$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft File: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft (raw, json) Hash identifier: J/KZx3ZzGDsAwMSAE42lExyMWzFn+nU6+4/gDNUXqlA= Subject key identifier: 0F:3D:C6:1C:1E:C6:7E:E3:26:C7:78:B7:31:83:F4:98:26:A2:8C:EB Authority key identifier: 6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 Certificate issuer: /CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Certificate serial: 47FF0123FED49BCD687E1F743DC06310A30314D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:49:42 +0000 Manifest this update: Tue 12 May 2026 21:44:42 +0000 Manifest next update: Wed 13 May 2026 21:49:42 +0000 Files and hashes: 1: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl (hash: nf3RmnxSoxONTgz5X1B9V6s+jO9i0QOXuB30vILouDs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ff:01:23:fe:d4:9b:cd:68:7e:1f:74:3d:c0:63:10:a3:03:14:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Validity Not Before: May 12 21:44:42 2026 GMT Not After : May 13 21:49:42 2026 GMT Subject: CN=0F3DC61C1EC67EE326C778B73183F49826A28CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bc:8e:a5:0b:f3:05:7b:eb:2a:d7:5d:d6:29: bd:2b:0d:39:1b:af:9f:c2:78:25:1e:f3:1a:42:6b: 73:f0:de:4c:2c:da:5a:bf:31:17:27:29:41:35:35: 88:a9:16:2d:5f:c7:a8:1d:88:ee:d5:4a:a6:40:c1: e7:3e:fa:be:2f:18:69:7e:8c:6d:ee:5c:58:fa:4e: cf:b8:76:e2:92:a5:ab:fa:30:02:25:f4:45:19:dc: 48:50:75:68:60:97:78:3a:22:15:88:91:42:09:80: 00:be:51:5d:19:7b:cc:ca:90:13:b9:6d:b2:70:70: 63:3c:24:0d:eb:2e:34:bd:cc:76:06:0e:e6:32:4e: 38:03:3e:b3:a7:15:9c:53:61:b4:13:8f:20:85:7d: b6:d3:82:57:ab:f6:51:0b:59:ea:36:19:67:de:cf: 13:1c:88:0d:64:c8:cb:9f:ff:22:95:8e:71:13:55: 0f:4e:6b:ae:ad:70:73:f2:39:34:3d:d4:84:dd:c5: 60:3e:d9:42:09:91:77:0c:54:8f:a4:6e:76:01:b0: 84:e1:63:7b:83:4b:bd:57:30:2f:46:84:52:d4:6e: 21:f5:b4:7a:d6:f8:b5:3c:40:cc:93:c2:44:aa:7c: 8f:68:d4:82:7a:ca:b5:15:35:14:aa:36:15:db:b6: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:C6:1C:1E:C6:7E:E3:26:C7:78:B7:31:83:F4:98:26:A2:8C:EB X509v3 Authority Key Identifier: keyid:6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d7:41:b0:b4:c3:99:27:23:f1:50:ee:76:d3:b8:ce:64:42: 12:51:99:17:5c:91:46:8e:40:08:55:84:71:6a:df:16:1e:e1: 49:26:f8:d0:70:a4:a0:0e:fa:95:89:cd:c3:2c:c6:b4:a7:e3: a4:87:22:3e:6c:17:26:be:00:5d:f2:aa:94:aa:8f:6a:74:be: c5:f9:39:a6:14:a6:f6:41:17:50:93:fb:03:4c:d3:d8:e1:8b: 20:28:eb:eb:81:84:98:cc:40:2f:1c:2e:55:e3:2e:23:3f:6c: f7:43:1b:4f:92:d7:a4:7c:12:0b:1a:dc:47:95:09:84:f3:a5: ec:94:4a:19:07:ea:ec:63:64:8c:1b:8b:43:83:cb:c2:89:58: af:62:5e:0c:27:d0:4d:1e:dd:6b:f2:f9:f3:c8:03:4a:d0:3c: 7a:c5:01:c0:5b:4f:8b:c6:51:24:4a:ce:02:cb:c2:d6:39:87: f1:c1:6b:6a:8e:d7:6f:a2:73:02:13:f6:70:b8:fe:50:db:45: f6:b8:87:25:be:0c:9c:a9:51:b8:6d:60:9e:02:ec:11:06:10: 4b:24:b7:ef:ba:32:09:77:69:ff:9f:90:9b:44:95:f7:f6:1e: 86:17:72:15:ef:4f:d7:4d:d6:41:fb:8b:22:c1:e5:cb:cf:6a: ce:a7:ab:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/8BI/7Um81ofh90PcBjEKMDFNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFF NENENjUyMzAeFw0yNjA1MTIyMTQ0NDJaFw0yNjA1MTMyMTQ5NDJaMDMxMTAvBgNV BAMTKDBGM0RDNjFDMUVDNjdFRTMyNkM3NzhCNzMxODNGNDk4MjZBMjhDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvvI6lC/MFe+sq113WKb0rDTkb r5/CeCUe8xpCa3Pw3kws2lq/MRcnKUE1NYipFi1fx6gdiO7VSqZAwec++r4vGGl+ jG3uXFj6Ts+4duKSpav6MAIl9EUZ3EhQdWhgl3g6IhWIkUIJgAC+UV0Ze8zKkBO5 bbJwcGM8JA3rLjS9zHYGDuYyTjgDPrOnFZxTYbQTjyCFfbbTgler9lELWeo2GWfe zxMciA1kyMuf/yKVjnETVQ9Oa66tcHPyOTQ91ITdxWA+2UIJkXcMVI+kbnYBsITh Y3uDS71XMC9GhFLUbiH1tHrW+LU8QMyTwkSqfI9o1IJ6yrUVNRSqNhXbtgMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDz3GHB7GfuMmx3i3MYP0mCaijOswHwYDVR0j BBgwFoAUbwaxfDj7ehmeSoUyE8BS6uTNZSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0Mz OEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFFNENENjUyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjA2QjE3QzM4RkI3QTE5OUU0QTg1MzIxM0MwNTJFQUU0Q0Q2 NTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUy RUFFNENENjUyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDXQbC0w5knI/FQ7nbTuM5kQhJRmRdckUaO QAhVhHFq3xYe4Ukm+NBwpKAO+pWJzcMsxrSn46SHIj5sFya+AF3yqpSqj2p0vsX5 OaYUpvZBF1CT+wNM09jhiyAo6+uBhJjMQC8cLlXjLiM/bPdDG0+S16R8Egsa3EeV CYTzpeyUShkH6uxjZIwbi0ODy8KJWK9iXgwn0E0e3Wvy+fPIA0rQPHrFAcBbT4vG USRKzgLLwtY5h/HBa2qO12+icwIT9nC4/lDbRfa4hyW+DJypUbhtYJ4C7BEGEEsk t++6Mgl3af+fkJtElff2HoYXchXvT9dN1kH7iyLB5cvPas6nq0M= -----END CERTIFICATE-----Generated at Wed May 13 01:44:27 2026 by rpki-client