$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft File: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft (raw, json) Hash identifier: gxA08VYmM77WKOiM/qQlR1krwQEVpCX6vXiV8XaM0os= Subject key identifier: EB:0A:31:C9:E9:74:14:FF:F8:D7:9F:FE:C9:E9:49:A7:CD:B1:41:B9 Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC Certificate issuer: /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Certificate serial: 7065227A7CC2DCF623DF096B2474C1201A8A82FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 09:06:03 +0000 Manifest this update: Sat 26 Sep 2026 09:01:03 +0000 Manifest next update: Sun 27 Sep 2026 10:53:03 +0000 Files and hashes: 1: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: qG2bUOWwTNZiIfdaTpDPVpMrBFbrT7QpU559kWrN28I=) 2: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl (hash: DZrS1g+bJ7tZ4dYKjubX/TcY+ds9AnOgK+3Pft3mAXs=) 3: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:65:22:7a:7c:c2:dc:f6:23:df:09:6b:24:74:c1:20:1a:8a:82:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Validity Not Before: Sep 26 09:01:03 2026 GMT Not After : Sep 27 10:53:03 2026 GMT Subject: CN=EB0A31C9E97414FFF8D79FFEC9E949A7CDB141B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:97:96:4c:c8:df:0e:73:96:dd:43:f6:05: e2:0f:b6:9e:fb:fd:7e:b9:a4:8e:ae:ad:59:bf:b8: aa:4d:b3:df:91:c5:5d:6f:2d:d5:f3:66:76:7a:99: 8f:e9:a4:8b:4b:c8:10:f2:ec:f1:f7:e1:ba:40:ba: f7:19:45:9e:32:37:11:ce:fd:b8:63:ac:48:48:2c: 68:c0:03:b7:fb:09:28:53:d2:ec:4a:26:c4:c2:32: 51:a3:bb:12:de:e6:97:81:d1:95:11:b1:e2:77:be: 95:b0:b0:22:7d:85:a2:45:8f:ff:51:30:f0:0d:38: 75:05:e1:0a:b3:e0:0d:a6:d8:b2:79:f3:d3:3b:ef: 2a:be:a8:65:f5:c5:71:d0:e1:0b:53:44:94:cf:75: 2c:e4:49:f7:ab:db:fd:fa:15:c8:7b:48:2c:dc:ac: fb:54:84:a8:92:a3:78:8d:39:37:51:a2:14:33:79: cb:ca:c8:9f:7c:c8:29:76:03:85:60:f0:26:3d:69: bb:07:fb:78:97:f5:ba:00:6b:4e:4e:db:54:e0:26: 3e:a8:8a:79:2b:d4:2a:31:85:16:43:68:40:6e:f4: 68:32:5b:67:47:24:c4:78:e9:32:94:29:27:e4:f3: bc:68:08:61:0e:13:d4:07:8a:08:51:f1:01:40:67: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:31:C9:E9:74:14:FF:F8:D7:9F:FE:C9:E9:49:A7:CD:B1:41:B9 X509v3 Authority Key Identifier: keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ba:45:ad:5a:17:b5:e8:0d:e2:88:d3:c1:97:7a:15:57:b4: 4d:5c:c9:d9:67:50:dc:6b:94:d0:b5:3e:6f:19:1a:1a:e5:28: 92:14:a6:d6:cb:30:f8:96:75:d0:bf:78:6d:6b:0a:0b:46:d4: 14:3c:fb:eb:e5:73:97:49:a3:c9:1d:04:69:63:ba:0e:b6:10: 4c:94:0e:33:e5:4c:f3:d4:67:f4:fe:72:6f:ba:2b:de:6c:fe: 38:b5:3e:d3:ba:6e:49:12:b0:83:17:d5:04:2b:cf:e3:5b:ed: 40:03:92:4a:04:f1:ea:f6:e0:7d:02:6e:0d:9b:1e:88:92:77: 54:ed:be:a2:4d:ef:51:dc:68:69:6e:07:6a:8d:4f:7d:2e:2a: 19:d1:ff:52:fe:b4:f0:35:a9:77:cc:54:99:86:76:2f:2d:32: d1:50:4c:9d:24:66:84:19:75:a5:76:91:ff:80:36:98:a7:47: f4:97:ad:91:de:01:69:10:bf:c0:38:22:a7:e1:45:9b:ce:e2: 7c:fb:3d:68:35:2f:6b:73:9e:72:02:bf:5f:9c:1c:0a:6f:97: ca:63:73:93:6a:cc:40:db:7b:87:c3:25:0f:aa:00:d3:7a:7e: f7:02:d6:ff:5d:e4:25:41:fe:1f:40:d4:b1:7a:b0:0a:5d:0f: 9f:29:a3:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGUienzC3PYj3wlrJHTBIBqKgv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZC N0ZBMTBCQzAeFw0yNjA5MjYwOTAxMDNaFw0yNjA5MjcxMDUzMDNaMDMxMTAvBgNV BAMTKEVCMEEzMUM5RTk3NDE0RkZGOEQ3OUZGRUM5RTk0OUE3Q0RCMTQxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73peWTMjfDnOW3UP2BeIPtp77 /X65pI6urVm/uKpNs9+RxV1vLdXzZnZ6mY/ppItLyBDy7PH34bpAuvcZRZ4yNxHO /bhjrEhILGjAA7f7CShT0uxKJsTCMlGjuxLe5peB0ZURseJ3vpWwsCJ9haJFj/9R MPANOHUF4Qqz4A2m2LJ589M77yq+qGX1xXHQ4QtTRJTPdSzkSfer2/36Fch7SCzc rPtUhKiSo3iNOTdRohQzecvKyJ98yCl2A4Vg8CY9absH+3iX9boAa05O21TgJj6o inkr1CoxhRZDaEBu9GgyW2dHJMR46TKUKSfk87xoCGEOE9QHighR8QFAZ7mtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6woxyel0FP/415/+yelJp82xQbkwHwYDVR0j BBgwFoAUbt0nblgPQBOeCvpKH6snVrf6ELwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0YjIwZDgtNTkxYi00MTUyLTk3NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1 ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZCN0ZBMTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUREMjc2RTU4MEY0MDEzOUUwQUZBNEExRkFCMjc1NkI3RkEx MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3 NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3 NTZCN0ZBMTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACe6Ra1aF7XoDeKI08GXehVXtE1cydlnUNxr lNC1Pm8ZGhrlKJIUptbLMPiWddC/eG1rCgtG1BQ8++vlc5dJo8kdBGljug62EEyU DjPlTPPUZ/T+cm+6K95s/ji1PtO6bkkSsIMX1QQrz+Nb7UADkkoE8er24H0Cbg2b HoiSd1TtvqJN71HcaGluB2qNT30uKhnR/1L+tPA1qXfMVJmGdi8tMtFQTJ0kZoQZ daV2kf+ANpinR/SXrZHeAWkQv8A4IqfhRZvO4nz7PWg1L2tznnICv1+cHApvl8pj c5NqzEDbe4fDJQ+qANN6fvcC1v9d5CVB/h9A1LF6sApdD58po14= -----END CERTIFICATE-----Generated at Sat Sep 26 19:52:05 2026 by rpki-client