$ rpki-client -vvf rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft File: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft (raw, json) Hash identifier: m6FiHDqkcD+a8iRSJaqOZX7+6oYTOUcjbZFi4drVzeg= Subject key identifier: 5C:E2:50:31:F7:BD:3A:FE:89:0B:A9:EE:79:5D:17:6B:97:A4:48:15 Authority key identifier: 6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 Certificate issuer: /CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1 Certificate serial: 2846910945DCFAF40D6D0461E5802EB244D5C216 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft Manifest number: 08 Signing time: Thu 07 May 2026 14:39:50 +0000 Manifest this update: Thu 07 May 2026 14:34:50 +0000 Manifest next update: Fri 08 May 2026 15:29:50 +0000 Files and hashes: 1: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl (hash: V49lMX+vi8Z8ffL1foZECcxs/HxbAcJ2nYsnpCDwras=) 2: 3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (hash: jBjn/26T9nOLxs1yUlk7/z6hpoVPKoLHthzCZsrv0gk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 15:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:46:91:09:45:dc:fa:f4:0d:6d:04:61:e5:80:2e:b2:44:d5:c2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1 Validity Not Before: May 7 14:34:50 2026 GMT Not After : May 8 15:29:50 2026 GMT Subject: CN=5CE25031F7BD3AFE890BA9EE795D176B97A44815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:92:ca:7f:da:38:91:87:24:60:0b:e7:5f: ea:fa:d9:b8:af:c4:03:3c:7f:46:15:a1:83:ad:60: 87:95:d4:ce:e0:84:f2:39:18:f4:28:54:0d:e2:53: d4:cf:15:07:f3:51:24:2d:f1:a2:c9:bd:b6:ca:68: 35:fa:75:ff:2e:78:61:65:3a:3c:f8:b9:80:51:08: 76:6e:6c:da:45:8b:e2:75:60:af:a9:a9:b8:7b:f1: 7d:dd:b1:e1:94:8e:be:7d:e0:3e:50:5d:f3:b2:9e: 7f:b2:38:d1:13:db:16:93:8a:90:43:ea:75:a8:b7: 2a:b9:61:90:95:0a:e6:98:8d:84:9d:14:74:bb:e6: 5c:20:6f:e4:22:c2:8f:92:55:ea:bf:63:7c:be:cb: 49:5f:cc:7f:b4:e5:6e:ac:7f:f4:f2:88:34:79:b8: a4:8d:23:85:4b:2a:29:50:6b:47:91:ea:0e:6f:b5: 82:1b:a8:6a:72:48:95:6f:8d:42:e7:cd:b4:8e:ce: d6:4b:43:a9:d8:ce:ed:68:b0:04:88:ad:b5:69:5d: 00:04:69:46:75:51:7f:92:a7:10:56:e0:c6:c9:96: 5a:11:30:fb:30:95:5b:00:54:5e:82:16:6b:d5:8c: ad:0f:27:aa:92:53:c6:20:0e:f3:70:dd:c8:e1:2f: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E2:50:31:F7:BD:3A:FE:89:0B:A9:EE:79:5D:17:6B:97:A4:48:15 X509v3 Authority Key Identifier: keyid:6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:08:89:ea:17:08:cf:a3:de:7e:90:49:55:f6:72:35:8d:dd: 30:18:ea:b1:6a:02:28:4f:45:23:cd:ea:52:a8:25:ac:2e:56: 15:1e:10:be:aa:ab:fb:98:7e:ba:a9:80:78:f9:c6:7c:d0:5f: d4:43:56:c8:f6:a7:28:e6:69:5c:60:a7:36:ce:47:30:76:ed: ef:a2:d6:9b:b3:22:46:42:fc:ea:6a:b2:c9:80:e0:87:2a:a9: 63:c5:a9:df:38:6d:a1:2b:de:b6:54:5c:3c:02:0b:52:d0:ef: 9a:66:53:e2:df:6c:e0:be:6e:c2:04:b6:5b:57:b4:f7:4e:76: aa:3c:13:25:40:8f:f0:98:df:7a:7e:bc:13:30:54:da:b9:d3: b9:5f:fe:f8:57:cd:78:40:f7:c3:31:61:96:96:d4:8c:de:e5: cc:a5:f8:ab:ca:0e:40:9e:9a:6c:3b:b9:35:d1:00:8e:34:d1: f5:ec:9e:e4:0a:17:05:f8:95:a4:cb:1f:51:09:e7:23:fc:3f: 05:27:b9:c1:bc:7a:d1:ee:28:5a:c7:16:74:2b:7f:6f:c3:ae: 1e:96:72:c0:50:07:ff:ab:3c:a3:3e:0d:b8:a7:34:f3:81:b9: 9b:66:e4:8b:ab:95:c1:6b:07:28:b1:7a:6b:5f:5a:a6:1a:00: f0:67:cf:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEaRCUXc+vQNbQRh5YAuskTVwhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZBRTVENDREREU5OTdERjBBMDhDNTVEREZCRTEyRDI2 RjFGRDlCMTAeFw0yNjA1MDcxNDM0NTBaFw0yNjA1MDgxNTI5NTBaMDMxMTAvBgNV BAMTKDVDRTI1MDMxRjdCRDNBRkU4OTBCQTlFRTc5NUQxNzZCOTdBNDQ4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJZLKf9o4kYckYAvnX+r62biv xAM8f0YVoYOtYIeV1M7ghPI5GPQoVA3iU9TPFQfzUSQt8aLJvbbKaDX6df8ueGFl Ojz4uYBRCHZubNpFi+J1YK+pqbh78X3dseGUjr594D5QXfOynn+yONET2xaTipBD 6nWotyq5YZCVCuaYjYSdFHS75lwgb+Qiwo+SVeq/Y3y+y0lfzH+05W6sf/TyiDR5 uKSNI4VLKilQa0eR6g5vtYIbqGpySJVvjULnzbSOztZLQ6nYzu1osASIrbVpXQAE aUZ1UX+SpxBW4MbJlloRMPswlVsAVF6CFmvVjK0PJ6qSU8YgDvNw3cjhL10xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOJQMfe9Ov6JC6nueV0Xa5ekSBUwHwYDVR0j BBgwFoAUb65dRN3pl98KCMVd374S0m8f2bEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxZTMwNWItMDAzOS00YjBlLThjNTktMjQyMzI4MGI3YzNjLzAvNkZBRTVENDRE REU5OTdERjBBMDhDNTVEREZCRTEyRDI2RjFGRDlCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkFFNUQ0NERERTk5N0RGMEEwOEM1NURERkJFMTJEMjZGMUZE OUIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxZTMwNWItMDAzOS00YjBlLThj NTktMjQyMzI4MGI3YzNjLzAvNkZBRTVENDREREU5OTdERjBBMDhDNTVEREZCRTEy RDI2RjFGRDlCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8IieoXCM+j3n6QSVX2cjWN3TAY6rFqAihP RSPN6lKoJawuVhUeEL6qq/uYfrqpgHj5xnzQX9RDVsj2pyjmaVxgpzbORzB27e+i 1puzIkZC/OpqssmA4IcqqWPFqd84baEr3rZUXDwCC1LQ75pmU+LfbOC+bsIEtltX tPdOdqo8EyVAj/CY33p+vBMwVNq507lf/vhXzXhA98MxYZaW1Ize5cyl+KvKDkCe mmw7uTXRAI400fXsnuQKFwX4laTLH1EJ5yP8PwUnucG8etHuKFrHFnQrf2/Drh6W csBQB/+rPKM+DbinNPOBuZtm5IurlcFrByixemtfWqYaAPBnzwE= -----END CERTIFICATE-----Generated at Fri May 8 07:30:00 2026 by rpki-client