$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft File: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft (raw, json) Hash identifier: kyhqFH6gmemWDQFZa+Dwzgmrj1USual9D/7+Gl8mTH8= Subject key identifier: 67:36:78:0F:79:8D:BA:E3:81:93:86:0A:E2:73:FF:C0:6E:61:C6:E6 Authority key identifier: B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 Certificate issuer: /CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Certificate serial: 6E366B72D5BAF8139E144868BE3607A8216C96E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:55 +0000 Manifest this update: Tue 12 May 2026 20:06:55 +0000 Manifest next update: Wed 13 May 2026 21:31:55 +0000 Files and hashes: 1: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl (hash: XpMsECOCHn8ZA42rBMNQs6eSRYWjZT47yNMHYdXkfJ8=) 2: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: XBc3ZVVKXIlCbURfHv+y5tJpz8Y5k76pERxRfF4D1As=) 3: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: v0xv6ts8xNGmfAQ65ctkAG3Fqvb6dUvN83XOnaYe2GA=) 4: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 8e9FrxOA/xN95Yot7Ymznk0AodzlekAylsbbF3Artc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:36:6b:72:d5:ba:f8:13:9e:14:48:68:be:36:07:a8:21:6c:96:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Validity Not Before: May 12 20:06:55 2026 GMT Not After : May 13 21:31:55 2026 GMT Subject: CN=6736780F798DBAE38193860AE273FFC06E61C6E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:28:d7:25:b0:67:d8:73:c2:2f:ed:2a:32: b9:24:40:89:a3:63:e6:9e:5a:9c:eb:c4:fa:5a:8a: 43:10:80:1f:51:85:2c:00:cc:71:00:9a:a5:82:44: 11:e5:f6:44:93:69:fc:37:41:07:2f:2c:32:4a:ff: 33:a3:79:43:ef:97:1c:ad:28:75:15:ce:44:84:b1: a4:04:2f:08:a5:a0:92:95:63:01:d8:7b:94:2f:db: 8d:ff:01:a1:40:dd:0d:52:21:23:63:6b:48:d6:0a: 8d:6e:b5:b0:ae:e1:d7:94:bc:6f:e4:b4:20:88:bd: fa:4d:d5:c2:0a:e4:6a:db:55:97:96:ec:1f:ad:a7: d4:4a:da:b6:27:ad:8f:71:51:10:cf:a6:81:0b:9a: e2:a8:d3:c7:9e:5b:e8:d9:2c:d3:b9:35:ad:2d:a8: a6:f5:3e:d6:e7:fb:14:6e:02:bd:c5:da:48:cc:a8: e7:06:6a:2b:62:bf:1c:bc:72:ab:17:57:a7:bb:2e: 56:41:c9:ea:2e:ba:4e:d8:48:0f:28:b3:90:a8:d6: c4:91:9f:ac:66:be:7c:fd:6d:81:da:e1:0a:e0:59: b0:ff:01:3d:9a:76:67:b6:48:a7:f1:04:18:ba:39: 12:41:81:68:3f:6e:a4:fe:b7:b8:d3:f5:dc:78:dc: bd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:36:78:0F:79:8D:BA:E3:81:93:86:0A:E2:73:FF:C0:6E:61:C6:E6 X509v3 Authority Key Identifier: keyid:B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b6:8e:51:7e:4d:54:68:bb:4d:a6:5f:10:de:4e:e4:c4:75: c1:7d:ec:00:f9:5d:57:86:c1:37:f2:59:fd:c9:45:2a:cb:bf: fa:1e:c7:ae:be:0e:f5:05:7d:fb:22:dc:86:74:12:ca:44:47: 8d:65:40:2a:ed:02:41:d5:aa:3d:d9:58:04:77:36:d9:37:75: 7c:55:52:5d:a6:00:ac:7e:96:97:b5:a7:59:3f:6e:18:91:48: dd:4f:f0:dd:77:c8:d0:f9:14:71:94:8e:f9:80:e0:09:95:19: b5:7d:7b:f4:3a:59:cd:84:5f:d8:49:64:3f:81:90:37:aa:cd: df:f0:bb:bd:d2:4b:4d:72:06:83:75:c7:46:22:93:9f:6a:48: 2c:71:b3:60:a1:b7:af:92:32:92:0c:23:d1:fe:38:19:fb:79: bb:4c:af:b3:16:59:cc:c7:6f:3b:c9:4d:8d:b7:66:3e:2f:f1: 32:d2:ad:46:0e:32:3e:ed:33:e9:0e:71:e5:04:b5:4d:06:4d: f9:9f:c8:7c:2b:cd:20:4c:f2:73:a2:5e:58:28:16:7e:84:cf: fd:55:a1:18:a7:70:c7:96:db:8d:6b:2e:49:98:03:cf:5a:e6: 9c:d3:6c:f9:a2:9b:74:53:c9:74:70:4e:dc:4a:71:47:0d:b0: ef:a0:2e:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjZrctW6+BOeFEhovjYHqCFsluYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5 NkIzMDEwODAeFw0yNjA1MTIyMDA2NTVaFw0yNjA1MTMyMTMxNTVaMDMxMTAvBgNV BAMTKDY3MzY3ODBGNzk4REJBRTM4MTkzODYwQUUyNzNGRkMwNkU2MUM2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46SjXJbBn2HPCL+0qMrkkQImj Y+aeWpzrxPpaikMQgB9RhSwAzHEAmqWCRBHl9kSTafw3QQcvLDJK/zOjeUPvlxyt KHUVzkSEsaQELwiloJKVYwHYe5Qv243/AaFA3Q1SISNja0jWCo1utbCu4deUvG/k tCCIvfpN1cIK5GrbVZeW7B+tp9RK2rYnrY9xURDPpoELmuKo08eeW+jZLNO5Na0t qKb1Ptbn+xRuAr3F2kjMqOcGaitivxy8cqsXV6e7LlZByeouuk7YSA8os5Co1sSR n6xmvnz9bYHa4QrgWbD/AT2adme2SKfxBBi6ORJBgWg/bqT+t7jT9dx43L1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzZ4D3mNuuOBk4YK4nP/wG5hxuYwHwYDVR0j BBgwFoAUtvgQ8ik8v9vD1vqpKIjpx5azAQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY2NTk5MDQtMzcwMi00Nzk3LWJkMWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIy OTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5NkIzMDEwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkY4MTBGMjI5M0NCRkRCQzNENkZBQTkyODg4RTlDNzk2QjMw MTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5 Qzc5NkIzMDEwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+2jlF+TVRou02mXxDeTuTEdcF97AD5XVeG wTfyWf3JRSrLv/oex66+DvUFffsi3IZ0EspER41lQCrtAkHVqj3ZWAR3Ntk3dXxV Ul2mAKx+lpe1p1k/bhiRSN1P8N13yND5FHGUjvmA4AmVGbV9e/Q6Wc2EX9hJZD+B kDeqzd/wu73SS01yBoN1x0Yik59qSCxxs2Cht6+SMpIMI9H+OBn7ebtMr7MWWczH bzvJTY23Zj4v8TLSrUYOMj7tM+kOceUEtU0GTfmfyHwrzSBM8nOiXlgoFn6Ez/1V oRincMeW241rLkmYA89a5pzTbPmim3RTyXRwTtxKcUcNsO+gLmc= -----END CERTIFICATE-----Generated at Wed May 13 04:19:07 2026 by rpki-client