$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: K21R4EcAHgCvkNfE2D99K8VlGMY63e/NdtcY+0fLjE8= Subject key identifier: 2D:F4:5F:CB:F4:8E:3D:82:93:9E:5B:A1:80:C1:BA:76:2D:29:8B:8A Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 5C2DEF6F69A1D33DEAE362DC600BE85D23245A28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: D8 Signing time: Sun 11 Oct 2026 02:03:55 +0000 Manifest this update: Sun 11 Oct 2026 01:58:55 +0000 Manifest next update: Mon 12 Oct 2026 05:17:55 +0000 Files and hashes: 1: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) 2: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: vpNjxGDsArxPC/uNPbuLdZNB0NFjEUUfc7XBTLN47ow=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) 4: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 5: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) 6: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2d:ef:6f:69:a1:d3:3d:ea:e3:62:dc:60:0b:e8:5d:23:24:5a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: Oct 11 01:58:55 2026 GMT Not After : Oct 12 05:17:55 2026 GMT Subject: CN=2DF45FCBF48E3D82939E5BA180C1BA762D298B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:33:26:83:54:0b:84:97:05:c2:f2:b5:06: d9:eb:ae:a3:e1:f7:eb:54:8b:ec:d5:06:87:5f:bf: 72:f5:c9:23:ce:7a:75:52:57:c8:19:a7:fc:d8:90: b7:51:50:c2:3b:01:4f:3b:8f:de:c3:56:b4:97:92: 53:63:80:85:5c:bc:a3:d0:f4:b4:66:8e:88:f2:96: ca:0d:86:27:c7:80:09:88:dc:c9:e1:d3:3e:b2:e2: cb:fd:a1:3e:d1:67:32:70:15:73:0d:dd:fd:5d:f4: 9b:f3:19:22:eb:a1:e3:00:b1:c7:a6:a7:2d:ec:a1: e1:80:65:a8:91:88:10:51:2e:ca:c9:d5:39:42:88: 7d:7b:7c:0e:5a:dc:fb:b4:6c:a8:72:92:4d:de:b4: c3:e8:b4:80:3d:a3:e7:56:53:c3:06:1b:ae:65:0d: 64:d7:d2:f8:82:fb:2c:69:aa:9c:c9:ad:81:2b:d8: 89:bc:92:6c:ff:ce:d8:ce:2f:0c:13:f8:a1:01:17: fd:f1:b5:26:72:56:ec:6c:fc:47:2b:8f:11:56:83: a6:5b:d3:95:94:2b:e4:55:d4:a6:c5:18:cc:ad:fe: ee:bf:bd:cb:b8:5d:b8:a0:06:73:8b:e4:24:0b:5d: 92:67:59:21:83:21:95:4f:90:1a:03:80:0e:71:0f: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F4:5F:CB:F4:8E:3D:82:93:9E:5B:A1:80:C1:BA:76:2D:29:8B:8A X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:74:1d:4c:65:e5:d1:dd:b5:19:ac:28:77:93:ca:f5:60: 5f:df:89:38:79:e7:14:fb:7d:91:4e:8d:07:8c:70:08:5d:f9: 70:11:57:a9:51:36:85:62:b7:1b:7d:41:7c:df:20:35:25:61: 61:2f:d1:33:3e:9c:13:87:df:83:99:c1:01:22:b0:71:c9:99: 9b:a8:6c:a0:a1:5d:66:c0:73:1f:3d:fa:0d:62:cc:77:4b:a0: 28:16:1a:9e:17:6d:7f:2a:af:b4:d1:73:22:8f:f5:37:b8:86: 4f:77:d5:e2:91:b1:53:c8:58:47:43:48:c5:ab:10:f9:14:ff: e3:c2:13:e9:50:ea:ca:34:00:98:f4:5e:48:2e:47:db:62:73: 9b:d4:13:e2:05:1a:1e:cb:95:e3:81:3a:00:6b:2c:72:07:a4: 73:e8:81:1e:ba:37:fd:1a:7a:cf:d8:09:ac:14:cd:89:8b:ce: b0:f8:6f:d2:3c:c5:c3:d6:3b:84:45:a9:da:53:65:da:6a:64: 99:a2:34:db:3c:c8:dc:88:68:40:90:0c:81:8a:b9:96:c0:ed: 2c:66:e4:b0:17:64:5c:eb:cc:80:de:02:11:36:9f:e8:53:e7: 4a:f0:cb:ce:46:ee:4c:f0:f3:dc:4e:62:8f:d8:94:4b:33:62: 3e:c1:69:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXC3vb2mh0z3q42LcYAvoXSMkWigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjEwMTEwMTU4NTVaFw0yNjEwMTIwNTE3NTVaMDMxMTAvBgNV BAMTKDJERjQ1RkNCRjQ4RTNEODI5MzlFNUJBMTgwQzFCQTc2MkQyOThCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS8TMmg1QLhJcFwvK1BtnrrqPh 9+tUi+zVBodfv3L1ySPOenVSV8gZp/zYkLdRUMI7AU87j97DVrSXklNjgIVcvKPQ 9LRmjojylsoNhifHgAmI3Mnh0z6y4sv9oT7RZzJwFXMN3f1d9JvzGSLroeMAscem py3soeGAZaiRiBBRLsrJ1TlCiH17fA5a3Pu0bKhykk3etMPotIA9o+dWU8MGG65l DWTX0viC+yxpqpzJrYEr2Im8kmz/ztjOLwwT+KEBF/3xtSZyVuxs/EcrjxFWg6Zb 05WUK+RV1KbFGMyt/u6/vcu4XbigBnOL5CQLXZJnWSGDIZVPkBoDgA5xD7O1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULfRfy/SOPYKTnluhgMG6di0pi4owHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFF NTkxRUY2RDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq8dB1MZeXR3bUZrCh3k8r1YF/fiTh55xT7 fZFOjQeMcAhd+XARV6lRNoVitxt9QXzfIDUlYWEv0TM+nBOH34OZwQEisHHJmZuo bKChXWbAcx89+g1izHdLoCgWGp4XbX8qr7TRcyKP9Te4hk931eKRsVPIWEdDSMWr EPkU/+PCE+lQ6so0AJj0XkguR9tic5vUE+IFGh7LleOBOgBrLHIHpHPogR66N/0a es/YCawUzYmLzrD4b9I8xcPWO4RFqdpTZdpqZJmiNNs8yNyIaECQDIGKuZbA7Sxm 5LAXZFzrzIDeAhE2n+hT50rwy85G7kzw89xOYo/YlEszYj7BaYo= -----END CERTIFICATE-----Generated at Sun Oct 11 11:05:58 2026 by rpki-client