$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json) Hash identifier: 9LtUz5RNZfOz016hwNc/N9VKCpFO78s5W2fibZhJ3Jc= Subject key identifier: BA:A4:08:D4:5D:03:7D:23:2B:D5:F8:A0:89:13:B2:95:B0:01:D6:36 Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Certificate serial: 63EAD27C0ED26A256AD40DEF33F1ADD9166F438F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:11:55 +0000 Manifest this update: Tue 12 May 2026 06:06:55 +0000 Manifest next update: Wed 13 May 2026 07:21:55 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=) 2: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: VSEW1/0LdPbrTAD/ZjBg1VlcAeETXUTJtqB2G4FAjDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ea:d2:7c:0e:d2:6a:25:6a:d4:0d:ef:33:f1:ad:d9:16:6f:43:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Validity Not Before: May 12 06:06:55 2026 GMT Not After : May 13 07:21:55 2026 GMT Subject: CN=BAA408D45D037D232BD5F8A08913B295B001D636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:5d:b4:43:32:30:e5:8c:2d:27:46:05:ba: 14:79:b9:dc:9f:01:c4:42:7c:d3:4f:bb:be:bb:c6: 8d:35:73:63:59:58:97:45:15:6d:49:0f:81:15:76: da:e7:b6:72:31:11:dd:23:02:cc:4c:c7:c8:b9:29: f3:91:ad:c5:6b:02:85:a2:65:a6:c0:d6:b2:1a:e9: 58:15:7e:f9:2d:cb:48:45:05:79:b4:ba:ac:ef:50: 3e:26:1a:89:96:b0:3c:a4:95:77:42:df:27:69:26: eb:8b:00:e2:62:bf:05:e7:b9:fa:6d:30:33:c6:4d: e5:47:70:9b:8f:e7:4e:0e:d0:f1:02:a4:93:b0:1a: f4:22:d9:32:fc:85:f9:51:d8:e9:11:2d:d7:28:64: 23:86:54:fb:b9:e5:ed:52:5b:00:ca:03:96:ce:d0: ff:07:58:65:74:d1:6a:1b:42:cb:b7:50:9f:31:f1: 45:36:16:ec:e4:59:43:59:0e:9e:46:60:c5:ec:70: c2:53:15:5b:4c:78:dd:9c:26:3d:5f:46:81:1a:6d: 96:2e:e3:49:0d:3f:d0:4a:2c:28:48:ad:34:a5:ca: 6d:7d:b1:63:ca:5c:12:28:f5:c1:80:7c:0c:1c:86: a6:49:86:31:da:51:ce:98:80:ca:a1:74:3a:98:1c: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A4:08:D4:5D:03:7D:23:2B:D5:F8:A0:89:13:B2:95:B0:01:D6:36 X509v3 Authority Key Identifier: keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ee:eb:77:71:e1:dd:1e:62:2d:11:4d:db:b0:6e:12:d4:6b: 72:70:b7:10:f3:e8:45:d2:34:28:1d:2f:0c:5d:d4:ee:22:be: 19:37:23:57:4c:f6:42:6a:9b:1b:4f:9b:6f:a0:36:6d:bb:c1: 2a:4d:48:a4:f8:46:3c:c4:6e:fd:c7:b5:2d:a1:ff:4a:d5:93: 54:7c:4f:4d:d2:8f:27:02:68:ac:2b:9b:87:a7:a7:e3:27:f6: 59:a9:06:91:0e:2f:42:c3:2a:73:26:3d:f0:cb:fd:9a:55:52: c9:f2:8c:42:de:d2:35:e9:08:93:e3:61:b7:15:e8:91:b5:93: af:d3:cc:ef:30:56:d0:fb:93:23:a0:5d:82:79:31:14:82:a8: c7:66:f3:83:37:e9:32:b8:60:e1:39:eb:1a:4e:30:b3:60:29: 2e:7a:b3:13:64:f4:01:85:11:0b:52:ed:48:32:8e:d8:a2:6c: 43:f0:30:e1:b2:ea:05:c8:e6:99:06:b1:b7:7b:fe:4c:39:b5: 63:3b:80:71:98:1e:9f:59:a7:b6:cd:0f:b3:15:47:60:45:d1: 06:59:1d:23:91:17:6f:e5:c1:93:83:b0:17:41:1c:c0:2a:27: 75:eb:e5:e8:a5:a0:f6:54:0d:b4:0c:26:1d:ca:d9:ad:69:ed: 24:e2:c8:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+rSfA7SaiVq1A3vM/Gt2RZvQ48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERCRjlE MjIxRjk2RjAeFw0yNjA1MTIwNjA2NTVaFw0yNjA1MTMwNzIxNTVaMDMxMTAvBgNV BAMTKEJBQTQwOEQ0NUQwMzdEMjMyQkQ1RjhBMDg5MTNCMjk1QjAwMUQ2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDp120QzIw5YwtJ0YFuhR5udyf AcRCfNNPu767xo01c2NZWJdFFW1JD4EVdtrntnIxEd0jAsxMx8i5KfORrcVrAoWi ZabA1rIa6VgVfvkty0hFBXm0uqzvUD4mGomWsDyklXdC3ydpJuuLAOJivwXnufpt MDPGTeVHcJuP504O0PECpJOwGvQi2TL8hflR2OkRLdcoZCOGVPu55e1SWwDKA5bO 0P8HWGV00WobQsu3UJ8x8UU2FuzkWUNZDp5GYMXscMJTFVtMeN2cJj1fRoEabZYu 40kNP9BKLChIrTSlym19sWPKXBIo9cGAfAwchqZJhjHaUc6YgMqhdDqYHAJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuqQI1F0DfSMr1figiROylbAB1jYwHwYDVR0j BBgwFoAU9rhv4g5zoi2aNTzJLtjb+dIh+W8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EzNzZhNmUtM2VjYS00ZjczLThkMTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIw RTczQTIyRDlBMzUzQ0M5MkVEOERCRjlEMjIxRjk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNkI4NkZFMjBFNzNBMjJEOUEzNTNDQzkyRUQ4REJGOUQyMjFG OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERC RjlEMjIxRjk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/u63dx4d0eYi0RTduwbhLUa3JwtxDz6EXS NCgdLwxd1O4ivhk3I1dM9kJqmxtPm2+gNm27wSpNSKT4RjzEbv3HtS2h/0rVk1R8 T03SjycCaKwrm4enp+Mn9lmpBpEOL0LDKnMmPfDL/ZpVUsnyjELe0jXpCJPjYbcV 6JG1k6/TzO8wVtD7kyOgXYJ5MRSCqMdm84M36TK4YOE56xpOMLNgKS56sxNk9AGF EQtS7UgyjtiibEPwMOGy6gXI5pkGsbd7/kw5tWM7gHGYHp9Zp7bND7MVR2BF0QZZ HSORF2/lwZODsBdBHMAqJ3Xr5eiloPZUDbQMJh3K2a1p7STiyAA= -----END CERTIFICATE-----Generated at Tue May 12 23:27:52 2026 by rpki-client