$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft File: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft (raw, json) Hash identifier: y2h8sareb1WPAkFQpf8J1RBuymrOsm/mPPm08pTGlK8= Subject key identifier: D9:34:92:CA:D6:FC:80:0C:36:5D:A8:BE:26:51:7C:08:91:69:58:D7 Authority key identifier: 6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D Certificate issuer: /CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Certificate serial: 438F4BEE9B5773D0CB0EF19DDCBC6895CCA2F62E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:23:39 +0000 Manifest this update: Tue 21 Jul 2026 02:18:39 +0000 Manifest next update: Wed 22 Jul 2026 05:48:39 +0000 Files and hashes: 1: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl (hash: s3YKq8MH57H5eCsqSSHhIYYdorHC+cSKpvAHYldG6IQ=) 2: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: w2x/b2ifWwyHpRZZLutwbvw8gPy4dmo/jJsRdtth0Pg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8f:4b:ee:9b:57:73:d0:cb:0e:f1:9d:dc:bc:68:95:cc:a2:f6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Validity Not Before: Jul 21 02:18:39 2026 GMT Not After : Jul 22 05:48:39 2026 GMT Subject: CN=D93492CAD6FC800C365DA8BE26517C08916958D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:12:8d:30:79:d9:78:67:36:57:91:7a:d2: 9d:19:9a:10:83:93:a5:01:34:d1:71:e9:74:3f:11: 99:28:17:55:bf:cc:ed:9c:a5:72:7a:0d:f1:44:a3: 4b:5c:49:a8:91:05:a5:8d:0e:3b:b3:67:0e:74:63: c4:b7:15:b6:62:1b:a7:2d:2b:f5:e4:0d:d2:13:ee: 71:43:09:e4:c1:d3:58:80:17:49:5b:71:5f:35:46: 35:ef:0d:a0:a2:cb:04:7b:f9:e3:a0:62:c5:55:15: 5d:74:db:62:5b:e0:0d:88:93:a7:70:8b:f1:f9:84: 06:1b:cb:77:cf:4b:93:13:6f:ad:1f:47:fa:7d:7e: 99:76:a3:67:21:ee:86:13:54:e2:9f:2a:2f:c3:43: 37:4a:2a:4f:ca:de:e8:fc:6a:c1:82:93:c7:a5:c1: ef:9b:64:21:71:33:c3:15:45:4c:0d:ee:dc:cb:cd: 8c:21:bd:0c:3f:42:aa:47:81:88:ed:27:29:10:57: d8:c6:a9:3a:46:c9:4f:81:5d:10:1c:b7:ff:c7:22: 48:9a:04:d6:94:26:14:f1:91:3b:a3:d4:ea:18:05: c6:08:bd:66:3a:e7:12:dd:0a:90:3f:c1:a6:ac:f4: 03:98:95:66:ff:44:f5:b8:9b:0c:68:aa:ef:c7:a1: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:92:CA:D6:FC:80:0C:36:5D:A8:BE:26:51:7C:08:91:69:58:D7 X509v3 Authority Key Identifier: keyid:6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:a8:73:93:74:a4:91:95:70:3b:e1:71:a7:d4:de:8c:71:ce: b7:f8:c0:6b:6e:ec:25:50:05:82:db:f4:5d:30:c5:1f:7f:83: 3a:94:b2:46:f0:51:96:cd:a1:ff:1e:37:4a:fe:28:00:8f:c5: 40:59:83:94:2d:e3:73:e6:6b:77:5e:4b:85:2c:89:84:b8:d2: e5:65:ea:7c:31:ea:f4:33:4e:15:9f:ad:03:e3:95:81:a2:87: b3:9d:76:8e:7e:ee:da:fd:c6:de:4f:44:dd:63:0d:43:c9:ad: cb:1b:98:7e:d3:87:cb:11:6d:5e:1c:07:e5:d5:c9:57:5b:bf: 46:47:f7:8e:bf:10:bd:dc:c0:ff:8b:da:b3:80:ce:c1:d3:52: 0a:b2:50:f5:3f:6d:75:1f:42:bd:bd:36:6e:c0:9b:4f:3f:f1: 66:8d:9b:ae:47:9e:2c:1a:52:34:c8:fa:29:01:20:f8:fa:7e: 19:1d:bf:5b:ab:a9:be:a8:ed:0b:ad:92:b8:ce:17:59:d9:da: ff:41:f0:0e:4e:df:15:d2:6f:1d:3f:f7:1a:07:76:bf:2a:79: 31:f7:28:b9:c7:70:be:e7:51:50:ee:94:91:e8:5b:bc:8b:cb: 46:36:22:21:78:87:86:a6:4c:cc:bf:1a:a8:1d:7b:b4:f6:70: c1:42:a7:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ49L7ptXc9DLDvGd3Lxolcyi9i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1MzRE MzgwMjc0RDAeFw0yNjA3MjEwMjE4MzlaFw0yNjA3MjIwNTQ4MzlaMDMxMTAvBgNV BAMTKEQ5MzQ5MkNBRDZGQzgwMEMzNjVEQThCRTI2NTE3QzA4OTE2OTU4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTRKNMHnZeGc2V5F60p0ZmhCD k6UBNNFx6XQ/EZkoF1W/zO2cpXJ6DfFEo0tcSaiRBaWNDjuzZw50Y8S3FbZiG6ct K/XkDdIT7nFDCeTB01iAF0lbcV81RjXvDaCiywR7+eOgYsVVFV1022Jb4A2Ik6dw i/H5hAYby3fPS5MTb60fR/p9fpl2o2ch7oYTVOKfKi/DQzdKKk/K3uj8asGCk8el we+bZCFxM8MVRUwN7tzLzYwhvQw/QqpHgYjtJykQV9jGqTpGyU+BXRAct//HIkia BNaUJhTxkTuj1OoYBcYIvWY65xLdCpA/waas9AOYlWb/RPW4mwxoqu/HoR6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TSSytb8gAw2Xai+JlF8CJFpWNcwHwYDVR0j BBgwFoAUbMnA1z2cPghn6tGmOrDVNNOAJ00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwOTYyZjctNjdlYS00NzBlLWE1MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDcz RDlDM0UwODY3RUFEMUE2M0FCMEQ1MzREMzgwMjc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Q0M5QzBENzNEOUMzRTA4NjdFQUQxQTYzQUIwRDUzNEQzODAy NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1 MzREMzgwMjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuoc5N0pJGVcDvhcafU3oxxzrf4wGtu7CVQ BYLb9F0wxR9/gzqUskbwUZbNof8eN0r+KACPxUBZg5Qt43Pma3deS4UsiYS40uVl 6nwx6vQzThWfrQPjlYGih7Oddo5+7tr9xt5PRN1jDUPJrcsbmH7Th8sRbV4cB+XV yVdbv0ZH946/EL3cwP+L2rOAzsHTUgqyUPU/bXUfQr29Nm7Am08/8WaNm65Hniwa UjTI+ikBIPj6fhkdv1urqb6o7QutkrjOF1nZ2v9B8A5O3xXSbx0/9xoHdr8qeTH3 KLnHcL7nUVDulJHoW7yLy0Y2IiF4h4amTMy/Gqgde7T2cMFCp9k= -----END CERTIFICATE-----Generated at Tue Jul 21 08:20:24 2026 by rpki-client