$ rpki-client -vvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft File: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft (raw, json) Hash identifier: xzqC2CYC2rNe5Y7uLsp+cigb23uYTmpO+tXH7d6ZPpA= Subject key identifier: 5A:06:BE:1E:77:EC:BF:0E:31:0B:93:CF:41:3E:13:D4:68:89:A2:B6 Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Certificate serial: 54F444BF16B0EECF3D0D1375EF86B712FCA80751 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:01:46 +0000 Manifest this update: Fri 24 Jul 2026 05:56:46 +0000 Manifest next update: Sat 25 Jul 2026 06:39:46 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=) 2: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl (hash: DYcxR/u41EJDfgNJCGWNDkypkzFSKd3Gy8R3wy+yoqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f4:44:bf:16:b0:ee:cf:3d:0d:13:75:ef:86:b7:12:fc:a8:07:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Validity Not Before: Jul 24 05:56:46 2026 GMT Not After : Jul 25 06:39:46 2026 GMT Subject: CN=5A06BE1E77ECBF0E310B93CF413E13D46889A2B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:0f:88:24:3c:66:d3:ff:07:79:d3:09:ca: 3e:fb:8c:67:58:09:14:31:49:f5:e8:18:d6:a0:13: 6a:29:3e:49:68:b2:06:9e:55:a8:8a:ad:85:4b:3a: de:b1:5c:75:39:6b:a5:bb:d8:be:91:cd:94:97:68: 7a:9b:20:b5:e0:1b:b2:af:10:c3:3d:1e:72:4a:17: d5:1a:1b:23:3c:10:d5:2b:9f:bd:b9:80:37:75:1a: 17:ed:e4:6c:25:35:0c:e6:a7:f3:e1:82:73:41:06: 44:f2:fe:84:60:a3:3c:16:1d:3c:ff:d9:6b:a6:aa: 5d:68:da:ab:87:d7:85:25:4d:f9:ad:ba:b3:7a:9e: 9c:f5:12:64:79:12:6a:a6:83:81:86:91:e7:a4:11: d9:5d:47:ff:6d:1a:c8:1d:0b:22:88:d9:c0:dd:2d: 86:b4:55:1f:1b:be:f2:a6:73:16:03:90:81:59:52: 23:b2:7c:2e:b9:ed:69:0c:63:8b:f2:5f:2f:32:b6: 93:a2:11:3e:a5:d5:31:ce:78:84:40:cd:8b:92:5b: 91:16:26:3b:92:c2:36:ed:f4:4f:61:86:9a:e2:ac: c2:0a:04:d6:81:10:46:95:c3:55:f5:f3:c0:5d:a5: bf:32:a7:82:be:1a:08:55:39:c2:ad:22:e8:be:0d: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:06:BE:1E:77:EC:BF:0E:31:0B:93:CF:41:3E:13:D4:68:89:A2:B6 X509v3 Authority Key Identifier: keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:47:74:6b:cc:28:70:97:70:0d:f8:a8:34:bd:b0:ba:bf:c8: 1c:06:f9:cc:0f:f9:dc:51:21:3d:84:77:d8:19:71:e8:a6:e0: 60:8a:cc:05:65:27:19:11:9e:02:12:8b:88:19:99:cd:74:62: 96:31:99:d4:18:f2:86:34:1b:f7:62:bf:b5:4e:9f:a8:00:11: e3:41:05:3d:66:43:bc:9b:76:1d:ea:58:94:97:e2:56:cd:22: 7b:d1:ec:30:a1:d1:8f:93:76:5b:50:d1:8a:1a:33:65:f7:95: 0f:f5:87:56:8d:57:79:8d:64:67:6b:27:e2:c2:1b:5e:e5:99: 12:33:c9:a4:7e:74:8f:88:06:38:a7:bb:60:22:6d:2f:2d:20: 31:f5:3e:5f:b0:5e:d0:70:a7:5b:c1:48:6c:60:25:ae:15:e8: b7:6a:c5:aa:21:50:7f:11:fc:0c:3a:57:12:26:68:f9:8b:b9: a6:61:dd:6c:b8:98:d5:3e:2a:68:08:ea:06:67:93:76:c0:f0: fc:38:e1:1d:28:c5:82:dd:15:18:8c:2d:5d:57:39:d8:da:e6: 14:fa:2c:30:0c:36:46:de:47:f2:28:ba:4b:a1:a0:18:cb:c7: 76:83:19:7a:fb:6b:91:96:8c:3c:d3:c8:4e:76:4d:43:39:07: 94:95:41:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPREvxaw7s89DRN174a3EvyoB1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFF RjI1QURBOTAeFw0yNjA3MjQwNTU2NDZaFw0yNjA3MjUwNjM5NDZaMDMxMTAvBgNV BAMTKDVBMDZCRTFFNzdFQ0JGMEUzMTBCOTNDRjQxM0UxM0Q0Njg4OUEyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fg+IJDxm0/8HedMJyj77jGdY CRQxSfXoGNagE2opPklosgaeVaiKrYVLOt6xXHU5a6W72L6RzZSXaHqbILXgG7Kv EMM9HnJKF9UaGyM8ENUrn725gDd1Ghft5GwlNQzmp/PhgnNBBkTy/oRgozwWHTz/ 2Wumql1o2quH14UlTfmturN6npz1EmR5Emqmg4GGkeekEdldR/9tGsgdCyKI2cDd LYa0VR8bvvKmcxYDkIFZUiOyfC657WkMY4vyXy8ytpOiET6l1THOeIRAzYuSW5EW JjuSwjbt9E9hhprirMIKBNaBEEaVw1X188Bdpb8yp4K+GghVOcKtIui+DTB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWga+Hnfsvw4xC5PPQT4T1GiJorYwHwYDVR0j BBgwFoAUbsqak276gnbkQSXgtMe/Qe8lrakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlkYWU5N2YtMWFkMS00YjM0LThmZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2 RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFFRjI1QURBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RUNBOUE5MzZFRkE4Mjc2RTQ0MTI1RTBCNEM3QkY0MUVGMjVB REE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JG NDFFRjI1QURBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtHdGvMKHCXcA34qDS9sLq/yBwG+cwP+dxR IT2Ed9gZceim4GCKzAVlJxkRngISi4gZmc10YpYxmdQY8oY0G/div7VOn6gAEeNB BT1mQ7ybdh3qWJSX4lbNInvR7DCh0Y+TdltQ0YoaM2X3lQ/1h1aNV3mNZGdrJ+LC G17lmRIzyaR+dI+IBjinu2AibS8tIDH1Pl+wXtBwp1vBSGxgJa4V6LdqxaohUH8R /Aw6VxImaPmLuaZh3Wy4mNU+KmgI6gZnk3bA8Pw44R0oxYLdFRiMLV1XOdja5hT6 LDAMNkbeR/IoukuhoBjLx3aDGXr7a5GWjDzTyE52TUM5B5SVQfs= -----END CERTIFICATE-----Generated at Fri Jul 24 09:31:57 2026 by rpki-client