$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft File: C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft (raw, json) Hash identifier: 1iYbS0ghR1D7SZaQ3zx0IF0fgUACBel/UPNnECwljmY= Subject key identifier: CF:2A:9B:37:34:12:D6:51:06:EF:65:57:78:29:D3:9F:6E:0B:91:AC Authority key identifier: C6:27:05:53:A8:81:A5:6C:93:6E:6A:E1:3C:AA:EB:E1:AC:D0:C2:25 Certificate issuer: /CN=C6270553A881A56C936E6AE13CAAEBE1ACD0C225 Certificate serial: 6D5FFBE2CEFD7C4DFE92F95F0A4FC8E3245F5682 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:51 +0000 Manifest this update: Tue 12 May 2026 19:04:51 +0000 Manifest next update: Wed 13 May 2026 22:38:51 +0000 Files and hashes: 1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: ac6CyTfBjiQzVpb4Xi4EMazJXA+5euh8xSCepgGjjfU=) 2: C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl (hash: 67gUwl/7lxwgGWuDC+/nmkPyI6n2lFJ24pwcnBTStpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5f:fb:e2:ce:fd:7c:4d:fe:92:f9:5f:0a:4f:c8:e3:24:5f:56:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6270553A881A56C936E6AE13CAAEBE1ACD0C225 Validity Not Before: May 12 19:04:51 2026 GMT Not After : May 13 22:38:51 2026 GMT Subject: CN=CF2A9B373412D65106EF65577829D39F6E0B91AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:19:35:e9:ba:52:12:0a:df:81:8e:45:23:b1: f8:b4:28:eb:df:11:6f:dc:35:63:41:ed:81:e0:88: 16:15:d1:b7:26:12:d9:5e:e2:26:46:4f:08:8d:7d: 3f:42:0f:26:25:a8:bc:c9:52:02:b0:dd:08:c3:e6: 3e:ac:b8:df:c0:4f:19:52:fc:3b:62:3a:1d:91:ac: 49:4d:29:57:20:2d:ab:12:86:cd:23:fe:79:99:3c: 7e:73:e3:8f:c2:5b:ae:f4:2f:08:e5:18:49:0e:ff: 1d:2f:49:20:d1:9d:a1:e6:70:48:17:4b:46:d5:37: af:db:ae:7a:88:ee:e2:2e:f2:4b:e9:04:41:f8:4b: 69:78:68:8f:11:ed:5f:cf:42:cf:01:06:bd:23:49: a0:c5:07:d3:60:b8:22:f7:c2:26:1c:3d:79:3c:95: 64:e5:ae:d8:85:7e:53:51:85:f4:08:91:63:0b:da: 9f:f4:2e:36:35:8d:7d:f9:73:50:8e:80:0b:d6:9f: c3:78:26:d1:55:92:ef:af:39:bd:d4:aa:ba:e7:03: 04:6c:ee:8e:92:fb:6d:c8:1b:58:8e:aa:1d:2e:5c: 71:73:39:0a:c8:65:b2:64:0e:39:df:c4:a7:01:4c: 4e:2c:89:59:61:6f:17:24:2b:69:45:77:68:37:49: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2A:9B:37:34:12:D6:51:06:EF:65:57:78:29:D3:9F:6E:0B:91:AC X509v3 Authority Key Identifier: keyid:C6:27:05:53:A8:81:A5:6C:93:6E:6A:E1:3C:AA:EB:E1:AC:D0:C2:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:5b:28:32:9f:b4:52:84:a8:df:c4:ab:41:2a:8b:4e:f3:5a: 07:0c:4c:c4:d7:f6:8d:1b:82:69:7e:0a:96:40:27:ad:ae:fa: 37:95:80:ae:c0:96:57:dd:f8:6e:16:f5:95:0c:23:b0:51:6d: fa:71:65:20:48:f8:0e:1b:fd:92:32:fa:77:f9:0a:54:1d:f1: ae:b1:24:66:ac:67:cc:62:73:41:cd:31:0e:5f:83:18:c5:26: 81:e4:cd:65:67:72:96:20:b6:e5:43:8d:b6:c4:f1:2b:a0:c9: 4c:4b:4f:da:e9:5c:93:87:4a:a7:37:ce:34:84:4b:c9:29:87: d7:68:5d:f1:c0:5c:e1:54:58:61:62:96:2f:d7:ca:58:4f:3b: b5:34:e9:4a:1f:9f:74:99:42:01:a9:a3:c8:18:30:f0:d4:4d: aa:93:cf:56:fc:e3:d4:d1:50:89:ac:99:8d:02:69:5b:0f:2d: 36:27:4d:77:14:23:6e:2f:e9:00:bf:72:ce:33:c4:85:9c:71: 05:fd:16:f6:6c:31:2a:17:5a:3e:a3:09:3a:bf:e2:6e:04:ce: c1:7a:01:73:18:b0:a4:5c:79:f5:ad:e0:ff:99:2e:89:78:12: c4:89:11:7b:9f:38:62:2d:91:28:b6:98:2e:cc:4c:c0:b9:10: db:f1:e6:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbV/74s79fE3+kvlfCk/I4yRfVoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyNzA1NTNBODgxQTU2QzkzNkU2QUUxM0NBQUVCRTFB Q0QwQzIyNTAeFw0yNjA1MTIxOTA0NTFaFw0yNjA1MTMyMjM4NTFaMDMxMTAvBgNV BAMTKENGMkE5QjM3MzQxMkQ2NTEwNkVGNjU1Nzc4MjlEMzlGNkUwQjkxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGTXpulISCt+BjkUjsfi0KOvf EW/cNWNB7YHgiBYV0bcmEtle4iZGTwiNfT9CDyYlqLzJUgKw3QjD5j6suN/ATxlS /DtiOh2RrElNKVcgLasShs0j/nmZPH5z44/CW670LwjlGEkO/x0vSSDRnaHmcEgX S0bVN6/brnqI7uIu8kvpBEH4S2l4aI8R7V/PQs8BBr0jSaDFB9NguCL3wiYcPXk8 lWTlrtiFflNRhfQIkWML2p/0LjY1jX35c1COgAvWn8N4JtFVku+vOb3UqrrnAwRs 7o6S+23IG1iOqh0uXHFzOQrIZbJkDjnfxKcBTE4siVlhbxckK2lFd2g3SUXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzyqbNzQS1lEG72VXeCnTn24LkawwHwYDVR0j BBgwFoAUxicFU6iBpWyTbmrhPKrr4azQwiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM5OTFmN2EtMGE3MS00ZjBkLTkzM2YtZWNmODEzNTMwMjc0LzAvQzYyNzA1NTNB ODgxQTU2QzkzNkU2QUUxM0NBQUVCRTFBQ0QwQzIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNjI3MDU1M0E4ODFBNTZDOTM2RTZBRTEzQ0FBRUJFMUFDRDBD MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQzYyNzA1NTNBODgxQTU2QzkzNkU2QUUxM0NBQUVC RTFBQ0QwQzIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRbKDKftFKEqN/Eq0Eqi07zWgcMTMTX9o0b gml+CpZAJ62u+jeVgK7Allfd+G4W9ZUMI7BRbfpxZSBI+A4b/ZIy+nf5ClQd8a6x JGasZ8xic0HNMQ5fgxjFJoHkzWVncpYgtuVDjbbE8SugyUxLT9rpXJOHSqc3zjSE S8kph9doXfHAXOFUWGFili/XylhPO7U06Uofn3SZQgGpo8gYMPDUTaqTz1b849TR UImsmY0CaVsPLTYnTXcUI24v6QC/cs4zxIWccQX9FvZsMSoXWj6jCTq/4m4EzsF6 AXMYsKRcefWt4P+ZLol4EsSJEXufOGItkSi2mC7MTMC5ENvx5q0= -----END CERTIFICATE-----Generated at Wed May 13 07:17:59 2026 by rpki-client