$ rpki-client -vvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft File: 6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json) Hash identifier: sF+GUdTstnR19GfAZ66WydzhJZU0ue6H2I6q0Evzh0s= Subject key identifier: 82:B8:FA:F4:D6:5B:59:7F:16:18:FA:47:F4:62:0E:17:7C:AC:BE:7F Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9 Certificate issuer: /CN=6D171A25D57FF823724FB6208343D200F64CBBB9 Certificate serial: 19E0A43B97ECDE64C853079DD71B252A66AB046C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:29 +0000 Manifest this update: Tue 12 May 2026 17:32:29 +0000 Manifest next update: Wed 13 May 2026 19:22:29 +0000 Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=) 2: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: dv3rKd7RI9GE0DRlkXYnqymbCDdt+NtNYDEBEwBfzPg=) 3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e0:a4:3b:97:ec:de:64:c8:53:07:9d:d7:1b:25:2a:66:ab:04:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9 Validity Not Before: May 12 17:32:29 2026 GMT Not After : May 13 19:22:29 2026 GMT Subject: CN=82B8FAF4D65B597F1618FA47F4620E177CACBE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:40:dc:8f:a9:47:2b:e3:db:c6:72:73:c1: f4:91:68:92:a5:80:60:b2:9b:51:13:ab:1b:5d:b5: cc:50:08:81:2c:17:e6:63:35:ae:67:75:35:fc:5a: bb:00:bd:ab:5f:f7:58:c0:9b:49:64:c6:a9:dc:7e: e9:b2:e2:b6:40:7d:84:6e:28:44:e7:72:d3:19:c0: bc:b6:8a:b4:4a:17:49:bf:83:65:f7:d6:90:24:22: 43:df:de:9a:2b:78:b7:6e:05:ae:83:06:fd:31:a2: 8c:35:db:9c:3d:64:dd:d5:67:c5:63:ab:4a:25:d9: f4:63:76:5b:52:20:41:db:7b:fb:14:12:8b:ce:43: 3d:33:78:03:cc:8b:52:67:fe:c7:3e:35:5c:7e:e9: 26:12:3f:5c:7d:f3:8e:f2:37:46:2c:99:5b:c6:73: 57:6b:90:0f:11:88:36:1d:f7:64:60:02:9b:de:68: 34:08:aa:f6:67:41:f9:0b:35:ec:47:a2:9b:db:49: 3b:ae:98:cc:bb:f9:1b:6c:24:b0:03:8e:b6:f8:63: 1d:73:1c:50:03:fb:99:06:72:cc:c0:b0:b2:ea:68: 7e:ad:44:80:7a:a2:96:b8:1e:7d:a5:d2:d9:d4:31: 8c:8f:2e:5b:74:03:1f:92:c2:41:58:3d:f5:32:79: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B8:FA:F4:D6:5B:59:7F:16:18:FA:47:F4:62:0E:17:7C:AC:BE:7F X509v3 Authority Key Identifier: keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:88:8c:69:87:bf:4c:e6:01:da:81:49:c7:ed:3f:c5:5e:78: 88:e6:0e:c8:c0:b3:06:04:ec:7a:96:ce:9d:a5:96:e4:59:fa: c5:19:42:ea:9e:a9:9b:7e:14:11:d4:99:a7:04:37:e3:7a:a7: 58:16:eb:92:c3:bf:da:76:3d:c7:a6:c3:bb:84:de:29:ac:58: 0c:2e:34:45:83:6e:2e:d0:72:74:b0:42:f6:8a:0f:b8:a5:a9: b2:2b:29:29:13:3c:d4:7d:4c:e1:ed:4e:5b:54:3c:98:b9:1b: c2:f0:23:e4:05:c1:d5:37:52:bf:2a:fa:97:cd:b8:11:ab:aa: 14:bd:a9:93:37:97:0a:e3:cf:9f:0c:21:67:0a:35:d7:39:f1: 58:87:bc:49:8d:dd:d2:50:84:04:6d:87:73:f0:ff:a1:7a:99: e0:df:f8:8f:8c:41:27:41:08:16:b7:0e:34:e3:e7:18:44:1e: cd:a7:cf:88:a4:5c:19:c6:93:50:a9:dc:a3:1e:ab:19:1c:ec: 0d:45:05:d5:7b:e6:90:70:96:82:11:dc:0c:56:ce:c1:90:3f: de:36:f6:ae:98:26:a2:20:2f:a8:3c:00:33:21:3a:74:db:95: 24:6d:50:9b:73:09:ec:2c:62:a8:95:cb:cb:67:2e:e5:36:d3: 55:73:e2:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeCkO5fs3mTIUwed1xslKmarBGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxNzFBMjVENTdGRjgyMzcyNEZCNjIwODM0M0QyMDBG NjRDQkJCOTAeFw0yNjA1MTIxNzMyMjlaFw0yNjA1MTMxOTIyMjlaMDMxMTAvBgNV BAMTKDgyQjhGQUY0RDY1QjU5N0YxNjE4RkE0N0Y0NjIwRTE3N0NBQ0JFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5EDcj6lHK+PbxnJzwfSRaJKl gGCym1ETqxtdtcxQCIEsF+ZjNa5ndTX8WrsAvatf91jAm0lkxqncfumy4rZAfYRu KETnctMZwLy2irRKF0m/g2X31pAkIkPf3poreLduBa6DBv0xoow125w9ZN3VZ8Vj q0ol2fRjdltSIEHbe/sUEovOQz0zeAPMi1Jn/sc+NVx+6SYSP1x9847yN0YsmVvG c1drkA8RiDYd92RgApveaDQIqvZnQfkLNexHopvbSTuumMy7+RtsJLADjrb4Yx1z HFAD+5kGcszAsLLqaH6tRIB6opa4Hn2l0tnUMYyPLlt0Ax+SwkFYPfUyeTt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgrj69NZbWX8WGPpH9GIOF3ysvn8wHwYDVR0j BBgwFoAUbRcaJdV/+CNyT7Ygg0PSAPZMu7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzE0MDM0MDktYmYwNC00MmU5LTk1NjctYjA2ZWM4MjNkOTAxLzAvNkQxNzFBMjVE NTdGRjgyMzcyNEZCNjIwODM0M0QyMDBGNjRDQkJCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RDE3MUEyNUQ1N0ZGODIzNzI0RkI2MjA4MzQzRDIwMEY2NENC QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvNkQxNzFBMjVENTdGRjgyMzcyNEZCNjIwODM0M0Qy MDBGNjRDQkJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOIjGmHv0zmAdqBScftP8VeeIjmDsjAswYE 7HqWzp2lluRZ+sUZQuqeqZt+FBHUmacEN+N6p1gW65LDv9p2Pcemw7uE3imsWAwu NEWDbi7QcnSwQvaKD7ilqbIrKSkTPNR9TOHtTltUPJi5G8LwI+QFwdU3Ur8q+pfN uBGrqhS9qZM3lwrjz58MIWcKNdc58ViHvEmN3dJQhARth3Pw/6F6meDf+I+MQSdB CBa3DjTj5xhEHs2nz4ikXBnGk1Cp3KMeqxkc7A1FBdV75pBwloIR3AxWzsGQP942 9q6YJqIgL6g8ADMhOnTblSRtUJtzCewsYqiVy8tnLuU201Vz4u8= -----END CERTIFICATE-----Generated at Wed May 13 03:59:02 2026 by rpki-client