$ rpki-client -vvf rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft File: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft (raw, json) Hash identifier: E/K5ihZX/B8BlFikyoj0KBUx8u/5k7uRwgHUiDhLQTc= Subject key identifier: 86:38:85:C4:B3:B4:98:28:29:FE:CD:1C:6B:9E:27:75:0F:93:47:55 Authority key identifier: 6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF Certificate issuer: /CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Certificate serial: 07E05E1E11D1F26D2D5594217C053EA6EFBDD411 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 18:14:11 +0000 Manifest this update: Mon 20 Jul 2026 18:09:11 +0000 Manifest next update: Tue 21 Jul 2026 20:49:11 +0000 Files and hashes: 1: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: 8mfpAqlBNjaIkK/YqdqwM4IvfsvZ409bkNBx3HDJzaQ=) 2: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl (hash: SkhLNxCaySEaf/+R72KNbtpO09XlsJG1oeejztEXBcE=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: yRu2jjYmsdVB4YWUV1S9avXrEbZsjqsyyjcuTEPOAYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e0:5e:1e:11:d1:f2:6d:2d:55:94:21:7c:05:3e:a6:ef:bd:d4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Validity Not Before: Jul 20 18:09:11 2026 GMT Not After : Jul 21 20:49:11 2026 GMT Subject: CN=863885C4B3B4982829FECD1C6B9E27750F934755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:06:2d:ac:72:34:2d:c6:04:e1:f8:10:a9: e7:73:dc:9f:b9:55:80:93:07:97:d9:6a:32:a3:7a: bd:cb:ba:9d:cc:53:60:0d:e2:ae:94:75:43:41:75: 33:72:62:b9:95:ed:9a:d5:09:9b:a7:0e:e1:b6:cf: 13:30:38:eb:d1:b9:06:6b:63:75:bc:cf:91:98:b1: f2:4b:67:56:88:9a:90:d5:35:73:bf:6f:55:a2:5e: a2:6e:af:bd:68:ee:10:a3:c4:8b:c1:a1:e1:5a:d3: 02:e5:d8:bc:bd:42:fc:31:90:f8:47:3c:5c:8b:aa: 22:f3:28:f5:af:64:c8:e0:e4:a6:da:05:1b:f3:58: 03:ff:b6:18:eb:be:09:c7:a0:0b:fd:8f:2e:7f:e7: 49:a9:aa:24:38:01:42:55:1f:b6:9e:ad:2b:76:9f: d1:60:8c:24:46:47:cf:9c:1f:46:cd:a0:60:c8:bf: 1c:e0:f4:4c:fe:ae:eb:06:60:85:14:88:50:76:52: 4e:f2:98:44:1f:1a:21:a6:29:9c:11:8c:d4:95:25: 39:c0:ff:4a:94:1e:f5:f4:8e:09:27:94:2b:16:6b: cb:84:24:82:77:bf:7b:7e:e1:b2:03:a6:63:38:d0: 5d:3a:a5:7d:7a:72:38:58:33:3b:2a:6b:d2:e2:f9: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:85:C4:B3:B4:98:28:29:FE:CD:1C:6B:9E:27:75:0F:93:47:55 X509v3 Authority Key Identifier: keyid:6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:28:00:4b:2b:9f:32:ad:2e:81:13:90:2a:81:86:81:0e:ba: 7f:d3:cc:a6:bc:87:bb:98:c9:c9:dc:d6:71:cb:cc:4e:a5:28: b5:9a:a2:cb:72:ff:92:27:f9:fe:c6:18:cf:a8:55:ce:5d:a8: 5f:d7:93:0b:87:77:ac:cf:22:20:c6:56:0b:e0:f3:9e:c7:a3: 69:0a:07:16:74:b6:6f:a4:55:c2:29:8e:0d:bb:f9:09:08:09: 95:81:d4:6d:c9:28:b9:9f:84:97:fe:f8:d6:54:b6:88:4a:b6: 75:d3:6e:30:6b:cf:2c:5d:4d:3d:44:40:a2:19:3e:35:f9:d8: 70:9b:41:e7:2a:f5:9d:a5:32:67:ac:5a:a2:fa:ea:74:a5:2e: 77:3c:30:38:60:4a:df:32:b9:a0:a2:fb:4d:7e:3c:d5:ae:a4: fe:b5:34:9a:e0:c0:e1:7a:96:d9:a9:69:c9:33:fe:a1:57:5f: 2f:18:a9:cf:c5:13:a2:c3:ed:fa:14:b8:1a:21:1a:06:b4:bf: 78:2c:93:3d:65:4a:11:43:42:65:77:5d:19:de:f2:0b:ab:e8: b6:66:9f:5d:ef:5e:4f:b2:5b:ad:c8:99:cf:f5:a4:4b:ba:ce: e5:e4:f3:28:03:d5:1e:82:fa:c3:0d:2b:1a:d1:eb:2d:05:88: af:5d:b4:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+BeHhHR8m0tVZQhfAU+pu+91BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdBQkVF ODNDMjdCRjAeFw0yNjA3MjAxODA5MTFaFw0yNjA3MjEyMDQ5MTFaMDMxMTAvBgNV BAMTKDg2Mzg4NUM0QjNCNDk4MjgyOUZFQ0QxQzZCOUUyNzc1MEY5MzQ3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquAYtrHI0LcYE4fgQqedz3J+5 VYCTB5fZajKjer3Lup3MU2AN4q6UdUNBdTNyYrmV7ZrVCZunDuG2zxMwOOvRuQZr Y3W8z5GYsfJLZ1aImpDVNXO/b1WiXqJur71o7hCjxIvBoeFa0wLl2Ly9QvwxkPhH PFyLqiLzKPWvZMjg5KbaBRvzWAP/thjrvgnHoAv9jy5/50mpqiQ4AUJVH7aerSt2 n9FgjCRGR8+cH0bNoGDIvxzg9Ez+rusGYIUUiFB2Uk7ymEQfGiGmKZwRjNSVJTnA /0qUHvX0jgknlCsWa8uEJIJ3v3t+4bIDpmM40F06pX16cjhYMzsqa9Li+fOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjiFxLO0mCgp/s0ca54ndQ+TR1UwHwYDVR0j BBgwFoAUbIn2+ealGHvhCFRTgH96vug8J78wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ZlMzVmYWEtZWQyYi00MjcxLWI0OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlF NkE1MTg3QkUxMDg1NDUzODA3RjdBQkVFODNDMjdCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Qzg5RjZGOUU2QTUxODdCRTEwODU0NTM4MDdGN0FCRUU4M0My N0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdB QkVFODNDMjdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEoAEsrnzKtLoETkCqBhoEOun/TzKa8h7uY ycnc1nHLzE6lKLWaosty/5In+f7GGM+oVc5dqF/XkwuHd6zPIiDGVgvg857Ho2kK BxZ0tm+kVcIpjg27+QkICZWB1G3JKLmfhJf++NZUtohKtnXTbjBrzyxdTT1EQKIZ PjX52HCbQecq9Z2lMmesWqL66nSlLnc8MDhgSt8yuaCi+01+PNWupP61NJrgwOF6 ltmpackz/qFXXy8Yqc/FE6LD7foUuBohGga0v3gskz1lShFDQmV3XRne8gur6LZm n13vXk+yW63Imc/1pEu6zuXk8ygD1R6C+sMNKxrR6y0FiK9dtBQ= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:32 2026 by rpki-client