$ rpki-client -vvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: VSV7ncVoMj5s75DvWk6aCu/laM4t309Se1UVLKuZwS8= Subject key identifier: 9F:29:9C:12:70:53:27:E1:AD:F0:65:C6:79:F7:FD:7E:14:01:EB:0C Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 1CA24E220D21B30BA21EF7B8F9A8161B544414DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:26 +0000 Manifest this update: Tue 12 May 2026 22:05:26 +0000 Manifest next update: Wed 13 May 2026 23:04:26 +0000 Files and hashes: 1: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: FwpP/2IvUlpM2ycRXUxmWCv1upK0Sn65WAm/iwbE1M0=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) 3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a2:4e:22:0d:21:b3:0b:a2:1e:f7:b8:f9:a8:16:1b:54:44:14:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: May 12 22:05:26 2026 GMT Not After : May 13 23:04:26 2026 GMT Subject: CN=9F299C12705327E1ADF065C679F7FD7E1401EB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:67:28:18:be:8d:81:26:17:45:a9:2c:1b: 11:04:6d:4f:ce:21:c8:cf:b4:d1:c9:de:73:53:4c: b6:74:47:e5:02:83:8a:a0:80:ef:33:1c:fb:48:6f: 89:1c:87:3a:7d:67:04:49:98:06:0a:59:78:74:46: 10:42:ef:75:59:9c:ba:2d:ac:a0:74:8a:9c:f7:dc: 1a:b1:1a:8b:e5:51:22:17:b9:d9:e6:95:84:6a:97: 0a:46:1a:3f:55:1c:63:03:00:90:36:d5:70:ed:63: 48:3b:4e:10:e4:19:f0:bb:73:e3:78:00:f3:23:d2: 9d:03:e0:4a:56:8f:86:e7:10:99:2f:23:f4:99:52: 23:ec:f5:97:a9:c2:b0:58:2c:be:15:74:c3:f8:a3: 20:d3:20:ac:39:10:94:df:cd:5c:08:19:75:66:14: 1f:d7:6f:90:87:87:ce:68:56:c1:83:07:36:4d:40: 02:bf:fd:9d:9c:bc:48:6b:d7:12:29:e5:03:e3:22: 9a:e6:37:82:0f:78:40:dd:c0:4d:ce:59:4e:6b:6b: 1b:de:b4:32:f5:3b:d1:3c:ec:b4:d9:36:42:2f:77: bf:4f:63:e6:83:65:64:df:a0:29:a8:93:40:a6:6f: f5:56:24:29:5b:a4:26:94:60:59:a0:85:41:13:ad: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:29:9C:12:70:53:27:E1:AD:F0:65:C6:79:F7:FD:7E:14:01:EB:0C X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8a:58:36:ec:8c:19:b3:42:95:04:05:30:6d:03:b4:dd:e8: 47:83:9b:d2:1d:e4:ad:a2:f1:01:6b:ff:a4:b6:bf:7e:64:17: 93:0d:eb:b6:2a:f6:1b:38:60:bc:b4:32:ad:88:e6:ec:38:9b: f6:75:b0:69:e8:fd:9f:12:28:49:c9:93:6b:4a:e3:38:67:f6: 09:fc:63:34:a7:59:a2:c1:d2:6d:a3:32:47:5e:de:4d:64:2a: e6:6a:89:0c:c1:f1:50:5e:99:36:53:c4:51:af:ea:a4:0a:86: da:c3:2b:1a:2d:65:81:be:d1:90:72:37:8e:a8:f2:83:06:c0: 6f:f2:52:c8:c4:eb:b4:56:3c:11:0e:47:45:9e:fe:9b:bd:a4: 04:d3:36:67:d6:67:9e:1f:64:89:eb:16:96:b9:47:9c:c9:df: 72:52:e0:b1:52:4a:f1:28:77:7b:a6:35:b7:a6:29:17:b3:ae: 6b:5d:04:69:72:db:d6:ef:13:f8:25:29:ab:a0:e1:39:a1:19: a0:97:e7:f4:8c:f9:5a:10:cb:6c:38:0a:c0:85:d9:63:d7:b4: 2d:72:1d:fa:ed:c0:8a:59:73:ce:0c:05:3d:08:de:f9:bb:d8: 4f:e6:7d:98:2a:0a:64:f0:6d:86:db:59:11:5a:3a:33:06:88: b0:a6:52:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKJOIg0hswuiHve4+agWG1REFN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA1MTIyMjA1MjZaFw0yNjA1MTMyMzA0MjZaMDMxMTAvBgNV BAMTKDlGMjk5QzEyNzA1MzI3RTFBREYwNjVDNjc5RjdGRDdFMTQwMUVCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVWcoGL6NgSYXRaksGxEEbU/O IcjPtNHJ3nNTTLZ0R+UCg4qggO8zHPtIb4kchzp9ZwRJmAYKWXh0RhBC73VZnLot rKB0ipz33BqxGovlUSIXudnmlYRqlwpGGj9VHGMDAJA21XDtY0g7ThDkGfC7c+N4 APMj0p0D4EpWj4bnEJkvI/SZUiPs9ZepwrBYLL4VdMP4oyDTIKw5EJTfzVwIGXVm FB/Xb5CHh85oVsGDBzZNQAK//Z2cvEhr1xIp5QPjIprmN4IPeEDdwE3OWU5raxve tDL1O9E87LTZNkIvd79PY+aDZWTfoCmok0Cmb/VWJClbpCaUYFmghUETrQtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnymcEnBTJ+Gt8GXGeff9fhQB6wwwHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyKWDbsjBmzQpUEBTBtA7Td6EeDm9Id5K2i 8QFr/6S2v35kF5MN67Yq9hs4YLy0Mq2I5uw4m/Z1sGno/Z8SKEnJk2tK4zhn9gn8 YzSnWaLB0m2jMkde3k1kKuZqiQzB8VBemTZTxFGv6qQKhtrDKxotZYG+0ZByN46o 8oMGwG/yUsjE67RWPBEOR0We/pu9pATTNmfWZ54fZInrFpa5R5zJ33JS4LFSSvEo d3umNbemKRezrmtdBGly29bvE/glKaug4TmhGaCX5/SM+VoQy2w4CsCF2WPXtC1y HfrtwIpZc84MBT0I3vm72E/mfZgqCmTwbYbbWRFaOjMGiLCmUhY= -----END CERTIFICATE-----Generated at Wed May 13 05:55:02 2026 by rpki-client