$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft File: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft (raw, json) Hash identifier: ndl+Ef0Rys4YccSBJyLo365VWr3spesZ9FSPN+XCg2M= Subject key identifier: 6A:A7:A4:84:A8:AE:37:3B:5D:7F:DA:BE:29:E8:A3:E3:B9:79:12:B1 Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 Certificate issuer: /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Certificate serial: 1CB2FEB6FA65F301F7A9D285F5AB51AC0A20CA47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:06:45 +0000 Manifest this update: Tue 12 May 2026 20:01:45 +0000 Manifest next update: Wed 13 May 2026 21:51:45 +0000 Files and hashes: 1: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=) 2: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=) 3: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=) 4: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=) 5: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=) 6: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: 1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=) 7: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl (hash: Czige9ptBvPoW55DLEXg+C2eNW6q06LsHZ0KJOu6y3c=) 8: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b2:fe:b6:fa:65:f3:01:f7:a9:d2:85:f5:ab:51:ac:0a:20:ca:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Validity Not Before: May 12 20:01:45 2026 GMT Not After : May 13 21:51:45 2026 GMT Subject: CN=6AA7A484A8AE373B5D7FDABE29E8A3E3B97912B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:0b:c6:71:f3:ec:66:09:25:cf:88:db:5f: 5e:51:cd:4b:d6:ad:12:30:34:e3:46:0a:ee:dc:13: 70:15:9a:91:46:e5:42:6a:b1:b5:6c:2d:54:d4:b8: a3:ac:fc:bb:f3:8a:9b:ef:96:84:1c:bd:7c:ac:f2: 28:47:23:47:c6:d5:43:98:16:eb:07:f5:42:34:64: 45:56:d9:72:3f:ca:f2:b2:4b:b8:5d:97:88:71:a9: 7f:28:d4:c8:ab:86:dc:8d:e2:12:47:81:f6:36:df: d5:05:a2:59:e7:04:fa:00:f6:50:59:ba:bf:b7:ee: ca:b8:fc:2f:0c:da:d1:c0:83:3d:33:00:bc:a1:96: 39:be:36:71:df:f6:71:80:12:10:f2:58:82:cc:f3: 1f:e1:67:b3:ad:3c:8e:83:23:0c:6e:33:06:66:87: 50:9f:ed:94:41:ea:5d:1a:4c:93:63:fb:f4:0c:e9: 8d:45:d5:ef:11:f1:ec:ea:3d:69:eb:4e:e9:31:aa: ec:90:33:10:62:4b:13:bc:79:07:7f:75:69:85:09: dd:6d:09:f5:a3:9d:64:15:f2:5e:37:dc:5d:1b:8f: 51:30:54:f4:1d:a3:8d:b1:25:f8:f0:20:69:04:9f: 00:bb:58:73:ee:c6:4f:0e:1a:12:04:0c:e1:16:f2: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A7:A4:84:A8:AE:37:3B:5D:7F:DA:BE:29:E8:A3:E3:B9:79:12:B1 X509v3 Authority Key Identifier: keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:46:10:b4:2a:d0:07:cf:08:85:d4:75:2a:85:43:04:3d:71: b3:ec:21:a1:8e:d0:a5:33:15:96:fd:c7:49:a2:ae:29:4b:a7: 1c:34:4e:68:43:78:0e:a2:68:de:f6:29:81:bd:b7:47:36:69: 1b:29:66:0a:da:52:20:4d:2d:04:ec:5d:bf:eb:04:ce:23:fb: d1:cb:c9:f4:11:59:e4:3c:b9:24:68:c9:a4:f5:27:a7:dc:8a: 59:4c:de:12:a4:91:99:6d:05:5a:ca:94:62:85:76:65:54:2f: 87:09:1c:24:9a:a1:7c:05:37:3d:30:53:0c:2a:b9:bb:30:60: 41:f0:9b:27:2b:06:ae:68:12:74:a4:80:ac:03:ca:06:74:a5: b7:74:61:ee:19:19:8b:c9:ee:eb:6f:fa:a6:59:00:43:0a:5c: 73:b1:9c:1d:24:d7:82:bb:2c:ce:c0:28:61:67:c1:a3:66:6e: 98:e2:80:b6:d5:66:fc:ef:e2:48:57:02:6e:ca:18:4c:ce:4d: e6:47:5b:60:a3:b0:5f:5f:be:62:d2:2a:9f:b5:9b:57:2d:99: f8:d1:73:49:4f:45:2a:95:7c:fe:8d:81:ee:e4:07:5a:29:7c: 82:21:64:71:18:c0:a2:fc:b4:74:93:7e:8b:e3:33:17:10:33: e2:c8:5b:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLL+tvpl8wH3qdKF9atRrAogykcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFF QURCNjhEMDAeFw0yNjA1MTIyMDAxNDVaFw0yNjA1MTMyMTUxNDVaMDMxMTAvBgNV BAMTKDZBQTdBNDg0QThBRTM3M0I1RDdGREFCRTI5RThBM0UzQjk3OTEyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4QvGcfPsZgklz4jbX15RzUvW rRIwNONGCu7cE3AVmpFG5UJqsbVsLVTUuKOs/LvzipvvloQcvXys8ihHI0fG1UOY FusH9UI0ZEVW2XI/yvKyS7hdl4hxqX8o1MirhtyN4hJHgfY239UFolnnBPoA9lBZ ur+37sq4/C8M2tHAgz0zALyhljm+NnHf9nGAEhDyWILM8x/hZ7OtPI6DIwxuMwZm h1Cf7ZRB6l0aTJNj+/QM6Y1F1e8R8ezqPWnrTukxquyQMxBiSxO8eQd/dWmFCd1t CfWjnWQV8l433F0bj1EwVPQdo42xJfjwIGkEnwC7WHPuxk8OGhIEDOEW8mmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaqekhKiuNztdf9q+Keij47l5ErEwHwYDVR0j BBgwFoAUxqhNi2VF/JGpKzxyP0FqEerbaNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkZDYxMzUtNTQ4Yy00ODgxLWFmNzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2 NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFFQURCNjhEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkE4NEQ4QjY1NDVGQzkxQTkyQjNDNzIzRjQxNkExMUVBREI2 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZB MTFFQURCNjhEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtGELQq0AfPCIXUdSqFQwQ9cbPsIaGO0KUz FZb9x0mirilLpxw0TmhDeA6iaN72KYG9t0c2aRspZgraUiBNLQTsXb/rBM4j+9HL yfQRWeQ8uSRoyaT1J6fcillM3hKkkZltBVrKlGKFdmVUL4cJHCSaoXwFNz0wUwwq ubswYEHwmycrBq5oEnSkgKwDygZ0pbd0Ye4ZGYvJ7utv+qZZAEMKXHOxnB0k14K7 LM7AKGFnwaNmbpjigLbVZvzv4khXAm7KGEzOTeZHW2CjsF9fvmLSKp+1m1ctmfjR c0lPRSqVfP6Nge7kB1opfIIhZHEYwKL8tHSTfovjMxcQM+LIW1g= -----END CERTIFICATE-----Generated at Wed May 13 06:48:46 2026 by rpki-client