$ rpki-client -vvf rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft File: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft (raw, json) Hash identifier: kcITtBpzo03zlyjhJkI+cJqnfRjQnRibs/1wTubm/w0= Subject key identifier: C2:57:97:78:F0:73:34:3C:92:56:DE:1B:A5:71:30:7D:84:85:1E:3A Authority key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 Certificate issuer: /CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5 Certificate serial: 5FD1FDD40821C7CA6E9DD3839B15512891EF7A30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:47:47 +0000 Manifest this update: Tue 12 May 2026 17:42:47 +0000 Manifest next update: Wed 13 May 2026 19:52:47 +0000 Files and hashes: 1: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: y9avoo0XnwxjsH45wOCvll+IYaXWnM223zX3g6ZS9kU=) 2: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl (hash: Y3uGfbvu0ouj6gY/PgL68k1VN851acixF344cGtNzao=) 3: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: S9Rn028mN4RxKRfk1o8rZH0hTRoX3/5ujuVLyQFUwsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d1:fd:d4:08:21:c7:ca:6e:9d:d3:83:9b:15:51:28:91:ef:7a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5 Validity Not Before: May 12 17:42:47 2026 GMT Not After : May 13 19:52:47 2026 GMT Subject: CN=C2579778F073343C9256DE1BA571307D84851E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:4c:a8:87:ea:20:0c:ef:cb:b4:2b:2c:ef: 82:49:d7:0e:1e:70:c2:6e:a4:30:5b:c2:a5:e7:39: 3f:b1:32:52:d3:3e:c8:8a:eb:8d:e0:12:6c:33:f5: e1:8f:c8:d3:4f:57:81:3c:c7:f5:7a:ad:62:ef:78: 30:6a:63:9a:eb:b3:24:15:4c:ab:db:36:0c:39:9e: 95:1e:33:0b:9c:ba:ca:05:eb:20:8d:18:e3:b3:66: e0:b8:57:cf:4c:29:a1:0f:e8:52:40:ff:63:a1:5a: f2:47:53:61:de:f0:a9:81:ee:84:10:56:eb:7d:e7: 85:b8:96:29:52:a6:24:6f:db:13:5b:62:39:03:c7: 7a:9f:03:e4:59:7b:bf:d7:e1:b3:99:1d:ff:2d:6b: 8b:54:97:ae:38:7e:e4:5a:7e:9c:be:a7:20:6d:1f: 20:7b:64:b1:94:e1:0e:1f:5e:4d:ac:c3:42:2d:26: 64:a6:a4:e1:b7:bd:c3:c0:7d:d5:b1:e8:05:09:2b: c9:6e:50:5a:a4:ee:4e:15:ab:04:7f:4a:a1:1e:9b: 29:d5:c8:40:7a:27:e8:86:15:e8:12:ec:29:67:cb: ba:25:44:ff:70:4d:18:de:f7:07:8f:62:03:a3:3f: d5:f2:29:6d:83:44:77:86:62:42:d6:4b:06:72:64: 28:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:57:97:78:F0:73:34:3C:92:56:DE:1B:A5:71:30:7D:84:85:1E:3A X509v3 Authority Key Identifier: keyid:6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:84:02:fa:2c:f7:59:1a:19:f1:7b:ac:e5:06:d8:0c:8c:e9: f6:ff:0e:09:2b:ae:ae:c2:94:8c:c3:e7:03:35:6d:2d:7d:2b: 6b:0b:76:a7:da:e7:8a:38:65:ad:2e:76:4c:71:6a:85:cc:12: bc:da:88:b2:a9:d3:52:56:70:af:fd:42:f6:42:b8:05:4c:48: 3e:94:76:cd:b9:fa:b6:f7:7a:24:f5:86:44:2a:94:35:0c:21: bc:af:e7:14:4d:73:3d:be:6a:55:97:92:7a:48:e1:ca:ec:ef: e8:e3:6d:e6:49:68:1c:2c:6c:a9:de:f8:b3:69:b7:ac:ac:fd: 63:2b:ca:bd:20:eb:c6:48:ad:a6:9b:be:61:89:48:e3:7b:4e: 00:af:59:55:a7:d4:5b:91:02:e6:12:3f:65:6d:fc:b7:d2:6b: 0a:4e:f9:4d:6d:a1:7b:dc:37:be:6f:4b:f6:f6:91:b5:1c:57: 15:6f:72:c1:a7:be:26:86:83:b2:e1:8a:9f:bf:e8:6b:4c:e6: 85:0b:54:bd:35:5f:d4:a2:a4:d9:9a:3d:48:85:12:30:06:26: fe:17:e8:95:3e:d2:75:b9:b3:d3:fe:be:e0:9d:6f:7a:ed:c6: 39:53:9e:cf:03:32:94:7d:bf:e3:17:e1:d7:98:5a:7d:c0:27: 5d:9f:6a:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9H91Aghx8pundODmxVRKJHvejAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGQ0ExQUE3NDUyRjU4M0I0MzMxN0U1NjBDQzkzRjhD OUNCOERDNTAeFw0yNjA1MTIxNzQyNDdaFw0yNjA1MTMxOTUyNDdaMDMxMTAvBgNV BAMTKEMyNTc5Nzc4RjA3MzM0M0M5MjU2REUxQkE1NzEzMDdEODQ4NTFFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LEyoh+ogDO/LtCss74JJ1w4e cMJupDBbwqXnOT+xMlLTPsiK643gEmwz9eGPyNNPV4E8x/V6rWLveDBqY5rrsyQV TKvbNgw5npUeMwucusoF6yCNGOOzZuC4V89MKaEP6FJA/2OhWvJHU2He8KmB7oQQ Vut954W4lilSpiRv2xNbYjkDx3qfA+RZe7/X4bOZHf8ta4tUl644fuRafpy+pyBt HyB7ZLGU4Q4fXk2sw0ItJmSmpOG3vcPAfdWx6AUJK8luUFqk7k4VqwR/SqEemynV yEB6J+iGFegS7Clny7olRP9wTRje9wePYgOjP9XyKW2DRHeGYkLWSwZyZCiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwleXePBzNDySVt4bpXEwfYSFHjowHwYDVR0j BBgwFoAUbvyhqnRS9YO0MxflYMyT+MnLjcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ2YjUyNDgtY2UzMy00ZTk3LTg4MmYtZjYxNDVmMzE5MDI2LzAvNkVGQ0ExQUE3 NDUyRjU4M0I0MzMxN0U1NjBDQzkzRjhDOUNCOERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUZDQTFBQTc0NTJGNTgzQjQzMzE3RTU2MENDOTNGOEM5Q0I4 REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvNkVGQ0ExQUE3NDUyRjU4M0I0MzMxN0U1NjBDQzkz RjhDOUNCOERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGEAvos91kaGfF7rOUG2AyM6fb/Dgkrrq7C lIzD5wM1bS19K2sLdqfa54o4Za0udkxxaoXMErzaiLKp01JWcK/9QvZCuAVMSD6U ds25+rb3eiT1hkQqlDUMIbyv5xRNcz2+alWXknpI4crs7+jjbeZJaBwsbKne+LNp t6ys/WMryr0g68ZIraabvmGJSON7TgCvWVWn1FuRAuYSP2Vt/LfSawpO+U1toXvc N75vS/b2kbUcVxVvcsGnviaGg7Lhip+/6GtM5oULVL01X9SipNmaPUiFEjAGJv4X 6JU+0nW5s9P+vuCdb3rtxjlTns8DMpR9v+MX4deYWn3AJ12faks= -----END CERTIFICATE-----Generated at Wed May 13 04:53:41 2026 by rpki-client