$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft File: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft (raw, json) Hash identifier: fzlmpqFk/YvWJ4Wgu8AZeJzTpzXBPTl1EV0IiBw+Tq4= Subject key identifier: 41:65:12:3F:20:62:52:6F:1D:F2:2E:FA:12:1F:EC:99:2C:66:92:5B Authority key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 Certificate issuer: /CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3 Certificate serial: 4CCB1AD41E944C8BEAA9BACDFC4546D3BAE5D843 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:47:46 +0000 Manifest this update: Tue 12 May 2026 17:42:46 +0000 Manifest next update: Wed 13 May 2026 20:01:46 +0000 Files and hashes: 1: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl (hash: 2r4VYF7x2TNSDK9XwFUAQzIWGzZ8WBNZ1GmC10/TcYs=) 2: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: 0VUfdAAfFEuToJwbRstnJ6dFxvse7EJ2ZUiWvgUCNNM=) 3: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: hgg/QP+dSLFLOsjRg4tQEaQYc48Rb+WtJWuacTUuK2I=) 4: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: yO2cOBfHPv3C/4uaJ55DoJTVwS5Sx/sjk03JxEGguBI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cb:1a:d4:1e:94:4c:8b:ea:a9:ba:cd:fc:45:46:d3:ba:e5:d8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3 Validity Not Before: May 12 17:42:46 2026 GMT Not After : May 13 20:01:46 2026 GMT Subject: CN=4165123F2062526F1DF22EFA121FEC992C66925B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:73:2b:f2:9a:9b:c9:ef:8d:86:10:ab:4c: 3c:a5:06:56:ba:04:5f:d3:89:93:c1:aa:91:c0:06: 55:85:aa:9b:95:c9:47:14:ff:e7:83:f9:a9:9f:c4: cc:9c:79:f4:d3:3a:1d:a9:1c:40:3f:12:1d:4d:41: 1e:2f:5d:60:fe:42:16:b8:a0:6a:6e:54:d3:94:2d: c5:b5:f8:ea:9d:55:44:b4:56:32:f8:03:87:90:4a: 0f:e8:9e:90:a8:1a:76:b1:b3:4b:e6:2e:b0:bc:07: 0f:24:56:b0:4f:01:fd:8c:88:54:7b:a2:a6:65:0e: a6:52:11:a8:35:cb:fb:29:be:f4:c4:6c:7b:ff:ff: cd:6c:30:9d:b1:92:43:2a:d3:7e:d6:95:88:53:5a: 82:f8:fe:cb:57:d6:d4:3e:10:d0:c9:b5:7c:7b:ff: d5:bf:e6:92:9a:71:dd:34:08:ea:c5:a0:64:53:13: 97:e2:ef:bd:8c:c7:74:59:c5:8b:87:74:69:2d:d1: 1f:3b:16:99:be:e4:09:b6:d7:40:d4:d5:6b:ee:aa: 8e:d2:b5:a5:0b:86:6c:f2:10:c9:6a:49:06:14:0d: d5:7f:f8:84:86:0b:52:9d:86:4d:8b:cb:04:9f:99: 96:ee:4f:f6:1d:b1:be:7b:6e:99:23:b8:9f:a5:6d: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:65:12:3F:20:62:52:6F:1D:F2:2E:FA:12:1F:EC:99:2C:66:92:5B X509v3 Authority Key Identifier: keyid:C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a7:50:81:69:ad:2b:06:4d:73:4c:85:08:d3:80:3b:f1:fc: 4c:22:2c:ff:49:a2:7b:fd:e2:a6:07:8d:ee:6a:ce:1a:4f:71: 97:10:7c:79:e0:89:1d:83:86:a3:ba:da:f7:6a:30:97:a2:49: 15:62:98:82:54:8f:3c:44:d4:cd:e4:30:2f:d5:64:be:8e:45: d5:44:d2:e0:3a:d3:75:59:2e:31:30:f1:97:a3:d7:84:97:74: 40:9d:a6:7c:c1:ce:48:72:23:51:d2:64:13:ce:1a:5a:53:ee: 89:4b:63:7f:df:d7:51:ab:74:ef:6c:46:0c:4f:46:9e:29:ea: 0c:3d:1b:80:25:d9:a5:8f:16:cc:5e:75:f2:9b:d7:9e:9a:c9: bd:b0:f3:cd:d0:3c:1f:e5:3d:37:7b:c7:92:2c:3b:2a:db:1b: 7f:9e:63:c3:04:5a:c1:76:ed:fb:b9:4b:eb:84:90:03:dd:97: db:c0:d0:41:5f:65:f1:3a:43:d9:ae:7d:a0:b5:27:f2:86:fa: a6:33:e0:a7:02:f1:8c:bf:28:29:39:bf:13:9d:82:73:ce:a7: 14:cf:c8:83:91:85:cb:46:6d:f3:49:18:f0:e3:9d:4c:17:3c: 80:fb:f6:9d:24:c1:dc:ff:1f:24:f5:01:a2:ae:5b:2f:55:61: cf:fe:75:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMsa1B6UTIvqqbrN/EVG07rl2EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGRkUxRTU4NDM4QkM1QjM1NzIzOTEwNEI1M0RCRDZC NjlBRjlEMzAeFw0yNjA1MTIxNzQyNDZaFw0yNjA1MTMyMDAxNDZaMDMxMTAvBgNV BAMTKDQxNjUxMjNGMjA2MjUyNkYxREYyMkVGQTEyMUZFQzk5MkM2NjkyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWCHMr8pqbye+NhhCrTDylBla6 BF/TiZPBqpHABlWFqpuVyUcU/+eD+amfxMycefTTOh2pHEA/Eh1NQR4vXWD+Qha4 oGpuVNOULcW1+OqdVUS0VjL4A4eQSg/onpCoGnaxs0vmLrC8Bw8kVrBPAf2MiFR7 oqZlDqZSEag1y/spvvTEbHv//81sMJ2xkkMq037WlYhTWoL4/stX1tQ+ENDJtXx7 /9W/5pKacd00COrFoGRTE5fi772Mx3RZxYuHdGkt0R87Fpm+5Am210DU1Wvuqo7S taULhmzyEMlqSQYUDdV/+ISGC1Kdhk2LywSfmZbuT/Ydsb57bpkjuJ+lbTfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWUSPyBiUm8d8i76Eh/smSxmklswHwYDVR0j BBgwFoAUxv/h5YQ4vFs1cjkQS1Pb1raa+dMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA2MjBjZmMtYjQ2Yy00NTdjLTlmZGUtMjk3NzEwYzU0NmE5LzAvQzZGRkUxRTU4 NDM4QkM1QjM1NzIzOTEwNEI1M0RCRDZCNjlBRjlEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkZGRTFFNTg0MzhCQzVCMzU3MjM5MTA0QjUzREJENkI2OUFG OUQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvQzZGRkUxRTU4NDM4QkM1QjM1NzIzOTEwNEI1M0RC RDZCNjlBRjlEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImnUIFprSsGTXNMhQjTgDvx/EwiLP9Jonv9 4qYHje5qzhpPcZcQfHngiR2DhqO62vdqMJeiSRVimIJUjzxE1M3kMC/VZL6ORdVE 0uA603VZLjEw8Zej14SXdECdpnzBzkhyI1HSZBPOGlpT7olLY3/f11GrdO9sRgxP Rp4p6gw9G4Al2aWPFsxedfKb156ayb2w883QPB/lPTd7x5IsOyrbG3+eY8MEWsF2 7fu5S+uEkAPdl9vA0EFfZfE6Q9mufaC1J/KG+qYz4KcC8Yy/KCk5vxOdgnPOpxTP yIORhctGbfNJGPDjnUwXPID79p0kwdz/HyT1AaKuWy9VYc/+ddk= -----END CERTIFICATE-----Generated at Wed May 13 01:45:10 2026 by rpki-client