$ rpki-client -vvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft File: 06AAF713D939AC6C090B6343B6905318B83A1DE3.mft (raw, json) Hash identifier: zwn3CEGnEVAfdJBP10KkyMsI8qZfAxhIepewIQt9XBo= Subject key identifier: 9C:4C:F5:2B:F9:DC:C0:D1:76:31:0D:F9:11:BB:1F:7B:01:BE:4A:FF Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3 Certificate issuer: /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3 Certificate serial: 1739612F67A5BD050203F770A58B8AA8D69045B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:00:52 +0000 Manifest this update: Thu 23 Jul 2026 12:55:52 +0000 Manifest next update: Fri 24 Jul 2026 14:33:52 +0000 Files and hashes: 1: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=) 2: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: 4RQga7sC7v8Tfsu3sFFTumIkJvaZxGdgZNTnQPnNeyc=) 3: 06AAF713D939AC6C090B6343B6905318B83A1DE3.crl (hash: evPX9Z5KDX4cRGC32bd1VC+ll7t1CTg4zbLM/lfvj28=) 4: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:39:61:2f:67:a5:bd:05:02:03:f7:70:a5:8b:8a:a8:d6:90:45:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3 Validity Not Before: Jul 23 12:55:52 2026 GMT Not After : Jul 24 14:33:52 2026 GMT Subject: CN=9C4CF52BF9DCC0D176310DF911BB1F7B01BE4AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:1c:f7:b0:4e:7b:8b:1d:51:2c:84:71:ea: 7d:d9:ab:5d:eb:98:ea:a6:52:60:c4:e6:40:f7:3c: cd:57:84:ec:cd:62:53:e4:1c:2e:8a:11:73:34:5b: 6c:1a:f7:80:c2:b9:4b:12:ec:0a:7a:c6:ce:ae:5b: f3:b6:94:2d:0a:52:cd:43:5a:f5:42:09:de:fd:b3: be:f8:b8:9b:aa:b2:dd:24:b7:46:9b:b2:de:8e:75: 1a:30:ca:6c:07:29:b2:2a:2d:4c:1f:8c:4a:54:db: 78:98:1c:d9:fd:96:47:e8:bb:83:2e:ef:2b:ee:e1: c6:6c:39:5d:6f:86:c2:39:1c:e3:65:f9:a0:d8:1e: 8e:b4:c2:32:8f:97:98:33:5e:8a:70:c5:9b:6c:07: 19:fe:61:fc:1b:00:d9:59:ce:af:78:70:11:d8:9e: a1:ac:9d:e6:6e:41:83:af:50:e9:59:d1:bb:23:b9: 89:b3:67:39:8f:32:d8:01:24:2c:55:d3:9e:2e:82: 0d:85:f4:19:24:6f:81:e6:d5:c3:06:b8:ba:46:51: 8b:2a:a6:53:78:1c:01:10:69:c9:ad:ed:19:54:57: 1b:3e:e7:42:26:1f:8d:f9:c4:36:6b:4c:62:65:26: 00:84:07:42:57:4c:45:c9:52:46:ee:97:8d:3e:c6: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:F5:2B:F9:DC:C0:D1:76:31:0D:F9:11:BB:1F:7B:01:BE:4A:FF X509v3 Authority Key Identifier: keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f3:d0:23:b6:ad:ea:72:b8:43:c9:af:5e:c4:f0:d8:42:3d: 75:b8:eb:e2:f4:2d:23:ae:15:e8:b7:c5:74:08:28:a2:c8:be: 2f:27:f1:f9:20:9f:e0:b9:4e:07:54:c8:2e:c7:8f:5b:b8:cb: 1a:75:37:ed:ff:82:3b:9d:b0:f2:d1:61:34:94:68:f6:9a:fe: 61:84:21:64:2f:3b:88:ef:04:ee:55:a8:d8:90:61:b4:14:3c: a4:d3:57:23:b4:63:8d:65:aa:fa:e9:de:66:66:45:24:b7:38: 49:26:ea:19:e6:24:d6:03:1d:40:0a:65:b7:2e:89:27:95:77: e0:00:10:4c:10:80:3a:66:6d:68:a7:b4:66:dd:da:2e:f0:c3: 29:00:c0:27:b0:87:0c:32:f7:c5:d0:39:57:17:54:d4:57:ab: 42:0c:f8:e0:90:3f:b7:83:75:ac:9c:f9:bf:37:8f:f2:8b:ac: 2a:f2:63:76:3d:b3:5c:97:98:fd:f3:0b:cc:f2:db:51:4e:f9: 09:39:d6:d1:2c:06:d0:5d:fb:00:16:83:43:4d:d7:94:6d:e6: 6b:9b:a9:ff:95:a7:26:60:d4:ef:97:75:7c:8d:07:4e:0e:05: 54:33:b0:8a:ad:04:0c:fe:93:59:19:f4:54:30:1c:fa:2d:a0: 00:3c:63:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzlhL2elvQUCA/dwpYuKqNaQRbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUzMThC ODNBMURFMzAeFw0yNjA3MjMxMjU1NTJaFw0yNjA3MjQxNDMzNTJaMDMxMTAvBgNV BAMTKDlDNENGNTJCRjlEQ0MwRDE3NjMxMERGOTExQkIxRjdCMDFCRTRBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP8hz3sE57ix1RLIRx6n3Zq13r mOqmUmDE5kD3PM1XhOzNYlPkHC6KEXM0W2wa94DCuUsS7Ap6xs6uW/O2lC0KUs1D WvVCCd79s774uJuqst0kt0abst6OdRowymwHKbIqLUwfjEpU23iYHNn9lkfou4Mu 7yvu4cZsOV1vhsI5HONl+aDYHo60wjKPl5gzXopwxZtsBxn+YfwbANlZzq94cBHY nqGsneZuQYOvUOlZ0bsjuYmzZzmPMtgBJCxV054ugg2F9Bkkb4Hm1cMGuLpGUYsq plN4HAEQacmt7RlUVxs+50ImH435xDZrTGJlJgCEB0JXTEXJUkbul40+xl0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEz1K/ncwNF2MQ35EbsfewG+Sv8wHwYDVR0j BBgwFoAUBqr3E9k5rGwJC2NDtpBTGLg6HeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA0NDIwNDMtMjQ0ZS00Yjg3LWIwMGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNE OTM5QUM2QzA5MEI2MzQzQjY5MDUzMThCODNBMURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNkFBRjcxM0Q5MzlBQzZDMDkwQjYzNDNCNjkwNTMxOEI4M0Ex REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUz MThCODNBMURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7z0CO2repyuEPJr17E8NhCPXW46+L0LSOu Fei3xXQIKKLIvi8n8fkgn+C5TgdUyC7Hj1u4yxp1N+3/gjudsPLRYTSUaPaa/mGE IWQvO4jvBO5VqNiQYbQUPKTTVyO0Y41lqvrp3mZmRSS3OEkm6hnmJNYDHUAKZbcu iSeVd+AAEEwQgDpmbWintGbd2i7wwykAwCewhwwy98XQOVcXVNRXq0IM+OCQP7eD dayc+b83j/KLrCryY3Y9s1yXmP3zC8zy21FO+Qk51tEsBtBd+wAWg0NN15Rt5mub qf+VpyZg1O+XdXyNB04OBVQzsIqtBAz+k1kZ9FQwHPotoAA8Y/k= -----END CERTIFICATE-----Generated at Fri Jul 24 04:05:17 2026 by rpki-client