$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft File: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft (raw, json) Hash identifier: cpadRLKTrptvWraERhnQQRIlMRS//tEtKLGjRipT83Y= Subject key identifier: 7E:68:72:C4:8A:AF:39:52:3E:DC:31:0F:18:F5:16:D7:16:3B:A1:EE Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 Certificate issuer: /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Certificate serial: 273BD08F9A5F6C073F911BB85F844646719118C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:21:24 +0000 Manifest this update: Wed 03 Jun 2026 01:16:24 +0000 Manifest next update: Thu 04 Jun 2026 03:24:24 +0000 Files and hashes: 1: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=) 2: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl (hash: mxralQRsOl9yMZ4PAevYJh9r33PxIuSr93M07JudenU=) 3: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=) 4: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=) 5: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=) 6: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=) 7: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: 1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=) 8: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3b:d0:8f:9a:5f:6c:07:3f:91:1b:b8:5f:84:46:46:71:91:18:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Validity Not Before: Jun 3 01:16:24 2026 GMT Not After : Jun 4 03:24:24 2026 GMT Subject: CN=7E6872C48AAF39523EDC310F18F516D7163BA1EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:87:11:95:c9:85:d4:9a:a0:dd:31:3a:59: 0b:c6:39:46:f1:d4:37:4d:22:bb:11:a1:8b:91:b8: e8:7d:f5:ec:b2:67:d7:d5:01:85:3e:9d:02:c1:c8: 71:b5:0f:de:5d:ea:23:ae:1b:a8:e7:f0:e2:0b:80: da:23:63:e5:45:df:fa:3a:03:3a:26:b8:f4:6e:21: 0f:82:44:6a:4e:84:61:c6:a7:d5:9e:5c:66:bb:67: 9c:3c:f9:ad:dc:cd:87:e7:5c:d8:24:ea:ce:ea:40: 07:63:6c:18:6e:7f:15:4c:34:73:9a:6f:6c:13:20: 56:27:33:c7:f8:37:84:58:72:e6:6e:bb:7f:a3:d7: ad:8e:b0:65:ad:57:00:6b:7f:8e:ce:59:36:b1:7e: 1d:4b:de:6a:f5:6c:c8:cb:d1:2e:ca:f3:29:fc:74: 59:26:df:4b:8b:c8:a6:d9:49:b5:08:a4:f3:e6:32: 1e:fe:6c:75:a5:6e:50:15:19:e8:1e:66:b0:0a:a2: ed:1f:43:11:e5:28:3e:56:69:9d:12:c9:b1:a8:27: a8:fa:cd:ea:ca:fd:d6:b3:a4:6b:c1:4a:2d:a3:1f: 67:e0:eb:29:6c:1c:e7:71:c8:f6:a4:9e:8b:1b:29: 4c:3d:70:38:6c:e3:e3:e4:4a:80:8c:f4:fa:4d:b7: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:72:C4:8A:AF:39:52:3E:DC:31:0F:18:F5:16:D7:16:3B:A1:EE X509v3 Authority Key Identifier: keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:46:5e:d5:1e:38:94:2d:61:8d:08:e0:78:dc:99:cd:3a:60: 74:b0:bf:ea:8a:cb:61:21:aa:2e:e9:89:39:55:58:fd:b6:4b: 0e:35:d2:ad:92:2d:b8:9f:e9:23:87:8c:c4:6d:a0:47:a5:92: 73:94:66:ae:b6:c1:e2:21:3c:99:3f:a9:ff:1b:a0:af:6b:05: aa:a0:cd:9c:3d:a5:e8:b2:7c:62:da:49:f7:c8:3c:8c:40:fd: c6:ae:e0:fa:88:75:eb:2b:c3:bd:ea:57:44:d7:7c:f1:b1:31: 93:65:98:38:c6:9e:60:5a:84:91:05:1c:7b:41:d5:98:cd:fe: 94:1e:d2:bd:8f:b3:b9:08:07:75:49:fd:f9:0c:f5:c8:68:69: 62:1f:7f:df:ba:e4:41:80:fd:dc:5f:9c:b1:e7:45:f2:30:b3: 91:fc:c0:97:1d:3a:3f:8f:cf:ef:4b:9c:08:4d:c1:03:d2:c2: a7:5f:8f:74:6b:a4:dc:9b:e3:4b:ea:9a:db:26:d3:77:2f:31: 89:30:aa:da:25:3a:09:c2:b8:6f:96:af:b1:7f:1c:4d:fa:b2: 37:f7:16:d7:8b:5d:80:e5:a7:d4:b3:33:5b:23:ed:1c:ba:58: 04:ec:fe:c7:3a:00:b6:66:08:aa:d9:7c:c3:d2:e0:18:65:d4: 3b:da:18:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzvQj5pfbAc/kRu4X4RGRnGRGMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFF QURCNjhEMDAeFw0yNjA2MDMwMTE2MjRaFw0yNjA2MDQwMzI0MjRaMDMxMTAvBgNV BAMTKDdFNjg3MkM0OEFBRjM5NTIzRURDMzEwRjE4RjUxNkQ3MTYzQkExRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKYcRlcmF1Jqg3TE6WQvGOUbx 1DdNIrsRoYuRuOh99eyyZ9fVAYU+nQLByHG1D95d6iOuG6jn8OILgNojY+VF3/o6 AzomuPRuIQ+CRGpOhGHGp9WeXGa7Z5w8+a3czYfnXNgk6s7qQAdjbBhufxVMNHOa b2wTIFYnM8f4N4RYcuZuu3+j162OsGWtVwBrf47OWTaxfh1L3mr1bMjL0S7K8yn8 dFkm30uLyKbZSbUIpPPmMh7+bHWlblAVGegeZrAKou0fQxHlKD5WaZ0SybGoJ6j6 zerK/dazpGvBSi2jH2fg6ylsHOdxyPaknosbKUw9cDhs4+PkSoCM9PpNty3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfmhyxIqvOVI+3DEPGPUW1xY7oe4wHwYDVR0j BBgwFoAUxqhNi2VF/JGpKzxyP0FqEerbaNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkZDYxMzUtNTQ4Yy00ODgxLWFmNzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2 NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFFQURCNjhEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkE4NEQ4QjY1NDVGQzkxQTkyQjNDNzIzRjQxNkExMUVBREI2 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZB MTFFQURCNjhEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdGXtUeOJQtYY0I4Hjcmc06YHSwv+qKy2Eh qi7piTlVWP22Sw410q2SLbif6SOHjMRtoEelknOUZq62weIhPJk/qf8boK9rBaqg zZw9peiyfGLaSffIPIxA/cau4PqIdesrw73qV0TXfPGxMZNlmDjGnmBahJEFHHtB 1ZjN/pQe0r2Ps7kIB3VJ/fkM9choaWIff9+65EGA/dxfnLHnRfIws5H8wJcdOj+P z+9LnAhNwQPSwqdfj3RrpNyb40vqmtsm03cvMYkwqtolOgnCuG+Wr7F/HE36sjf3 FteLXYDlp9SzM1sj7Ry6WATs/sc6ALZmCKrZfMPS4Bhl1DvaGEE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:59 2026 by rpki-client