$ rpki-client -vvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: Np7vgxZL+PSxa8vm3z+gFX+5nPogWxaatgukGKRUJ+A= Subject key identifier: A2:FA:86:1E:8E:0A:1B:91:1E:A9:06:A2:27:AD:74:27:E7:12:52:BC Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 480DBBA8EC6E8C747A4E04350F9DD7C0003C6578 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:13:49 +0000 Manifest this update: Thu 23 Jul 2026 11:08:49 +0000 Manifest next update: Fri 24 Jul 2026 13:04:49 +0000 Files and hashes: 1: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) 2: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: /T1+M+NpHD9Wdk1eY9Ja5kPGeLTbEr/0+Lj/yjaPODI=) 3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0d:bb:a8:ec:6e:8c:74:7a:4e:04:35:0f:9d:d7:c0:00:3c:65:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: Jul 23 11:08:49 2026 GMT Not After : Jul 24 13:04:49 2026 GMT Subject: CN=A2FA861E8E0A1B911EA906A227AD7427E71252BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:8b:b9:d9:3f:66:46:62:da:a6:c2:7c:7c: 1b:55:90:23:1a:e1:35:64:23:f9:61:98:d3:e3:4f: dd:ed:9f:4a:67:d5:ce:aa:fa:fd:0c:3f:36:bf:50: 74:29:2c:d6:26:de:a2:fb:ed:46:18:46:c0:ea:e5: f0:57:89:6d:a1:bc:7e:18:57:28:90:4c:0b:f2:6d: 11:32:98:f7:f6:64:43:e4:94:a7:7b:68:c6:fd:0c: a2:c0:d8:f4:50:93:58:dc:87:fb:4d:a7:f0:23:6b: 14:98:31:f7:c4:5c:c6:72:6c:b1:b7:c8:3c:73:f0: ec:70:db:9d:89:da:15:8f:3e:2c:e1:1e:17:71:54: c9:40:4d:90:e7:c3:80:18:42:bb:dd:af:55:78:f4: 5b:29:46:00:bc:25:65:12:7c:a2:6b:d0:43:4b:11: fd:4b:9f:1f:46:2c:b4:d0:54:4f:7e:4c:2b:33:1a: 6e:8d:12:bf:25:5c:a7:fc:9e:25:d8:a2:13:02:8b: 73:34:a9:72:9c:ac:5a:ae:7e:36:31:19:21:3f:e7: b6:fb:b4:ba:eb:bb:1c:7a:9d:29:17:a3:fb:18:4a: 6f:56:66:73:f4:4b:6e:38:87:8c:9c:36:59:3f:9d: f9:41:f6:ae:ed:6b:90:a9:02:7b:76:66:e8:37:74: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:86:1E:8E:0A:1B:91:1E:A9:06:A2:27:AD:74:27:E7:12:52:BC X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1e:2d:b3:f5:f0:54:69:39:4c:52:9f:4f:9d:1f:f9:f6:5d: c7:ae:1c:5b:e0:9f:67:e1:b9:ab:fe:22:46:d6:67:66:eb:a2: 76:06:96:e3:59:d1:45:79:42:ad:93:bc:0b:76:8d:b8:ee:2a: 56:b4:1a:83:c3:dc:97:3b:12:03:2d:b2:56:94:cc:c9:9a:3f: 40:ee:3c:cc:b6:cf:6c:58:92:42:a1:f0:eb:48:74:5d:73:17: d1:b0:b2:fe:6f:6c:ca:0b:fa:30:9a:20:37:21:2a:9b:b1:5e: 9c:a8:72:bd:30:80:fb:b0:a7:38:72:6e:78:0b:41:ba:96:d7: f0:1b:cf:72:ff:60:66:8e:c6:6c:6e:a8:96:e1:d7:27:ba:6d: 85:39:80:4f:b6:6e:48:39:69:d4:6f:b5:06:e0:b6:19:68:36: 73:4d:f9:82:a5:d6:75:27:15:2a:93:bb:cf:63:6b:c8:b6:07: 66:8a:62:80:64:92:00:62:05:b7:bf:ec:ac:68:d1:25:ed:a3: 8c:cc:ef:26:6b:ee:81:f8:be:ec:4d:16:2f:73:b2:4f:82:3e: 6c:d5:8a:d9:88:fb:bc:e5:c1:1d:b0:28:31:15:ba:0e:ab:e9: fa:89:bf:36:5e:0d:ae:f9:c7:cd:2c:0b:b3:61:86:0a:ac:f8: 52:5d:2d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSA27qOxujHR6TgQ1D53XwAA8ZXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA3MjMxMTA4NDlaFw0yNjA3MjQxMzA0NDlaMDMxMTAvBgNV BAMTKEEyRkE4NjFFOEUwQTFCOTExRUE5MDZBMjI3QUQ3NDI3RTcxMjUyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFou52T9mRmLapsJ8fBtVkCMa 4TVkI/lhmNPjT93tn0pn1c6q+v0MPza/UHQpLNYm3qL77UYYRsDq5fBXiW2hvH4Y VyiQTAvybREymPf2ZEPklKd7aMb9DKLA2PRQk1jch/tNp/AjaxSYMffEXMZybLG3 yDxz8Oxw252J2hWPPizhHhdxVMlATZDnw4AYQrvdr1V49FspRgC8JWUSfKJr0ENL Ef1Lnx9GLLTQVE9+TCszGm6NEr8lXKf8niXYohMCi3M0qXKcrFqufjYxGSE/57b7 tLrruxx6nSkXo/sYSm9WZnP0S244h4ycNlk/nflB9q7ta5CpAnt2Zug3dEV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUovqGHo4KG5EeqQaiJ610J+cSUrwwHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoeLbP18FRpOUxSn0+dH/n2XceuHFvgn2fh uav+IkbWZ2bronYGluNZ0UV5Qq2TvAt2jbjuKla0GoPD3Jc7EgMtslaUzMmaP0Du PMy2z2xYkkKh8OtIdF1zF9Gwsv5vbMoL+jCaIDchKpuxXpyocr0wgPuwpzhybngL QbqW1/Abz3L/YGaOxmxuqJbh1ye6bYU5gE+2bkg5adRvtQbgthloNnNN+YKl1nUn FSqTu89ja8i2B2aKYoBkkgBiBbe/7Kxo0SXto4zM7yZr7oH4vuxNFi9zsk+CPmzV itmI+7zlwR2wKDEVug6r6fqJvzZeDa75x80sC7Nhhgqs+FJdLaU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:28:05 2026 by rpki-client