$ rpki-client -vvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json) Hash identifier: 0IS6bE3/9ks8RrLJ+RUixJ6AkW7QGh+ayRapcly4gcw= Subject key identifier: 5C:45:69:0B:32:85:D1:FB:6C:80:54:DF:D0:9D:A1:A8:4F:62:62:48 Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Certificate serial: 5A41A2075D65AD381C0384593E469615ACACE876 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:17:25 +0000 Manifest this update: Tue 21 Jul 2026 05:12:25 +0000 Manifest next update: Wed 22 Jul 2026 07:19:25 +0000 Files and hashes: 1: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=) 2: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: jVSrZStb1CQNnwBrodgmeCPSc/Gh6RSuSZ36DquyMJY=) 3: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=) 4: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=) 5: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:41:a2:07:5d:65:ad:38:1c:03:84:59:3e:46:96:15:ac:ac:e8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Validity Not Before: Jul 21 05:12:25 2026 GMT Not After : Jul 22 07:19:25 2026 GMT Subject: CN=5C45690B3285D1FB6C8054DFD09DA1A84F626248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:ed:15:70:8e:16:87:df:90:87:3d:e6:32: 7d:2e:d2:55:99:26:10:7b:47:3a:31:0b:d8:02:34: a7:09:c0:12:84:91:72:f8:f5:68:fe:94:4b:93:a4: d0:80:4f:5a:7e:0d:a8:37:3a:fe:2d:19:70:7b:bd: 5a:01:3c:0e:2f:bd:57:d8:06:d5:4e:00:af:82:5d: 13:25:f3:3d:b7:2d:1f:fb:0b:05:87:c0:2c:25:03: f7:ee:74:af:4a:09:51:82:d8:cd:24:65:cc:39:a8: 65:db:7f:85:d2:d6:db:84:ee:60:16:2d:59:a5:98: f3:7e:25:00:2c:4f:1f:dc:87:7b:d3:14:de:4e:55: ff:07:5b:02:0b:f3:43:27:e2:d9:59:5a:fa:cb:43: 9c:aa:0e:d8:41:ed:50:6f:f6:77:c5:df:6d:10:a6: 0f:ff:a9:28:f8:5e:c3:06:a6:e5:e4:a1:6b:75:2b: 03:02:95:d5:66:88:b1:87:f7:52:28:73:10:9a:62: a6:3d:4b:83:02:71:fc:87:7a:89:0b:bc:f4:0c:f2: 37:0a:39:71:02:d1:c4:08:ee:2c:48:b5:79:6c:1f: 09:78:60:70:a1:f0:3d:75:50:7b:82:b7:81:a2:09: f4:9f:19:0c:78:ad:9f:cc:b7:cf:37:3a:36:ec:28: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:69:0B:32:85:D1:FB:6C:80:54:DF:D0:9D:A1:A8:4F:62:62:48 X509v3 Authority Key Identifier: keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:24:43:38:78:8b:8a:0b:7f:0f:9d:e9:23:2b:2f:e7:a7:5d: cb:4f:e3:cd:d1:01:45:3e:24:f9:21:67:86:b2:e4:db:32:64: 86:e1:73:7f:ad:c4:83:0f:19:ca:e6:88:9f:51:ee:90:4e:28: 51:b7:b9:2d:b1:62:9d:3d:fb:f4:26:3a:cf:3a:0a:3f:f1:af: 2c:cd:e3:4d:02:1f:06:02:c0:02:b0:ff:d1:4d:40:19:25:01: fd:1e:98:4d:36:e0:7a:ad:33:97:3c:9d:dd:25:c6:f5:08:56: ea:c3:02:ce:30:88:2c:24:75:6b:df:27:07:46:fa:73:4d:d2: 97:9d:3f:64:70:f6:6a:cb:96:ff:d1:5a:df:c8:89:48:5d:33: d9:1c:ad:ca:66:6e:90:d8:b6:9f:3e:03:22:3d:29:b4:3a:28: 8e:52:13:3c:24:ee:ea:db:20:68:8c:80:99:97:bd:60:a6:0a: d3:d4:dc:0b:d2:ba:df:b7:c3:dc:12:5d:f5:6f:46:2b:1d:52: b0:19:12:b8:26:95:5d:ea:dd:eb:6a:21:14:ed:ce:c6:32:6f: 8f:14:50:f5:80:f2:34:6c:15:7f:f6:97:85:30:5a:b6:6f:22: e7:5a:ef:6f:8a:fa:3e:9c:f1:7b:71:8c:08:14:15:d3:d9:0d: ef:80:c8:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkGiB11lrTgcA4RZPkaWFays6HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4 MDc5RjQ2MjAeFw0yNjA3MjEwNTEyMjVaFw0yNjA3MjIwNzE5MjVaMDMxMTAvBgNV BAMTKDVDNDU2OTBCMzI4NUQxRkI2QzgwNTRERkQwOURBMUE4NEY2MjYyNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbq+0VcI4Wh9+Qhz3mMn0u0lWZ JhB7RzoxC9gCNKcJwBKEkXL49Wj+lEuTpNCAT1p+Dag3Ov4tGXB7vVoBPA4vvVfY BtVOAK+CXRMl8z23LR/7CwWHwCwlA/fudK9KCVGC2M0kZcw5qGXbf4XS1tuE7mAW LVmlmPN+JQAsTx/ch3vTFN5OVf8HWwIL80Mn4tlZWvrLQ5yqDthB7VBv9nfF320Q pg//qSj4XsMGpuXkoWt1KwMCldVmiLGH91IocxCaYqY9S4MCcfyHeokLvPQM8jcK OXEC0cQI7ixItXlsHwl4YHCh8D11UHuCt4GiCfSfGQx4rZ/Mt883OjbsKOEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXEVpCzKF0ftsgFTf0J2hqE9iYkgwHwYDVR0j BBgwFoAUpq/WWsZtTrcCeu1fiY6OzYB59GIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4ODY4MDUtM2I4NS00YzViLTliNmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFD NjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4MDc5RjQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNkFGRDY1QUM2NkQ0RUI3MDI3QUVENUY4OThFOEVDRDgwNzlG NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThF Q0Q4MDc5RjQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEkQzh4i4oLfw+d6SMrL+enXctP483RAUU+ JPkhZ4ay5NsyZIbhc3+txIMPGcrmiJ9R7pBOKFG3uS2xYp09+/QmOs86Cj/xryzN 400CHwYCwAKw/9FNQBklAf0emE024HqtM5c8nd0lxvUIVurDAs4wiCwkdWvfJwdG +nNN0pedP2Rw9mrLlv/RWt/IiUhdM9kcrcpmbpDYtp8+AyI9KbQ6KI5SEzwk7urb IGiMgJmXvWCmCtPU3AvSut+3w9wSXfVvRisdUrAZErgmlV3q3etqIRTtzsYyb48U UPWA8jRsFX/2l4UwWrZvIuda72+K+j6c8XtxjAgUFdPZDe+AyF0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:02 2026 by rpki-client