$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: lJscn7Dt6zJUAvgdW8NMQjsK8wpT0SGMumOeqiANc5g= Subject key identifier: AB:70:9E:5E:3B:8F:34:FD:69:7A:15:03:C3:3F:E9:16:9B:8A:0E:60 Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 1D046CD347DD89E9C9163C0F8946466CC66D5DB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:06:17 +0000 Manifest this update: Tue 12 May 2026 10:01:17 +0000 Manifest next update: Wed 13 May 2026 11:04:17 +0000 Files and hashes: 1: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: W4oIWrfPK2Sppte6gozwTeq3lxXUxxnL1aziRWLmGeE=) 2: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) 3: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 4: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 5: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:04:6c:d3:47:dd:89:e9:c9:16:3c:0f:89:46:46:6c:c6:6d:5d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: May 12 10:01:17 2026 GMT Not After : May 13 11:04:17 2026 GMT Subject: CN=AB709E5E3B8F34FD697A1503C33FE9169B8A0E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:e4:49:80:64:d8:7b:8e:65:89:dd:28:9a: 29:11:31:31:75:83:49:39:5f:87:76:32:d7:62:3f: 7b:83:79:cb:88:d6:0c:5d:3a:18:49:03:39:37:7a: 0f:45:2a:2b:ed:ea:43:f4:bb:bf:95:97:35:f8:f1: 1c:4a:96:10:c8:f4:5b:23:3c:ea:ce:34:e3:88:60: be:7b:e9:75:28:90:19:79:20:3d:c1:c4:2e:77:ea: 7c:cf:e4:89:f5:51:5e:b4:52:24:3c:58:8c:d5:9e: 16:60:75:3e:87:36:bc:62:2a:6d:8e:03:fb:87:d7: 94:29:0f:97:1a:9c:bd:17:1b:10:55:cc:b4:98:0d: 0a:81:99:5a:51:09:2f:cd:76:cf:f9:55:9e:83:8e: a2:33:73:d9:99:9e:3d:77:15:77:e7:9e:ae:0b:1c: 9e:5b:f6:d9:51:f1:67:a3:6a:55:86:1a:11:b7:0b: 27:82:c5:b3:74:ee:14:fc:8a:dc:2e:57:11:ab:e1: 75:34:1c:20:07:cf:ad:78:71:1d:09:a6:7f:ea:e0: ae:c2:36:ac:f3:f6:04:25:20:4c:67:04:b3:83:33: e2:f1:96:42:d3:4e:e1:66:42:44:b6:d2:12:54:57: a7:1c:5b:58:af:dc:26:f8:8b:6b:37:ed:5a:f3:0d: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:70:9E:5E:3B:8F:34:FD:69:7A:15:03:C3:3F:E9:16:9B:8A:0E:60 X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9c:0b:af:6d:90:b2:1b:f1:3c:99:71:2d:1a:17:d2:5a:1e: 15:f1:1b:ea:c7:8c:cd:52:3b:56:93:70:9c:8f:de:a9:ce:e8: a0:fe:9f:88:6f:d0:70:a0:c9:36:f2:7d:81:df:fb:2c:fb:72: fd:70:ba:bc:c6:4e:e7:7f:ce:99:94:5a:d0:35:b9:c4:78:36: 71:27:b5:ec:54:5c:79:13:2c:c8:e4:4a:53:7c:4a:64:b1:1c: 18:4a:2f:7c:b8:d1:a8:e2:eb:f4:35:a6:d8:86:06:e3:6f:3a: d8:8f:b7:db:e9:b8:2c:fd:a2:1e:ea:1b:3b:11:47:89:11:f3: d5:44:35:97:20:f5:5c:06:a9:51:84:fd:3e:0d:73:e9:62:53: 54:95:7d:7e:8f:d1:a1:83:77:ad:d1:33:56:b8:9f:49:b0:72: 3e:5a:43:a7:4e:a9:9a:22:bd:e4:dc:4c:46:9f:27:83:c0:f7: 44:80:7d:33:9a:5a:87:44:2d:c6:c4:9b:16:19:07:17:6a:6e: a8:da:40:08:62:d6:45:ff:85:e2:40:e4:bd:87:87:31:24:e2: b5:4d:b8:32:89:bc:30:c3:5a:7a:c3:6e:b7:af:ef:e8:40:3b: fd:0e:48:25:61:ee:a0:eb:c7:3d:1c:fd:f0:ff:bf:0f:00:a1: f2:35:5e:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQRs00fdienJFjwPiUZGbMZtXbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA1MTIxMDAxMTdaFw0yNjA1MTMxMTA0MTdaMDMxMTAvBgNV BAMTKEFCNzA5RTVFM0I4RjM0RkQ2OTdBMTUwM0MzM0ZFOTE2OUI4QTBFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSB+RJgGTYe45lid0omikRMTF1 g0k5X4d2MtdiP3uDecuI1gxdOhhJAzk3eg9FKivt6kP0u7+VlzX48RxKlhDI9Fsj POrONOOIYL576XUokBl5ID3BxC536nzP5In1UV60UiQ8WIzVnhZgdT6HNrxiKm2O A/uH15QpD5canL0XGxBVzLSYDQqBmVpRCS/Nds/5VZ6DjqIzc9mZnj13FXfnnq4L HJ5b9tlR8WejalWGGhG3CyeCxbN07hT8itwuVxGr4XU0HCAHz614cR0Jpn/q4K7C Nqzz9gQlIExnBLODM+LxlkLTTuFmQkS20hJUV6ccW1iv3Cb4i2s37VrzDV/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3CeXjuPNP1pehUDwz/pFpuKDmAwHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKcC69tkLIb8TyZcS0aF9JaHhXxG+rHjM1S O1aTcJyP3qnO6KD+n4hv0HCgyTbyfYHf+yz7cv1wurzGTud/zpmUWtA1ucR4NnEn texUXHkTLMjkSlN8SmSxHBhKL3y40aji6/Q1ptiGBuNvOtiPt9vpuCz9oh7qGzsR R4kR89VENZcg9VwGqVGE/T4Nc+liU1SVfX6P0aGDd63RM1a4n0mwcj5aQ6dOqZoi veTcTEafJ4PA90SAfTOaWodELcbEmxYZBxdqbqjaQAhi1kX/heJA5L2HhzEk4rVN uDKJvDDDWnrDbrev7+hAO/0OSCVh7qDrxz0c/fD/vw8AofI1XkM= -----END CERTIFICATE-----Generated at Tue May 12 22:46:53 2026 by rpki-client