$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: V0/Vk/yCkejdoLhPpfAyNdN+eDLMW1vRnF+bCx+knDo= Subject key identifier: 4F:37:02:A7:02:74:F4:F6:E7:35:79:00:05:E4:8D:6B:D6:0C:31:B6 Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 4F80CF235FE3A3C7A623852FAF56726B34C3B77F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 12:38:59 +0000 Manifest this update: Wed 02 Sep 2026 12:33:59 +0000 Manifest next update: Thu 03 Sep 2026 13:36:59 +0000 Files and hashes: 1: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: CmUiOl2IYbM3lOhJzcesyPVR0xRLsl1pBUBhuC/57ac=) 2: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) 3: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) 4: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 5: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) 6: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 13:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:80:cf:23:5f:e3:a3:c7:a6:23:85:2f:af:56:72:6b:34:c3:b7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: Sep 2 12:33:59 2026 GMT Not After : Sep 3 13:36:59 2026 GMT Subject: CN=4F3702A70274F4F6E735790005E48D6BD60C31B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:27:d9:53:20:49:dc:6d:6f:c2:55:e2:33: 5e:7a:09:8c:a0:77:2c:e2:49:f5:50:8d:c2:15:eb: ba:29:63:98:6b:77:56:db:11:29:71:47:5f:d8:58: 47:72:fb:7b:ba:a0:90:b7:f0:10:7d:ef:87:b5:ec: b7:5d:8a:4b:9e:fd:72:22:34:49:4e:39:f3:4c:43: c4:60:43:b3:d0:d4:f9:6a:c9:11:e5:e2:7f:d3:ab: 67:3d:f0:0e:db:d2:ba:bf:dc:ee:f0:33:7c:62:cd: be:66:23:b5:8c:1c:af:5b:6c:64:16:04:2e:62:11: 35:18:3b:6a:06:7b:d2:d5:ff:3f:d4:c7:5f:f6:52: 8e:cd:4b:c0:8c:90:e8:ab:36:46:5d:22:10:da:c3: 29:97:ce:1a:98:30:82:f5:14:d3:a7:95:cd:25:23: 67:ed:44:d4:5c:9d:ee:4c:dd:91:55:e7:0b:1b:a7: 3c:75:89:e0:af:c6:ea:47:2e:08:03:26:ae:60:dc: fd:3f:36:3b:6c:35:fd:ac:f9:35:0f:c2:90:7e:21: c1:a0:2c:34:c1:c2:da:c9:08:c0:1e:a6:7d:d8:40: 4e:6d:aa:41:62:9a:20:16:45:00:d3:2c:2a:8e:21: 68:55:07:b8:04:34:15:dc:32:a6:0d:cb:03:0b:ba: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:02:A7:02:74:F4:F6:E7:35:79:00:05:E4:8D:6B:D6:0C:31:B6 X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0c:16:3b:89:49:94:38:b9:b9:c5:7c:d7:8d:af:7f:59:86: 61:27:5f:77:72:8f:69:02:ba:a7:17:23:12:92:e3:23:96:43: 0a:cc:35:fd:73:26:b2:35:0c:c8:97:bb:a8:1e:3e:e4:69:44: 21:2d:fe:96:e6:12:2b:73:49:bd:36:22:5d:ec:63:5f:a5:52: 73:52:de:7c:81:40:ec:49:83:6a:9e:6e:c0:64:6f:98:17:b3: 11:bb:52:03:de:86:8d:2d:06:10:e8:02:d0:1b:c4:86:e4:e9: a8:43:9f:a6:fd:1d:2c:b7:47:50:2d:3a:78:1e:3e:3b:2a:90: b4:91:66:b7:34:e7:aa:57:aa:f6:d4:b9:cf:fc:51:5e:d5:04: bf:5e:f7:a4:5b:eb:88:c1:f1:eb:67:d9:ec:fc:8e:f2:c7:1a: 8e:37:c7:22:21:ac:0d:5a:73:b9:1c:da:1b:30:8e:ea:29:1d: 9e:9f:88:c1:30:34:1c:d1:b7:fc:fa:dd:22:09:bb:a1:c3:41: c3:81:2d:92:fd:2e:cc:58:78:ca:b8:4a:cc:4b:0e:ec:20:6a: 4c:27:15:8e:62:90:93:7d:e0:af:08:76:d1:42:8a:2d:aa:ce: 58:4e:6b:c5:ba:ca:d5:69:36:62:f4:bb:e5:32:5c:56:5a:be: 44:14:95:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4DPI1/jo8emI4Uvr1ZyazTDt38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjA5MDIxMjMzNTlaFw0yNjA5MDMxMzM2NTlaMDMxMTAvBgNV BAMTKDRGMzcwMkE3MDI3NEY0RjZFNzM1NzkwMDA1RTQ4RDZCRDYwQzMxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkifZUyBJ3G1vwlXiM156CYyg dyziSfVQjcIV67opY5hrd1bbESlxR1/YWEdy+3u6oJC38BB974e17Lddikue/XIi NElOOfNMQ8RgQ7PQ1PlqyRHl4n/Tq2c98A7b0rq/3O7wM3xizb5mI7WMHK9bbGQW BC5iETUYO2oGe9LV/z/Ux1/2Uo7NS8CMkOirNkZdIhDawymXzhqYMIL1FNOnlc0l I2ftRNRcne5M3ZFV5wsbpzx1ieCvxupHLggDJq5g3P0/NjtsNf2s+TUPwpB+IcGg LDTBwtrJCMAepn3YQE5tqkFimiAWRQDTLCqOIWhVB7gENBXcMqYNywMLupk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTzcCpwJ09PbnNXkABeSNa9YMMbYwHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFF NTkxRUY2RDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEMFjuJSZQ4ubnFfNeNr39ZhmEnX3dyj2kC uqcXIxKS4yOWQwrMNf1zJrI1DMiXu6gePuRpRCEt/pbmEitzSb02Il3sY1+lUnNS 3nyBQOxJg2qebsBkb5gXsxG7UgPeho0tBhDoAtAbxIbk6ahDn6b9HSy3R1AtOnge PjsqkLSRZrc056pXqvbUuc/8UV7VBL9e96Rb64jB8etn2ez8jvLHGo43xyIhrA1a c7kc2hswjuopHZ6fiMEwNBzRt/z63SIJu6HDQcOBLZL9LsxYeMq4SsxLDuwgakwn FY5ikJN94K8IdtFCii2qzlhOa8W6ytVpNmL0u+UyXFZavkQUlcA= -----END CERTIFICATE-----Generated at Thu Sep 3 07:16:04 2026 by rpki-client