$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft File: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft (raw, json) Hash identifier: 0Z86EaiQ5mv1/IZ4tMHm1gVv/9JMM7Q9Q5rzmh/ihI0= Subject key identifier: 1A:8A:CC:70:F7:20:F9:AF:7D:C1:76:F4:F9:79:AA:13:1A:5F:8E:9D Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC Certificate issuer: /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Certificate serial: 3A94D60990F5710BFC7636229AA44E6987B5AB9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 13:36:04 +0000 Manifest this update: Sat 24 Oct 2026 13:31:04 +0000 Manifest next update: Sun 25 Oct 2026 16:16:04 +0000 Files and hashes: 1: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl (hash: 1RjFU9tm7s+cCQLP6BlIXgTrtkLykRE9Jo2JMchYMXg=) 2: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: qG2bUOWwTNZiIfdaTpDPVpMrBFbrT7QpU559kWrN28I=) 3: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:94:d6:09:90:f5:71:0b:fc:76:36:22:9a:a4:4e:69:87:b5:ab:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Validity Not Before: Oct 24 13:31:04 2026 GMT Not After : Oct 25 16:16:04 2026 GMT Subject: CN=1A8ACC70F720F9AF7DC176F4F979AA131A5F8E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:58:23:ee:79:a5:2e:d8:06:86:af:37:1f: 8c:30:4e:01:44:e8:3d:fb:6f:29:79:ec:c7:65:78: fc:45:53:67:5a:b0:6d:ec:eb:65:d5:d2:9d:4f:cc: ac:66:15:a0:95:93:cb:1e:c6:f5:e3:c1:d0:7a:95: d6:32:77:de:81:82:c9:35:1b:6f:6e:5f:38:4e:9d: 49:68:a4:7c:98:09:af:17:b5:a4:df:a6:df:4c:b2: d8:5b:e8:41:f6:1a:ec:15:30:25:66:6b:be:63:23: 1a:6a:20:81:23:04:ab:63:65:0e:58:82:11:ae:b3: ff:4f:6b:c3:02:f7:ec:18:db:84:b3:33:90:08:87: d3:60:cd:40:18:c6:0d:0c:78:f4:fb:0f:5b:cf:06: c1:13:57:04:e6:7d:94:42:14:35:bb:d5:04:5a:5c: ef:a4:9e:22:61:37:a1:82:24:34:0c:06:89:0b:97: e8:d8:c6:c8:4a:6b:24:94:d9:5c:74:55:84:15:38: 41:80:41:b7:a9:20:e2:27:f7:51:4a:b3:05:7c:84: 23:44:2e:f9:8a:dc:ba:72:26:e8:e7:27:9e:f2:ca: 26:c2:9a:92:d2:12:f0:e6:a9:4e:96:43:a7:0e:a5: 88:2f:46:1b:74:c4:2a:85:93:77:d4:ee:56:15:dd: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8A:CC:70:F7:20:F9:AF:7D:C1:76:F4:F9:79:AA:13:1A:5F:8E:9D X509v3 Authority Key Identifier: keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2a:3c:68:40:7f:b5:00:c5:96:23:fa:76:e8:33:ac:50:8f: ee:42:94:8b:5a:a8:04:0b:cf:00:b9:28:81:25:7a:4f:42:1c: 8d:af:63:97:c9:b8:b7:b0:78:47:3f:94:ab:b8:0c:fd:0f:95: 47:29:e9:9d:59:c2:42:0e:f4:44:89:d6:97:ea:0b:2d:57:54: 61:e6:7a:de:53:b3:7f:e6:db:22:23:4e:d9:cb:83:8e:ba:48: 7b:1f:d1:b8:b5:79:9f:da:46:d8:f6:dc:01:ba:c2:6f:ba:f0: 10:e1:ed:e6:f5:2f:f2:6f:8b:9c:5c:9a:e4:45:31:4e:d5:77: 41:1a:b7:5b:96:e1:4d:89:8d:bb:14:b6:86:c4:50:6a:83:bd: e5:2c:54:f8:ee:70:d0:03:cb:ed:19:fc:05:3c:8b:b0:47:71: a1:d0:68:95:71:75:63:e4:36:2f:d0:34:ff:6f:33:b0:70:6a: 65:23:ad:b3:e6:f8:28:95:ee:d6:fa:e3:5c:d5:b7:3e:ba:cf: 86:2f:29:6c:02:8b:2d:36:93:e9:98:12:8a:b7:c5:0a:54:e1: fd:00:c6:ae:76:72:9b:d1:42:33:42:19:e2:1c:56:8f:14:f6: 86:43:a1:ed:0b:31:a6:73:b1:72:ab:42:4f:48:e0:a1:4a:0f: 97:2f:51:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpTWCZD1cQv8djYimqROaYe1q54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZC N0ZBMTBCQzAeFw0yNjEwMjQxMzMxMDRaFw0yNjEwMjUxNjE2MDRaMDMxMTAvBgNV BAMTKDFBOEFDQzcwRjcyMEY5QUY3REMxNzZGNEY5NzlBQTEzMUE1RjhFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyVgj7nmlLtgGhq83H4wwTgFE 6D37byl57MdlePxFU2dasG3s62XV0p1PzKxmFaCVk8sexvXjwdB6ldYyd96Bgsk1 G29uXzhOnUlopHyYCa8XtaTfpt9Msthb6EH2GuwVMCVma75jIxpqIIEjBKtjZQ5Y ghGus/9Pa8MC9+wY24SzM5AIh9NgzUAYxg0MePT7D1vPBsETVwTmfZRCFDW71QRa XO+kniJhN6GCJDQMBokLl+jYxshKaySU2Vx0VYQVOEGAQbepIOIn91FKswV8hCNE LvmK3LpyJujnJ57yyibCmpLSEvDmqU6WQ6cOpYgvRht0xCqFk3fU7lYV3XlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGorMcPcg+a99wXb0+XmqExpfjp0wHwYDVR0j BBgwFoAUbt0nblgPQBOeCvpKH6snVrf6ELwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0YjIwZDgtNTkxYi00MTUyLTk3NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1 ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZCN0ZBMTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUREMjc2RTU4MEY0MDEzOUUwQUZBNEExRkFCMjc1NkI3RkEx MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3 NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3 NTZCN0ZBMTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkqPGhAf7UAxZYj+nboM6xQj+5ClItaqAQL zwC5KIElek9CHI2vY5fJuLeweEc/lKu4DP0PlUcp6Z1ZwkIO9ESJ1pfqCy1XVGHm et5Ts3/m2yIjTtnLg466SHsf0bi1eZ/aRtj23AG6wm+68BDh7eb1L/Jvi5xcmuRF MU7Vd0Eat1uW4U2JjbsUtobEUGqDveUsVPjucNADy+0Z/AU8i7BHcaHQaJVxdWPk Ni/QNP9vM7BwamUjrbPm+CiV7tb641zVtz66z4YvKWwCiy02k+mYEoq3xQpU4f0A xq52cpvRQjNCGeIcVo8U9oZDoe0LMaZzsXKrQk9I4KFKD5cvUYg= -----END CERTIFICATE-----Generated at Sat Oct 24 17:36:58 2026 by rpki-client