$ rpki-client -vvf rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft File: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft (raw, json) Hash identifier: sRv5BiNEgaEh1OZbJ1A+8pDHokyRpYLKUookI8Qa9pw= Subject key identifier: 76:C0:08:01:A7:81:CD:1B:52:8A:29:7B:16:F1:E5:73:08:37:3F:D8 Authority key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45 Certificate issuer: /CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45 Certificate serial: 12A663BE57914C363264AA99E68554994954E84F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:48:00 +0000 Manifest this update: Tue 12 May 2026 20:43:00 +0000 Manifest next update: Wed 13 May 2026 21:16:00 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: FM7P4A6GhMRCdFWVFylFnVzysNCeJktD7lQb8mDxaKs=) 2: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl (hash: EeHpsZbiHe5+Gtc6NEavIP7u8XA1TFAqrdoaX7r7WbQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a6:63:be:57:91:4c:36:32:64:aa:99:e6:85:54:99:49:54:e8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45 Validity Not Before: May 12 20:43:00 2026 GMT Not After : May 13 21:16:00 2026 GMT Subject: CN=76C00801A781CD1B528A297B16F1E57308373FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:b4:32:69:5a:c5:97:24:c7:1f:e3:7a:66: 23:95:11:c6:e5:f5:c0:65:e4:76:08:9b:c4:a2:77: 55:0a:09:9b:e1:5b:c3:c2:0b:e1:44:a2:6f:c5:3c: ef:a7:72:2b:55:1e:57:99:2e:c3:3d:4c:b6:2a:41: 29:82:0b:69:ff:33:4e:93:4f:e5:66:87:6f:98:c9: 3b:4e:d4:be:7c:e0:07:2e:b5:65:8e:99:32:1b:88: 24:a2:62:cd:61:55:51:34:85:b2:66:c6:f7:47:36: e0:c7:76:6e:78:5d:eb:16:d1:c7:f0:75:c0:d1:0f: 66:83:2a:e3:17:9a:88:0a:98:50:35:93:af:e5:35: 8e:04:28:ad:26:51:21:82:9b:d0:08:b1:0e:c6:e3: e3:2f:6c:18:09:a0:7e:b9:f1:7b:59:88:62:84:d6: e9:3a:2e:cf:d3:95:00:ac:ca:58:ac:4f:3a:71:2e: 6c:c0:43:e7:fb:21:81:15:d1:c3:25:1d:6c:cd:ae: e4:54:0f:e9:1d:92:29:84:03:a6:b5:2d:d9:e7:90: ff:60:2f:c0:e8:36:0c:b2:de:f0:d7:7b:70:8b:1d: 04:e8:7d:2e:1b:94:36:13:9a:dd:85:71:29:a7:4d: 55:a3:a6:68:7c:53:ef:be:b4:78:21:cf:54:dc:46: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C0:08:01:A7:81:CD:1B:52:8A:29:7B:16:F1:E5:73:08:37:3F:D8 X509v3 Authority Key Identifier: keyid:B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:c0:95:bb:63:4f:40:47:81:31:0e:e5:43:41:18:46:58: aa:c4:40:f2:d5:9d:11:98:27:f3:84:83:e5:73:87:5f:74:98: 0e:9f:16:c5:d5:76:ce:ca:fe:72:9a:72:43:d2:25:2b:84:3b: 16:74:59:d2:aa:51:19:08:d0:05:96:d9:47:09:26:36:76:cd: e2:f9:b2:06:2c:30:be:b1:36:8a:85:87:93:28:e5:4f:8d:3f: f8:de:6c:e3:2e:21:da:4b:34:bd:81:1d:98:3d:65:d2:56:52: 2c:84:41:2d:d2:1c:69:c4:a4:d7:d4:d6:8f:bc:9b:18:66:da: c0:18:50:3f:38:71:a3:d3:e5:e9:b3:c7:a6:9b:d2:e3:14:34: 64:51:7f:7d:60:74:d5:15:81:00:cb:d3:7a:c4:bb:e7:69:71: 79:eb:80:33:be:29:3d:e2:58:a9:cb:46:09:6b:ed:7a:cf:97: 41:3e:e1:52:aa:32:d6:46:6e:de:42:fd:e5:b6:bb:79:7d:e7: b3:c3:26:41:52:00:97:17:e9:64:25:9f:20:8d:91:8a:66:d7: ae:2d:60:49:79:62:e9:3a:72:3b:a5:18:b5:65:84:14:58:36: db:68:0e:7b:8e:72:6d:a4:b7:36:02:aa:71:55:05:9c:79:94: 79:e5:c5:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqZjvleRTDYyZKqZ5oVUmUlU6E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMUEwNDJGNThGRDc3M0VDNkI3MjIxNDcwMTU2RjVF QkQwQ0U0NTAeFw0yNjA1MTIyMDQzMDBaFw0yNjA1MTMyMTE2MDBaMDMxMTAvBgNV BAMTKDc2QzAwODAxQTc4MUNEMUI1MjhBMjk3QjE2RjFFNTczMDgzNzNGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCrQyaVrFlyTHH+N6ZiOVEcbl 9cBl5HYIm8Sid1UKCZvhW8PCC+FEom/FPO+ncitVHleZLsM9TLYqQSmCC2n/M06T T+Vmh2+YyTtO1L584AcutWWOmTIbiCSiYs1hVVE0hbJmxvdHNuDHdm54XesW0cfw dcDRD2aDKuMXmogKmFA1k6/lNY4EKK0mUSGCm9AIsQ7G4+MvbBgJoH658XtZiGKE 1uk6Ls/TlQCsylisTzpxLmzAQ+f7IYEV0cMlHWzNruRUD+kdkimEA6a1LdnnkP9g L8DoNgyy3vDXe3CLHQTofS4blDYTmt2FcSmnTVWjpmh8U+++tHghz1TcRk2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsAIAaeBzRtSiil7FvHlcwg3P9gwHwYDVR0j BBgwFoAUtvGgQvWP13Psa3IhRwFW9evQzkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjk1N2ZhNWQtZmE2Ny00ZTZiLTg5MjAtYzQ3NDdhZGIzMGJiLzAvQjZGMUEwNDJG NThGRDc3M0VDNkI3MjIxNDcwMTU2RjVFQkQwQ0U0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkYxQTA0MkY1OEZENzczRUM2QjcyMjE0NzAxNTZGNUVCRDBD RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvQjZGMUEwNDJGNThGRDc3M0VDNkI3MjIxNDcwMTU2 RjVFQkQwQ0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuIwJW7Y09AR4ExDuVDQRhGWKrEQPLVnRGY J/OEg+Vzh190mA6fFsXVds7K/nKackPSJSuEOxZ0WdKqURkI0AWW2UcJJjZ2zeL5 sgYsML6xNoqFh5Mo5U+NP/jebOMuIdpLNL2BHZg9ZdJWUiyEQS3SHGnEpNfU1o+8 mxhm2sAYUD84caPT5emzx6ab0uMUNGRRf31gdNUVgQDL03rEu+dpcXnrgDO+KT3i WKnLRglr7XrPl0E+4VKqMtZGbt5C/eW2u3l957PDJkFSAJcX6WQlnyCNkYpm164t YEl5Yuk6cjulGLVlhBRYNttoDnuOcm2ktzYCqnFVBZx5lHnlxaE= -----END CERTIFICATE-----Generated at Tue May 12 23:06:56 2026 by rpki-client