$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: g9BaZ3hyCKCeFp3nvVAVs5Po5Kx4JhPU9/yxylVgzI8= Subject key identifier: 6C:D2:2B:08:8D:87:3B:41:33:CC:17:E5:6C:57:9A:6F:90:2E:39:DA Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 42EB701BA489505C505444E0C924691E9DE2898B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: EB Signing time: Sun 25 Oct 2026 11:35:51 +0000 Manifest this update: Sun 25 Oct 2026 11:30:51 +0000 Manifest next update: Mon 26 Oct 2026 14:28:51 +0000 Files and hashes: 1: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: M/hVv+tjYVo3a6E8smcaGzoLLyaExJGKrnZ9GwYNVP0=) 2: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) 4: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) 5: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 6: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:eb:70:1b:a4:89:50:5c:50:54:44:e0:c9:24:69:1e:9d:e2:89:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: Oct 25 11:30:51 2026 GMT Not After : Oct 26 14:28:51 2026 GMT Subject: CN=6CD22B088D873B4133CC17E56C579A6F902E39DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:32:48:65:66:ac:9e:ec:6e:5a:dc:64:0c: 7a:44:8f:32:b9:59:81:3b:5a:b1:f5:60:bb:cd:34: 68:04:dd:89:f3:40:f0:03:a1:9a:03:bc:1b:56:ae: 39:ca:d1:fd:66:01:a5:63:15:cc:14:8f:4f:56:7b: 4e:74:ac:21:43:6b:bb:48:e2:12:41:2a:5c:47:c1: f3:d2:50:65:54:e2:1e:a8:78:75:c6:32:a9:73:f0: 03:ac:d8:34:49:57:0c:66:70:85:21:a5:2f:ec:36: a0:e6:b1:c6:ae:55:de:d7:3b:b5:86:4d:60:c0:f5: a4:e1:77:0d:b3:d7:5f:bc:88:10:f3:f1:a3:02:9d: 11:1e:7c:4d:de:c9:f3:66:59:b7:27:11:78:4f:ad: 10:83:e8:7b:92:6a:ac:c0:e2:83:fd:96:49:02:2b: 59:1d:bd:25:ac:0b:d8:fd:82:f2:a1:15:e0:58:6f: 93:20:78:0d:d8:a2:38:a7:b6:14:10:50:c4:60:df: 9a:fc:25:31:fb:5b:1c:43:e1:5d:08:89:e8:8c:78: cf:83:9a:1f:47:60:62:21:c2:68:1f:13:9d:2d:1b: e7:5c:aa:77:8a:61:98:79:56:79:6b:2f:56:b2:97: 86:ed:a2:df:6d:7d:93:01:40:77:62:9e:d0:2e:89: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D2:2B:08:8D:87:3B:41:33:CC:17:E5:6C:57:9A:6F:90:2E:39:DA X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1b:ec:df:53:2c:5f:af:ee:b8:c1:fa:e2:54:4a:96:19:d7: 51:ac:08:02:02:03:9a:ce:2d:09:2e:b4:cc:29:5d:24:bc:39: 81:92:56:03:70:4b:0f:64:ce:1d:d0:29:cd:73:98:90:a2:65: ed:02:22:45:2b:82:91:9a:89:b8:38:77:54:49:55:4a:f0:f4: 2b:10:7f:db:0e:94:28:2f:f9:cc:bd:72:a6:14:9d:52:39:3a: 95:7b:5b:45:fb:6c:47:dc:44:77:fc:6a:5f:b5:c5:be:69:4e: b2:79:96:01:88:a8:2e:dc:23:71:67:9a:f5:9e:e9:3a:24:ac: 58:83:f4:cf:1a:11:95:fb:b0:92:56:10:2d:9b:f6:33:e7:8b: 09:fe:ec:51:c0:b6:e5:ef:18:e7:7e:4f:e5:31:53:c3:c5:cb: f6:0a:2c:8f:14:8e:b0:0c:36:39:c5:fe:c3:f3:67:87:ae:af: fa:c0:c6:fa:be:9a:60:30:d1:24:43:32:74:ef:45:9b:76:88: 9d:d4:aa:93:ea:76:eb:6b:27:a6:8a:3c:bc:d1:62:a3:12:84: 3c:66:27:f7:df:58:06:18:9c:08:cd:e3:ac:40:40:c5:b4:0b: 3d:8a:87:32:56:6a:43:e1:a0:1c:98:82:1e:b9:34:41:65:c1: e4:7b:37:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQutwG6SJUFxQVETgySRpHp3iiYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjEwMjUxMTMwNTFaFw0yNjEwMjYxNDI4NTFaMDMxMTAvBgNV BAMTKDZDRDIyQjA4OEQ4NzNCNDEzM0NDMTdFNTZDNTc5QTZGOTAyRTM5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPTJIZWasnuxuWtxkDHpEjzK5 WYE7WrH1YLvNNGgE3YnzQPADoZoDvBtWrjnK0f1mAaVjFcwUj09We050rCFDa7tI 4hJBKlxHwfPSUGVU4h6oeHXGMqlz8AOs2DRJVwxmcIUhpS/sNqDmscauVd7XO7WG TWDA9aThdw2z11+8iBDz8aMCnREefE3eyfNmWbcnEXhPrRCD6HuSaqzA4oP9lkkC K1kdvSWsC9j9gvKhFeBYb5MgeA3YojinthQQUMRg35r8JTH7WxxD4V0IieiMeM+D mh9HYGIhwmgfE50tG+dcqneKYZh5VnlrL1ayl4btot9tfZMBQHdintAuiffRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNIrCI2HO0EzzBflbFeab5AuOdowHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFF NTkxRUY2RDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcb7N9TLF+v7rjB+uJUSpYZ11GsCAICA5rO LQkutMwpXSS8OYGSVgNwSw9kzh3QKc1zmJCiZe0CIkUrgpGaibg4d1RJVUrw9CsQ f9sOlCgv+cy9cqYUnVI5OpV7W0X7bEfcRHf8al+1xb5pTrJ5lgGIqC7cI3FnmvWe 6TokrFiD9M8aEZX7sJJWEC2b9jPniwn+7FHAtuXvGOd+T+UxU8PFy/YKLI8UjrAM NjnF/sPzZ4eur/rAxvq+mmAw0SRDMnTvRZt2iJ3UqpPqdutrJ6aKPLzRYqMShDxm J/ffWAYYnAjN46xAQMW0Cz2KhzJWakPhoByYgh65NEFlweR7N6s= -----END CERTIFICATE-----Generated at Sun Oct 25 20:58:22 2026 by rpki-client