$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json) Hash identifier: gG8dJzgFrXqMERe+zB+LNcdvZwaGIrC5Ttpp/5QbAmU= Subject key identifier: 28:75:C5:B3:65:B9:10:BE:FF:1D:81:C8:6C:DD:65:68:97:93:C0:31 Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Certificate serial: 21574DB1EDE626F1EA2836BF4E24A79716DEFC83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft Manifest number: ED Signing time: Tue 27 Oct 2026 01:21:59 +0000 Manifest this update: Tue 27 Oct 2026 01:16:59 +0000 Manifest next update: Wed 28 Oct 2026 04:26:59 +0000 Files and hashes: 1: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=) 2: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: vCEoe2yiO63vzVXOUd6EaGjYHHs57t4bv92FML4ZwwQ=) 3: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=) 4: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:57:4d:b1:ed:e6:26:f1:ea:28:36:bf:4e:24:a7:97:16:de:fc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Validity Not Before: Oct 27 01:16:59 2026 GMT Not After : Oct 28 04:26:59 2026 GMT Subject: CN=2875C5B365B910BEFF1D81C86CDD65689793C031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:9b:e4:7d:5d:3b:7f:d6:93:bd:57:d3:c1: 7b:63:f8:a0:25:13:36:db:b3:15:a6:fb:22:39:c3: 02:c6:a5:80:36:02:b3:2d:87:92:1b:0a:4a:a3:cc: 83:9a:8a:80:ae:a9:ef:e1:e3:2c:b9:0d:1a:6f:fe: a1:91:73:21:b9:2c:34:b0:52:4f:79:b0:7b:02:18: 44:f8:34:f2:e6:bd:0c:62:17:4f:89:6d:3d:a8:53: b4:4f:55:fb:58:cd:a6:29:42:8b:de:62:31:fc:fb: e6:b4:d7:df:b6:31:ab:37:62:6f:bf:67:15:e7:52: 9e:88:5f:7d:9b:ae:e5:19:55:af:f4:37:b0:b0:f6: bd:8c:40:76:a7:f0:c6:6f:34:ea:32:a4:6c:bf:73: 9a:6f:5d:1a:b8:a3:9e:5b:a0:d2:78:53:5a:2e:ea: 92:f7:7e:20:84:86:db:fa:c8:7c:52:a2:b3:f3:b0: bd:aa:97:b6:28:69:3d:0a:1c:10:e3:3e:28:a1:af: 6b:39:41:1e:a4:c3:d1:0a:8f:32:35:b2:88:2b:f9: bc:3a:03:7d:3d:b3:47:6a:d5:c1:67:50:ae:ca:20: f7:b4:ac:73:a6:9f:14:63:5a:f2:02:dd:1a:5b:44: 52:51:78:f9:05:e5:7f:b4:e5:bc:51:73:8a:7d:8a: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:C5:B3:65:B9:10:BE:FF:1D:81:C8:6C:DD:65:68:97:93:C0:31 X509v3 Authority Key Identifier: keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:53:41:69:94:42:14:7c:71:54:43:f9:68:21:16:a3:cf:66: b9:16:02:d1:a3:9b:15:5b:0d:2b:a0:1a:e5:c3:c0:1e:e7:e4: 8e:e5:1b:5d:33:ed:99:c1:69:10:45:89:1a:81:71:7f:f7:5a: dc:b0:d1:03:18:35:56:43:2f:7f:1f:07:f1:17:38:41:fa:56: 3b:ea:4a:d9:15:90:88:b2:22:bd:03:e7:4d:64:35:48:9c:21: 59:a0:d7:61:c1:71:57:8a:67:55:ad:97:5c:bc:e6:75:c1:f5: 10:18:13:7f:78:10:8b:15:0e:5e:f3:78:62:e4:e3:ba:92:d3: 62:24:68:f4:3a:fd:58:d4:41:92:2d:cf:b2:3d:7a:0e:ca:99: 7c:e1:1f:65:dd:a1:4d:0f:24:5a:7c:1c:14:06:f7:9c:15:84: fc:ff:b9:af:22:fc:83:1d:b5:6b:1c:f0:50:6e:cf:6b:2a:e3: 0b:8b:d7:f4:57:2b:67:f3:a6:e7:5b:35:56:b0:d9:1a:de:1f: 74:3d:cc:8c:c1:4c:d7:71:a6:7c:35:ae:51:ff:d4:45:3d:2f: 84:1a:34:66:a2:ba:07:66:1b:73:5e:85:d3:e1:f3:a3:e5:b6: 72:ad:2f:7d:93:04:55:b1:fd:f5:3d:e6:72:a1:e0:77:07:85: 48:87:4a:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVdNse3mJvHqKDa/TiSnlxbe/IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5NTFG OTk1MDc5QTAeFw0yNjEwMjcwMTE2NTlaFw0yNjEwMjgwNDI2NTlaMDMxMTAvBgNV BAMTKDI4NzVDNUIzNjVCOTEwQkVGRjFEODFDODZDREQ2NTY4OTc5M0MwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3eJvkfV07f9aTvVfTwXtj+KAl EzbbsxWm+yI5wwLGpYA2ArMth5IbCkqjzIOaioCuqe/h4yy5DRpv/qGRcyG5LDSw Uk95sHsCGET4NPLmvQxiF0+JbT2oU7RPVftYzaYpQoveYjH8++a019+2Mas3Ym+/ ZxXnUp6IX32bruUZVa/0N7Cw9r2MQHan8MZvNOoypGy/c5pvXRq4o55boNJ4U1ou 6pL3fiCEhtv6yHxSorPzsL2ql7YoaT0KHBDjPiihr2s5QR6kw9EKjzI1sogr+bw6 A309s0dq1cFnUK7KIPe0rHOmnxRjWvIC3RpbRFJRePkF5X+05bxRc4p9iu+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKHXFs2W5EL7/HYHIbN1laJeTwDEwHwYDVR0j BBgwFoAUbCHzcfzt0t4prpFLNT9pUfmVB5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVlYzZjZjgtOTY1NS00Mzc5LWJmMzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFG Q0VERDJERTI5QUU5MTRCMzUzRjY5NTFGOTk1MDc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzIxRjM3MUZDRUREMkRFMjlBRTkxNEIzNTNGNjk1MUY5OTUw NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5 NTFGOTk1MDc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5TQWmUQhR8cVRD+WghFqPPZrkWAtGjmxVb DSugGuXDwB7n5I7lG10z7ZnBaRBFiRqBcX/3Wtyw0QMYNVZDL38fB/EXOEH6Vjvq StkVkIiyIr0D501kNUicIVmg12HBcVeKZ1Wtl1y85nXB9RAYE394EIsVDl7zeGLk 47qS02IkaPQ6/VjUQZItz7I9eg7KmXzhH2XdoU0PJFp8HBQG95wVhPz/ua8i/IMd tWsc8FBuz2sq4wuL1/RXK2fzpudbNVaw2RreH3Q9zIzBTNdxpnw1rlH/1EU9L4Qa NGaiugdmG3NehdPh86PltnKtL32TBFWx/fU95nKh4HcHhUiHSss= -----END CERTIFICATE-----Generated at Tue Oct 27 17:42:46 2026 by rpki-client