$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json) Hash identifier: GkTZWuna6YRMQxlMxtDpVBmCgrN7GPYhETa9z/881bM= Subject key identifier: B0:88:96:A2:CE:B1:AA:96:B7:BD:CE:62:48:5E:D2:E2:28:1F:FA:A7 Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Certificate issuer: /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Certificate serial: 0C21FBECD472769FBBD086A6C3B83EDE4029F225 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 01:55:18 +0000 Manifest this update: Thu 03 Sep 2026 01:50:18 +0000 Manifest next update: Fri 04 Sep 2026 03:52:18 +0000 Files and hashes: 1: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=) 2: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: N209YrbSgJnXE3yp5Lf4W2jArOgExProZkHlv8UVCn4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 03:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:21:fb:ec:d4:72:76:9f:bb:d0:86:a6:c3:b8:3e:de:40:29:f2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Validity Not Before: Sep 3 01:50:18 2026 GMT Not After : Sep 4 03:52:18 2026 GMT Subject: CN=B08896A2CEB1AA96B7BDCE62485ED2E2281FFAA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:31:7f:3c:44:ba:5a:7e:62:89:ce:33:39: 98:40:44:c9:4d:6f:21:60:db:11:3f:09:b9:f4:71: 74:6c:fc:da:36:c4:dc:6b:fb:c1:63:66:6d:0d:25: ee:70:65:cc:8b:20:65:d2:7c:ba:b2:25:de:2a:d9: 02:71:9f:78:43:ef:63:95:67:42:f7:78:41:96:d2: 90:8d:a3:77:29:3d:a1:b8:2e:98:94:51:ec:df:63: 75:82:54:b5:74:b1:43:2b:7f:5e:2a:c1:73:a7:21: df:cc:6e:71:f3:f2:a6:e9:b8:8c:af:62:31:ad:47: 78:25:7b:85:d5:f7:c6:a5:a2:dd:7a:b4:1b:3c:2e: 35:18:f0:f4:e1:b7:4e:31:3d:c4:fc:30:dd:e9:b8: c0:c7:6e:4b:a1:8c:a5:dd:5c:b4:a2:f8:36:f5:57: 8d:6a:40:62:fe:70:59:43:2a:93:2b:02:c8:20:62: f8:7a:98:77:36:a1:0a:96:a7:02:4d:f6:36:b7:68: d2:1c:0b:f4:2b:50:f9:7e:cd:d5:2d:b8:ea:46:f9: 01:fd:45:6e:3e:6b:52:b8:e0:e3:63:1b:40:e7:b2: c6:ea:1f:80:81:37:9a:1b:dd:d9:c8:5d:66:6b:33: 31:47:ad:b6:4c:5b:82:d2:10:e7:27:74:f2:87:1e: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:88:96:A2:CE:B1:AA:96:B7:BD:CE:62:48:5E:D2:E2:28:1F:FA:A7 X509v3 Authority Key Identifier: keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:15:f8:9a:66:ff:f7:8e:c3:dc:13:50:19:4a:fa:74:47:23: ed:ef:9a:4f:b2:0e:a1:ba:45:22:b5:69:32:4e:d9:1d:21:76: 78:e4:d3:88:71:4d:d2:05:ca:42:bf:76:e4:4c:82:95:f0:0f: f6:7f:e7:7e:19:94:bf:7c:45:f7:58:7d:cd:b8:37:ec:b5:14: f0:55:67:7e:c2:06:54:a5:30:69:37:27:45:a9:44:8b:ad:8e: 74:f0:0b:db:65:a8:2f:b8:4f:f8:d0:2f:37:10:ed:bc:33:7c: 84:06:29:7a:b5:72:c0:e9:a3:6a:35:f0:fe:71:71:ae:c3:90: f7:5a:7d:e9:ea:a3:71:43:77:62:f3:66:7e:8d:d7:7b:89:37: e0:e8:d7:a0:b8:57:52:4d:0b:99:2b:8a:fa:4b:55:86:0e:53: 65:05:b4:ee:ca:37:0f:4c:8e:9e:bd:18:6b:38:d7:45:c8:91: 0a:d0:40:4f:58:f5:54:66:61:b0:28:f2:3b:3f:19:fc:7e:a6: f0:f0:f5:ee:7e:f4:de:e6:9a:3b:9a:a4:11:b4:72:44:66:0b: 49:2a:31:17:eb:5c:4b:aa:14:5f:27:9d:7e:b8:54:ce:61:90: 7c:07:b0:d0:53:db:8e:1e:39:71:85:94:81:31:fc:df:94:2f: da:fb:cf:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCH77NRydp+70Iamw7g+3kAp8iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3 NUZDQzEwRDAeFw0yNjA5MDMwMTUwMThaFw0yNjA5MDQwMzUyMThaMDMxMTAvBgNV BAMTKEIwODg5NkEyQ0VCMUFBOTZCN0JEQ0U2MjQ4NUVEMkUyMjgxRkZBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZNzF/PES6Wn5iic4zOZhARMlN byFg2xE/Cbn0cXRs/No2xNxr+8FjZm0NJe5wZcyLIGXSfLqyJd4q2QJxn3hD72OV Z0L3eEGW0pCNo3cpPaG4LpiUUezfY3WCVLV0sUMrf14qwXOnId/MbnHz8qbpuIyv YjGtR3gle4XV98alot16tBs8LjUY8PTht04xPcT8MN3puMDHbkuhjKXdXLSi+Db1 V41qQGL+cFlDKpMrAsggYvh6mHc2oQqWpwJN9ja3aNIcC/QrUPl+zdUtuOpG+QH9 RW4+a1K44ONjG0DnssbqH4CBN5ob3dnIXWZrMzFHrbZMW4LSEOcndPKHHmBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsIiWos6xqpa3vc5iSF7S4igf+qcwHwYDVR0j BBgwFoAUzWrtsCn6MgnVunBGt7j1JHX8wQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmI0YzcwYTEtNTAzNi00NTBiLWI5MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAy OUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3NUZDQzEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDZBRURCMDI5RkEzMjA5RDVCQTcwNDZCN0I4RjUyNDc1RkND MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1 MjQ3NUZDQzEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4V+Jpm//eOw9wTUBlK+nRHI+3vmk+yDqG6 RSK1aTJO2R0hdnjk04hxTdIFykK/duRMgpXwD/Z/534ZlL98RfdYfc24N+y1FPBV Z37CBlSlMGk3J0WpRIutjnTwC9tlqC+4T/jQLzcQ7bwzfIQGKXq1csDpo2o18P5x ca7DkPdafenqo3FDd2LzZn6N13uJN+Do16C4V1JNC5krivpLVYYOU2UFtO7KNw9M jp69GGs410XIkQrQQE9Y9VRmYbAo8js/Gfx+pvDw9e5+9N7mmjuapBG0ckRmC0kq MRfrXEuqFF8nnX64VM5hkHwHsNBT244eOXGFlIEx/N+UL9r7z9Q= -----END CERTIFICATE-----Generated at Thu Sep 3 20:49:38 2026 by rpki-client