$ rpki-client -vvf rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft File: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft (raw, json) Hash identifier: 3vq+Cx0h/sv/SWoJqlXsQwfxwWX05VRP0wL92dCbxVA= Subject key identifier: 8B:6F:A4:81:F6:33:E4:B3:DB:6F:83:41:5E:79:DE:B2:D8:35:BA:6A Authority key identifier: 00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 Certificate issuer: /CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Certificate serial: 5BCCD86F0DE5AABA2B199D866B6E332891871E67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:40:06 +0000 Manifest this update: Tue 12 May 2026 08:35:06 +0000 Manifest next update: Wed 13 May 2026 11:49:06 +0000 Files and hashes: 1: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl (hash: 67uozBbu65a32o9hvJFu9Ej1Yx09Vn1RTPmZ22Izhyo=) 2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: Q/80xzITob9EDyGUauN9lSkFfskt31UxgEkyUCmZLOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cc:d8:6f:0d:e5:aa:ba:2b:19:9d:86:6b:6e:33:28:91:87:1e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Validity Not Before: May 12 08:35:06 2026 GMT Not After : May 13 11:49:06 2026 GMT Subject: CN=8B6FA481F633E4B3DB6F83415E79DEB2D835BA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:ef:98:6c:46:e7:3c:fa:5e:6a:3c:9c:63: d1:d0:90:4e:e8:31:61:0d:2f:c1:ea:80:92:f8:e3: 34:e9:e0:ae:ce:89:a1:a2:ba:93:20:58:44:0a:7f: 1e:e5:fc:d1:30:ea:53:1b:ca:d5:4f:00:92:da:1b: 77:24:84:e0:b8:79:1d:3f:71:ec:8c:47:6b:e1:71: 29:39:01:c0:7d:e1:5d:30:a6:2a:8e:81:f5:1f:51: 7c:29:f0:dd:47:1c:9c:18:52:91:ee:0a:39:ce:af: 80:bd:11:b5:60:9d:fb:2b:8b:ac:9e:18:85:76:44: 3b:d6:2d:d6:a1:f4:9f:f5:ff:8e:22:a5:42:a5:4d: b6:76:e1:1b:f4:d4:57:28:1d:f2:f2:da:fd:bb:ba: 29:72:12:97:d3:fa:fc:d8:aa:5a:bd:74:6a:c5:fb: 45:9b:57:e5:e4:11:d0:4e:8b:47:f3:bb:c9:69:2d: 27:c8:c3:e6:18:d4:27:fa:c7:ee:3b:f4:55:78:05: 91:f7:f7:dd:ab:cf:9b:01:d0:a6:b0:52:13:7a:9c: 15:7f:9d:07:a0:99:71:c2:ff:50:60:f1:b9:6d:ba: 4f:d8:79:5c:fd:25:73:cb:48:aa:08:1e:ae:11:32: 64:9b:68:3d:b2:7c:c5:11:4a:80:61:a3:e2:45:e8: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6F:A4:81:F6:33:E4:B3:DB:6F:83:41:5E:79:DE:B2:D8:35:BA:6A X509v3 Authority Key Identifier: keyid:00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ae:ed:87:12:07:47:dc:18:03:da:7f:78:02:fe:4a:ff:18: e5:a7:0e:ba:27:d0:9b:99:74:bb:a1:7e:72:2e:59:27:ea:cb: 54:4d:3d:60:e9:52:a7:b1:c4:0c:ab:89:85:67:cf:e9:d2:48: c9:e1:d2:c3:0a:64:ea:9d:68:93:40:a1:f4:a4:f6:27:01:8f: 11:80:e9:1f:68:36:a8:24:3f:55:56:24:98:e2:85:71:fa:ec: 05:62:37:5d:75:5a:48:6d:d1:e7:27:27:5d:7e:12:e9:93:1c: b6:1e:5f:47:78:44:8a:5f:6a:c5:55:16:68:7c:e5:10:d6:bb: eb:68:c1:4d:ce:b4:c4:5f:ef:35:2b:87:5f:c6:fe:01:b4:87: f8:ee:8c:3e:2d:57:4e:c7:49:4f:a6:71:14:08:48:2a:3a:5b: f8:ae:db:24:d5:44:59:22:f0:84:bc:96:2b:b9:8c:94:12:19: 75:4a:00:d5:67:a2:70:7d:5a:4d:d3:f2:43:69:53:da:fa:4f: c4:a3:72:d6:81:d3:f2:1a:d8:02:d4:d6:00:cd:60:49:b0:cc: 97:8e:01:e4:f2:ec:9f:33:26:99:1f:78:2b:b5:a3:29:1c:2c: 3f:16:f2:79:12:16:e4:d9:cf:41:8c:53:6b:f2:31:01:2b:e8: 3e:ab:a2:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8zYbw3lqrorGZ2Ga24zKJGHHmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBB MkY0RDlFODAeFw0yNjA1MTIwODM1MDZaFw0yNjA1MTMxMTQ5MDZaMDMxMTAvBgNV BAMTKDhCNkZBNDgxRjYzM0U0QjNEQjZGODM0MTVFNzlERUIyRDgzNUJBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEie+YbEbnPPpeajycY9HQkE7o MWENL8HqgJL44zTp4K7OiaGiupMgWEQKfx7l/NEw6lMbytVPAJLaG3ckhOC4eR0/ ceyMR2vhcSk5AcB94V0wpiqOgfUfUXwp8N1HHJwYUpHuCjnOr4C9EbVgnfsri6ye GIV2RDvWLdah9J/1/44ipUKlTbZ24Rv01FcoHfLy2v27uilyEpfT+vzYqlq9dGrF +0WbV+XkEdBOi0fzu8lpLSfIw+YY1Cf6x+479FV4BZH3992rz5sB0KawUhN6nBV/ nQegmXHC/1Bg8bltuk/YeVz9JXPLSKoIHq4RMmSbaD2yfMURSoBho+JF6NyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi2+kgfYz5LPbb4NBXnnestg1umowHwYDVR0j BBgwFoAUAGuOhbb865lK0Aum5k6vIKL02egwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM3NTA2YzUtNWVmMS00Mjk0LTg5MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVC NkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBBMkY0RDlFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDZCOEU4NUI2RkNFQjk5NEFEMDBCQTZFNjRFQUYyMEEyRjRE OUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFG MjBBMkY0RDlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGu7YcSB0fcGAPaf3gC/kr/GOWnDron0JuZ dLuhfnIuWSfqy1RNPWDpUqexxAyriYVnz+nSSMnh0sMKZOqdaJNAofSk9icBjxGA 6R9oNqgkP1VWJJjihXH67AViN111Wkht0ecnJ11+EumTHLYeX0d4RIpfasVVFmh8 5RDWu+towU3OtMRf7zUrh1/G/gG0h/jujD4tV07HSU+mcRQISCo6W/iu2yTVRFki 8IS8liu5jJQSGXVKANVnonB9Wk3T8kNpU9r6T8SjctaB0/Ia2ALU1gDNYEmwzJeO AeTy7J8zJpkfeCu1oykcLD8W8nkSFuTZz0GMU2vyMQEr6D6rolU= -----END CERTIFICATE-----Generated at Wed May 13 02:51:09 2026 by rpki-client