$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft File: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft (raw, json) Hash identifier: Abvq1Yhpr/QhGBlGuexex3A8cBQ3dQtXhtIPh0R8EaU= Subject key identifier: B7:4C:9B:57:51:B8:4D:08:D1:DF:A6:72:1D:2A:4F:B6:1F:B7:5D:7A Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC Certificate issuer: /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Certificate serial: 66DB8E4B5A81C0C98E94958AB0B1E246F5F0C22F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:47:57 +0000 Manifest this update: Tue 12 May 2026 20:42:57 +0000 Manifest next update: Wed 13 May 2026 21:07:57 +0000 Files and hashes: 1: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: qG2bUOWwTNZiIfdaTpDPVpMrBFbrT7QpU559kWrN28I=) 2: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y=) 3: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl (hash: vzWIdF2BON+uSpcAFf0jPiKu8gdGgEFd2YDXwXNrKxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:db:8e:4b:5a:81:c0:c9:8e:94:95:8a:b0:b1:e2:46:f5:f0:c2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Validity Not Before: May 12 20:42:57 2026 GMT Not After : May 13 21:07:57 2026 GMT Subject: CN=B74C9B5751B84D08D1DFA6721D2A4FB61FB75D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:a5:dc:cd:9d:31:73:40:6a:b2:0e:4e:b8: d6:b7:70:cd:de:93:da:c0:2d:10:f2:5c:53:51:8c: 79:85:4d:e7:8d:3b:14:e1:93:32:09:e8:b3:d5:79: a9:e2:ef:cf:27:8a:9f:35:89:d2:ce:b4:ce:ca:6a: 65:bf:18:0b:05:8b:5b:2a:77:58:04:b9:5a:1a:b2: 6c:b6:91:6c:31:10:2a:2d:a9:91:60:c0:4d:15:96: 9e:9a:15:c8:47:82:e6:80:54:5c:3a:54:17:b4:a8: 69:75:e9:eb:86:ce:50:0c:ea:7d:d0:98:1b:f7:b1: 63:a5:76:93:6c:89:30:6e:3e:bf:ce:02:ad:6f:1a: 3b:d5:42:76:a5:46:7b:d5:d3:41:bf:c6:a0:fc:53: 58:bf:8d:19:43:94:33:a0:3b:69:63:39:4d:da:a9: 1f:b8:32:9f:65:7e:7a:46:84:08:65:67:54:c2:84: 4f:e9:31:50:28:f3:2f:95:fa:86:63:a3:c5:8b:94: 90:31:c5:50:d8:fd:4c:fe:49:cf:e6:28:c7:fb:83: 62:eb:47:a6:6f:b5:7b:85:51:a0:7e:e0:40:55:d3: e8:64:fc:f4:b3:e0:3b:5c:13:72:93:16:31:38:75: da:ed:e1:34:41:a0:9d:0e:60:29:1d:61:3e:87:ac: bc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4C:9B:57:51:B8:4D:08:D1:DF:A6:72:1D:2A:4F:B6:1F:B7:5D:7A X509v3 Authority Key Identifier: keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0b:62:37:d6:7d:28:9c:82:02:5c:e3:db:04:2e:47:52:fa: 41:6f:91:46:d2:8a:0c:e8:1d:ad:33:ec:c5:81:10:22:b8:60: 5e:d2:a4:bb:f8:e5:da:09:e8:42:b5:35:3e:a2:d5:9f:16:c7: 7e:6c:1e:d9:e9:cf:a5:f6:0a:8c:8f:9d:56:2e:47:ec:f6:4b: 38:04:39:fd:82:69:7b:b5:77:dc:15:e2:f4:fc:a4:4d:00:68: 2f:83:b4:ed:76:1a:d7:03:f6:2f:fc:bc:0b:00:b4:69:4a:b2: e2:6f:24:c9:a0:bb:bc:a3:11:9b:35:23:32:eb:c3:7f:23:7a: 63:92:ef:3a:88:b2:d2:c2:47:6b:a1:83:05:93:0d:88:bd:fb: f6:14:86:f6:12:8b:e8:8b:fc:6a:a8:87:86:b5:79:e3:75:b2: 0a:7e:3d:c5:69:50:3e:ad:43:e8:b2:05:b4:ba:b8:eb:93:e4: 72:15:c0:dd:d6:58:bb:8a:32:6d:70:1f:a3:f4:5b:43:64:66: ad:24:a3:6a:3c:bd:72:c0:dc:ee:e2:26:44:d4:a9:22:26:42: 13:c5:f4:ee:f0:26:92:2a:43:d8:21:de:7c:80:43:6a:56:65: e8:c2:c9:c1:66:24:bb:8f:b3:53:22:7f:78:14:4e:2c:5c:ce: 34:e7:a8:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtuOS1qBwMmOlJWKsLHiRvXwwi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZC N0ZBMTBCQzAeFw0yNjA1MTIyMDQyNTdaFw0yNjA1MTMyMTA3NTdaMDMxMTAvBgNV BAMTKEI3NEM5QjU3NTFCODREMDhEMURGQTY3MjFEMkE0RkI2MUZCNzVEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLqXczZ0xc0Bqsg5OuNa3cM3e k9rALRDyXFNRjHmFTeeNOxThkzIJ6LPVeani788nip81idLOtM7KamW/GAsFi1sq d1gEuVoasmy2kWwxECotqZFgwE0Vlp6aFchHguaAVFw6VBe0qGl16euGzlAM6n3Q mBv3sWOldpNsiTBuPr/OAq1vGjvVQnalRnvV00G/xqD8U1i/jRlDlDOgO2ljOU3a qR+4Mp9lfnpGhAhlZ1TChE/pMVAo8y+V+oZjo8WLlJAxxVDY/Uz+Sc/mKMf7g2Lr R6ZvtXuFUaB+4EBV0+hk/PSz4DtcE3KTFjE4ddrt4TRBoJ0OYCkdYT6HrLw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0ybV1G4TQjR36ZyHSpPth+3XXowHwYDVR0j BBgwFoAUbt0nblgPQBOeCvpKH6snVrf6ELwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0YjIwZDgtNTkxYi00MTUyLTk3NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1 ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZCN0ZBMTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUREMjc2RTU4MEY0MDEzOUUwQUZBNEExRkFCMjc1NkI3RkEx MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3 NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3 NTZCN0ZBMTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKULYjfWfSicggJc49sELkdS+kFvkUbSigzo Ha0z7MWBECK4YF7SpLv45doJ6EK1NT6i1Z8Wx35sHtnpz6X2CoyPnVYuR+z2SzgE Of2CaXu1d9wV4vT8pE0AaC+DtO12GtcD9i/8vAsAtGlKsuJvJMmgu7yjEZs1IzLr w38jemOS7zqIstLCR2uhgwWTDYi9+/YUhvYSi+iL/Gqoh4a1eeN1sgp+PcVpUD6t Q+iyBbS6uOuT5HIVwN3WWLuKMm1wH6P0W0NkZq0ko2o8vXLA3O7iJkTUqSImQhPF 9O7wJpIqQ9gh3nyAQ2pWZejCycFmJLuPs1Mif3gUTixczjTnqH4= -----END CERTIFICATE-----Generated at Wed May 13 05:25:26 2026 by rpki-client