$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft File: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft (raw, json) Hash identifier: 9DcfthygV7DEAwW1I9DcE5mZSbLEcNVChgAcNTy51qg= Subject key identifier: 80:F7:1A:F1:C3:94:5C:66:89:83:53:D0:3A:5D:AD:28:A6:CA:B7:03 Authority key identifier: 6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17 Certificate issuer: /CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717 Certificate serial: 6238938813014E3EC8B8A2EB1C777EA7952F5CE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft Manifest number: BB Signing time: Sun 20 Sep 2026 13:54:09 +0000 Manifest this update: Sun 20 Sep 2026 13:49:09 +0000 Manifest next update: Mon 21 Sep 2026 16:48:09 +0000 Files and hashes: 1: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl (hash: oHq7fsdjVrMJ+SExDo63gcLM8o7h35vxerkiqEHxRGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:38:93:88:13:01:4e:3e:c8:b8:a2:eb:1c:77:7e:a7:95:2f:5c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717 Validity Not Before: Sep 20 13:49:09 2026 GMT Not After : Sep 21 16:48:09 2026 GMT Subject: CN=80F71AF1C3945C66898353D03A5DAD28A6CAB703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:c1:35:c1:4a:77:8d:26:5f:21:4a:b9:ec: e0:7a:17:20:4a:b6:ee:cd:0c:b4:aa:2b:ae:ac:0d: 86:c5:c7:4c:86:d8:3a:9b:99:d3:21:a4:62:a9:2e: 3d:69:56:c3:0a:91:cc:8c:b7:46:a8:63:8b:bc:c2: 02:50:3f:11:25:df:08:b8:bf:f9:8e:69:e5:17:ee: e4:0b:90:c8:86:83:7d:64:42:ec:fe:5a:8d:04:7d: c4:79:a8:d5:65:f8:25:ee:53:0f:60:f9:39:7c:77: 4b:f7:23:c7:df:25:ae:fc:c0:e9:22:dc:d2:b1:49: 13:24:60:f7:7e:e7:73:71:3e:df:51:81:04:92:72: 4a:64:94:49:0a:d1:11:d5:c4:1d:3c:02:6a:21:3a: 51:a6:f7:71:f5:60:8f:be:f5:00:93:05:9e:64:7b: 58:61:a7:6d:ae:c1:7a:74:2b:d5:f0:a7:f9:9c:51: 5b:ea:12:7a:ae:68:e4:ff:23:89:75:74:dd:55:b6: 8f:22:50:1e:40:cc:b6:5c:9a:78:d3:c2:28:3d:7d: 1b:56:65:7c:54:59:3e:f7:76:9e:6f:bb:88:30:5d: 6c:46:f2:76:3b:9b:56:19:32:84:7f:c7:74:ed:c4: f8:ed:bd:fe:44:46:2e:1f:3b:23:dc:ea:9a:59:b7: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F7:1A:F1:C3:94:5C:66:89:83:53:D0:3A:5D:AD:28:A6:CA:B7:03 X509v3 Authority Key Identifier: keyid:6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fb:03:3c:5e:40:f0:26:f2:7d:df:9c:fb:cb:97:8d:59:44: 04:10:a8:ce:a1:99:32:f6:28:11:af:2c:60:d3:fd:21:b0:a3: fe:25:b5:c4:20:05:66:86:c6:35:6a:a5:f8:ae:0a:43:74:8d: 17:3e:50:c2:c1:dc:8a:c7:f9:f2:8a:f3:21:d0:36:0d:0a:e9: 22:d1:e4:06:b1:07:d4:dc:41:e7:cf:46:7f:9c:e9:dd:a7:f7: 61:50:dc:27:ca:c6:17:04:54:e7:03:38:8a:e4:58:be:e5:3f: 64:ec:84:4d:a2:a0:13:f3:8a:45:43:85:37:a4:d2:98:ab:16: 4a:e2:87:d5:f4:28:42:7e:ac:f0:e8:15:0a:97:2d:ba:57:df: 56:06:b0:78:2d:3d:5d:11:5c:a3:7e:e5:f6:6d:b3:09:67:21: c8:97:a7:78:2c:2c:5f:32:5f:f9:a4:50:6c:d8:c1:6b:6d:0d: f2:cb:4e:9f:73:49:09:c1:44:62:a5:d4:8d:e4:6a:74:07:45: 72:87:1c:69:fa:97:f6:68:55:31:ae:3c:3f:d5:a3:fc:00:e8: 1c:a6:c4:92:f5:ff:c0:9e:e4:6e:ab:06:89:8f:60:80:63:81: 47:d0:af:63:e5:bf:93:14:51:38:77:99:49:9e:e7:74:bf:a0: 70:e5:cb:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjiTiBMBTj7IuKLrHHd+p5UvXOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDMEI3RTE0QjQxMjY4RUI1MDlDOEQ1NDhDOUFBMDUy RUMxNzcxNzAeFw0yNjA5MjAxMzQ5MDlaFw0yNjA5MjExNjQ4MDlaMDMxMTAvBgNV BAMTKDgwRjcxQUYxQzM5NDVDNjY4OTgzNTNEMDNBNURBRDI4QTZDQUI3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yME1wUp3jSZfIUq57OB6FyBK tu7NDLSqK66sDYbFx0yG2DqbmdMhpGKpLj1pVsMKkcyMt0aoY4u8wgJQPxEl3wi4 v/mOaeUX7uQLkMiGg31kQuz+Wo0EfcR5qNVl+CXuUw9g+Tl8d0v3I8ffJa78wOki 3NKxSRMkYPd+53NxPt9RgQSSckpklEkK0RHVxB08AmohOlGm93H1YI++9QCTBZ5k e1hhp22uwXp0K9Xwp/mcUVvqEnquaOT/I4l1dN1Vto8iUB5AzLZcmnjTwig9fRtW ZXxUWT73dp5vu4gwXWxG8nY7m1YZMoR/x3TtxPjtvf5ERi4fOyPc6ppZt+UVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPca8cOUXGaJg1PQOl2tKKbKtwMwHwYDVR0j BBgwFoAUbcC34UtBJo61CcjVSMmqBS7BdxcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MjYxMjQtMDU5Yy00M2FkLWExNTAtODIyYjlkNWZiM2YzLzAvNkRDMEI3RTE0 QjQxMjY4RUI1MDlDOEQ1NDhDOUFBMDUyRUMxNzcxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82REMwQjdFMTRCNDEyNjhFQjUwOUM4RDU0OEM5QUEwNTJFQzE3 NzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MjYxMjQtMDU5Yy00M2FkLWEx NTAtODIyYjlkNWZiM2YzLzAvNkRDMEI3RTE0QjQxMjY4RUI1MDlDOEQ1NDhDOUFB MDUyRUMxNzcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz7AzxeQPAm8n3fnPvLl41ZRAQQqM6hmTL2 KBGvLGDT/SGwo/4ltcQgBWaGxjVqpfiuCkN0jRc+UMLB3IrH+fKK8yHQNg0K6SLR 5AaxB9TcQefPRn+c6d2n92FQ3CfKxhcEVOcDOIrkWL7lP2TshE2ioBPzikVDhTek 0pirFkrih9X0KEJ+rPDoFQqXLbpX31YGsHgtPV0RXKN+5fZtswlnIciXp3gsLF8y X/mkUGzYwWttDfLLTp9zSQnBRGKl1I3kanQHRXKHHGn6l/ZoVTGuPD/Vo/wA6Bym xJL1/8Ce5G6rBomPYIBjgUfQr2Plv5MUUTh3mUme53S/oHDly04= -----END CERTIFICATE-----Generated at Mon Sep 21 03:56:44 2026 by rpki-client