$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: Ob9fIjxwri2KmuOuzExrpYk8gjkDhgBV0ufdJ17BcfM= Subject key identifier: 83:80:70:8A:4B:06:DB:C4:65:5B:01:FD:86:41:B3:BF:92:6C:71:F2 Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 6E06BDE65C785BB1F133125E2CC224286AE7F5E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:50 +0000 Manifest this update: Tue 12 May 2026 19:04:50 +0000 Manifest next update: Wed 13 May 2026 20:26:50 +0000 Files and hashes: 1: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) 2: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) 3: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) 4: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: DaCWRA/IZG9JbKH//pRSYnSQ6ZDLi3N3v3ds6QgT7bk=) 5: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 6: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:06:bd:e6:5c:78:5b:b1:f1:33:12:5e:2c:c2:24:28:6a:e7:f5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: May 12 19:04:50 2026 GMT Not After : May 13 20:26:50 2026 GMT Subject: CN=8380708A4B06DBC4655B01FD8641B3BF926C71F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:98:e5:15:61:e0:37:49:15:36:a9:8b:d3: 42:42:a5:19:eb:1e:27:38:fe:50:aa:f3:14:e9:38: 6f:db:9c:07:b1:f4:7d:16:6c:82:0f:4e:f0:6b:8e: fe:e3:d3:51:9e:93:c7:a0:2f:42:35:8b:24:a2:ec: 95:ac:75:0f:45:26:eb:99:c1:c3:ad:c5:df:33:2f: 18:4a:92:ff:ef:2c:2b:a7:83:46:3e:54:02:51:d9: 4e:a4:87:0d:ba:29:6f:56:fd:b7:ed:92:c9:81:0a: 8d:2c:30:50:8b:cc:26:32:cd:b1:3c:e0:91:f9:b2: 96:84:33:64:62:a3:39:33:60:0b:71:39:e1:eb:60: 21:90:0f:b2:50:94:c4:d9:24:27:94:cc:a6:08:58: 08:e6:3f:9c:6a:26:4c:88:92:ee:44:97:27:dc:82: c7:e6:7c:bf:6e:98:37:2c:3e:15:0b:7b:f8:98:5a: 50:6b:91:db:f2:b0:27:74:16:b2:f7:d7:7a:b6:89: 1b:4b:36:70:b7:b3:1b:66:fb:bf:c5:a9:04:dd:6d: 0e:c0:2f:35:25:e4:44:37:04:b1:2f:fc:9d:51:23: 47:94:13:c6:1a:ee:b8:d7:3b:c8:21:ec:e7:98:03: cb:bc:13:4b:70:6e:a7:82:c2:06:b6:25:8b:46:29: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:80:70:8A:4B:06:DB:C4:65:5B:01:FD:86:41:B3:BF:92:6C:71:F2 X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:3f:65:82:0f:86:86:4b:e3:e9:5c:7c:b2:48:91:c1:a1:a3: 08:5e:75:68:6c:52:94:b8:d2:cc:6c:59:0c:a3:a8:f6:d2:65: c7:d5:e5:dd:de:44:23:74:f1:5d:59:9b:cd:59:16:f6:0f:31: a6:ab:ae:18:ac:26:7f:0a:61:b1:56:87:79:31:32:02:71:0f: 39:ed:45:16:19:41:da:ec:af:95:e7:86:bf:1b:51:d9:c8:35: 6d:77:ed:fe:95:15:42:40:6b:ed:72:03:0f:30:17:6e:21:65: 8a:00:21:da:7a:17:51:dc:43:5b:83:58:03:58:5b:13:60:db: d7:e4:73:57:2f:5b:e5:18:ad:76:5a:0e:78:04:bb:f2:d3:57: 6c:56:c9:82:7c:01:ed:42:b3:13:33:12:0a:4b:6c:0e:ef:d6: dc:ee:11:74:34:19:8e:5b:cb:51:54:b4:9f:2c:af:da:b6:e6: 09:72:aa:f5:de:63:5f:60:67:aa:46:60:18:3d:a0:10:41:22: 16:6b:d1:37:2e:c0:b1:7a:2f:42:bf:bf:0d:e8:5f:48:7a:e4: 59:18:b7:72:b4:65:09:77:9a:a6:f7:69:c0:f2:77:2d:76:c9: e5:92:d7:ac:02:37:38:f4:a0:de:c3:c8:f6:a0:0b:e1:42:de: d2:b3:f3:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbga95lx4W7HxMxJeLMIkKGrn9eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjA1MTIxOTA0NTBaFw0yNjA1MTMyMDI2NTBaMDMxMTAvBgNV BAMTKDgzODA3MDhBNEIwNkRCQzQ2NTVCMDFGRDg2NDFCM0JGOTI2QzcxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78JjlFWHgN0kVNqmL00JCpRnr Hic4/lCq8xTpOG/bnAex9H0WbIIPTvBrjv7j01Gek8egL0I1iySi7JWsdQ9FJuuZ wcOtxd8zLxhKkv/vLCung0Y+VAJR2U6khw26KW9W/bftksmBCo0sMFCLzCYyzbE8 4JH5spaEM2RiozkzYAtxOeHrYCGQD7JQlMTZJCeUzKYIWAjmP5xqJkyIku5Elyfc gsfmfL9umDcsPhULe/iYWlBrkdvysCd0FrL313q2iRtLNnC3sxtm+7/FqQTdbQ7A LzUl5EQ3BLEv/J1RI0eUE8Ya7rjXO8gh7OeYA8u8E0twbqeCwga2JYtGKXH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg4BwiksG28RlWwH9hkGzv5JscfIwHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFF NTkxRUY2RDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8/ZYIPhoZL4+lcfLJIkcGhowhedWhsUpS4 0sxsWQyjqPbSZcfV5d3eRCN08V1Zm81ZFvYPMaarrhisJn8KYbFWh3kxMgJxDznt RRYZQdrsr5Xnhr8bUdnINW137f6VFUJAa+1yAw8wF24hZYoAIdp6F1HcQ1uDWANY WxNg29fkc1cvW+UYrXZaDngEu/LTV2xWyYJ8Ae1CsxMzEgpLbA7v1tzuEXQ0GY5b y1FUtJ8sr9q25glyqvXeY19gZ6pGYBg9oBBBIhZr0TcuwLF6L0K/vw3oX0h65FkY t3K0ZQl3mqb3acDydy12yeWS16wCNzj0oN7DyPagC+FC3tKz840= -----END CERTIFICATE-----Generated at Wed May 13 11:04:03 2026 by rpki-client