$ rpki-client -vvf rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft File: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft (raw, json) Hash identifier: 3gyuYsxcj4fwt6NuBFJnA5aQXkltQBU/H2W58fuLhyw= Subject key identifier: E1:73:95:08:46:47:05:0A:22:80:EB:0F:51:DA:C9:37:3F:22:85:41 Authority key identifier: 6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 Certificate issuer: /CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Certificate serial: 2320E864B86A8FFA79482D67A4E5D17DFCDDD511 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:08 +0000 Manifest this update: Tue 12 May 2026 19:41:08 +0000 Manifest next update: Wed 13 May 2026 21:38:08 +0000 Files and hashes: 1: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl (hash: SYCmEB/4ycKmSePJfFh4dWGe3EtDUsPnLo0BMFFIiCc=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: /9mhE8hilLMkdKj/KGoukj1sKVJz3HgKOnytnAx8zSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:20:e8:64:b8:6a:8f:fa:79:48:2d:67:a4:e5:d1:7d:fc:dd:d5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Validity Not Before: May 12 19:41:08 2026 GMT Not After : May 13 21:38:08 2026 GMT Subject: CN=E17395084647050A2280EB0F51DAC9373F228541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6d:1f:d6:9a:17:6d:d9:c6:6e:25:44:5f:06: 9b:89:59:84:ac:86:e2:ea:c2:56:bc:ed:b5:08:d7: 7a:22:14:c1:7a:63:c0:bc:f4:49:fc:a2:c2:56:ff: 5f:b7:a9:ab:a3:e2:d6:1c:e2:4d:6a:50:ef:9c:36: 75:2e:a6:94:7d:8a:4f:91:82:9c:81:18:76:c0:8b: 72:a1:f1:36:8b:5b:39:a5:aa:bc:fa:e3:89:f4:bc: 3f:d4:e5:86:7c:9d:e4:74:b4:b8:d5:c2:f6:ae:fd: 5f:d8:20:95:cd:23:64:df:74:eb:81:4b:94:52:7f: af:42:d1:fa:fb:8c:e5:07:4b:db:03:be:67:7a:42: fe:cb:1b:90:e7:92:1e:8c:9c:52:1e:d9:c0:45:e5: b1:d9:58:91:71:ad:25:e7:2a:18:f1:23:7e:db:5e: d6:34:34:77:9a:d4:bf:28:47:42:d2:34:2b:b4:b7: 65:58:0b:20:3f:aa:a1:b7:e8:47:12:f0:1e:10:a8: 8a:3a:65:f5:1c:12:f6:ed:23:f7:ca:15:67:63:37: e7:cb:80:e8:5b:b8:7c:66:05:c2:30:69:b8:b2:2f: 4f:0a:71:dd:6f:8f:2d:ec:04:c9:c5:76:05:bc:fb: 8c:8f:d8:79:72:05:57:20:0a:bc:c6:b9:a8:65:7e: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:73:95:08:46:47:05:0A:22:80:EB:0F:51:DA:C9:37:3F:22:85:41 X509v3 Authority Key Identifier: keyid:6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:71:ee:41:7a:57:1c:18:6e:36:3e:14:b2:0c:4c:e6:15:33: 0a:84:e1:15:5b:f3:9e:ed:51:63:b1:ff:f7:80:f5:5f:47:e5: 21:79:3b:91:8d:d0:17:aa:47:99:d9:96:5d:43:f0:8d:39:d5: 07:fe:1d:35:0f:83:a1:8f:34:27:32:38:db:f6:31:6e:05:a9: 33:6b:11:12:7a:b3:74:4c:7e:9f:e8:93:db:2d:57:99:40:0b: 00:06:43:46:98:6a:4c:86:c0:c9:17:2b:71:01:3b:12:b1:9c: e6:02:cd:27:a8:f5:25:4a:f5:9a:ca:70:3d:32:67:91:1e:be: 05:e2:b5:2a:1c:f0:f6:e6:b6:7b:f0:58:25:2c:77:83:fd:cc: 19:7b:6a:f5:0a:4c:44:0d:75:af:b1:9e:de:d1:bd:aa:e5:fa: e2:f2:9f:c7:41:09:58:82:4b:73:44:ed:b5:59:da:41:87:74: b0:c9:3c:26:17:20:d7:ed:7c:05:20:1f:96:40:70:0b:04:57: 9c:63:a1:39:77:c6:b8:31:43:d9:a2:5d:69:f7:b7:3f:06:49: 2b:e6:09:5f:8b:6c:f3:4f:6d:79:b4:35:0a:e3:05:23:af:15: be:85:ca:95:91:31:3b:0e:48:d1:e0:1b:fe:f7:89:55:66:86: 96:1d:55:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyDoZLhqj/p5SC1npOXRffzd1REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZD N0NCRDQ5NzAeFw0yNjA1MTIxOTQxMDhaFw0yNjA1MTMyMTM4MDhaMDMxMTAvBgNV BAMTKEUxNzM5NTA4NDY0NzA1MEEyMjgwRUIwRjUxREFDOTM3M0YyMjg1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbR/Wmhdt2cZuJURfBpuJWYSs huLqwla87bUI13oiFMF6Y8C89En8osJW/1+3qauj4tYc4k1qUO+cNnUuppR9ik+R gpyBGHbAi3Kh8TaLWzmlqrz644n0vD/U5YZ8neR0tLjVwvau/V/YIJXNI2TfdOuB S5RSf69C0fr7jOUHS9sDvmd6Qv7LG5Dnkh6MnFIe2cBF5bHZWJFxrSXnKhjxI37b XtY0NHea1L8oR0LSNCu0t2VYCyA/qqG36EcS8B4QqIo6ZfUcEvbtI/fKFWdjN+fL gOhbuHxmBcIwabiyL08Kcd1vjy3sBMnFdgW8+4yP2HlyBVcgCrzGuahlfmsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XOVCEZHBQoigOsPUdrJNz8ihUEwHwYDVR0j BBgwFoAUahOHEqHSyDj4Y6e4gu1/1sfL1JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiMWFiN2YtZTQ1MS00MGQxLTliNzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJB MUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZDN0NCRDQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QTEzODcxMkExRDJDODM4Rjg2M0E3Qjg4MkVEN0ZENkM3Q0JE NDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdG RDZDN0NCRDQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINx7kF6VxwYbjY+FLIMTOYVMwqE4RVb857t UWOx//eA9V9H5SF5O5GN0BeqR5nZll1D8I051Qf+HTUPg6GPNCcyONv2MW4FqTNr ERJ6s3RMfp/ok9stV5lACwAGQ0aYakyGwMkXK3EBOxKxnOYCzSeo9SVK9ZrKcD0y Z5EevgXitSoc8PbmtnvwWCUsd4P9zBl7avUKTEQNda+xnt7Rvarl+uLyn8dBCViC S3NE7bVZ2kGHdLDJPCYXINftfAUgH5ZAcAsEV5xjoTl3xrgxQ9miXWn3tz8GSSvm CV+LbPNPbXm0NQrjBSOvFb6FypWRMTsOSNHgG/73iVVmhpYdVRQ= -----END CERTIFICATE-----Generated at Tue May 12 22:12:57 2026 by rpki-client