$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft File: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft (raw, json) Hash identifier: J4YovsDPaokrQWGTZ6z7YoP0//9KBT7ePMAKuPTA0iw= Subject key identifier: 08:C2:9B:D5:41:2A:E6:82:09:42:F1:65:67:E9:B2:FB:EF:42:DE:EE Authority key identifier: 6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 Certificate issuer: /CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Certificate serial: 385AC1AF95DFBC2A8F940AE67D9A1E66097C3F62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:17:46 +0000 Manifest this update: Tue 02 Jun 2026 10:12:46 +0000 Manifest next update: Wed 03 Jun 2026 10:41:46 +0000 Files and hashes: 1: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl (hash: DyuW5Yfc3qWCLnX99vQQ/Q4GfektmrvpnhZd5l2Om1E=) 2: 3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa (hash: wL8mPbrDXSqS55aHxdLNlPMS48d9sDFxyNKF6bE5qfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5a:c1:af:95:df:bc:2a:8f:94:0a:e6:7d:9a:1e:66:09:7c:3f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0 Validity Not Before: Jun 2 10:12:46 2026 GMT Not After : Jun 3 10:41:46 2026 GMT Subject: CN=08C29BD5412AE6820942F16567E9B2FBEF42DEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:64:92:dc:c6:3b:29:61:43:5b:fb:c7:0b: f4:f4:a7:a0:01:49:6d:fc:bd:11:cb:1c:86:7f:0d: 0c:55:98:c9:b5:68:2a:37:0b:79:4c:fa:a9:92:57: 8f:14:68:82:c7:2e:d0:59:07:df:ca:d6:6a:53:52: 0a:48:ac:35:33:3e:7e:43:12:dc:8b:ba:90:52:08: b1:aa:84:c9:83:6e:6c:bc:d9:38:31:46:90:bf:b9: 6e:b2:25:b9:19:ae:1b:51:eb:4e:61:80:f4:7e:40: 84:5c:6b:ad:9f:e8:47:a0:49:48:94:f1:62:e6:03: 65:de:66:84:4e:1e:ab:f3:c2:fa:24:f8:ce:7d:21: 12:37:24:48:bb:0a:d1:b8:0a:b8:94:d9:ad:84:d5: a0:29:e5:60:bb:18:c5:a2:38:b0:94:0b:2d:c2:48: 44:97:19:b0:41:0a:58:41:61:dc:ff:3f:03:27:50: 9d:13:d6:25:84:f9:d9:47:61:3a:58:91:01:32:51: 33:b1:ca:bf:7e:c8:08:c3:ad:5c:4c:28:c9:ac:b6: 30:bb:6f:d4:0d:6c:05:9d:c5:b6:5f:80:18:c4:52: 4f:d4:11:8f:a4:ef:85:a9:61:bc:76:bf:fb:a3:f1: 20:95:8d:4a:28:ad:64:a6:9b:e8:db:ab:1b:0c:78: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C2:9B:D5:41:2A:E6:82:09:42:F1:65:67:E9:B2:FB:EF:42:DE:EE X509v3 Authority Key Identifier: keyid:6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:96:52:50:29:3a:a0:e0:ae:1d:e8:41:37:8d:4d:43:cd:f1: 4a:06:d8:b8:b7:f3:78:7c:80:01:b4:ac:5e:9a:d7:58:fa:ac: 95:d2:5d:89:7b:c2:40:c1:94:7e:5e:7a:0b:e5:b6:be:fc:eb: 52:69:1f:05:53:1a:b1:04:29:ef:42:9b:5a:40:e1:63:6f:73: a1:29:d4:f9:43:83:e5:3c:38:54:2d:0e:87:5a:1a:c8:ee:65: fc:21:20:c3:fb:15:5d:1b:db:69:a5:8a:69:ad:b5:3f:ac:2f: 8d:51:a0:74:2b:67:b4:6f:b4:c8:44:8c:f1:37:4c:ea:2e:f2: 50:25:e8:d7:cc:2e:3f:20:9a:2c:bf:b1:9e:e2:58:31:2f:95: 2e:82:1d:0f:56:24:83:d6:7f:35:5f:91:c4:8a:b2:ce:8b:57: 6b:af:9e:3a:d3:db:40:d4:47:08:89:31:27:81:43:a3:a2:17: 48:3c:9f:6a:58:3a:1b:7f:34:5b:2d:3c:95:19:42:fa:9b:9e: 8e:a5:4c:bf:30:1d:46:32:9d:b8:fe:81:39:f5:bd:f0:d0:e8: 50:64:1c:d7:dc:68:4e:af:5d:0e:9c:a3:97:51:48:19:69:8e: 26:e6:9b:87:04:bd:56:db:ad:b6:f0:fa:e4:d8:d3:17:92:c7: ac:1c:97:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFrBr5XfvCqPlArmfZoeZgl8P2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCNDQxQ0I0Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQw QUY4OUJCMDAeFw0yNjA2MDIxMDEyNDZaFw0yNjA2MDMxMDQxNDZaMDMxMTAvBgNV BAMTKDA4QzI5QkQ1NDEyQUU2ODIwOTQyRjE2NTY3RTlCMkZCRUY0MkRFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhmSS3MY7KWFDW/vHC/T0p6AB SW38vRHLHIZ/DQxVmMm1aCo3C3lM+qmSV48UaILHLtBZB9/K1mpTUgpIrDUzPn5D EtyLupBSCLGqhMmDbmy82TgxRpC/uW6yJbkZrhtR605hgPR+QIRca62f6EegSUiU 8WLmA2XeZoROHqvzwvok+M59IRI3JEi7CtG4CriU2a2E1aAp5WC7GMWiOLCUCy3C SESXGbBBClhBYdz/PwMnUJ0T1iWE+dlHYTpYkQEyUTOxyr9+yAjDrVxMKMmstjC7 b9QNbAWdxbZfgBjEUk/UEY+k74WpYbx2v/uj8SCVjUoorWSmm+jbqxsMeFq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCMKb1UEq5oIJQvFlZ+my++9C3u4wHwYDVR0j BBgwFoAUbbRBy0z7EWr+iuAwFDx95Ar4m7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM3ODQ0MDktM2Y4Mi00NGMxLWExNGUtNjgxZGY1MWIwMjM0LzAvNkRCNDQxQ0I0 Q0ZCMTE2QUZFOEFFMDMwMTQzQzdERTQwQUY4OUJCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82REI0NDFDQjRDRkIxMTZBRkU4QUUwMzAxNDNDN0RFNDBBRjg5 QkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmM3ODQ0MDktM2Y4Mi00NGMxLWEx NGUtNjgxZGY1MWIwMjM0LzAvNkRCNDQxQ0I0Q0ZCMTE2QUZFOEFFMDMwMTQzQzdE RTQwQUY4OUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKWUlApOqDgrh3oQTeNTUPN8UoG2Li383h8 gAG0rF6a11j6rJXSXYl7wkDBlH5eegvltr7861JpHwVTGrEEKe9Cm1pA4WNvc6Ep 1PlDg+U8OFQtDodaGsjuZfwhIMP7FV0b22mlimmttT+sL41RoHQrZ7RvtMhEjPE3 TOou8lAl6NfMLj8gmiy/sZ7iWDEvlS6CHQ9WJIPWfzVfkcSKss6LV2uvnjrT20DU RwiJMSeBQ6OiF0g8n2pYOht/NFstPJUZQvqbno6lTL8wHUYynbj+gTn1vfDQ6FBk HNfcaE6vXQ6co5dRSBlpjibmm4cEvVbbrbbw+uTY0xeSx6wclyk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:43:00 2026 by rpki-client