$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft File: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft (raw, json) Hash identifier: v6ARg41rkYSD1eHymO+kSg9OIgvUpMDv599/YLxogks= Subject key identifier: 93:FC:54:AE:E4:8F:A5:6B:CD:43:F6:4A:20:53:6B:3E:5E:7D:21:E7 Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Certificate serial: 10ED0DEB696F5ECE8AF130F79AD37BE2A69FF2D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:51:27 +0000 Manifest this update: Tue 12 May 2026 22:46:27 +0000 Manifest next update: Wed 13 May 2026 23:46:27 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: AZDpkOWjnamEqT8fmcEDZ5d6r3arhBukAiqycsYxsj0=) 2: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (hash: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=) 3: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl (hash: JFFnxXNP+Znl+YPm3aUvV08ba/twQRwIKINREvdS+C0=) 4: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=) 5: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: mk6P6nzKZPfeuKq11ThKG2gxjN5qYDKYLpgARoWf7Rc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ed:0d:eb:69:6f:5e:ce:8a:f1:30:f7:9a:d3:7b:e2:a6:9f:f2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Validity Not Before: May 12 22:46:27 2026 GMT Not After : May 13 23:46:27 2026 GMT Subject: CN=93FC54AEE48FA56BCD43F64A20536B3E5E7D21E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:39:2c:32:c1:cc:3c:38:06:2b:2d:97:c1: ba:1d:fc:2c:6f:d9:24:eb:9b:a4:52:0b:71:2e:7a: 7c:f6:f7:4f:a9:45:93:a4:b9:9f:83:b6:a4:43:ca: b1:80:11:85:ef:ba:c1:ff:69:f1:b9:81:8f:9d:70: 31:6f:a8:3e:03:bf:b8:64:5f:58:6f:64:1d:33:2f: ce:1e:d4:09:ab:6a:1a:c5:b3:f7:46:33:94:5b:72: 29:1c:39:c8:dd:a8:6b:e4:40:cb:ec:59:6f:54:01: 0b:2e:00:4f:62:11:fb:3e:51:16:57:56:2f:1b:8d: 68:dc:bc:43:72:cc:e5:4a:47:e9:0a:81:44:d6:86: ac:d7:88:72:66:76:ce:b5:99:15:01:e4:69:10:77: 40:c3:08:88:25:1d:32:54:bf:63:3e:6e:36:1a:00: 00:7c:25:cf:7e:c5:b2:f5:e5:a6:78:52:7c:a6:46: 31:76:b9:00:35:3f:e0:b2:da:a7:9f:16:74:1f:90: fa:ff:f3:3c:6d:fb:e6:67:77:7c:0b:cb:3b:2e:ea: cf:91:78:86:2f:39:62:ff:88:f3:ff:24:00:c3:58: 03:83:a5:5c:65:02:93:53:f3:2b:d7:65:fd:70:d8: 30:42:6a:ca:e8:57:fc:75:18:0d:b8:77:62:df:0d: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FC:54:AE:E4:8F:A5:6B:CD:43:F6:4A:20:53:6B:3E:5E:7D:21:E7 X509v3 Authority Key Identifier: keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:6f:dc:a0:a0:4e:f9:16:67:27:4f:51:81:f6:e4:50:ce: 63:1e:60:a9:40:dc:58:ef:0b:ac:61:ab:4e:02:81:b5:d5:c9: 04:c4:74:82:33:fb:86:11:1b:d1:27:be:29:24:a4:1a:dd:4f: 18:2c:1a:48:74:40:6b:5d:cd:f6:91:39:5e:6d:a2:df:b6:bc: 42:fc:aa:a8:e6:23:d6:06:52:86:2f:68:78:be:ed:4a:64:97: 44:62:e5:72:65:01:5d:85:fe:4a:99:e9:6b:7d:2c:7c:24:24: f0:03:8c:03:74:77:58:3f:58:77:9b:17:09:d5:a3:2d:f1:28: a4:d7:92:ec:cc:3d:65:5f:48:c2:ac:87:85:5c:32:55:e7:98: 90:1d:36:aa:bf:67:a1:78:64:a5:e4:48:7e:92:6b:93:59:df: 9d:90:57:c8:01:c7:d3:2d:77:59:39:70:62:e9:8c:ef:ef:75: 75:93:79:fb:71:c5:e2:e2:83:c5:6e:2c:b5:60:6b:e7:16:19: 91:ef:05:67:fa:06:5b:15:71:17:68:17:ca:8f:ee:1d:f4:b2: 7c:1e:65:5a:08:84:19:cf:44:b5:22:13:fe:bc:58:1a:be:57: 4c:07:7a:61:98:3e:2a:ac:89:ef:c8:da:15:91:91:49:1f:7e: b3:d0:2a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEO0N62lvXs6K8TD3mtN74qaf8tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FB RTQ5QjY1RTAeFw0yNjA1MTIyMjQ2MjdaFw0yNjA1MTMyMzQ2MjdaMDMxMTAvBgNV BAMTKDkzRkM1NEFFRTQ4RkE1NkJDRDQzRjY0QTIwNTM2QjNFNUU3RDIxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnTksMsHMPDgGKy2Xwbod/Cxv 2STrm6RSC3Euenz290+pRZOkuZ+DtqRDyrGAEYXvusH/afG5gY+dcDFvqD4Dv7hk X1hvZB0zL84e1AmrahrFs/dGM5RbcikcOcjdqGvkQMvsWW9UAQsuAE9iEfs+URZX Vi8bjWjcvENyzOVKR+kKgUTWhqzXiHJmds61mRUB5GkQd0DDCIglHTJUv2M+bjYa AAB8Jc9+xbL15aZ4UnymRjF2uQA1P+Cy2qefFnQfkPr/8zxt++Znd3wLyzsu6s+R eIYvOWL/iPP/JADDWAODpVxlApNT8yvXZf1w2DBCasroV/x1GA24d2LfDUc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/xUruSPpWvNQ/ZKIFNrPl59IecwHwYDVR0j BBgwFoAUb7JTpPmcD4Eerg0UK3J1yq5Jtl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiYWJmMGItMTEwMS00YWE5LWE0ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRG OTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FBRTQ5QjY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIyNTNBNEY5OUMwRjgxMUVBRTBEMTQyQjcyNzVDQUFFNDlC NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1 Q0FBRTQ5QjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGohb9ygoE75FmcnT1GB9uRQzmMeYKlA3Fjv C6xhq04CgbXVyQTEdIIz+4YRG9EnvikkpBrdTxgsGkh0QGtdzfaROV5tot+2vEL8 qqjmI9YGUoYvaHi+7Upkl0Ri5XJlAV2F/kqZ6Wt9LHwkJPADjAN0d1g/WHebFwnV oy3xKKTXkuzMPWVfSMKsh4VcMlXnmJAdNqq/Z6F4ZKXkSH6Sa5NZ352QV8gBx9Mt d1k5cGLpjO/vdXWTeftxxeLig8VuLLVga+cWGZHvBWf6BlsVcRdoF8qP7h30snwe ZVoIhBnPRLUiE/68WBq+V0wHemGYPiqsie/I2hWRkUkffrPQKvs= -----END CERTIFICATE-----Generated at Wed May 13 02:15:35 2026 by rpki-client