$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json) Hash identifier: HvJj5LCCRhBFbFc7vklOz4X9dE2tHJZZc3jZqgQzPfE= Subject key identifier: D1:C1:76:66:FD:7E:0B:74:EA:6D:9F:90:D3:08:FA:4B:C0:6C:39:7C Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Certificate serial: 1743A73442B952E918D2E4E5391FA4E73BE423CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:23:53 +0000 Manifest this update: Tue 12 May 2026 21:18:53 +0000 Manifest next update: Wed 13 May 2026 23:31:53 +0000 Files and hashes: 1: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=) 2: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=) 3: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: DwULB+T+m7/Qp1VKMkqp8ePyXDvBZkwKmyUM10MpcsU=) 4: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:43:a7:34:42:b9:52:e9:18:d2:e4:e5:39:1f:a4:e7:3b:e4:23:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Validity Not Before: May 12 21:18:53 2026 GMT Not After : May 13 23:31:53 2026 GMT Subject: CN=D1C17666FD7E0B74EA6D9F90D308FA4BC06C397C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:6f:76:0f:b2:14:c1:0e:23:42:12:6c:09: 0c:f1:9f:7c:a9:55:c1:aa:08:f9:34:b2:da:30:bd: a7:e4:7f:b7:2c:32:6b:bc:d1:66:fd:39:ad:b6:23: 10:09:a1:c6:dd:99:2e:a1:42:ed:85:65:e0:cc:fc: 96:65:14:41:ce:88:3a:e5:7d:b3:e5:02:67:98:36: ad:48:b5:c7:0c:a5:2f:4c:ed:97:e6:09:28:50:54: 21:64:b4:68:7e:57:4d:6a:a0:fd:b8:74:43:59:17: db:80:3c:c7:4a:a1:df:88:44:30:43:98:4c:d1:91: 19:4e:ee:e4:c8:21:ff:51:48:6f:8d:e9:78:3d:25: 7b:3f:32:6a:59:19:62:c1:47:3c:15:66:07:2a:9f: 5c:95:6e:8f:19:2f:22:4d:7b:1f:72:72:86:70:30: 97:44:9a:0f:7c:1b:90:bd:1c:dd:ed:60:85:7f:1a: a8:0f:c9:18:04:0e:c1:d4:01:b0:1e:77:dd:95:fb: cd:02:97:71:b9:43:e2:48:31:2b:ef:37:2d:29:6c: 03:96:aa:56:0a:c2:15:4d:2d:b2:eb:49:a3:14:58: 3f:c1:54:1e:9e:91:a5:8a:59:db:66:9b:ce:58:ae: 77:1d:43:52:e8:44:37:ba:eb:ff:b9:ed:2f:99:d5: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:76:66:FD:7E:0B:74:EA:6D:9F:90:D3:08:FA:4B:C0:6C:39:7C X509v3 Authority Key Identifier: keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e7:db:d5:fa:01:ff:f3:09:bc:d9:61:1a:0b:16:87:2a:63: d4:2c:32:09:39:1f:eb:43:2d:1d:bb:f4:86:1f:41:10:62:52: 45:08:c7:41:70:39:29:ec:66:d0:2c:69:b9:9a:8e:37:ff:17: b7:78:67:ce:99:a0:8d:b2:76:f4:96:e2:85:fd:d3:13:b1:8e: 62:4e:c3:78:0b:2a:54:6c:0f:c1:46:b5:c3:c3:29:bf:8d:82: eb:b9:86:8c:0a:9f:af:b8:5d:77:4f:3a:64:50:3c:c3:0c:d0: ea:87:cc:9f:35:82:de:f5:16:cf:ad:4c:d9:ec:eb:6b:38:3b: 5f:09:37:48:02:26:16:43:49:4b:d2:4d:81:3b:e9:31:f3:48: 29:89:fd:d9:ae:3d:a9:8c:4d:cc:14:42:63:53:21:12:f7:6b: 80:70:61:5d:ab:84:d6:f7:be:9b:3f:53:bd:c7:67:f2:1e:db: 4d:a9:2f:e0:0e:66:77:51:56:3a:0b:0d:bc:2a:76:06:2f:2a: 69:84:f5:90:a4:1c:f8:ed:57:d5:f2:09:89:e4:1f:20:90:64: f0:54:ae:48:20:2b:21:dc:42:40:cc:b6:1e:42:0a:84:c7:e4: 95:7c:e9:d0:9d:53:98:1d:07:e0:6b:69:21:64:59:64:fb:75: f3:4d:b1:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0OnNEK5UukY0uTlOR+k5zvkI8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5NTFG OTk1MDc5QTAeFw0yNjA1MTIyMTE4NTNaFw0yNjA1MTMyMzMxNTNaMDMxMTAvBgNV BAMTKEQxQzE3NjY2RkQ3RTBCNzRFQTZEOUY5MEQzMDhGQTRCQzA2QzM5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxG92D7IUwQ4jQhJsCQzxn3yp VcGqCPk0stowvafkf7csMmu80Wb9Oa22IxAJocbdmS6hQu2FZeDM/JZlFEHOiDrl fbPlAmeYNq1ItccMpS9M7ZfmCShQVCFktGh+V01qoP24dENZF9uAPMdKod+IRDBD mEzRkRlO7uTIIf9RSG+N6Xg9JXs/MmpZGWLBRzwVZgcqn1yVbo8ZLyJNex9ycoZw MJdEmg98G5C9HN3tYIV/GqgPyRgEDsHUAbAed92V+80Cl3G5Q+JIMSvvNy0pbAOW qlYKwhVNLbLrSaMUWD/BVB6ekaWKWdtmm85YrncdQ1LoRDe66/+57S+Z1f6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cF2Zv1+C3TqbZ+Q0wj6S8BsOXwwHwYDVR0j BBgwFoAUbCHzcfzt0t4prpFLNT9pUfmVB5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVlYzZjZjgtOTY1NS00Mzc5LWJmMzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFG Q0VERDJERTI5QUU5MTRCMzUzRjY5NTFGOTk1MDc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzIxRjM3MUZDRUREMkRFMjlBRTkxNEIzNTNGNjk1MUY5OTUw NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5 NTFGOTk1MDc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzn29X6Af/zCbzZYRoLFocqY9QsMgk5H+tD LR279IYfQRBiUkUIx0FwOSnsZtAsabmajjf/F7d4Z86ZoI2ydvSW4oX90xOxjmJO w3gLKlRsD8FGtcPDKb+Nguu5howKn6+4XXdPOmRQPMMM0OqHzJ81gt71Fs+tTNns 62s4O18JN0gCJhZDSUvSTYE76THzSCmJ/dmuPamMTcwUQmNTIRL3a4BwYV2rhNb3 vps/U73HZ/Ie202pL+AOZndRVjoLDbwqdgYvKmmE9ZCkHPjtV9XyCYnkHyCQZPBU rkggKyHcQkDMth5CCoTH5JV86dCdU5gdB+BraSFkWWT7dfNNseA= -----END CERTIFICATE-----Generated at Wed May 13 03:53:04 2026 by rpki-client