$ rpki-client -vvvf rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft File: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft (raw, json) Hash identifier: MntU6B+PqkrdFP4Ej4D947HNC0YbRsy91GRwC6zVkjY= Subject key identifier: 5F:E2:91:00:51:F2:25:CE:57:AB:18:AC:C7:47:2E:F9:2B:4E:49:54 Authority key identifier: 6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 Certificate issuer: /CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Certificate serial: 0F6EE1599D5CAE86361E8CBE63FA040964ECC107 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:29:22 +0000 Manifest this update: Wed 16 Sep 2026 20:24:22 +0000 Manifest next update: Thu 17 Sep 2026 22:06:22 +0000 Files and hashes: 1: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl (hash: cm3UNbiIgN2eDLibdZiXMgJrkrLWz795oEL19kLqKY0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6e:e1:59:9d:5c:ae:86:36:1e:8c:be:63:fa:04:09:64:ec:c1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Validity Not Before: Sep 16 20:24:22 2026 GMT Not After : Sep 17 22:06:22 2026 GMT Subject: CN=5FE2910051F225CE57AB18ACC7472EF92B4E4954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:ff:f4:dc:87:0b:7c:e7:3b:1e:95:0b:44: 8f:41:84:29:e1:4f:57:a2:93:ce:1a:52:3a:6b:cc: 68:b5:26:14:50:4a:0d:ee:2b:27:8b:b2:5b:4e:d4: 47:c1:51:58:42:3f:e8:d1:89:f2:54:04:e2:74:2a: 7f:9d:39:29:3a:cd:d3:ae:64:ef:f4:a7:ff:dc:b2: af:56:e9:51:92:22:78:14:e2:c6:d7:47:ef:f9:6f: 6e:c9:5a:4f:31:05:88:65:35:86:87:fa:ef:ca:30: 94:c6:63:51:52:e0:2c:18:8a:18:9a:c9:63:a5:69: cf:f1:15:de:6e:5c:c9:3b:01:e5:15:e9:75:f2:93: e0:99:84:51:61:47:c2:69:f6:2c:dd:f7:21:ad:74: 80:f0:7a:26:d8:fa:0e:e2:7f:14:fb:1f:d6:c7:04: a3:a3:65:16:3e:bf:10:b1:77:80:9f:e7:a8:29:39: b3:0b:53:28:88:49:c3:fc:f1:74:e0:e7:d1:1f:4f: 56:21:ff:85:ad:76:0e:bc:3f:67:85:c6:d7:37:25: e1:44:07:d4:9f:db:8c:93:f9:37:c1:38:45:5c:f7: 18:7d:c9:5d:63:4a:a6:4c:39:eb:ec:43:4f:e4:49: 9f:18:00:e9:48:02:82:20:3f:1b:60:b0:c7:4a:03: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E2:91:00:51:F2:25:CE:57:AB:18:AC:C7:47:2E:F9:2B:4E:49:54 X509v3 Authority Key Identifier: keyid:6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c6:97:af:cd:a9:6e:a2:83:0b:d6:83:b4:15:bf:f8:8e:14: aa:db:52:bc:af:48:e1:e8:5b:11:21:12:53:7f:32:55:31:99: 29:80:c0:c6:ac:94:a5:d6:ea:09:e0:44:09:f9:ed:7e:c6:d7: 9e:56:e0:da:df:fa:59:d2:f0:e4:d6:6e:d0:dc:77:1a:7a:63: fc:87:10:dd:6a:d4:96:d0:06:e8:2d:6b:25:ec:c0:a6:7d:d9: 27:ff:84:c4:29:1d:9d:ab:ec:c5:7c:b9:f8:68:61:49:17:02: 7c:f8:7f:2f:20:5a:3b:7a:a8:37:09:f3:a0:1a:91:81:bf:01: c9:48:9c:7b:37:6e:8c:80:54:73:09:10:19:0b:80:03:1b:e3: de:6e:46:60:2a:98:60:f6:1f:6d:e8:61:78:5b:32:9a:71:54: 64:6d:6d:4b:49:78:43:a2:81:0b:af:f3:3b:7c:3d:43:7e:c3: f4:4b:0f:f5:44:cc:22:d0:db:9d:ee:47:7e:50:16:a8:39:4d: 79:0d:6a:df:13:02:a1:37:e1:a4:ad:38:e3:0d:05:2f:44:d6: 7d:d8:ef:12:ff:e7:61:05:a9:02:36:69:5e:ff:50:0b:07:a8: a6:fd:99:d4:10:60:68:19:0f:46:48:1d:50:29:97:a5:8e:43: a5:a4:a0:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD27hWZ1croY2Hoy+Y/oECWTswQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0Qx QzFFNTdENzAeFw0yNjA5MTYyMDI0MjJaFw0yNjA5MTcyMjA2MjJaMDMxMTAvBgNV BAMTKDVGRTI5MTAwNTFGMjI1Q0U1N0FCMThBQ0M3NDcyRUY5MkI0RTQ5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2//03IcLfOc7HpULRI9BhCnh T1eik84aUjprzGi1JhRQSg3uKyeLsltO1EfBUVhCP+jRifJUBOJ0Kn+dOSk6zdOu ZO/0p//csq9W6VGSIngU4sbXR+/5b27JWk8xBYhlNYaH+u/KMJTGY1FS4CwYihia yWOlac/xFd5uXMk7AeUV6XXyk+CZhFFhR8Jp9izd9yGtdIDweibY+g7ifxT7H9bH BKOjZRY+vxCxd4Cf56gpObMLUyiIScP88XTg59EfT1Yh/4Wtdg68P2eFxtc3JeFE B9Sf24yT+TfBOEVc9xh9yV1jSqZMOevsQ0/kSZ8YAOlIAoIgPxtgsMdKA42zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX+KRAFHyJc5Xqxisx0cu+StOSVQwHwYDVR0j BBgwFoAUb11i7XGbrCYyK4DnMp8wfRweV9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA5YzIyYjEtMWI3Yi00NjcxLWFiOTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3 MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0QxQzFFNTdENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjVENjJFRDcxOUJBQzI2MzIyQjgwRTczMjlGMzA3RDFDMUU1 N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMw N0QxQzFFNTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTGl6/NqW6igwvWg7QVv/iOFKrbUryvSOHo WxEhElN/MlUxmSmAwMaslKXW6gngRAn57X7G155W4Nrf+lnS8OTWbtDcdxp6Y/yH EN1q1JbQBugtayXswKZ92Sf/hMQpHZ2r7MV8ufhoYUkXAnz4fy8gWjt6qDcJ86Aa kYG/AclInHs3boyAVHMJEBkLgAMb495uRmAqmGD2H23oYXhbMppxVGRtbUtJeEOi gQuv8zt8PUN+w/RLD/VEzCLQ253uR35QFqg5TXkNat8TAqE34aStOOMNBS9E1n3Y 7xL/52EFqQI2aV7/UAsHqKb9mdQQYGgZD0ZIHVApl6WOQ6WkoOY= -----END CERTIFICATE-----Generated at Thu Sep 17 16:24:03 2026 by rpki-client