$ rpki-client -vvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: +fugaZqlq9vEzhe0CRyyE+2RLqwBLKTp0TaqfhS9O9A= Subject key identifier: 4D:A3:B9:48:37:13:D4:E4:D3:2B:06:4D:E4:44:E8:92:5B:AF:4B:E4 Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 6BE0CC57675C9CF669B5053241962D1AAC19E70A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:05:44 +0000 Manifest this update: Fri 24 Jul 2026 05:00:44 +0000 Manifest next update: Sat 25 Jul 2026 05:23:44 +0000 Files and hashes: 1: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: NAVtDCEUo9ftLBbMgK1QmJ4defwwUozLQ2/w6ucmuL8=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) 3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e0:cc:57:67:5c:9c:f6:69:b5:05:32:41:96:2d:1a:ac:19:e7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: Jul 24 05:00:44 2026 GMT Not After : Jul 25 05:23:44 2026 GMT Subject: CN=4DA3B9483713D4E4D32B064DE444E8925BAF4BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:28:d0:89:60:2a:1b:64:d0:f6:d7:d7:07:8e: f9:04:29:a0:7f:2e:54:01:4c:5d:43:e4:f3:47:3f: 56:a5:59:6c:47:54:a2:1f:08:73:1b:d4:55:39:3c: 6c:21:94:49:7e:c5:0a:0f:84:63:4d:59:d6:19:d2: 16:0c:73:e6:a8:41:a5:d3:41:c4:6a:bf:0b:7b:7c: f7:23:04:a1:9b:a6:f7:5d:12:8e:b9:65:0e:85:66: e6:96:0a:76:cf:95:15:12:b9:9c:5e:d7:a6:ec:53: a5:15:af:5c:08:e2:45:1e:9c:a5:b9:c1:ce:2c:9b: 47:7e:35:4d:14:f8:c8:2d:7d:05:d7:6e:fa:2c:b2: 92:f5:41:ab:2e:54:aa:77:9d:e5:ab:37:fe:70:1e: f4:bc:59:dd:a4:54:03:d0:94:e7:89:8f:93:9a:2d: a3:ef:20:e1:df:53:7b:f0:74:61:56:b1:ae:67:05: 9d:6f:08:00:95:fe:1a:7f:86:f5:1b:12:58:4c:66: 77:c9:7c:51:c5:8b:60:f7:6e:c0:a3:36:54:82:38: 3f:6c:1b:00:35:b2:60:4d:ee:27:dd:74:b7:f3:ef: 6a:a3:69:ec:42:dd:39:2c:50:f2:c3:85:38:1b:08: b1:76:b7:1d:88:4a:cc:3a:28:b1:28:eb:66:95:d5: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A3:B9:48:37:13:D4:E4:D3:2B:06:4D:E4:44:E8:92:5B:AF:4B:E4 X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:17:8c:b9:f7:d1:fc:cf:43:55:39:35:68:66:0f:71:ae:43: 6c:cc:43:fb:43:03:ef:31:f9:2c:da:fb:59:db:10:eb:bd:a8: 70:c9:e3:2c:dc:78:83:fe:36:ce:1a:ce:8d:7d:d8:d0:16:29: d9:35:c1:79:53:29:10:54:53:1d:ea:8e:6e:6b:be:e2:53:28: 98:56:80:22:c9:d7:2c:f3:6f:f5:2a:d1:9f:d6:e8:0f:13:9d: 20:30:7e:59:a1:fd:3b:dc:0f:e4:51:44:2e:01:02:4d:d1:25: 94:6c:6a:f2:a1:35:e0:f8:53:dc:f6:1c:8d:82:19:5d:11:6c: 1c:2e:06:a2:25:f1:c0:1a:cf:61:08:88:11:d7:bc:db:01:21: 1a:78:ee:53:96:58:b2:6d:a3:0a:fc:a0:3f:4b:06:ae:9e:e4: 77:54:64:4b:2c:59:ad:bb:6b:af:1c:4b:f8:89:5f:16:92:89: 60:ff:40:15:90:fc:d9:21:52:34:c1:ce:3f:e7:97:49:27:fb: 12:bc:e8:87:a5:22:23:c5:70:83:6f:e8:d3:66:45:45:c7:16: c6:30:92:95:b8:32:42:28:47:f9:52:74:89:43:3c:57:d4:cf: 1f:57:a4:3a:54:0a:55:ed:4d:4f:0c:3d:5e:27:12:f4:c9:5d: 56:16:07:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+DMV2dcnPZptQUyQZYtGqwZ5wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA3MjQwNTAwNDRaFw0yNjA3MjUwNTIzNDRaMDMxMTAvBgNV BAMTKDREQTNCOTQ4MzcxM0Q0RTREMzJCMDY0REU0NDRFODkyNUJBRjRCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKNCJYCobZND219cHjvkEKaB/ LlQBTF1D5PNHP1alWWxHVKIfCHMb1FU5PGwhlEl+xQoPhGNNWdYZ0hYMc+aoQaXT QcRqvwt7fPcjBKGbpvddEo65ZQ6FZuaWCnbPlRUSuZxe16bsU6UVr1wI4kUenKW5 wc4sm0d+NU0U+MgtfQXXbvosspL1QasuVKp3neWrN/5wHvS8Wd2kVAPQlOeJj5Oa LaPvIOHfU3vwdGFWsa5nBZ1vCACV/hp/hvUbElhMZnfJfFHFi2D3bsCjNlSCOD9s GwA1smBN7ifddLfz72qjaexC3TksUPLDhTgbCLF2tx2ISsw6KLEo62aV1fxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTaO5SDcT1OTTKwZN5ETokluvS+QwHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQXjLn30fzPQ1U5NWhmD3GuQ2zMQ/tDA+8x +Sza+1nbEOu9qHDJ4yzceIP+Ns4azo192NAWKdk1wXlTKRBUUx3qjm5rvuJTKJhW gCLJ1yzzb/Uq0Z/W6A8TnSAwflmh/TvcD+RRRC4BAk3RJZRsavKhNeD4U9z2HI2C GV0RbBwuBqIl8cAaz2EIiBHXvNsBIRp47lOWWLJtowr8oD9LBq6e5HdUZEssWa27 a68cS/iJXxaSiWD/QBWQ/NkhUjTBzj/nl0kn+xK86IelIiPFcINv6NNmRUXHFsYw kpW4MkIoR/lSdIlDPFfUzx9XpDpUClXtTU8MPV4nEvTJXVYWBzI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:08:44 2026 by rpki-client