$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft File: 6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft (raw, json) Hash identifier: LLWb9ipry5O+oktZux/ISjOiz4LnWXCS7rXKAE6o38w= Subject key identifier: 55:37:C8:98:A1:C8:4D:5E:95:75:54:72:AA:31:70:FD:A5:B1:7F:1D Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9 Certificate issuer: /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9 Certificate serial: 04792FEBA3B4D8805F63943710B538B8CE83268E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:35 +0000 Manifest this update: Tue 12 May 2026 17:32:35 +0000 Manifest next update: Wed 13 May 2026 21:14:35 +0000 Files and hashes: 1: 6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl (hash: dNjRScbdg8vAxJGDJrAjmmCbZ0a+3iE3jnpORRGIuXE=) 2: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: 9uJvmK0FEVjdzGyh4dQe6BsAkTDpNstIPHLao/5zXyU=) 3: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: mxX69NxkQDSLUTtAEZdfQh+amukj4aw1fdKwNMn1bzo=) 4: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: gYR/crxSzk7AQwYudgq7gQ3UPT8cduEgo5awnIlpiZ4=) 5: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: vn6fDh5P+Nx59npDGlgkHszkp/jNfWKmlW62yBSFpu8=) 6: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: XiVsdam82vnDzv3JMHx/F/L9OyD20RlHDfFmGKOXSAk=) 7: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: OKpuxVQGY6BsX3athPfFW58QS54IISfKzcjxg/HXJIw=) 8: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: hGcThccPbRGAGg17WeoAE2cy8dF6FfNo3FqZCcptl04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:79:2f:eb:a3:b4:d8:80:5f:63:94:37:10:b5:38:b8:ce:83:26:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9 Validity Not Before: May 12 17:32:35 2026 GMT Not After : May 13 21:14:35 2026 GMT Subject: CN=5537C898A1C84D5E95755472AA3170FDA5B17F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:32:3b:97:72:06:5f:d7:86:ca:d0:13:ca: b0:a2:31:78:ce:dd:a4:85:e6:de:3f:7e:d7:fd:86: 08:15:16:47:cb:d9:80:08:07:8a:9c:89:f9:ad:ff: 10:74:51:ec:aa:60:e0:f5:66:36:21:ff:1e:60:06: 29:78:89:35:a1:83:25:15:c0:4a:90:fb:ae:bc:e6: fc:51:c2:23:e6:97:0a:47:b5:ae:88:6e:77:32:53: a8:42:5a:60:4c:cd:28:58:f4:d8:4b:87:58:cb:61: 23:86:0d:88:d9:f5:47:b1:f8:48:71:b8:a3:4b:00: 87:3e:bf:b1:cc:4f:38:b9:68:88:46:b4:d6:ae:48: 33:fa:30:e0:6b:34:d4:3e:14:73:a5:e9:cc:03:b4: ac:a5:38:cf:b5:84:d8:56:92:18:b3:13:05:bf:61: 72:2a:9b:e8:6c:07:49:26:20:b8:3b:93:5c:41:fe: 52:76:02:cc:6f:03:fc:40:41:52:23:17:dc:de:fb: 49:42:e4:c7:a1:95:fa:34:87:4d:00:2d:23:4d:68: e1:32:81:8c:17:a0:81:38:96:cc:2e:80:78:5a:6c: 0f:3c:92:09:8d:ed:f4:d5:da:6a:8a:9a:9b:cd:78: 77:2b:e8:0f:46:40:3e:64:af:51:f7:38:a2:d4:13: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:37:C8:98:A1:C8:4D:5E:95:75:54:72:AA:31:70:FD:A5:B1:7F:1D X509v3 Authority Key Identifier: keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d0:8d:57:22:9c:01:8a:38:e5:16:4a:72:8e:c5:0d:1d:56: 78:ba:a8:a1:10:d7:67:01:de:22:1b:e8:39:26:05:db:5b:be: e0:19:0e:cb:0a:38:c4:16:2e:1b:ef:74:52:f4:a9:27:29:57: 8b:42:1e:b7:f3:59:ad:3c:b5:9d:43:a7:f7:08:c1:c5:06:81: 1b:4f:08:95:50:eb:64:3a:7b:79:b6:c4:66:ba:d0:b9:4b:cf: 9f:ba:44:e8:c4:51:69:29:5e:d5:dd:d6:f7:95:fb:5c:50:b6: af:39:02:cc:bd:d9:e1:9f:91:de:a1:d2:e1:cc:6c:f7:d0:cf: 60:2f:59:d7:fc:db:9f:20:c0:25:af:ae:1f:4a:9b:04:e7:80: f8:78:d3:0a:41:b7:c6:17:81:00:45:74:5c:1e:f0:4e:7f:93: 2c:a3:28:bc:f7:d7:9d:d1:79:4d:9a:f8:96:64:f3:79:54:1f: 90:5b:5d:59:91:46:65:31:53:d3:bb:3d:e2:b4:57:f2:f6:5c: ca:61:39:4c:17:e2:52:cc:f4:22:31:3a:d1:3e:3c:77:37:ad: bf:eb:5a:cf:f5:b6:e8:1d:76:42:3e:95:1f:fb:e1:16:cb:4b: bf:a1:a6:72:1c:0e:bd:db:07:e4:4d:af:98:b7:b8:a4:33:91: 0d:ad:19:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHkv66O02IBfY5Q3ELU4uM6DJo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4RUUyNTVFMjIxNkZFM0VDOTkzNjdDRkJDQzlBODU2 M0YyQzBFOTAeFw0yNjA1MTIxNzMyMzVaFw0yNjA1MTMyMTE0MzVaMDMxMTAvBgNV BAMTKDU1MzdDODk4QTFDODRENUU5NTc1NTQ3MkFBMzE3MEZEQTVCMTdGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6DI7l3IGX9eGytATyrCiMXjO 3aSF5t4/ftf9hggVFkfL2YAIB4qcifmt/xB0UeyqYOD1ZjYh/x5gBil4iTWhgyUV wEqQ+6685vxRwiPmlwpHta6IbncyU6hCWmBMzShY9NhLh1jLYSOGDYjZ9Uex+Ehx uKNLAIc+v7HMTzi5aIhGtNauSDP6MOBrNNQ+FHOl6cwDtKylOM+1hNhWkhizEwW/ YXIqm+hsB0kmILg7k1xB/lJ2AsxvA/xAQVIjF9ze+0lC5Mehlfo0h00ALSNNaOEy gYwXoIE4lswugHhabA88kgmN7fTV2mqKmpvNeHcr6A9GQD5kr1H3OKLUE0l1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVTfImKHITV6VdVRyqjFw/aWxfx0wHwYDVR0j BBgwFoAUb47iVeIhb+PsmTZ8+8yahWPywOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiY2MwMGQtY2U3OS00MjE2LWE2MmItZTNkNTBjYzc5NDQyLzAvNkY4RUUyNTVF MjIxNkZFM0VDOTkzNjdDRkJDQzlBODU2M0YyQzBFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjhFRTI1NUUyMjE2RkUzRUM5OTM2N0NGQkNDOUE4NTYzRjJD MEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvNkY4RUUyNTVFMjIxNkZFM0VDOTkzNjdDRkJDQzlB ODU2M0YyQzBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbQjVcinAGKOOUWSnKOxQ0dVni6qKEQ12cB 3iIb6DkmBdtbvuAZDssKOMQWLhvvdFL0qScpV4tCHrfzWa08tZ1Dp/cIwcUGgRtP CJVQ62Q6e3m2xGa60LlLz5+6ROjEUWkpXtXd1veV+1xQtq85Asy92eGfkd6h0uHM bPfQz2AvWdf8258gwCWvrh9KmwTngPh40wpBt8YXgQBFdFwe8E5/kyyjKLz3153R eU2a+JZk83lUH5BbXVmRRmUxU9O7PeK0V/L2XMphOUwX4lLM9CIxOtE+PHc3rb/r Ws/1tugddkI+lR/74RbLS7+hpnIcDr3bB+RNr5i3uKQzkQ2tGZU= -----END CERTIFICATE-----Generated at Tue May 12 22:45:58 2026 by rpki-client