$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft File: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft (raw, json) Hash identifier: gIHz4UhrkgBpQdkauwAMngLo2aFKdbDUnuj+nTxlXaY= Subject key identifier: 95:24:1B:E4:58:EA:28:9C:0C:4B:00:66:06:57:9B:14:4F:F3:67:F9 Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Certificate serial: 13F1F8C7AA049865E405FE4BD5CCFA00B637395A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:53:47 +0000 Manifest this update: Mon 20 Jul 2026 13:48:47 +0000 Manifest next update: Tue 21 Jul 2026 16:32:47 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: mk6P6nzKZPfeuKq11ThKG2gxjN5qYDKYLpgARoWf7Rc=) 2: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl (hash: 1SNXHUGlu38cnWRlDSEMlFQfBXYIQWfBUYasX5AvMiI=) 3: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (hash: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=) 4: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: AZDpkOWjnamEqT8fmcEDZ5d6r3arhBukAiqycsYxsj0=) 5: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f1:f8:c7:aa:04:98:65:e4:05:fe:4b:d5:cc:fa:00:b6:37:39:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Validity Not Before: Jul 20 13:48:47 2026 GMT Not After : Jul 21 16:32:47 2026 GMT Subject: CN=95241BE458EA289C0C4B006606579B144FF367F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:20:b5:ce:3e:48:ce:1a:89:fc:c4:5b:fa: 41:9b:aa:a8:91:c8:6e:89:19:ca:ea:f7:11:79:34: 65:e7:8a:81:fb:54:f0:79:0f:19:c4:1f:9c:77:9f: d1:2b:a6:7b:e1:d0:69:15:34:6e:7d:2b:dd:8f:4a: 4d:6e:fb:d1:66:a8:01:b6:7f:4c:fe:b6:4d:4b:83: b5:86:81:57:7a:b0:76:17:2a:6d:22:6a:19:a2:f6: 90:cf:f0:be:bc:53:c2:4c:9f:56:29:2b:01:fb:74: 49:85:dc:ac:fe:d9:ee:fd:d0:e2:be:88:2f:fd:cb: 9c:87:13:62:96:8a:7c:29:ab:d6:1b:bc:44:89:20: 23:c4:6e:e5:b1:ae:41:7a:e4:da:72:fc:30:79:84: a8:fd:66:a1:cf:cf:8b:6c:93:37:4f:97:35:a1:c8: 48:e9:ac:fe:7b:f8:54:90:14:64:e3:71:5c:a1:45: 67:06:3b:90:91:d5:d7:10:b6:cf:48:85:94:9e:df: 3d:86:2e:31:c9:44:85:7b:cc:9d:98:07:f1:b3:5d: c8:d7:b3:fb:87:59:2d:b6:01:47:d4:0c:c8:c0:12: e9:16:24:c4:5d:04:d9:66:dd:db:79:ec:c7:92:18: 6f:5c:71:8c:fb:62:03:07:bf:b3:0f:ac:17:d1:a4: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:24:1B:E4:58:EA:28:9C:0C:4B:00:66:06:57:9B:14:4F:F3:67:F9 X509v3 Authority Key Identifier: keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:8f:9c:7f:49:1f:da:3c:8a:dc:c4:fe:a5:ff:55:21:f1: 4c:42:12:7e:73:33:06:bd:79:89:c0:67:19:9b:6f:50:a5:9f: c0:a6:0d:b2:65:ff:41:50:04:0c:38:e2:57:10:3f:d2:aa:c8: 7a:6e:18:fe:62:31:17:49:32:6c:59:90:01:15:de:7b:e9:68: 9f:f7:74:97:5b:c4:bc:c3:76:c5:5e:3d:a6:a7:c1:88:21:71: a6:ec:b8:6f:4d:e0:40:5c:03:da:6e:08:42:14:98:20:5d:81: c4:c4:98:11:7b:d9:91:19:92:71:27:b8:c4:3a:4d:50:7a:03: 72:26:c1:f4:1b:73:a9:d4:fe:59:19:9c:cf:e4:20:3d:8e:0c: df:01:d6:da:17:cb:6f:db:c2:84:61:f6:4c:5a:3b:46:67:a6: b6:52:93:c8:ee:74:3a:80:20:2d:df:05:82:9e:2d:8f:ba:e7: 49:e9:50:ec:77:d9:ed:73:04:fe:09:b2:74:8a:c4:b9:6e:bc: 8a:92:4a:19:8c:70:68:5d:ad:3b:39:52:46:0d:e6:8f:25:30: c9:0d:91:05:50:25:7d:17:19:54:93:f0:87:ac:e5:49:72:70: d0:4e:6d:f6:5f:74:8e:16:b8:02:07:d8:e7:48:7d:8e:43:17: 43:e6:1c:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/H4x6oEmGXkBf5L1cz6ALY3OVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FB RTQ5QjY1RTAeFw0yNjA3MjAxMzQ4NDdaFw0yNjA3MjExNjMyNDdaMDMxMTAvBgNV BAMTKDk1MjQxQkU0NThFQTI4OUMwQzRCMDA2NjA2NTc5QjE0NEZGMzY3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqSC1zj5IzhqJ/MRb+kGbqqiR yG6JGcrq9xF5NGXnioH7VPB5DxnEH5x3n9Erpnvh0GkVNG59K92PSk1u+9FmqAG2 f0z+tk1Lg7WGgVd6sHYXKm0iahmi9pDP8L68U8JMn1YpKwH7dEmF3Kz+2e790OK+ iC/9y5yHE2KWinwpq9YbvESJICPEbuWxrkF65Npy/DB5hKj9ZqHPz4tskzdPlzWh yEjprP57+FSQFGTjcVyhRWcGO5CR1dcQts9IhZSe3z2GLjHJRIV7zJ2YB/GzXcjX s/uHWS22AUfUDMjAEukWJMRdBNlm3dt57MeSGG9ccYz7YgMHv7MPrBfRpJnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlSQb5FjqKJwMSwBmBlebFE/zZ/kwHwYDVR0j BBgwFoAUb7JTpPmcD4Eerg0UK3J1yq5Jtl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiYWJmMGItMTEwMS00YWE5LWE0ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRG OTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FBRTQ5QjY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIyNTNBNEY5OUMwRjgxMUVBRTBEMTQyQjcyNzVDQUFFNDlC NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1 Q0FBRTQ5QjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWPj5x/SR/aPIrcxP6l/1Uh8UxCEn5zMwa9 eYnAZxmbb1Cln8CmDbJl/0FQBAw44lcQP9KqyHpuGP5iMRdJMmxZkAEV3nvpaJ/3 dJdbxLzDdsVePaanwYghcabsuG9N4EBcA9puCEIUmCBdgcTEmBF72ZEZknEnuMQ6 TVB6A3ImwfQbc6nU/lkZnM/kID2ODN8B1toXy2/bwoRh9kxaO0ZnprZSk8judDqA IC3fBYKeLY+650npUOx32e1zBP4JsnSKxLluvIqSShmMcGhdrTs5UkYN5o8lMMkN kQVQJX0XGVST8Ies5UlycNBObfZfdI4WuAIH2OdIfY5DF0PmHC8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:23:29 2026 by rpki-client