b5:90:88:e0:c3:c6:24:12:bd: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:63:36:C6:61:B7:17:43:E7:10:EF:12:23:67:B2:DD:70:1F:51:49 X509v3 Authority Key Identifier: keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2f:94:cb:27:19:f8:d6:e0:10:77:40:4b:45:dd:97:74:3d: 58:9a:e4:cd:67:f5:4f:40:a1:ae:55:1a:5e:31:66:36:74:cf: fc:57:8b:54:9d:b7:71:2a:52:c3:f6:1f:2e:12:43:b8:c0:f9: 69:a8:fe:d8:cd:41:cf:d0:76:08:2b:d7:c5:e1:26:8a:6c:84: f1:09:89:21:42:0f:b4:7a:ce:29:85:38:ba:f2:a0:5f:c8:32: 6e:1c:e0:5a:b5:21:a4:76:b5:f8:85:db:34:0f:51:19:2c:cd: 38:75:b3:cd:59:46:88:d2:eb:fa:67:b9:2a:4a:1f:5c:e0:85: a4:71:ea:b3:2d:20:8f:49:79:ed:77:4e:f9:af:73:79:f5:46: 3a:91:3a:f5:29:25:e4:fe:64:0d:05:f1:9b:db:d2:7d:95:dd: 09:f6:e7:bc:d8:7a:3e:b7:25:d3:b8:59:aa:4f:49:90:9e:fa: 35:ea:70:a7:cd:7f:d6:15:c6:03:3c:d9:a7:4f:50:01:3e:51: c0:94:42:4e:25:ab:33:5b:a1:3a:a5:ab:3c:91:ed:f3:9c:bd: 1e:2c:1d:1c:db:9a:ca:e2:fe:44:2a:50:63:65:9c:88:12:85: 2d:18:ea:b9:80:df:44:2a:24:5d:3c:df:5b:5a:44:c3:0c:89: 75:5f:dd:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5udBcQlIUDT2/ifmn6XZS1hpKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYy QUY3OUJGNjAeFw0yNjA5MjIwNzUxMzFaFw0yNjA5MjMwOTA0MzFaMDMxMTAvBgNV BAMTKDU2NjMzNkM2NjFCNzE3NDNFNzEwRUYxMjIzNjdCMkRENzAxRjUxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD13m/wbssoo+FUczQO/XTFV4jw 0k9lTax4tllo3VyZzQ9IGsWNDpre7L5KooEGa3nkNh3EG+qsOJfeGccq3f6IHR6J r33AXFZD1RfVEF5lvldNV/6I0U5s1T+F8XRtmitA1f1gY5LJOLYF2DNV56Q/Fuwx bRHKZ7HbCXRYu95z1V1wWEGHE+qo1Df08ghhVpUuLOxF1LNlrN3HfRjIjtI+zMRA CZZushmuiiNw2xpZlX8fjs4xtDPIkLzb19X4EZjEsrqUX3+EBbv+gSH/ueCymngx vd8p0Gc9h+uTw2bkX+k80rjewEhsEI0ckZvB6pDmWoBwLLWQiODDxiQSvdfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVmM2xmG3F0PnEO8SI2ey3XAfUUkwHwYDVR0j BBgwFoAUbmXE4EPwSoFfg3flrSwCvyr3m/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0 M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYyQUY3OUJGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RTY1QzRFMDQzRjA0QTgxNUY4Mzc3RTVBRDJDMDJCRjJBRjc5 QkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAy QkYyQUY3OUJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsvlMsnGfjW4BB3QEtF3Zd0PVia5M1n9U9A oa5VGl4xZjZ0z/xXi1Sdt3EqUsP2Hy4SQ7jA+Wmo/tjNQc/Qdggr18XhJopshPEJ iSFCD7R6zimFOLryoF/IMm4c4Fq1IaR2tfiF2zQPURkszTh1s81ZRojS6/pnuSpK H1zghaRx6rMtII9Jee13Tvmvc3n1RjqROvUpJeT+ZA0F8Zvb0n2V3Qn257zYej63 JdO4WapPSZCe+jXqcKfNf9YVxgM82adPUAE+UcCUQk4lqzNboTqlqzyR7fOcvR4s HRzbmsri/kQqUGNlnIgShS0Y6rmA30QqJF0831taRMMMiXVf3ZE= -----END CERTIFICATE-----Generated at Tue Sep 22 20:53:09 2026 by rpki-client