$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft File: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft (raw, json) Hash identifier: g4DVNxuh0pn/b/ITY05SR5V+zmbaBWWmO5okrFuP49w= Subject key identifier: 1E:71:6D:6C:13:96:27:58:EB:D7:59:AB:1F:5E:0E:12:D2:AB:A6:4D Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Certificate serial: 49AC2B663F1E4B7FDA2F8F206A4EA0D34859A40B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:17:32 +0000 Manifest this update: Wed 03 Jun 2026 02:12:32 +0000 Manifest next update: Thu 04 Jun 2026 02:57:32 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (hash: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=) 2: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: AZDpkOWjnamEqT8fmcEDZ5d6r3arhBukAiqycsYxsj0=) 3: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl (hash: gRPTAZpg+pi1xgSlYcfldUWGYG3xMUxKUpUQ3tm4d5o=) 4: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=) 5: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: mk6P6nzKZPfeuKq11ThKG2gxjN5qYDKYLpgARoWf7Rc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ac:2b:66:3f:1e:4b:7f:da:2f:8f:20:6a:4e:a0:d3:48:59:a4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Validity Not Before: Jun 3 02:12:32 2026 GMT Not After : Jun 4 02:57:32 2026 GMT Subject: CN=1E716D6C13962758EBD759AB1F5E0E12D2ABA64D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:d0:ca:aa:e6:a5:fa:52:42:ea:db:d1:13: cb:4a:cb:71:8f:40:60:fb:21:b4:0e:01:ae:f0:d0: 76:7c:64:34:21:82:37:dc:71:65:e7:22:7e:80:ec: 3b:19:90:06:a3:1d:5c:85:93:ad:9c:cd:c5:61:72: 18:ad:ab:1f:03:23:4a:65:dd:ac:07:09:f1:7a:cc: bb:2f:87:31:28:00:c7:4d:78:65:6e:a5:fa:86:40: dd:c7:cc:bd:41:79:4f:e9:53:44:86:7f:d2:76:54: 41:fb:7d:9d:10:9d:c5:41:a3:dd:d7:2f:d4:c7:ec: c8:7d:ca:36:39:be:b9:e1:f4:b4:24:1a:09:2b:7c: 0a:a8:9b:cc:93:96:3d:a4:58:44:75:a7:bc:d4:02: 2e:12:bf:9e:1e:bd:d2:ad:23:22:10:f0:9a:1d:f2: a7:b9:a3:82:f7:4a:8d:cc:01:a7:c4:1e:a4:bc:de: 1d:df:4c:8c:75:0d:9d:7c:44:68:b1:31:f4:fb:f9: 4b:62:c4:21:bf:7d:ec:5f:7d:4d:e7:fb:c2:2e:a2: 47:f5:72:15:36:20:d4:5e:d3:82:c9:37:21:bb:30: 88:26:f0:7b:0d:5d:2f:5f:01:85:7b:1e:02:c4:39: fe:59:0b:44:ad:3d:1b:e4:cf:82:98:c0:97:1a:cb: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:71:6D:6C:13:96:27:58:EB:D7:59:AB:1F:5E:0E:12:D2:AB:A6:4D X509v3 Authority Key Identifier: keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:96:94:40:bd:12:0f:ad:7b:de:29:52:7e:b0:04:6a:1c:36: be:23:ce:c0:bf:53:b2:2d:e8:98:3e:56:6e:ad:d8:c8:f9:93: bd:87:1c:bc:aa:67:92:ac:00:06:fd:f3:ea:cb:56:eb:65:db: 1b:f0:39:f8:c6:42:3e:9c:85:7c:3c:02:3a:8a:5f:b1:66:54: f1:31:0d:02:0f:76:95:e7:21:1b:c9:48:96:92:98:d3:2b:15: ec:30:a1:73:0e:13:49:36:aa:6e:0c:2d:a9:63:26:d6:23:2b: c2:7b:57:74:11:c8:e3:93:70:2b:8a:85:dc:64:3b:cf:19:dc: 54:9c:8c:ba:98:32:bb:77:77:ea:af:2e:e8:fe:d5:94:08:60: 30:db:57:16:fc:c2:ac:c4:53:82:fc:99:16:17:63:f1:3f:df: b6:4b:5c:31:02:c0:79:5a:3f:e7:05:e4:cb:ba:0e:46:3a:20: 74:84:33:3d:72:b1:de:93:13:a9:f4:fd:d5:37:d1:d9:5f:e7: 37:dd:67:c4:bd:7d:97:84:b2:0e:bf:c5:61:ab:c0:de:d1:95: 83:b0:cc:6c:6b:30:b8:f2:58:58:1c:c9:de:c5:33:07:68:92: 83:20:3d:59:69:2b:b9:df:db:04:53:a2:95:be:68:ec:58:ad: 40:c2:8d:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSawrZj8eS3/aL48gak6g00hZpAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FB RTQ5QjY1RTAeFw0yNjA2MDMwMjEyMzJaFw0yNjA2MDQwMjU3MzJaMDMxMTAvBgNV BAMTKDFFNzE2RDZDMTM5NjI3NThFQkQ3NTlBQjFGNUUwRTEyRDJBQkE2NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZdDKqual+lJC6tvRE8tKy3GP QGD7IbQOAa7w0HZ8ZDQhgjfccWXnIn6A7DsZkAajHVyFk62czcVhchitqx8DI0pl 3awHCfF6zLsvhzEoAMdNeGVupfqGQN3HzL1BeU/pU0SGf9J2VEH7fZ0QncVBo93X L9TH7Mh9yjY5vrnh9LQkGgkrfAqom8yTlj2kWER1p7zUAi4Sv54evdKtIyIQ8Jod 8qe5o4L3So3MAafEHqS83h3fTIx1DZ18RGixMfT7+UtixCG/fexffU3n+8Iuokf1 chU2INRe04LJNyG7MIgm8HsNXS9fAYV7HgLEOf5ZC0StPRvkz4KYwJcay8cnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnFtbBOWJ1jr11mrH14OEtKrpk0wHwYDVR0j BBgwFoAUb7JTpPmcD4Eerg0UK3J1yq5Jtl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiYWJmMGItMTEwMS00YWE5LWE0ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRG OTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FBRTQ5QjY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIyNTNBNEY5OUMwRjgxMUVBRTBEMTQyQjcyNzVDQUFFNDlC NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1 Q0FBRTQ5QjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeWlEC9Eg+te94pUn6wBGocNr4jzsC/U7It 6Jg+Vm6t2Mj5k72HHLyqZ5KsAAb98+rLVutl2xvwOfjGQj6chXw8AjqKX7FmVPEx DQIPdpXnIRvJSJaSmNMrFewwoXMOE0k2qm4MLaljJtYjK8J7V3QRyOOTcCuKhdxk O88Z3FScjLqYMrt3d+qvLuj+1ZQIYDDbVxb8wqzEU4L8mRYXY/E/37ZLXDECwHla P+cF5Mu6DkY6IHSEMz1ysd6TE6n0/dU30dlf5zfdZ8S9fZeEsg6/xWGrwN7RlYOw zGxrMLjyWFgcyd7FMwdokoMgPVlpK7nf2wRTopW+aOxYrUDCjS8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:41 2026 by rpki-client