$ rpki-client -vvf rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft File: 6C9BE2712174A61A708F557544E696FFDBDA757D.mft (raw, json) Hash identifier: YWXquUhBiyVp4q89rfygxLx0I8h71rb4R6dRPhK7Pzk= Subject key identifier: 53:2F:8D:5D:A3:8C:20:F8:CE:36:1E:58:0D:42:CF:6E:86:E7:4A:58 Authority key identifier: 6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D Certificate issuer: /CN=6C9BE2712174A61A708F557544E696FFDBDA757D Certificate serial: 02918ACDC85D5A551D0D1023D94ABFAEE9707840 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:06:10 +0000 Manifest this update: Mon 20 Jul 2026 20:01:10 +0000 Manifest next update: Tue 21 Jul 2026 20:25:10 +0000 Files and hashes: 1: 6C9BE2712174A61A708F557544E696FFDBDA757D.crl (hash: hzm0ltvejdPKq5ktbbGtIa+bC7+MFplknhXoJo2hVOQ=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: fXvqiR82gi7YB7d/7jQ2cdvdZ/4SJXXC4hBrVNhlfUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.crl rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:91:8a:cd:c8:5d:5a:55:1d:0d:10:23:d9:4a:bf:ae:e9:70:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C9BE2712174A61A708F557544E696FFDBDA757D Validity Not Before: Jul 20 20:01:10 2026 GMT Not After : Jul 21 20:25:10 2026 GMT Subject: CN=532F8D5DA38C20F8CE361E580D42CF6E86E74A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:4b:a8:7c:99:08:1a:f5:c6:34:62:fa:2f: eb:5b:9a:0e:0a:e0:a9:29:a6:58:06:bf:4c:8a:09: 95:63:43:3e:ec:a4:ab:6b:1e:b4:d6:33:00:a1:f3: 6b:24:56:bb:17:b3:25:6c:53:b9:85:e8:c3:0f:0a: 49:c2:fc:d6:75:46:7d:43:c0:e6:f6:eb:3d:19:c7: a2:84:9b:78:6a:2a:0e:a9:d2:cb:79:66:b4:b1:67: 05:9d:7b:ae:b8:0f:67:3b:3a:38:04:45:46:73:5f: 01:04:a5:9d:cd:4f:68:e1:a1:c7:c5:2b:c2:eb:df: f4:07:49:ac:b4:18:b9:e4:0c:6c:ff:3d:30:7a:0d: 75:c1:ea:77:68:e1:ea:65:0f:f4:30:a7:16:8a:bd: 3d:b4:1a:8a:6d:ce:a0:8d:d1:67:68:15:96:f8:26: cb:ce:fa:2b:9e:b0:ee:61:98:a0:41:b5:f9:0f:ce: 68:0e:d9:1c:fa:8f:89:c1:bf:35:d2:e3:b9:96:de: 96:e9:4c:e1:82:a2:40:bc:e0:2e:5f:21:e5:c1:d5: 4c:c4:29:a1:b1:f8:17:9c:18:b3:03:99:6d:3a:03: 7b:b9:df:4d:12:35:0e:e5:46:b3:cd:ad:d1:b3:f5: 66:eb:11:20:64:41:d6:66:5e:77:fe:12:30:b5:9c: 3d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2F:8D:5D:A3:8C:20:F8:CE:36:1E:58:0D:42:CF:6E:86:E7:4A:58 X509v3 Authority Key Identifier: keyid:6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:99:1e:80:b2:ab:e0:eb:37:e2:00:cb:9f:d4:9b:f2:cf:78: d9:70:92:10:56:d5:31:6d:bc:d2:62:2b:42:bd:bf:15:f7:11: e1:b2:2d:3b:26:6e:ed:c2:f0:af:94:72:6c:8f:9e:58:21:ca: 63:e1:67:53:f4:69:fc:9b:0a:aa:a7:3b:19:2a:66:e7:af:3a: 4b:46:f2:82:d5:97:3d:59:4e:90:76:95:84:17:4b:1e:48:8b: b4:90:9a:5a:ba:48:28:8e:4c:80:cc:34:a7:22:46:b4:9a:dd: b0:00:90:da:4d:63:fc:66:ff:63:47:6d:fe:c3:6e:75:98:8a: aa:ce:29:6c:dd:50:1d:0a:3b:a2:2d:74:78:c1:db:1d:bf:85: 39:47:ff:f2:8c:19:32:57:af:54:41:aa:ff:ac:b3:29:11:aa: 0e:43:ab:8d:b0:11:40:05:bb:8c:d5:05:35:4d:47:88:b9:a6: 3f:55:45:95:4c:38:e8:f0:29:f6:3e:7c:ad:5a:5c:bb:8d:70: 17:1e:76:3a:df:a9:ba:2d:a0:3e:24:a1:87:2f:bd:a7:5e:81: 72:a7:a1:06:d3:7d:37:18:5f:da:54:05:bd:7e:f6:45:39:18: 81:7b:23:c1:04:7b:cc:87:70:39:6f:55:40:a8:6d:d3:41:7b: 83:e2:bb:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApGKzchdWlUdDRAj2Uq/rulweEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM5QkUyNzEyMTc0QTYxQTcwOEY1NTc1NDRFNjk2RkZE QkRBNzU3RDAeFw0yNjA3MjAyMDAxMTBaFw0yNjA3MjEyMDI1MTBaMDMxMTAvBgNV BAMTKDUzMkY4RDVEQTM4QzIwRjhDRTM2MUU1ODBENDJDRjZFODZFNzRBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W0uofJkIGvXGNGL6L+tbmg4K 4KkpplgGv0yKCZVjQz7spKtrHrTWMwCh82skVrsXsyVsU7mF6MMPCknC/NZ1Rn1D wOb26z0Zx6KEm3hqKg6p0st5ZrSxZwWde664D2c7OjgERUZzXwEEpZ3NT2jhocfF K8Lr3/QHSay0GLnkDGz/PTB6DXXB6ndo4eplD/QwpxaKvT20GoptzqCN0WdoFZb4 JsvO+iuesO5hmKBBtfkPzmgO2Rz6j4nBvzXS47mW3pbpTOGCokC84C5fIeXB1UzE KaGx+BecGLMDmW06A3u5300SNQ7lRrPNrdGz9WbrESBkQdZmXnf+EjC1nD1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUy+NXaOMIPjONh5YDULPbobnSlgwHwYDVR0j BBgwFoAUbJvicSF0phpwj1V1ROaW/9vadX0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhkN2EwMzgtZjhhMS00ZWQwLWExYWYtNTQ5NTJlNTQzYzQzLzAvNkM5QkUyNzEy MTc0QTYxQTcwOEY1NTc1NDRFNjk2RkZEQkRBNzU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzlCRTI3MTIxNzRBNjFBNzA4RjU1NzU0NEU2OTZGRkRCREE3 NTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvNkM5QkUyNzEyMTc0QTYxQTcwOEY1NTc1NDRFNjk2 RkZEQkRBNzU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiZHoCyq+DrN+IAy5/Um/LPeNlwkhBW1TFt vNJiK0K9vxX3EeGyLTsmbu3C8K+UcmyPnlghymPhZ1P0afybCqqnOxkqZuevOktG 8oLVlz1ZTpB2lYQXSx5Ii7SQmlq6SCiOTIDMNKciRrSa3bAAkNpNY/xm/2NHbf7D bnWYiqrOKWzdUB0KO6ItdHjB2x2/hTlH//KMGTJXr1RBqv+ssykRqg5Dq42wEUAF u4zVBTVNR4i5pj9VRZVMOOjwKfY+fK1aXLuNcBcedjrfqbotoD4koYcvvadegXKn oQbTfTcYX9pUBb1+9kU5GIF7I8EEe8yHcDlvVUCobdNBe4Piu2Y= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:51 2026 by rpki-client