$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft File: 6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft (raw, json) Hash identifier: /QHZD9t3H1SZkB15zeMzk5qmVf0OQMicF2czMp6IRSI= Subject key identifier: 04:87:7C:9A:64:AC:6F:95:6F:72:50:1D:76:16:4A:B3:DF:B3:CE:F0 Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9 Certificate issuer: /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9 Certificate serial: 798D8EFFFD7C0E4BBA10F12B4F8F4B0E6C1D8E6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:37:01 +0000 Manifest this update: Tue 02 Jun 2026 09:32:01 +0000 Manifest next update: Wed 03 Jun 2026 13:26:01 +0000 Files and hashes: 1: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: vn6fDh5P+Nx59npDGlgkHszkp/jNfWKmlW62yBSFpu8=) 2: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: hGcThccPbRGAGg17WeoAE2cy8dF6FfNo3FqZCcptl04=) 3: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: 9uJvmK0FEVjdzGyh4dQe6BsAkTDpNstIPHLao/5zXyU=) 4: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: mxX69NxkQDSLUTtAEZdfQh+amukj4aw1fdKwNMn1bzo=) 5: 6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl (hash: vdypokm+n5rtiRte70G3A3Tlw5/iwhbtyCIa0gvRshY=) 6: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: gYR/crxSzk7AQwYudgq7gQ3UPT8cduEgo5awnIlpiZ4=) 7: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: XiVsdam82vnDzv3JMHx/F/L9OyD20RlHDfFmGKOXSAk=) 8: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: OKpuxVQGY6BsX3athPfFW58QS54IISfKzcjxg/HXJIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8d:8e:ff:fd:7c:0e:4b:ba:10:f1:2b:4f:8f:4b:0e:6c:1d:8e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9 Validity Not Before: Jun 2 09:32:01 2026 GMT Not After : Jun 3 13:26:01 2026 GMT Subject: CN=04877C9A64AC6F956F72501D76164AB3DFB3CEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:b8:ba:71:b5:f2:13:47:02:40:82:60:d2: ff:e5:90:74:ad:45:8d:d5:73:e9:e7:54:8f:31:07: d6:12:6f:dc:5d:cf:8d:4e:a2:09:83:42:07:3e:0d: c7:1e:c9:30:47:3e:21:a1:d8:83:45:83:44:06:e6: 95:bd:e8:56:41:7d:f6:29:e2:8b:e2:91:cd:9e:9f: 7e:f8:d2:36:e4:6f:c8:6b:e5:1d:cc:e5:c1:e7:5c: 26:43:0f:74:7d:c4:98:8d:24:91:d2:37:2d:ea:b2: 88:c4:24:80:76:80:70:23:3e:b3:5a:37:19:1b:df: 69:f8:44:1b:69:ea:d7:36:78:b5:0c:cc:19:2a:ad: a5:25:24:b4:e5:a6:d0:63:34:0b:b0:42:af:b6:2c: 10:3e:ed:08:84:2f:b6:5f:e6:10:f5:49:2e:49:6c: f2:3a:54:d7:12:16:b5:c8:e8:0d:a0:94:d4:4a:e2: cc:53:22:bc:d3:29:12:ee:aa:86:30:49:a8:75:47: bb:29:5d:63:7c:f0:21:28:ed:17:f3:7c:7a:cb:a3: 7f:d2:f0:89:2b:ca:4a:1d:78:ee:a9:55:54:35:c0: cf:16:3f:21:23:1f:11:f1:dd:79:2e:2e:52:b6:8c: ae:9b:05:36:5b:41:e8:5a:60:33:6f:40:aa:3b:72: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:87:7C:9A:64:AC:6F:95:6F:72:50:1D:76:16:4A:B3:DF:B3:CE:F0 X509v3 Authority Key Identifier: keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:b9:79:3d:71:68:6a:66:7c:37:be:8f:e5:3a:81:bb:27: a1:9e:26:7a:3c:bf:0c:2e:0e:59:c6:11:3b:a4:d7:2f:c1:e8: 5c:1c:ac:62:bf:46:63:36:9f:12:d9:65:51:8f:1a:54:a4:2f: bd:3f:84:f1:da:b5:46:02:17:32:72:03:99:26:19:b6:f5:00: f1:c3:7e:01:51:11:ab:3b:ed:f3:f3:52:6f:35:d1:e6:02:98: 8e:bd:5f:3b:d7:92:fb:7f:f3:56:c0:f4:44:8e:a4:89:02:6c: c5:d2:17:fe:a0:af:12:15:ef:e6:d5:b0:c6:98:65:e8:47:05: 51:04:96:f9:5e:4c:e1:1f:81:37:65:d0:74:13:0f:e6:51:a8: 86:91:3f:e8:50:1e:82:0f:a0:58:d5:8c:66:b5:60:41:b8:c0: 46:6b:65:e9:3b:b0:c7:0b:7f:78:43:ea:7a:0e:23:51:16:4c: de:eb:8c:9d:ef:0e:d8:e8:13:e3:30:9f:d2:3e:9b:63:92:f4: e0:2a:24:8a:17:37:f1:e3:cd:e8:0e:ca:27:38:14:22:4d:e4: c7:93:4d:4a:e1:66:35:f4:73:0e:95:d1:1c:0c:26:38:2a:35: 6f:dc:d1:49:a8:37:6c:c0:ac:b6:fb:5d:5a:26:53:cb:56:d4: bc:f7:f8:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeY2O//18Dku6EPErT49LDmwdjmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4RUUyNTVFMjIxNkZFM0VDOTkzNjdDRkJDQzlBODU2 M0YyQzBFOTAeFw0yNjA2MDIwOTMyMDFaFw0yNjA2MDMxMzI2MDFaMDMxMTAvBgNV BAMTKDA0ODc3QzlBNjRBQzZGOTU2RjcyNTAxRDc2MTY0QUIzREZCM0NFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDi7i6cbXyE0cCQIJg0v/lkHSt RY3Vc+nnVI8xB9YSb9xdz41OogmDQgc+DcceyTBHPiGh2INFg0QG5pW96FZBffYp 4ovikc2en3740jbkb8hr5R3M5cHnXCZDD3R9xJiNJJHSNy3qsojEJIB2gHAjPrNa Nxkb32n4RBtp6tc2eLUMzBkqraUlJLTlptBjNAuwQq+2LBA+7QiEL7Zf5hD1SS5J bPI6VNcSFrXI6A2glNRK4sxTIrzTKRLuqoYwSah1R7spXWN88CEo7RfzfHrLo3/S 8IkrykodeO6pVVQ1wM8WPyEjHxHx3XkuLlK2jK6bBTZbQehaYDNvQKo7clO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBId8mmSsb5VvclAddhZKs9+zzvAwHwYDVR0j BBgwFoAUb47iVeIhb+PsmTZ8+8yahWPywOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiY2MwMGQtY2U3OS00MjE2LWE2MmItZTNkNTBjYzc5NDQyLzAvNkY4RUUyNTVF MjIxNkZFM0VDOTkzNjdDRkJDQzlBODU2M0YyQzBFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjhFRTI1NUUyMjE2RkUzRUM5OTM2N0NGQkNDOUE4NTYzRjJD MEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvNkY4RUUyNTVFMjIxNkZFM0VDOTkzNjdDRkJDQzlB ODU2M0YyQzBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFauXk9cWhqZnw3vo/lOoG7J6GeJno8vwwu DlnGETuk1y/B6FwcrGK/RmM2nxLZZVGPGlSkL70/hPHatUYCFzJyA5kmGbb1APHD fgFREas77fPzUm810eYCmI69XzvXkvt/81bA9ESOpIkCbMXSF/6grxIV7+bVsMaY ZehHBVEElvleTOEfgTdl0HQTD+ZRqIaRP+hQHoIPoFjVjGa1YEG4wEZrZek7sMcL f3hD6noOI1EWTN7rjJ3vDtjoE+Mwn9I+m2OS9OAqJIoXN/HjzegOyic4FCJN5MeT TUrhZjX0cw6V0RwMJjgqNW/c0UmoN2zArLb7XVomU8tW1Lz3+KE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:44 2026 by rpki-client