$ rpki-client -vvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json) Hash identifier: CO0Xdx9rCVWxLpwL4ORD7O6vodyG2tfvh8d6+GXqaBI= Subject key identifier: 7F:BE:35:AB:38:BF:AE:74:31:42:BE:E1:D9:FF:C5:FA:A3:8D:28:DC Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Certificate serial: 0D6F3CD438AD93091B33586DBDEC7FC583C25CA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:22:58 +0000 Manifest this update: Tue 02 Jun 2026 22:17:58 +0000 Manifest next update: Wed 03 Jun 2026 23:11:58 +0000 Files and hashes: 1: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=) 2: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: kYJ6RSNGPtnsH/f66M5VgXSaypaTRkB+BWRJ4EOkU70=) 3: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=) 4: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=) 5: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6f:3c:d4:38:ad:93:09:1b:33:58:6d:bd:ec:7f:c5:83:c2:5c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Validity Not Before: Jun 2 22:17:58 2026 GMT Not After : Jun 3 23:11:58 2026 GMT Subject: CN=7FBE35AB38BFAE743142BEE1D9FFC5FAA38D28DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:42:f0:af:87:b6:58:b2:4e:c8:1f:08:16: 37:8b:33:c8:83:24:95:3c:84:b4:0e:8b:78:23:b7: 4f:a9:5a:0b:49:4a:6a:7a:e1:8f:09:cb:d0:2a:21: 1f:dd:70:d3:a7:86:3f:c9:f8:2f:57:52:e0:ec:ce: ce:32:e2:a2:e0:97:f0:e7:bb:fe:78:49:c8:2b:c0: 29:cd:f5:1a:f6:6f:95:b1:d0:dd:50:69:3c:47:9c: 85:0b:b9:fe:55:aa:7a:ec:dd:3f:26:c0:b4:7a:83: 8b:e9:e2:95:61:55:63:6d:21:02:9b:36:d1:32:27: a7:46:81:ea:83:c3:13:ef:b1:b9:cd:a6:6d:07:31: 25:af:d9:df:8e:ee:69:4c:72:a4:42:d3:99:6b:bd: 43:b4:72:1d:af:d5:7f:5f:9c:dd:c5:c6:17:01:4a: ab:28:11:de:e0:b8:35:b1:40:fc:2d:3a:b1:8f:1a: 7d:b2:ec:13:6e:d8:e6:c3:be:ea:15:30:ac:eb:07: f5:ad:6e:9f:fe:ef:b5:9d:c0:c0:c1:44:ae:da:a2: 2c:48:72:bf:a5:41:70:f9:76:30:ab:0e:00:48:08: 02:f2:31:cd:a4:69:c2:21:d7:e6:1a:40:eb:90:5b: 3c:41:19:36:61:ff:c4:5c:5f:f0:2f:06:26:b9:e2: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BE:35:AB:38:BF:AE:74:31:42:BE:E1:D9:FF:C5:FA:A3:8D:28:DC X509v3 Authority Key Identifier: keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6a:2b:7c:c4:79:68:d2:71:85:4d:ef:ba:d5:d7:36:f8:d3: 34:ee:ac:48:1c:1c:ab:63:fc:39:c2:54:5f:21:f6:53:75:85: 72:68:a8:b2:dd:e2:2c:0d:3d:dd:72:fb:78:d3:83:ed:2f:98: cb:72:c6:08:fe:5a:30:36:fe:4f:22:35:03:ed:cc:be:51:1f: a5:f6:1e:ac:4e:22:77:20:1b:01:e8:d3:99:14:ae:3b:be:7f: 93:3a:53:12:4d:28:10:24:3b:a0:61:3e:30:09:fe:35:76:de: 1a:03:4a:53:0a:53:c1:c0:18:2e:c4:d4:c6:72:31:07:53:a3: ba:78:5c:97:6e:38:35:49:21:1a:71:e2:ff:6c:e2:d1:bf:63: f3:fe:a6:e7:41:93:65:c5:b3:95:c6:c6:11:63:3d:07:39:90: 3d:2f:17:25:c9:6d:f8:4e:c7:83:4a:93:ed:a1:ac:6c:65:43: 76:96:64:9a:06:a7:98:37:1e:a7:06:fe:fd:34:99:91:e6:fd: 93:1e:63:c5:ed:11:c6:a6:7c:06:7b:77:5d:45:d2:31:b6:ab: d5:73:88:3f:31:21:90:0d:e8:5e:68:20:79:4e:4a:cd:bb:24: 07:c1:44:04:2c:33:e7:88:05:7e:61:f8:c8:c9:75:61:b1:15: 81:c8:4c:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDW881DitkwkbM1htvex/xYPCXKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4 MDc5RjQ2MjAeFw0yNjA2MDIyMjE3NThaFw0yNjA2MDMyMzExNThaMDMxMTAvBgNV BAMTKDdGQkUzNUFCMzhCRkFFNzQzMTQyQkVFMUQ5RkZDNUZBQTM4RDI4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAULwr4e2WLJOyB8IFjeLM8iD JJU8hLQOi3gjt0+pWgtJSmp64Y8Jy9AqIR/dcNOnhj/J+C9XUuDszs4y4qLgl/Dn u/54ScgrwCnN9Rr2b5Wx0N1QaTxHnIULuf5Vqnrs3T8mwLR6g4vp4pVhVWNtIQKb NtEyJ6dGgeqDwxPvsbnNpm0HMSWv2d+O7mlMcqRC05lrvUO0ch2v1X9fnN3FxhcB SqsoEd7guDWxQPwtOrGPGn2y7BNu2ObDvuoVMKzrB/Wtbp/+77WdwMDBRK7aoixI cr+lQXD5djCrDgBICALyMc2kacIh1+YaQOuQWzxBGTZh/8RcX/AvBia54sL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf741qzi/rnQxQr7h2f/F+qONKNwwHwYDVR0j BBgwFoAUpq/WWsZtTrcCeu1fiY6OzYB59GIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4ODY4MDUtM2I4NS00YzViLTliNmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFD NjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4MDc5RjQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNkFGRDY1QUM2NkQ0RUI3MDI3QUVENUY4OThFOEVDRDgwNzlG NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThF Q0Q4MDc5RjQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpqK3zEeWjScYVN77rV1zb40zTurEgcHKtj /DnCVF8h9lN1hXJoqLLd4iwNPd1y+3jTg+0vmMtyxgj+WjA2/k8iNQPtzL5RH6X2 HqxOIncgGwHo05kUrju+f5M6UxJNKBAkO6BhPjAJ/jV23hoDSlMKU8HAGC7E1MZy MQdTo7p4XJduODVJIRpx4v9s4tG/Y/P+pudBk2XFs5XGxhFjPQc5kD0vFyXJbfhO x4NKk+2hrGxlQ3aWZJoGp5g3HqcG/v00mZHm/ZMeY8XtEcamfAZ7d11F0jG2q9Vz iD8xIZAN6F5oIHlOSs27JAfBRAQsM+eIBX5h+MjJdWGxFYHITJA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:07 2026 by rpki-client