$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft File: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft (raw, json) Hash identifier: EjteDUN2mSzKpZRDMBzBRrU3X9P+CYN+lMRHEbHj6rs= Subject key identifier: A2:7F:98:6E:8C:FD:09:CD:33:31:52:48:A5:4C:5E:DB:0C:F5:B5:1A Authority key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 Certificate issuer: /CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3 Certificate serial: 68EF951CC244A899F5BFFDFA1721BA4919934D3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:49:58 +0000 Manifest this update: Wed 16 Sep 2026 16:44:58 +0000 Manifest next update: Thu 17 Sep 2026 18:37:58 +0000 Files and hashes: 1: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: yO2cOBfHPv3C/4uaJ55DoJTVwS5Sx/sjk03JxEGguBI=) 2: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: 0VUfdAAfFEuToJwbRstnJ6dFxvse7EJ2ZUiWvgUCNNM=) 3: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl (hash: P1POeZ6FDEhtIps4mQ8xvlexxfJs2TcS6RID76yZMKg=) 4: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: hgg/QP+dSLFLOsjRg4tQEaQYc48Rb+WtJWuacTUuK2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ef:95:1c:c2:44:a8:99:f5:bf:fd:fa:17:21:ba:49:19:93:4d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3 Validity Not Before: Sep 16 16:44:58 2026 GMT Not After : Sep 17 18:37:58 2026 GMT Subject: CN=A27F986E8CFD09CD33315248A54C5EDB0CF5B51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:87:a3:87:80:15:e0:87:e2:34:ad:67:f8: bd:40:80:5c:52:bd:2d:6e:e9:c3:c2:07:25:17:28: 50:31:1c:41:45:83:ce:1d:49:b1:68:90:c1:ac:53: 65:2e:68:47:c2:ab:a4:16:81:52:36:80:08:dc:cd: 0e:9b:ec:06:eb:5a:fb:d8:2a:2b:33:b3:40:c8:aa: fd:35:f4:c7:81:ab:9b:b3:07:f3:c2:29:6b:6f:e3: f4:82:d6:e4:80:61:a5:72:70:20:7b:ec:70:e3:05: 99:6a:f3:28:0d:75:43:a1:43:4e:a7:3a:0a:4a:94: 7d:03:3f:90:cf:a5:ca:90:27:ba:51:9d:01:be:05: 9a:28:5a:dc:f5:a2:65:4a:b0:db:c4:62:57:ea:20: be:41:df:ff:71:11:c0:a5:63:d0:bf:83:da:25:e9: 4b:24:92:ac:34:39:bf:af:21:8f:85:fc:7b:1c:be: ce:36:4f:ab:3a:c6:d6:ea:4f:d9:46:a8:65:41:8a: d7:88:54:38:05:05:cc:b6:0d:f5:ba:30:85:6a:d9: 61:9c:79:e8:af:06:1c:3c:59:a4:92:c5:1a:a4:4a: 32:aa:55:81:22:33:0e:54:3b:f1:a0:0c:cf:3f:e7: 04:c2:43:3a:5b:08:8d:46:1e:59:26:c3:35:69:3b: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7F:98:6E:8C:FD:09:CD:33:31:52:48:A5:4C:5E:DB:0C:F5:B5:1A X509v3 Authority Key Identifier: keyid:C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fc:14:a3:3a:e1:a4:af:23:e5:95:a0:65:2b:af:74:d9:33: 41:95:73:04:8a:bc:c5:cb:26:17:d3:b8:da:d8:35:48:89:48: c9:69:04:1a:15:88:1c:e0:1c:59:c1:c0:bd:b1:31:16:b6:cd: 39:ce:c5:50:93:b6:99:c6:48:8d:fd:64:40:a6:4c:37:75:a7: 42:63:6f:c4:eb:d7:1c:ba:83:24:0f:b7:eb:23:16:07:f1:fa: 7b:55:bd:85:09:d2:bd:c5:93:a6:35:f5:f4:9b:40:fa:a8:78: b7:3c:bd:98:0f:f1:af:ce:fe:ca:2f:41:2e:a3:f3:3c:b1:18: f3:58:0b:45:ae:3f:59:55:82:aa:0a:88:a0:cd:6d:95:e3:f2: 9c:22:1f:0e:b6:25:45:d4:71:75:09:59:9e:9a:ec:a3:f2:58: 51:ee:af:72:02:2c:17:be:14:c2:4e:27:83:3c:68:4c:f1:8a: 15:6a:16:91:7b:f4:c2:ca:19:70:fe:ac:97:81:7a:cd:56:43: 8a:59:91:92:ca:eb:7c:03:33:d2:a2:29:a2:6a:b7:67:af:19: 0e:b8:18:5e:62:ee:84:b8:ff:f5:bf:5c:c0:68:02:60:fe:ee: c4:60:ea:8c:0c:26:b0:5c:b7:51:63:26:6a:fa:0d:59:8c:9e: 27:1d:d4:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO+VHMJEqJn1v/36FyG6SRmTTTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGRkUxRTU4NDM4QkM1QjM1NzIzOTEwNEI1M0RCRDZC NjlBRjlEMzAeFw0yNjA5MTYxNjQ0NThaFw0yNjA5MTcxODM3NThaMDMxMTAvBgNV BAMTKEEyN0Y5ODZFOENGRDA5Q0QzMzMxNTI0OEE1NEM1RURCMENGNUI1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZo4ejh4AV4IfiNK1n+L1AgFxS vS1u6cPCByUXKFAxHEFFg84dSbFokMGsU2UuaEfCq6QWgVI2gAjczQ6b7AbrWvvY Kiszs0DIqv019MeBq5uzB/PCKWtv4/SC1uSAYaVycCB77HDjBZlq8ygNdUOhQ06n OgpKlH0DP5DPpcqQJ7pRnQG+BZooWtz1omVKsNvEYlfqIL5B3/9xEcClY9C/g9ol 6Uskkqw0Ob+vIY+F/Hscvs42T6s6xtbqT9lGqGVBiteIVDgFBcy2DfW6MIVq2WGc eeivBhw8WaSSxRqkSjKqVYEiMw5UO/GgDM8/5wTCQzpbCI1GHlkmwzVpO5ktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUon+Yboz9Cc0zMVJIpUxe2wz1tRowHwYDVR0j BBgwFoAUxv/h5YQ4vFs1cjkQS1Pb1raa+dMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA2MjBjZmMtYjQ2Yy00NTdjLTlmZGUtMjk3NzEwYzU0NmE5LzAvQzZGRkUxRTU4 NDM4QkM1QjM1NzIzOTEwNEI1M0RCRDZCNjlBRjlEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkZGRTFFNTg0MzhCQzVCMzU3MjM5MTA0QjUzREJENkI2OUFG OUQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvQzZGRkUxRTU4NDM4QkM1QjM1NzIzOTEwNEI1M0RC RDZCNjlBRjlEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA78FKM64aSvI+WVoGUrr3TZM0GVcwSKvMXL JhfTuNrYNUiJSMlpBBoViBzgHFnBwL2xMRa2zTnOxVCTtpnGSI39ZECmTDd1p0Jj b8Tr1xy6gyQPt+sjFgfx+ntVvYUJ0r3Fk6Y19fSbQPqoeLc8vZgP8a/O/sovQS6j 8zyxGPNYC0WuP1lVgqoKiKDNbZXj8pwiHw62JUXUcXUJWZ6a7KPyWFHur3ICLBe+ FMJOJ4M8aEzxihVqFpF79MLKGXD+rJeBes1WQ4pZkZLK63wDM9KiKaJqt2evGQ64 GF5i7oS4//W/XMBoAmD+7sRg6owMJrBct1FjJmr6DVmMnicd1Cs= -----END CERTIFICATE-----Generated at Thu Sep 17 10:05:23 2026 by rpki-client