$ rpki-client -vvf rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft File: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft (raw, json) Hash identifier: 5TvREWyFJt2BDObl6C9CdKAT1dyxcMngjENdzk3v+Wc= Subject key identifier: D6:5C:59:BC:F6:62:D7:DB:5C:B9:24:C6:42:E8:59:B3:36:18:54:32 Authority key identifier: 6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF Certificate issuer: /CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Certificate serial: 702CD4E1A99D1A2DEEDA62A3AA204ED7B4B92150 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:23:45 +0000 Manifest this update: Tue 12 May 2026 18:18:45 +0000 Manifest next update: Wed 13 May 2026 20:18:45 +0000 Files and hashes: 1: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl (hash: BZ9EbjbYmq0YY539anj6i3Wa9rKHXI74scIYu8t/HD4=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: 8mfpAqlBNjaIkK/YqdqwM4IvfsvZ409bkNBx3HDJzaQ=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: yRu2jjYmsdVB4YWUV1S9avXrEbZsjqsyyjcuTEPOAYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2c:d4:e1:a9:9d:1a:2d:ee:da:62:a3:aa:20:4e:d7:b4:b9:21:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Validity Not Before: May 12 18:18:45 2026 GMT Not After : May 13 20:18:45 2026 GMT Subject: CN=D65C59BCF662D7DB5CB924C642E859B336185432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:62:bb:7b:a2:8d:0e:16:00:c0:06:be:6a: e8:22:9a:52:c4:02:23:9e:9f:34:75:d3:be:2a:06: 59:d3:b3:e8:f4:de:04:c3:3d:b0:eb:61:97:77:65: 4a:35:84:ad:c2:c8:eb:be:d8:3c:09:2f:0a:c4:16: 7a:33:0e:b3:4e:56:b6:55:63:f2:55:24:1c:d3:13: 86:1d:bf:52:44:64:34:2a:66:fd:06:e9:6a:7f:4f: c1:44:e8:e6:29:4c:1e:9c:b4:80:66:6a:4d:27:3e: d4:66:f0:83:8e:63:f1:2f:70:2e:33:27:41:f4:d9: b0:3e:0e:81:b5:bd:ef:0b:17:85:0d:ad:b0:56:97: 8f:97:dc:ca:19:79:ef:ca:ac:19:b8:d7:7d:a1:2f: e9:e1:10:a1:15:3e:2f:e0:97:90:0c:3c:bf:a6:94: 3a:b2:b2:5a:ac:bc:49:a3:cc:14:a0:58:f4:49:0e: eb:d1:c3:55:de:cf:f8:de:9e:3c:b3:74:8b:41:72: c0:bf:e8:51:ac:ce:32:32:4a:72:3a:9f:71:c7:16: e5:4c:27:9f:02:04:47:1b:ac:29:22:e4:06:bf:be: 07:31:6a:e3:79:f1:64:04:92:e8:4a:f2:e0:73:b2: 18:96:02:bc:b6:83:39:72:a0:89:53:cc:28:d7:5c: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5C:59:BC:F6:62:D7:DB:5C:B9:24:C6:42:E8:59:B3:36:18:54:32 X509v3 Authority Key Identifier: keyid:6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c4:b2:b0:52:47:b5:3e:99:5b:8c:90:a2:d9:21:58:ff:6b: 46:b9:cd:84:dc:ab:80:24:b9:d1:d5:1e:7b:e9:36:c3:0f:04: 60:c7:ef:dc:07:f7:c2:e0:9c:7b:07:e0:c7:c8:db:bc:46:3c: dc:e9:c5:4c:48:52:5c:90:35:84:26:5a:d6:bc:c5:0a:67:da: 4f:ce:75:91:99:e3:30:e4:fc:8a:19:84:39:7b:44:82:43:b1: 50:c8:a0:07:33:ac:cd:98:9d:ee:cf:7f:dd:8c:0b:ca:61:a3: 1d:25:2e:ad:ac:b2:4f:fc:bd:3c:7f:66:92:34:2d:fd:35:52: b5:9a:a8:72:24:40:03:18:0f:70:0d:28:8a:8f:b7:ea:ff:fa: 9f:be:da:66:02:b3:40:4b:0b:6e:0e:50:2e:3f:ad:f5:1c:73: 10:48:90:04:54:52:b4:51:ba:c9:b8:08:09:78:47:98:b0:db: be:8b:76:61:8e:80:52:a5:06:1d:9c:97:18:5b:87:5f:97:ba: dd:79:9f:11:87:11:f7:a8:32:90:72:66:c2:48:2a:c4:0a:ac: 65:ab:46:f5:5a:27:61:f1:3e:86:65:0e:29:85:08:01:eb:77: 44:f4:bf:0e:1f:46:6e:55:ef:4c:99:17:c4:69:1b:e4:d4:9e: cc:5d:0c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCzU4amdGi3u2mKjqiBO17S5IVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdBQkVF ODNDMjdCRjAeFw0yNjA1MTIxODE4NDVaFw0yNjA1MTMyMDE4NDVaMDMxMTAvBgNV BAMTKEQ2NUM1OUJDRjY2MkQ3REI1Q0I5MjRDNjQyRTg1OUIzMzYxODU0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYWK7e6KNDhYAwAa+augimlLE AiOenzR1074qBlnTs+j03gTDPbDrYZd3ZUo1hK3CyOu+2DwJLwrEFnozDrNOVrZV Y/JVJBzTE4Ydv1JEZDQqZv0G6Wp/T8FE6OYpTB6ctIBmak0nPtRm8IOOY/EvcC4z J0H02bA+DoG1ve8LF4UNrbBWl4+X3MoZee/KrBm4132hL+nhEKEVPi/gl5AMPL+m lDqyslqsvEmjzBSgWPRJDuvRw1Xez/jenjyzdItBcsC/6FGszjIySnI6n3HHFuVM J58CBEcbrCki5Aa/vgcxauN58WQEkuhK8uBzshiWAry2gzlyoIlTzCjXXEzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lxZvPZi19tcuSTGQuhZszYYVDIwHwYDVR0j BBgwFoAUbIn2+ealGHvhCFRTgH96vug8J78wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ZlMzVmYWEtZWQyYi00MjcxLWI0OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlF NkE1MTg3QkUxMDg1NDUzODA3RjdBQkVFODNDMjdCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Qzg5RjZGOUU2QTUxODdCRTEwODU0NTM4MDdGN0FCRUU4M0My N0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdB QkVFODNDMjdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHEsrBSR7U+mVuMkKLZIVj/a0a5zYTcq4Ak udHVHnvpNsMPBGDH79wH98LgnHsH4MfI27xGPNzpxUxIUlyQNYQmWta8xQpn2k/O dZGZ4zDk/IoZhDl7RIJDsVDIoAczrM2Yne7Pf92MC8phox0lLq2ssk/8vTx/ZpI0 Lf01UrWaqHIkQAMYD3ANKIqPt+r/+p++2mYCs0BLC24OUC4/rfUccxBIkARUUrRR usm4CAl4R5iw276LdmGOgFKlBh2clxhbh1+Xut15nxGHEfeoMpByZsJIKsQKrGWr RvVaJ2HxPoZlDimFCAHrd0T0vw4fRm5V70yZF8RpG+TUnsxdDJ8= -----END CERTIFICATE-----Generated at Tue May 12 22:49:53 2026 by rpki-client