$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft File: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft (raw, json) Hash identifier: Mxra46fGfge8jNdMt0uONrPzWSUi5rXbMlZnNd0nGao= Subject key identifier: 65:18:B9:0A:F2:11:9B:03:08:79:73:5A:6A:82:B7:E0:96:DB:D2:04 Authority key identifier: 6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D Certificate issuer: /CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Certificate serial: 0FB33C5EF832D29514B364A6D2D6D5BE27AA2467 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 04:08:37 +0000 Manifest this update: Thu 17 Sep 2026 04:03:37 +0000 Manifest next update: Fri 18 Sep 2026 06:01:37 +0000 Files and hashes: 1: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: w2x/b2ifWwyHpRZZLutwbvw8gPy4dmo/jJsRdtth0Pg=) 2: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl (hash: A9PUKY7VCyQFPWejyatqL4U1L0U+QMpeUiUTOgxIfUc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b3:3c:5e:f8:32:d2:95:14:b3:64:a6:d2:d6:d5:be:27:aa:24:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Validity Not Before: Sep 17 04:03:37 2026 GMT Not After : Sep 18 06:01:37 2026 GMT Subject: CN=6518B90AF2119B030879735A6A82B7E096DBD204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:35:f7:94:4b:e5:57:3d:76:7b:d3:78:93: 8a:c8:43:b7:62:2e:c8:51:b3:32:56:a5:32:85:1e: 95:b9:98:6a:8b:c1:30:10:59:f1:d8:1a:d8:12:56: 5c:e1:a0:90:35:c3:dd:dd:ae:2b:fc:2b:a1:2b:66: 2f:8e:97:2b:92:93:88:b5:d5:17:12:97:75:d8:9f: 85:eb:ee:a6:e4:80:62:bf:fc:80:d3:5a:b4:7d:95: 55:b5:d7:38:73:d8:6b:ed:d8:3d:38:b8:98:b5:05: e5:f3:57:9e:59:d4:13:bf:d9:f9:09:3f:9a:72:36: 70:4b:1a:8b:ba:0e:b1:fd:d2:93:b9:c5:84:5e:89: 55:f0:fb:75:5e:a8:dc:0f:4c:ac:e1:b4:c5:a0:74: 0e:70:d9:52:69:b4:50:b2:75:5c:99:2b:33:e0:95: ff:dc:9f:69:3a:1d:4e:c2:4f:40:22:bb:b1:96:88: 39:d9:af:0a:0f:f0:5b:f9:e8:22:32:d2:70:89:93: 27:1f:36:4e:e9:35:14:fb:30:35:47:79:71:f9:5f: c3:d9:04:0d:8f:30:d0:9c:b9:c8:85:2f:70:5a:03: 29:2d:99:1d:88:cb:b6:57:05:b5:bf:f8:b4:59:86: ff:02:35:8e:46:ec:b1:ab:73:18:df:73:d9:82:04: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:B9:0A:F2:11:9B:03:08:79:73:5A:6A:82:B7:E0:96:DB:D2:04 X509v3 Authority Key Identifier: keyid:6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:88:b4:a8:00:d2:f6:c9:c7:a1:f5:01:c3:b8:27:03:ea:98: 7f:c7:32:d2:62:ad:68:d2:c1:a9:3e:6c:67:99:dd:f9:45:48: 99:74:81:cd:48:62:ca:50:a0:ac:48:b0:be:76:a1:40:57:80: 96:47:95:aa:1b:f9:ca:20:7f:3b:0b:8c:24:7c:a9:b8:b3:74: 88:67:32:0c:a2:4c:39:9c:f9:5d:42:cf:59:21:df:c9:88:f3: 7a:a8:39:f0:21:44:4d:2a:2a:33:71:9e:72:19:e6:46:a9:45: 4c:68:66:53:51:3e:49:c1:02:c6:1f:93:90:66:f5:4d:2e:a6: 76:a1:73:a5:07:36:81:4a:64:ea:ed:fa:46:c8:ab:c8:72:93: a9:ed:04:a1:3b:93:1e:48:d3:40:42:13:cd:70:62:29:d0:76: 08:e2:cd:ae:04:c3:70:93:4c:cd:06:b1:e7:46:f3:80:4b:e7: 7b:76:df:75:7a:d1:72:5e:3a:00:67:6d:77:8a:2d:32:5f:0b: d8:e8:aa:f5:03:fb:bb:78:bd:03:ec:67:2b:aa:b9:93:7f:b0: e1:5c:34:ab:20:d3:77:f1:40:85:5c:c0:49:2a:bf:5f:a7:f5: d2:f8:69:11:15:23:40:5a:f7:ef:42:25:1d:ad:1a:5d:e3:c5: 11:55:ec:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7M8Xvgy0pUUs2Sm0tbVvieqJGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1MzRE MzgwMjc0RDAeFw0yNjA5MTcwNDAzMzdaFw0yNjA5MTgwNjAxMzdaMDMxMTAvBgNV BAMTKDY1MThCOTBBRjIxMTlCMDMwODc5NzM1QTZBODJCN0UwOTZEQkQyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oTX3lEvlVz12e9N4k4rIQ7di LshRszJWpTKFHpW5mGqLwTAQWfHYGtgSVlzhoJA1w93driv8K6ErZi+OlyuSk4i1 1RcSl3XYn4Xr7qbkgGK//IDTWrR9lVW11zhz2Gvt2D04uJi1BeXzV55Z1BO/2fkJ P5pyNnBLGou6DrH90pO5xYReiVXw+3VeqNwPTKzhtMWgdA5w2VJptFCydVyZKzPg lf/cn2k6HU7CT0Aiu7GWiDnZrwoP8Fv56CIy0nCJkycfNk7pNRT7MDVHeXH5X8PZ BA2PMNCcuciFL3BaAyktmR2Iy7ZXBbW/+LRZhv8CNY5G7LGrcxjfc9mCBJ5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZRi5CvIRmwMIeXNaaoK34Jbb0gQwHwYDVR0j BBgwFoAUbMnA1z2cPghn6tGmOrDVNNOAJ00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwOTYyZjctNjdlYS00NzBlLWE1MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDcz RDlDM0UwODY3RUFEMUE2M0FCMEQ1MzREMzgwMjc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Q0M5QzBENzNEOUMzRTA4NjdFQUQxQTYzQUIwRDUzNEQzODAy NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1 MzREMzgwMjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOCItKgA0vbJx6H1AcO4JwPqmH/HMtJirWjS wak+bGeZ3flFSJl0gc1IYspQoKxIsL52oUBXgJZHlaob+cogfzsLjCR8qbizdIhn MgyiTDmc+V1Cz1kh38mI83qoOfAhRE0qKjNxnnIZ5kapRUxoZlNRPknBAsYfk5Bm 9U0upnahc6UHNoFKZOrt+kbIq8hyk6ntBKE7kx5I00BCE81wYinQdgjiza4Ew3CT TM0GsedG84BL53t233V60XJeOgBnbXeKLTJfC9joqvUD+7t4vQPsZyuquZN/sOFc NKsg03fxQIVcwEkqv1+n9dL4aREVI0Ba9+9CJR2tGl3jxRFV7Kw= -----END CERTIFICATE-----Generated at Thu Sep 17 14:26:16 2026 by rpki-client