$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: muIXIc1/e5oFwtZltuxFe/dqKa+eYPUfaXviRNeKtWM= Subject key identifier: A9:14:E1:81:56:10:FA:2F:34:E8:E8:F4:ED:45:FA:72:B1:09:50:9C Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 318E02C144918A04D6C9544FB7C0A0E22722A881 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:46 +0000 Manifest this update: Tue 12 May 2026 16:05:46 +0000 Manifest next update: Wed 13 May 2026 19:05:46 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) 2: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: bJ1o4asR0RCMYl4GKWXZF7HLKBwIBQ/Ivjniz90fiyY=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8e:02:c1:44:91:8a:04:d6:c9:54:4f:b7:c0:a0:e2:27:22:a8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: May 12 16:05:46 2026 GMT Not After : May 13 19:05:46 2026 GMT Subject: CN=A914E1815610FA2F34E8E8F4ED45FA72B109509C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bd:e4:c2:92:aa:20:fb:90:11:eb:9f:1a:6b: 08:5b:12:9a:16:3f:05:f1:6f:3a:c4:78:e4:8c:91: 16:6e:00:6e:49:ff:c1:85:91:26:f3:cb:41:0d:02: 81:50:f9:e0:a3:9d:dc:01:0e:ff:b0:66:e4:ad:89: 49:d5:a7:d5:c4:23:7f:28:12:9d:24:e0:99:4c:c1: 8a:73:2d:d3:35:33:23:a8:8b:ab:50:a4:f3:37:b0: f6:22:e4:8c:42:a4:85:0d:a1:7b:4f:e2:dd:f0:31: 4f:6f:73:01:87:8c:f3:85:ca:24:cf:c5:f7:60:5c: 03:42:78:a3:71:2b:b8:d4:a1:b4:0c:ca:63:f0:df: d4:67:a5:79:48:ca:e2:17:ca:d3:57:53:39:ab:b0: ad:49:4f:ac:5e:95:99:19:ee:bb:78:d6:b1:1b:da: 97:b0:26:3c:7c:83:79:c1:bd:06:5d:fb:08:d3:16: a8:d0:97:f4:2a:bf:eb:29:2b:ff:f3:f5:88:2a:a6: 9f:ad:08:a4:66:8f:9d:2c:83:78:66:af:94:83:af: 2d:51:36:0c:fc:b6:8e:77:c6:7f:c8:f1:77:b1:5a: 6c:ac:7e:98:6c:ab:d7:c3:c4:29:4c:25:c1:56:c3: 33:93:c5:36:b4:22:df:08:33:bb:4d:e8:43:f9:35: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:E1:81:56:10:FA:2F:34:E8:E8:F4:ED:45:FA:72:B1:09:50:9C X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:64:90:1d:99:9c:67:3c:8b:b0:83:58:21:0a:89:4e:93:6f: de:f6:d2:8f:b2:bf:7c:41:cd:90:79:aa:24:99:6d:4c:7b:f6: 57:8b:48:94:0b:3d:b4:e3:98:7c:2c:e9:ba:7c:8c:eb:42:da: 03:f8:89:4d:bd:56:b0:71:15:d4:c8:80:62:06:dc:c5:55:7d: 48:6d:e0:b8:d8:fd:65:88:f4:d0:80:18:36:3c:74:cd:98:88: 1d:ec:1b:21:56:e4:48:20:c1:ca:a5:34:e6:23:4b:bb:9d:11: 5f:10:85:62:bc:a0:27:5f:8f:fe:93:d7:f8:8b:af:3e:b9:3d: 75:6d:f4:86:ab:b7:f8:a1:50:e1:92:55:56:cf:c1:b3:45:8e: b1:d1:1a:df:7d:ea:9f:f2:45:a1:7d:53:ae:ce:8c:1a:51:56: 0a:9f:f9:51:fd:f2:8f:04:89:78:f7:d2:37:a0:1e:72:68:f9: 54:13:34:55:c0:3b:4e:40:31:82:39:41:03:2e:3b:12:a0:b6: e9:76:1d:66:ab:36:3b:c1:92:94:d0:f2:68:a4:09:13:a1:1a: 79:ff:d1:d6:44:c5:bf:8e:f2:78:83:95:38:ee:0c:b3:97:71: 77:c6:21:30:4e:3b:b7:dc:da:35:d0:ac:ef:5b:6d:2a:d6:42: 27:fc:1b:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMY4CwUSRigTWyVRPt8Cg4iciqIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjA1MTIxNjA1NDZaFw0yNjA1MTMxOTA1NDZaMDMxMTAvBgNV BAMTKEE5MTRFMTgxNTYxMEZBMkYzNEU4RThGNEVENDVGQTcyQjEwOTUwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkveTCkqog+5AR658aawhbEpoW PwXxbzrEeOSMkRZuAG5J/8GFkSbzy0ENAoFQ+eCjndwBDv+wZuStiUnVp9XEI38o Ep0k4JlMwYpzLdM1MyOoi6tQpPM3sPYi5IxCpIUNoXtP4t3wMU9vcwGHjPOFyiTP xfdgXANCeKNxK7jUobQMymPw39RnpXlIyuIXytNXUzmrsK1JT6xelZkZ7rt41rEb 2pewJjx8g3nBvQZd+wjTFqjQl/Qqv+spK//z9Ygqpp+tCKRmj50sg3hmr5SDry1R Ngz8to53xn/I8XexWmysfphsq9fDxClMJcFWwzOTxTa0It8IM7tN6EP5NTChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqRThgVYQ+i806Oj07UX6crEJUJwwHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhkkB2ZnGc8i7CDWCEKiU6Tb9720o+yv3xB zZB5qiSZbUx79leLSJQLPbTjmHws6bp8jOtC2gP4iU29VrBxFdTIgGIG3MVVfUht 4LjY/WWI9NCAGDY8dM2YiB3sGyFW5EggwcqlNOYjS7udEV8QhWK8oCdfj/6T1/iL rz65PXVt9Iart/ihUOGSVVbPwbNFjrHRGt996p/yRaF9U67OjBpRVgqf+VH98o8E iXj30jegHnJo+VQTNFXAO05AMYI5QQMuOxKgtul2HWarNjvBkpTQ8mikCROhGnn/ 0dZExb+O8niDlTjuDLOXcXfGITBOO7fc2jXQrO9bbSrWQif8G4U= -----END CERTIFICATE-----Generated at Tue May 12 22:49:42 2026 by rpki-client