$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: UlxLgVLWn4DzD7gOp0g8wHNDkSraTOTszWZKOou+rEI= Subject key identifier: 94:88:7F:7D:53:25:3C:00:14:24:EE:13:48:39:09:3B:0A:14:F5:C3 Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 21BE8F5EED5B090CCB086337B89C21135242AF24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:14:19 +0000 Manifest this update: Tue 05 May 2026 08:09:19 +0000 Manifest next update: Wed 06 May 2026 12:02:19 +0000 Files and hashes: 1: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: bA/d6mr9816xciWwvFOfsX70sAw9DT4VsBWJR447yLY=) 2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 12:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:be:8f:5e:ed:5b:09:0c:cb:08:63:37:b8:9c:21:13:52:42:af:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: May 5 08:09:19 2026 GMT Not After : May 6 12:02:19 2026 GMT Subject: CN=94887F7D53253C001424EE134839093B0A14F5C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:54:0f:e7:b9:80:a1:fb:10:b9:4a:c7:ed:1f: c1:52:84:e1:31:c3:90:57:31:af:ed:30:98:83:87: ab:ed:a7:ae:dc:ca:e8:98:12:fc:e5:2a:b5:8a:94: cf:af:0b:0f:f9:e7:e5:a5:29:e2:61:59:df:55:76: f0:6d:a2:b9:e2:2f:65:77:6c:28:a1:6a:14:7f:ae: c5:6f:05:ce:72:9a:6c:77:ce:9f:50:ff:22:6f:64: b1:34:63:84:44:54:c9:73:8a:b4:61:af:a3:57:12: b1:4e:14:e8:d9:c2:7f:e5:f7:7e:b6:7e:fc:d4:8a: 97:87:b5:9d:58:08:dd:be:18:b0:c9:d1:fe:77:fa: 96:05:b8:e6:a5:a1:17:3e:8d:9c:9b:e2:69:c6:32: 87:af:9a:85:81:70:22:3e:50:9e:16:64:d7:1a:4e: b4:02:bd:6a:3d:00:50:1a:12:60:0f:6e:ea:b5:8b: 14:f2:26:43:b6:05:d4:bc:7a:fb:ff:ab:92:18:74: 77:97:93:e4:13:c1:1a:a2:3e:37:e6:ae:f0:89:e4: de:55:a3:c6:29:eb:f9:24:f5:7c:86:5b:67:d8:b9: b0:52:6d:b3:e4:83:18:2d:e0:33:2d:9a:62:fc:da: b2:34:f7:43:5f:b0:0b:7e:7a:16:8c:42:4f:2f:e8: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:88:7F:7D:53:25:3C:00:14:24:EE:13:48:39:09:3B:0A:14:F5:C3 X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e5:f5:d0:30:fb:97:94:68:f9:91:66:3b:a1:dd:95:82:f9: 62:41:3b:ca:99:54:58:ee:e9:c7:54:13:74:70:84:6a:17:ca: 8b:c0:2b:3e:ba:41:e7:7b:9c:6b:dc:34:aa:11:6b:72:40:47: 93:9f:14:c9:19:69:4b:0b:40:8b:c5:3a:fc:28:45:a5:86:06: 5c:c3:b6:a4:f7:09:85:c3:30:32:65:43:a8:9c:f1:57:99:2b: da:54:9a:39:13:57:ef:7e:e0:20:2d:1b:47:8b:f1:63:3a:ff: 96:ef:97:56:5f:75:a4:0c:46:3c:9b:cf:8f:3f:0d:74:09:73: 23:81:0e:e5:6d:ee:89:3c:55:f2:ec:f4:12:26:f2:69:c7:6d: ed:9e:70:c5:c0:8e:d3:bc:cb:fd:dd:01:d9:81:a3:5b:86:59: 39:1d:d3:b2:b9:e8:b6:c4:54:e1:bf:1c:17:e3:cc:c7:12:b1: 37:3c:ab:10:7a:32:d4:e9:99:28:e3:2c:92:7d:0b:c6:31:7d: 13:18:5c:15:1e:4f:0b:79:73:b9:c4:cc:25:ed:9b:e8:d3:ba: d1:7d:22:cf:e9:52:13:03:23:8a:3f:15:42:4a:b2:93:fa:d4: ab:60:d8:2e:10:9e:4e:37:d8:b2:5b:1f:e1:b9:1f:fc:4b:32: 76:11:58:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIb6PXu1bCQzLCGM3uJwhE1JCryQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjA1MDUwODA5MTlaFw0yNjA1MDYxMjAyMTlaMDMxMTAvBgNV BAMTKDk0ODg3RjdENTMyNTNDMDAxNDI0RUUxMzQ4MzkwOTNCMEExNEY1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhVA/nuYCh+xC5SsftH8FShOEx w5BXMa/tMJiDh6vtp67cyuiYEvzlKrWKlM+vCw/55+WlKeJhWd9VdvBtorniL2V3 bCihahR/rsVvBc5ymmx3zp9Q/yJvZLE0Y4REVMlzirRhr6NXErFOFOjZwn/l9362 fvzUipeHtZ1YCN2+GLDJ0f53+pYFuOaloRc+jZyb4mnGMoevmoWBcCI+UJ4WZNca TrQCvWo9AFAaEmAPbuq1ixTyJkO2BdS8evv/q5IYdHeXk+QTwRqiPjfmrvCJ5N5V o8Yp6/kk9XyGW2fYubBSbbPkgxgt4DMtmmL82rI090NfsAt+ehaMQk8v6BTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIh/fVMlPAAUJO4TSDkJOwoU9cMwHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvl9dAw+5eUaPmRZjuh3ZWC+WJBO8qZVFju 6cdUE3RwhGoXyovAKz66Qed7nGvcNKoRa3JAR5OfFMkZaUsLQIvFOvwoRaWGBlzD tqT3CYXDMDJlQ6ic8VeZK9pUmjkTV+9+4CAtG0eL8WM6/5bvl1ZfdaQMRjybz48/ DXQJcyOBDuVt7ok8VfLs9BIm8mnHbe2ecMXAjtO8y/3dAdmBo1uGWTkd07K56LbE VOG/HBfjzMcSsTc8qxB6MtTpmSjjLJJ9C8YxfRMYXBUeTwt5c7nEzCXtm+jTutF9 Is/pUhMDI4o/FUJKspP61Ktg2C4Qnk432LJbH+G5H/xLMnYRWGE= -----END CERTIFICATE-----Generated at Tue May 5 14:19:45 2026 by rpki-client