$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft File: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft (raw, json) Hash identifier: IgpHi7/Sb3IshBREKnI8oly3Eqqcx/zHI+cIss/BbQs= Subject key identifier: 77:91:FE:06:21:A6:18:A2:80:86:99:E7:41:7F:16:14:0B:07:4D:6B Authority key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 Certificate issuer: /CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3 Certificate serial: 6626DB8325EF0035A00D6D1BF5F83990B9335D9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:18:24 +0000 Manifest this update: Tue 02 Jun 2026 19:13:24 +0000 Manifest next update: Wed 03 Jun 2026 19:58:24 +0000 Files and hashes: 1: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: yO2cOBfHPv3C/4uaJ55DoJTVwS5Sx/sjk03JxEGguBI=) 2: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: 0VUfdAAfFEuToJwbRstnJ6dFxvse7EJ2ZUiWvgUCNNM=) 3: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: hgg/QP+dSLFLOsjRg4tQEaQYc48Rb+WtJWuacTUuK2I=) 4: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl (hash: n7iymDtbJFUXWsPPt/0BpTj2pH/RwCNbDf+I+Kz5C5k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:26:db:83:25:ef:00:35:a0:0d:6d:1b:f5:f8:39:90:b9:33:5d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3 Validity Not Before: Jun 2 19:13:24 2026 GMT Not After : Jun 3 19:58:24 2026 GMT Subject: CN=7791FE0621A618A2808699E7417F16140B074D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:87:3c:9a:44:b4:d8:64:b1:62:94:b1:a3:2f: 29:53:f9:d8:65:7d:46:89:9f:ce:23:35:8e:cc:b7: 46:42:0a:26:23:39:b6:d3:fe:e4:37:35:a0:00:e2: da:8d:b9:b9:61:a5:9e:90:e0:2f:11:60:44:00:11: c1:11:77:ef:d0:f8:2d:49:86:ce:db:50:cc:eb:8b: a7:15:17:df:2e:91:66:80:eb:16:c4:a7:45:91:9b: 60:6c:4d:4c:f9:09:69:9b:42:76:a7:17:4b:ef:77: 2a:93:5b:58:df:1d:7e:3c:ed:8c:b5:4e:1e:16:f6: 8b:ad:1f:81:25:8f:c5:73:85:e2:71:4a:86:0a:1c: 51:d0:86:5f:8d:47:49:25:87:89:71:16:82:8b:27: f4:c3:b7:f6:f2:95:bf:29:bd:28:dd:b7:f9:7e:c1: b5:5c:d7:79:eb:f8:76:fd:6a:6a:54:a8:69:13:7c: d0:99:0f:1b:d4:b1:39:50:d4:4e:ce:e2:3e:2c:5f: 14:73:3c:28:fb:09:8c:40:6e:b4:65:ec:28:b8:3d: 0b:4c:ff:f5:cd:c9:88:a8:84:59:e6:53:9b:90:f3: ab:35:2f:99:53:aa:89:ee:4b:be:80:30:e5:ba:ea: d6:14:f5:57:c9:30:5d:8c:d0:34:4f:71:b9:e7:5c: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:91:FE:06:21:A6:18:A2:80:86:99:E7:41:7F:16:14:0B:07:4D:6B X509v3 Authority Key Identifier: keyid:C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:26:79:21:d4:b5:76:33:5e:23:f0:ce:14:5c:07:69:eb: 46:4e:86:66:81:66:2f:46:47:5a:56:42:51:1e:dd:c2:d9:ee: 92:a6:b0:79:a2:fd:84:77:d1:7c:ae:38:5d:40:e4:5a:82:70: 69:91:93:21:2e:55:0d:05:f3:e5:bb:5f:a7:73:46:bf:4c:38: ae:a4:29:0a:88:17:3a:cd:39:65:84:cf:e3:fc:b5:a7:7c:a6: 24:23:8a:3c:d3:77:10:2c:c7:cb:eb:f8:43:32:04:28:df:80: 2f:cc:4f:2f:2d:14:b1:9e:93:f0:e3:6d:d6:39:05:39:ed:f0: d6:0c:89:85:13:38:28:36:5b:8b:e0:cd:67:96:be:3c:7c:63: 5f:01:03:99:ce:72:f2:93:0f:ba:1e:b5:58:ff:ba:b4:80:cc: d4:4f:f6:d2:cd:ad:9e:16:e2:c2:e7:c6:bb:6a:dd:5b:65:d9: f5:f1:fd:64:48:a4:39:d1:db:d3:e2:56:ab:0a:fd:5a:0f:1f: 74:16:4a:04:f2:ed:cb:21:9b:03:d0:c7:ba:25:ec:e4:ac:47: 94:63:9d:6d:02:09:f4:e7:99:74:41:ad:78:1b:29:42:64:13: 3d:9b:e9:e5:f6:7c:53:2a:86:28:8c:b2:d8:57:e8:34:4d:76: 17:06:ff:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZibbgyXvADWgDW0b9fg5kLkzXZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGRkUxRTU4NDM4QkM1QjM1NzIzOTEwNEI1M0RCRDZC NjlBRjlEMzAeFw0yNjA2MDIxOTEzMjRaFw0yNjA2MDMxOTU4MjRaMDMxMTAvBgNV BAMTKDc3OTFGRTA2MjFBNjE4QTI4MDg2OTlFNzQxN0YxNjE0MEIwNzRENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwhzyaRLTYZLFilLGjLylT+dhl fUaJn84jNY7Mt0ZCCiYjObbT/uQ3NaAA4tqNublhpZ6Q4C8RYEQAEcERd+/Q+C1J hs7bUMzri6cVF98ukWaA6xbEp0WRm2BsTUz5CWmbQnanF0vvdyqTW1jfHX487Yy1 Th4W9outH4Elj8VzheJxSoYKHFHQhl+NR0klh4lxFoKLJ/TDt/bylb8pvSjdt/l+ wbVc13nr+Hb9ampUqGkTfNCZDxvUsTlQ1E7O4j4sXxRzPCj7CYxAbrRl7Ci4PQtM //XNyYiohFnmU5uQ86s1L5lTqonuS76AMOW66tYU9VfJMF2M0DRPcbnnXCPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd5H+BiGmGKKAhpnnQX8WFAsHTWswHwYDVR0j BBgwFoAUxv/h5YQ4vFs1cjkQS1Pb1raa+dMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA2MjBjZmMtYjQ2Yy00NTdjLTlmZGUtMjk3NzEwYzU0NmE5LzAvQzZGRkUxRTU4 NDM4QkM1QjM1NzIzOTEwNEI1M0RCRDZCNjlBRjlEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkZGRTFFNTg0MzhCQzVCMzU3MjM5MTA0QjUzREJENkI2OUFG OUQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvQzZGRkUxRTU4NDM4QkM1QjM1NzIzOTEwNEI1M0RC RDZCNjlBRjlEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRrJnkh1LV2M14j8M4UXAdp60ZOhmaBZi9G R1pWQlEe3cLZ7pKmsHmi/YR30XyuOF1A5FqCcGmRkyEuVQ0F8+W7X6dzRr9MOK6k KQqIFzrNOWWEz+P8tad8piQjijzTdxAsx8vr+EMyBCjfgC/MTy8tFLGek/DjbdY5 BTnt8NYMiYUTOCg2W4vgzWeWvjx8Y18BA5nOcvKTD7oetVj/urSAzNRP9tLNrZ4W 4sLnxrtq3Vtl2fXx/WRIpDnR29PiVqsK/VoPH3QWSgTy7cshmwPQx7ol7OSsR5Rj nW0CCfTnmXRBrXgbKUJkEz2b6eX2fFMqhiiMsthX6DRNdhcG/+w= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:36 2026 by rpki-client