$ rpki-client -vvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft File: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft (raw, json) Hash identifier: jmQL1V//qnH1cj9lSfNXH998hVYGTymS3y4VWvDqMjQ= Subject key identifier: BB:D5:31:D5:C6:23:76:5C:71:3D:6C:31:35:5F:3F:4A:86:F4:94:0F Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Certificate serial: 28A0935A701BD624988E9668074A5B0416DC8EE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:42:50 +0000 Manifest this update: Tue 12 May 2026 20:37:50 +0000 Manifest next update: Thu 14 May 2026 00:16:50 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=) 2: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl (hash: Q9KkX4AGIYWEB8XnyfVCwTr7kkWYeRC94Mbv3cy6ZmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a0:93:5a:70:1b:d6:24:98:8e:96:68:07:4a:5b:04:16:dc:8e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Validity Not Before: May 12 20:37:50 2026 GMT Not After : May 14 00:16:50 2026 GMT Subject: CN=BBD531D5C623765C713D6C31355F3F4A86F4940F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:18:e3:de:7b:e0:e1:fb:de:75:f9:29:81: 5e:6d:8b:97:7c:f2:31:19:e9:a4:4b:0d:a9:25:d1: bf:2b:b4:fc:cb:e7:c2:e0:e9:98:58:01:b7:57:ea: 58:75:54:54:52:f2:70:b8:fd:1b:b5:95:94:1b:8d: 43:23:11:35:17:c0:ca:73:b8:1a:25:e2:ab:5f:c1: 86:1c:bc:c2:ab:20:16:78:81:8b:11:28:03:6c:57: aa:43:65:53:31:ce:8e:66:a9:0e:e9:15:7f:d3:27: a7:7b:80:cf:6d:86:4e:ff:6e:0c:c1:8c:29:c7:d0: 4c:31:ea:38:ac:15:2e:82:84:67:eb:f5:80:be:7a: 5f:a5:5e:07:46:0a:ea:19:54:06:fd:ab:86:f9:7d: 63:46:2d:eb:37:20:53:5a:9e:15:e3:c1:59:cb:5b: 86:fd:63:a4:0b:a9:3a:65:f9:a5:ae:4f:55:71:6c: 04:30:5b:d4:ac:41:45:b4:79:87:85:46:31:b3:19: 15:76:a0:52:26:54:12:6e:ab:86:58:e0:3d:b0:69: 55:e2:07:ef:af:fc:ec:01:7b:29:41:81:fb:87:4c: 58:d1:04:78:f1:41:24:65:df:e0:e0:56:96:23:fc: 22:fe:22:6b:0c:ee:10:61:39:90:9b:f6:41:8d:0d: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D5:31:D5:C6:23:76:5C:71:3D:6C:31:35:5F:3F:4A:86:F4:94:0F X509v3 Authority Key Identifier: keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b6:22:a7:d3:37:b2:6a:32:a7:5f:2c:3f:e1:1b:2a:66:29: 43:e5:ec:be:26:d3:f7:f8:cc:e1:ae:5e:ac:c0:cc:dd:e2:ff: 1e:09:94:48:82:98:36:66:c5:14:0d:ef:e6:33:a0:32:fd:1b: b3:77:da:88:76:e3:a0:fb:54:48:54:30:3d:25:05:3e:fa:be: 0e:53:6e:31:33:4f:4c:43:19:87:b3:b0:79:23:bc:ee:c0:a6: f4:f4:4b:a5:18:31:1b:0f:d7:26:f3:3e:34:9a:65:ec:42:aa: 44:f1:f4:50:92:4d:93:d8:0d:10:ac:58:5d:50:25:bc:22:43: 14:99:10:8f:fe:11:fa:72:5d:7c:d1:77:dc:0c:9c:08:18:8f: fb:5d:9a:fd:c7:82:21:d7:ba:d6:a8:0c:20:b9:cf:dd:9b:45: 91:8e:ca:65:b5:95:04:ed:9e:bc:c0:ee:d5:6c:3c:0b:00:57: 63:80:01:b4:8c:aa:7e:49:9d:9e:2a:9f:ac:3e:61:c2:67:ac: 27:78:b7:13:ae:36:32:02:13:a3:50:cd:0d:60:82:b3:d1:d2: c5:1b:9e:c4:a0:e0:ea:77:18:62:5c:ea:3b:f1:8c:a9:5a:62: 6c:5c:dc:ad:4d:41:bb:e7:68:3e:0c:25:2d:09:5b:da:20:27: b3:71:61:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKCTWnAb1iSYjpZoB0pbBBbcjuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFF RjI1QURBOTAeFw0yNjA1MTIyMDM3NTBaFw0yNjA1MTQwMDE2NTBaMDMxMTAvBgNV BAMTKEJCRDUzMUQ1QzYyMzc2NUM3MTNENkMzMTM1NUYzRjRBODZGNDk0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8hjj3nvg4fvedfkpgV5ti5d8 8jEZ6aRLDakl0b8rtPzL58Lg6ZhYAbdX6lh1VFRS8nC4/Ru1lZQbjUMjETUXwMpz uBol4qtfwYYcvMKrIBZ4gYsRKANsV6pDZVMxzo5mqQ7pFX/TJ6d7gM9thk7/bgzB jCnH0Ewx6jisFS6ChGfr9YC+el+lXgdGCuoZVAb9q4b5fWNGLes3IFNanhXjwVnL W4b9Y6QLqTpl+aWuT1VxbAQwW9SsQUW0eYeFRjGzGRV2oFImVBJuq4ZY4D2waVXi B++v/OwBeylBgfuHTFjRBHjxQSRl3+DgVpYj/CL+ImsM7hBhOZCb9kGNDU87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9Ux1cYjdlxxPWwxNV8/Sob0lA8wHwYDVR0j BBgwFoAUbsqak276gnbkQSXgtMe/Qe8lrakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlkYWU5N2YtMWFkMS00YjM0LThmZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2 RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFFRjI1QURBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RUNBOUE5MzZFRkE4Mjc2RTQ0MTI1RTBCNEM3QkY0MUVGMjVB REE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JG NDFFRjI1QURBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq2IqfTN7JqMqdfLD/hGypmKUPl7L4m0/f4 zOGuXqzAzN3i/x4JlEiCmDZmxRQN7+YzoDL9G7N32oh246D7VEhUMD0lBT76vg5T bjEzT0xDGYezsHkjvO7ApvT0S6UYMRsP1ybzPjSaZexCqkTx9FCSTZPYDRCsWF1Q JbwiQxSZEI/+EfpyXXzRd9wMnAgYj/tdmv3HgiHXutaoDCC5z92bRZGOymW1lQTt nrzA7tVsPAsAV2OAAbSMqn5JnZ4qn6w+YcJnrCd4txOuNjICE6NQzQ1ggrPR0sUb nsSg4Op3GGJc6jvxjKlaYmxc3K1NQbvnaD4MJS0JW9ogJ7NxYSI= -----END CERTIFICATE-----Generated at Wed May 13 05:14:13 2026 by rpki-client