$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: WROd7spnqovQfNOAGBnwgKGKAGaqj0Z0MYjv54WFaNA= Subject key identifier: 48:4E:3E:55:5E:13:14:B5:0C:4B:6A:60:88:8B:20:41:59:67:08:8A Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 4C691993F3C9F0737E98F0DA39EE8BB0A90A48FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 07:33:45 +0000 Manifest this update: Sat 20 Jun 2026 07:28:45 +0000 Manifest next update: Sun 21 Jun 2026 11:00:45 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) 2: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: Qnkjg1XDjLFK7iE4zfhyK3DvRkKIxc2FPYRNTHcEbSE=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:69:19:93:f3:c9:f0:73:7e:98:f0:da:39:ee:8b:b0:a9:0a:48:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: Jun 20 07:28:45 2026 GMT Not After : Jun 21 11:00:45 2026 GMT Subject: CN=484E3E555E1314B50C4B6A60888B20415967088A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:1c:d0:ca:8f:71:d4:83:02:ba:1c:49:9b: 47:d6:e7:89:e0:e6:bf:1b:6e:ba:dc:a5:17:e3:fb: b5:e6:8b:a2:c3:8c:f6:80:19:04:66:c4:17:3e:70: 10:60:1f:6c:6a:a8:0f:c2:82:e5:16:f0:b6:af:38: 0d:9c:91:fe:00:f5:2b:99:2f:ef:4b:1a:5b:ae:04: 8e:ac:d9:c0:8f:a4:29:6d:93:e7:79:23:cc:d2:f4: 62:ef:a5:b8:fd:fa:75:3f:77:99:26:32:e5:79:62: 28:dc:22:3a:1e:e7:b1:e6:1d:15:c5:96:12:dd:45: 2e:68:dc:bb:05:ca:90:58:93:8e:7a:b4:df:b0:74: 06:b1:2f:1a:5e:c5:12:3f:27:00:10:36:64:11:00: 96:48:46:69:b8:67:30:44:a3:95:17:a1:f8:99:72: 22:66:16:37:03:f2:93:fc:f7:df:c2:be:07:92:b6: 84:0d:09:49:bb:00:de:f2:c4:e8:24:df:2a:3a:9d: ef:fd:60:cd:3d:9a:88:ab:27:f1:40:26:6c:71:8c: 2d:14:8b:c0:01:8e:8d:6a:4d:61:37:4a:39:85:29: 13:7c:6e:f4:64:9e:d5:fc:13:c2:f6:1c:4d:bf:23: eb:46:1f:a3:5d:6e:c0:e6:86:74:d0:b3:99:41:df: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4E:3E:55:5E:13:14:B5:0C:4B:6A:60:88:8B:20:41:59:67:08:8A X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a4:08:e3:2c:22:02:03:d0:19:fa:b1:53:b0:9e:25:f3:96: 58:23:8c:7d:57:22:ba:4f:1c:61:75:58:57:d1:c4:da:37:fe: fc:ef:59:cc:70:a7:2e:0a:86:7b:ff:eb:1c:67:70:f2:85:b7: e5:8c:3d:11:20:fb:84:05:62:fc:20:e5:4c:56:8f:7a:7c:40: ef:f7:76:e7:0b:b1:e7:19:04:16:70:a6:58:08:91:3b:93:16: 19:23:9b:7d:fc:81:10:74:1e:af:71:f2:86:b3:8b:0b:fd:9b: 00:f1:98:ae:97:28:f1:e4:28:b1:72:70:c1:23:55:54:66:24: a1:31:f6:83:74:b2:73:0d:f9:f3:ac:56:ae:1a:d5:12:e3:6b: 71:0a:53:39:e3:14:22:13:c5:8c:3d:72:30:ef:55:6d:5d:92: 4e:b0:03:74:f9:5a:b4:3c:24:e8:6c:db:a8:cb:ba:ed:c8:fd: 0a:fa:ae:a3:c8:e7:20:f7:14:d7:77:3c:1c:55:09:c9:63:23: 53:cb:d1:95:2f:67:00:f4:65:fa:cd:10:49:66:5d:44:cf:e3: ca:07:a9:e5:99:89:02:74:2e:60:46:de:2c:e1:93:58:49:5b: 08:81:3b:c7:c9:7c:df:10:2a:6a:85:02:70:44:4c:a8:63:27: 58:dd:71:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGkZk/PJ8HN+mPDaOe6LsKkKSPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjA2MjAwNzI4NDVaFw0yNjA2MjExMTAwNDVaMDMxMTAvBgNV BAMTKDQ4NEUzRTU1NUUxMzE0QjUwQzRCNkE2MDg4OEIyMDQxNTk2NzA4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ExzQyo9x1IMCuhxJm0fW54ng 5r8bbrrcpRfj+7Xmi6LDjPaAGQRmxBc+cBBgH2xqqA/CguUW8LavOA2ckf4A9SuZ L+9LGluuBI6s2cCPpCltk+d5I8zS9GLvpbj9+nU/d5kmMuV5YijcIjoe57HmHRXF lhLdRS5o3LsFypBYk456tN+wdAaxLxpexRI/JwAQNmQRAJZIRmm4ZzBEo5UXofiZ ciJmFjcD8pP899/CvgeStoQNCUm7AN7yxOgk3yo6ne/9YM09moirJ/FAJmxxjC0U i8ABjo1qTWE3SjmFKRN8bvRkntX8E8L2HE2/I+tGH6NdbsDmhnTQs5lB3zW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSE4+VV4TFLUMS2pgiIsgQVlnCIowHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACakCOMsIgID0Bn6sVOwniXzllgjjH1XIrpP HGF1WFfRxNo3/vzvWcxwpy4Khnv/6xxncPKFt+WMPREg+4QFYvwg5UxWj3p8QO/3 ducLsecZBBZwplgIkTuTFhkjm338gRB0Hq9x8oaziwv9mwDxmK6XKPHkKLFycMEj VVRmJKEx9oN0snMN+fOsVq4a1RLja3EKUznjFCITxYw9cjDvVW1dkk6wA3T5WrQ8 JOhs26jLuu3I/Qr6rqPI5yD3FNd3PBxVCcljI1PL0ZUvZwD0ZfrNEElmXUTP48oH qeWZiQJ0LmBG3izhk1hJWwiBO8fJfN8QKmqFAnBETKhjJ1jdccE= -----END CERTIFICATE-----Generated at Sat Jun 20 15:44:43 2026 by rpki-client