$ rpki-client -vvf rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft File: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft (raw, json) Hash identifier: CA3pGEUrb3TrOsdJpdsuKMDis21jUvL1gmAtNz45Rhs= Subject key identifier: CA:83:77:F8:18:D8:5F:A1:75:37:81:0B:A3:2D:9E:BA:1A:34:F6:C8 Authority key identifier: 6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 Certificate issuer: /CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Certificate serial: 3D7231B4AA10A04D2D3AD8119222C3648FB0CC80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 12:10:35 +0000 Manifest this update: Fri 19 Jun 2026 12:05:35 +0000 Manifest next update: Sat 20 Jun 2026 16:07:35 +0000 Files and hashes: 1: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl (hash: 839j9d0FcBdCr0HS4uPoRH1mCB/Ff2pmEdWMGMkcb8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:72:31:b4:aa:10:a0:4d:2d:3a:d8:11:92:22:c3:64:8f:b0:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Validity Not Before: Jun 19 12:05:35 2026 GMT Not After : Jun 20 16:07:35 2026 GMT Subject: CN=CA8377F818D85FA17537810BA32D9EBA1A34F6C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:3f:33:73:80:8b:25:81:1d:b8:55:0d:26: 4c:ef:08:1c:6f:b0:0a:5e:29:0a:2d:58:2e:48:4a: b3:c5:e5:12:63:50:36:de:ce:61:9c:dc:81:1f:17: ab:16:42:4b:1d:77:5a:1d:e2:69:2a:fc:af:cb:d7: 76:e1:05:d0:bd:db:7d:09:bf:20:b4:ef:90:85:f2: 3d:d7:85:51:d7:46:0b:68:97:5f:24:22:6d:db:aa: 6e:94:5c:8b:9a:17:31:a0:4b:3f:ef:18:4d:fe:25: 3f:ea:d9:34:4c:0a:29:20:26:02:c8:93:a8:2e:c2: b7:38:26:5b:3e:84:45:96:58:00:85:1d:30:24:93: bf:71:a1:2e:01:23:62:b0:f1:08:38:77:97:9b:5d: 2d:02:93:b7:c3:b8:55:99:d8:2e:ba:44:67:53:8a: 15:16:db:63:52:54:a7:f2:2a:9e:cd:3c:46:8b:67: 0a:fa:3e:b5:b9:15:2b:cf:d5:6f:4a:a6:db:c1:e4: 4a:f8:8f:d1:be:64:b9:f8:03:f2:72:5b:1d:cd:8e: 0b:42:af:8f:29:86:a0:62:01:1f:a4:4c:72:20:b8: 1a:ee:76:76:e7:19:1a:de:49:4f:fe:7a:93:1f:e9: 7d:c5:38:22:41:b8:44:51:a6:15:7e:3b:a8:b9:52: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:83:77:F8:18:D8:5F:A1:75:37:81:0B:A3:2D:9E:BA:1A:34:F6:C8 X509v3 Authority Key Identifier: keyid:6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cf:6b:f0:d8:3d:15:72:2c:f3:32:79:e7:df:6c:81:01:82: 3b:67:70:15:de:33:4d:06:dc:10:2f:12:1b:cb:9a:31:a1:b6: 38:6a:de:51:12:69:de:a5:94:5e:2e:2e:dc:2c:22:b6:93:78: 9f:c2:9a:d9:e8:12:3e:4f:13:6f:5e:c4:12:66:c5:fd:bf:12: d0:36:d2:84:0e:ed:eb:ed:34:db:33:c6:2c:12:99:69:40:91: db:26:ce:98:b2:0f:c8:03:cb:9e:fa:d9:d5:27:15:35:48:54: 01:f8:fc:ab:75:37:b5:2c:c7:f9:7c:c9:b3:c8:df:04:a2:6a: 69:c3:1d:54:e5:d1:7e:54:d5:40:94:2d:7f:c5:0b:a5:91:3e: 42:88:dd:5e:ea:92:f0:ba:e6:b2:41:d8:d4:39:f7:ce:1a:1f: 86:3d:b2:fe:e0:c6:55:0d:25:10:c8:fd:c5:de:f1:7f:9c:c9: 7b:e8:b6:54:cd:5c:a9:0c:1a:61:0c:57:74:0c:6a:af:8b:65: 50:c5:b9:77:4e:ff:af:70:16:22:19:dc:e5:2d:2a:47:f9:4b: 8b:2d:63:54:e4:66:af:45:e1:2c:c9:9a:4f:04:b2:38:bb:8f: 77:34:ce:57:fe:d4:13:18:18:4e:71:06:6f:08:7a:2b:94:4a: 57:73:a9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXIxtKoQoE0tOtgRkiLDZI+wzIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0Qx QzFFNTdENzAeFw0yNjA2MTkxMjA1MzVaFw0yNjA2MjAxNjA3MzVaMDMxMTAvBgNV BAMTKENBODM3N0Y4MThEODVGQTE3NTM3ODEwQkEzMkQ5RUJBMUEzNEY2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbD8zc4CLJYEduFUNJkzvCBxv sApeKQotWC5ISrPF5RJjUDbezmGc3IEfF6sWQksdd1od4mkq/K/L13bhBdC9230J vyC075CF8j3XhVHXRgtol18kIm3bqm6UXIuaFzGgSz/vGE3+JT/q2TRMCikgJgLI k6guwrc4Jls+hEWWWACFHTAkk79xoS4BI2Kw8Qg4d5ebXS0Ck7fDuFWZ2C66RGdT ihUW22NSVKfyKp7NPEaLZwr6PrW5FSvP1W9KptvB5Er4j9G+ZLn4A/JyWx3NjgtC r48phqBiAR+kTHIguBrudnbnGRreSU/+epMf6X3FOCJBuERRphV+O6i5Uq+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyoN3+BjYX6F1N4ELoy2euho09sgwHwYDVR0j BBgwFoAUb11i7XGbrCYyK4DnMp8wfRweV9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA5YzIyYjEtMWI3Yi00NjcxLWFiOTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3 MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0QxQzFFNTdENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjVENjJFRDcxOUJBQzI2MzIyQjgwRTczMjlGMzA3RDFDMUU1 N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMw N0QxQzFFNTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPPa/DYPRVyLPMyeeffbIEBgjtncBXeM00G 3BAvEhvLmjGhtjhq3lESad6llF4uLtwsIraTeJ/CmtnoEj5PE29exBJmxf2/EtA2 0oQO7evtNNszxiwSmWlAkdsmzpiyD8gDy5762dUnFTVIVAH4/Kt1N7Usx/l8ybPI 3wSiamnDHVTl0X5U1UCULX/FC6WRPkKI3V7qkvC65rJB2NQ5984aH4Y9sv7gxlUN JRDI/cXe8X+cyXvotlTNXKkMGmEMV3QMaq+LZVDFuXdO/69wFiIZ3OUtKkf5S4st Y1TkZq9F4SzJmk8Esji7j3c0zlf+1BMYGE5xBm8IeiuUSldzqeA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:58 2026 by rpki-client