$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft File: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft (raw, json) Hash identifier: zke/+2GTIXgTgzw/YP8vMmuP88bI6iZmOBELuzjt6AM= Subject key identifier: 1B:EA:0D:D0:4D:7E:84:ED:FE:F2:C5:54:79:B1:AF:2B:42:4F:F3:A3 Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 Certificate issuer: /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Certificate serial: 6F0DB805B6B91340541E846B64A0BF7787F6B3F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 15:18:39 +0000 Manifest this update: Mon 28 Sep 2026 15:13:39 +0000 Manifest next update: Tue 29 Sep 2026 18:26:39 +0000 Files and hashes: 1: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=) 2: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: 1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=) 3: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl (hash: qlcVdalZrMGuhtuBuwdEVSDGyWApA1XOtQlLWaoRRvA=) 4: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=) 5: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=) 6: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=) 7: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=) 8: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0d:b8:05:b6:b9:13:40:54:1e:84:6b:64:a0:bf:77:87:f6:b3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Validity Not Before: Sep 28 15:13:39 2026 GMT Not After : Sep 29 18:26:39 2026 GMT Subject: CN=1BEA0DD04D7E84EDFEF2C55479B1AF2B424FF3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:51:ca:be:0b:78:eb:50:cc:7e:1e:b5:7a: 27:d9:62:cc:0c:cf:74:b4:2b:40:45:1c:99:75:fd: 26:bc:d0:88:56:2e:bc:0a:51:41:0d:37:22:0e:e4: 3c:6d:fc:b7:3f:65:2d:13:e3:81:dc:d4:f9:38:39: 67:d3:28:6b:4a:80:06:58:06:9c:8f:60:a3:a8:be: b9:d5:66:f8:4b:69:7a:9c:03:10:75:89:fd:eb:d3: a9:b9:14:92:c8:c7:5d:b5:c0:7a:82:9e:60:d8:ce: 02:b7:63:8a:f6:7c:3f:fb:b1:76:c2:ec:e6:ba:6c: 23:70:1c:37:f8:62:ac:ff:46:e0:27:e7:a9:62:37: 3f:8d:0c:1d:2f:1e:e7:c3:2e:de:4a:a9:a4:23:ed: fe:55:b2:15:fa:c7:83:a4:e6:bd:9b:ae:26:ed:41: 77:39:cb:be:55:53:82:86:ad:0e:6b:61:21:b2:3b: 78:c5:5a:46:22:dc:37:15:9d:33:0a:f0:5c:b7:6c: a6:d1:ff:f9:23:3b:a0:16:e1:c8:18:11:38:3f:37: ca:82:39:99:77:a5:03:86:be:87:2b:3a:85:b5:ed: e2:d1:a3:42:0a:e1:44:40:7c:5a:09:8b:5a:56:9c: ee:23:16:9a:cb:42:cd:fe:5a:08:fe:a5:2b:3d:a7: 93:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:0D:D0:4D:7E:84:ED:FE:F2:C5:54:79:B1:AF:2B:42:4F:F3:A3 X509v3 Authority Key Identifier: keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e7:1a:0b:1d:a5:4c:6e:f9:75:72:59:7c:37:6d:bc:2a:0f: 69:12:ba:fd:82:8f:26:07:6f:16:10:31:a4:6b:38:eb:5f:8c: 46:36:8b:80:b3:fd:bd:2d:f1:84:10:e3:4a:c4:85:ba:39:3d: 08:15:78:27:e2:e8:d5:81:56:1d:b9:d4:76:c3:3c:aa:58:85: 96:7e:bb:37:85:cd:e8:45:40:c4:67:23:be:9d:f7:12:43:3f: 83:30:ec:06:4b:12:02:de:9d:d3:c7:c3:26:76:78:0d:6f:95: 2c:a3:a7:9b:df:cd:1e:ee:6e:a1:04:ff:6d:ff:b5:44:21:2c: a4:d9:35:60:17:2a:cf:e7:04:ef:64:c7:09:a7:d0:79:69:59: 87:23:c1:81:f0:38:03:3d:07:3a:86:0a:0b:bf:9a:8e:e0:22: 97:ca:85:4c:12:3f:70:3a:a1:45:11:27:7a:ae:1b:ef:0c:66: 19:cb:84:fb:84:cf:57:11:88:f9:f3:36:a5:60:e0:dc:38:83: 4d:e1:87:ae:fe:5c:53:5d:0b:04:7b:03:3c:99:99:2d:d0:81: 1a:c5:55:f6:44:55:cf:13:c7:de:52:62:25:8e:7f:82:4e:0b: 18:6e:c7:5e:1a:bc:de:bf:19:c6:51:f6:e4:73:d4:08:b7:cd: ae:73:0a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbw24Bba5E0BUHoRrZKC/d4f2s/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFF QURCNjhEMDAeFw0yNjA5MjgxNTEzMzlaFw0yNjA5MjkxODI2MzlaMDMxMTAvBgNV BAMTKDFCRUEwREQwNEQ3RTg0RURGRUYyQzU1NDc5QjFBRjJCNDI0RkYzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/C1HKvgt461DMfh61eifZYswM z3S0K0BFHJl1/Sa80IhWLrwKUUENNyIO5Dxt/Lc/ZS0T44Hc1Pk4OWfTKGtKgAZY BpyPYKOovrnVZvhLaXqcAxB1if3r06m5FJLIx121wHqCnmDYzgK3Y4r2fD/7sXbC 7Oa6bCNwHDf4Yqz/RuAn56liNz+NDB0vHufDLt5KqaQj7f5VshX6x4Ok5r2bribt QXc5y75VU4KGrQ5rYSGyO3jFWkYi3DcVnTMK8Fy3bKbR//kjO6AW4cgYETg/N8qC OZl3pQOGvocrOoW17eLRo0IK4URAfFoJi1pWnO4jFprLQs3+Wgj+pSs9p5MVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG+oN0E1+hO3+8sVUebGvK0JP86MwHwYDVR0j BBgwFoAUxqhNi2VF/JGpKzxyP0FqEerbaNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkZDYxMzUtNTQ4Yy00ODgxLWFmNzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2 NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFFQURCNjhEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkE4NEQ4QjY1NDVGQzkxQTkyQjNDNzIzRjQxNkExMUVBREI2 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZB MTFFQURCNjhEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjnGgsdpUxu+XVyWXw3bbwqD2kSuv2CjyYH bxYQMaRrOOtfjEY2i4Cz/b0t8YQQ40rEhbo5PQgVeCfi6NWBVh251HbDPKpYhZZ+ uzeFzehFQMRnI76d9xJDP4Mw7AZLEgLendPHwyZ2eA1vlSyjp5vfzR7ubqEE/23/ tUQhLKTZNWAXKs/nBO9kxwmn0HlpWYcjwYHwOAM9BzqGCgu/mo7gIpfKhUwSP3A6 oUURJ3quG+8MZhnLhPuEz1cRiPnzNqVg4Nw4g03hh67+XFNdCwR7AzyZmS3QgRrF VfZEVc8Tx95SYiWOf4JOCxhux14avN6/GcZR9uRz1Ai3za5zCnU= -----END CERTIFICATE-----Generated at Mon Sep 28 19:38:16 2026 by rpki-client