$ rpki-client -vvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft File: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft (raw, json) Hash identifier: fiIDA+H5n+sO2Z3u/BooFXl+0yI9jmjUvE9dvDE93Ls= Subject key identifier: 8F:3D:59:34:27:6B:C0:02:0F:9E:F3:AA:55:86:2A:79:70:E1:A1:BF Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F Certificate issuer: /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Certificate serial: 08041B80C0584580B21F58F86C935F8733BBCD54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:23 +0000 Manifest this update: Tue 12 May 2026 22:05:23 +0000 Manifest next update: Thu 14 May 2026 00:53:23 +0000 Files and hashes: 1: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl (hash: AvJNIFHChLrOID9Xm9ipO264WMlHTVRBlEpvHL5+WiM=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: 5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:04:1b:80:c0:58:45:80:b2:1f:58:f8:6c:93:5f:87:33:bb:cd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Validity Not Before: May 12 22:05:23 2026 GMT Not After : May 14 00:53:23 2026 GMT Subject: CN=8F3D5934276BC0020F9EF3AA55862A7970E1A1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:14:ff:1b:ea:ab:57:85:10:58:97:29:1c: b3:99:90:aa:6f:85:97:ce:a2:f6:12:38:3a:f1:f6: ba:06:77:ee:f7:d2:5b:46:8b:c3:7a:55:03:6b:c5: ee:7f:27:a9:10:1a:e4:19:68:3b:cb:f0:00:f8:72: a0:94:fb:7d:56:02:aa:a3:79:70:66:1d:8c:6d:a0: e1:9f:7b:29:eb:02:70:31:1b:f0:fa:11:8b:67:04: a1:e2:1e:fa:85:8c:4a:75:18:f9:cc:8a:fb:37:f8: 39:12:fa:cf:37:85:b7:3f:40:ca:b1:22:2b:e3:0e: 34:45:b2:dd:c4:e3:d4:86:7f:d2:1d:94:5f:87:10: 3c:a6:74:f6:23:08:69:0e:67:61:78:0c:8b:8f:a7: 18:60:57:c7:bd:ef:b2:92:a7:a7:85:e5:ad:4e:c6: af:72:d6:63:5d:8a:c8:19:7c:ac:cc:72:da:eb:86: cf:5e:50:ae:b0:b0:b0:11:89:8b:74:42:c3:6f:d1: fd:8b:92:e7:bb:1f:83:98:70:3e:45:71:13:4c:14: b5:3b:43:28:e0:99:2e:da:bf:14:de:00:9f:47:65: 22:c3:f5:b0:85:53:94:10:6e:37:97:27:2d:7f:34: 79:c2:5b:e2:b5:f4:2a:4a:e7:64:c7:23:47:f4:97: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3D:59:34:27:6B:C0:02:0F:9E:F3:AA:55:86:2A:79:70:E1:A1:BF X509v3 Authority Key Identifier: keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8d:db:bb:d3:8c:65:34:7e:52:ed:35:7f:66:bc:48:94:fe: e2:58:dd:10:bb:13:87:8f:d3:d4:8c:ca:89:c4:82:df:cc:01: 0f:09:e3:45:a1:b5:f4:29:3e:8f:4b:24:7c:9d:28:2b:44:d0: 99:d2:47:f5:76:95:f3:e4:e0:85:ed:e3:4f:9b:cb:ba:fd:84: d3:8b:d6:58:a2:91:cc:61:7a:47:e6:ec:9d:d3:14:73:22:27: d8:c5:c2:0a:39:a8:5d:4c:71:6a:8a:6b:38:75:c3:07:5d:e7: 8c:1d:cc:22:7f:00:e7:fc:7a:e0:a2:81:e8:af:2d:7c:02:66: 0b:8d:ea:80:56:99:d6:9c:2b:cc:dc:0c:2a:49:fa:53:6b:ed: 58:11:76:ed:36:06:49:c5:95:e1:18:99:66:75:21:27:97:c5: 4a:c8:04:d7:fb:6b:ea:2e:df:42:9c:26:a7:b6:51:7f:c3:c7: ed:16:86:fc:56:6a:0d:a1:3b:89:77:c2:2d:a0:e5:e3:2e:67: 56:f0:0a:df:1a:e5:00:42:df:42:cf:ef:98:76:1f:a8:b4:4d: 4b:a0:6c:b4:63:f2:57:de:d6:18:ef:86:45:96:d0:bc:f1:3f: e5:02:3e:68:24:51:b9:6b:52:d8:e4:86:61:04:02:bf:fb:96: e5:ef:62:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAQbgMBYRYCyH1j4bJNfhzO7zVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNEQzJG OTI2RkI3RjAeFw0yNjA1MTIyMjA1MjNaFw0yNjA1MTQwMDUzMjNaMDMxMTAvBgNV BAMTKDhGM0Q1OTM0Mjc2QkMwMDIwRjlFRjNBQTU1ODYyQTc5NzBFMUExQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhBT/G+qrV4UQWJcpHLOZkKpv hZfOovYSODrx9roGd+730ltGi8N6VQNrxe5/J6kQGuQZaDvL8AD4cqCU+31WAqqj eXBmHYxtoOGfeynrAnAxG/D6EYtnBKHiHvqFjEp1GPnMivs3+DkS+s83hbc/QMqx IivjDjRFst3E49SGf9IdlF+HEDymdPYjCGkOZ2F4DIuPpxhgV8e977KSp6eF5a1O xq9y1mNdisgZfKzMctrrhs9eUK6wsLARiYt0QsNv0f2Lkue7H4OYcD5FcRNMFLU7 QyjgmS7avxTeAJ9HZSLD9bCFU5QQbjeXJy1/NHnCW+K19CpK52THI0f0l2FNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjz1ZNCdrwAIPnvOqVYYqeXDhob8wHwYDVR0j BBgwFoAUYwkJG499SmroxqEWhdg9wvkm+38wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU0NmUwOWEtYzAwNy00YjBjLTk0NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4 RjdENEE2QUU4QzZBMTE2ODVEODNEQzJGOTI2RkI3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MzA5MDkxQjhGN0Q0QTZBRThDNkExMTY4NUQ4M0RDMkY5MjZG QjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNE QzJGOTI2RkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKN27vTjGU0flLtNX9mvEiU/uJY3RC7E4eP 09SMyonEgt/MAQ8J40WhtfQpPo9LJHydKCtE0JnSR/V2lfPk4IXt40+by7r9hNOL 1liikcxhekfm7J3TFHMiJ9jFwgo5qF1McWqKazh1wwdd54wdzCJ/AOf8euCigeiv LXwCZguN6oBWmdacK8zcDCpJ+lNr7VgRdu02BknFleEYmWZ1ISeXxUrIBNf7a+ou 30KcJqe2UX/Dx+0WhvxWag2hO4l3wi2g5eMuZ1bwCt8a5QBC30LP75h2H6i0TUug bLRj8lfe1hjvhkWW0LzxP+UCPmgkUblrUtjkhmEEAr/7luXvYv0= -----END CERTIFICATE-----Generated at Wed May 13 02:33:37 2026 by rpki-client