$ rpki-client -vvf rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft File: 6B995520DD42E2AA6306A898618C472D1D5E4417.mft (raw, json) Hash identifier: tkqpD3OTXFF7m+wraX4k1uLQY+9nWc1Cj1anq7jHP+k= Subject key identifier: C5:BA:0E:C3:4E:9E:6A:17:BC:A2:72:53:39:C9:30:FE:C5:AD:BD:D4 Authority key identifier: 6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 Certificate issuer: /CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Certificate serial: 584DCE52ECE32485060C3228A5177ACFB14EB662 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 14:44:40 +0000 Manifest this update: Thu 18 Jun 2026 14:39:40 +0000 Manifest next update: Fri 19 Jun 2026 15:31:40 +0000 Files and hashes: 1: 6B995520DD42E2AA6306A898618C472D1D5E4417.crl (hash: BT8CVbXGvAiczFKiN7LH8A5CU1usmgljY9NQXRr7Juc=) 2: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: EocJEXTX0mSSr7fMVzkhuxkZ+TwRT9I+6KSMP/66yxQ=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: RIdJ/cXYXoiLhfv+EGFjwti65Zd3wn1vdkd4IsQmrxo=) 4: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: XXmEikeW7+xMma0RK8ROxLTllOgfRUh6Qpdpx7HKJyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4d:ce:52:ec:e3:24:85:06:0c:32:28:a5:17:7a:cf:b1:4e:b6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Validity Not Before: Jun 18 14:39:40 2026 GMT Not After : Jun 19 15:31:40 2026 GMT Subject: CN=C5BA0EC34E9E6A17BCA2725339C930FEC5ADBDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:7d:8f:eb:ac:5f:cf:e5:51:1b:b4:d2:bd: 30:0e:40:9a:90:ff:e9:9b:51:58:68:d8:da:49:2e: a9:e3:52:57:03:47:81:d6:32:63:aa:df:48:9f:b9: 93:6b:de:89:52:e2:90:5d:7a:09:65:92:c8:c5:d4: 0a:76:02:07:9f:19:90:66:72:e5:64:84:c9:28:f9: aa:02:23:12:27:89:7c:d6:c3:0b:23:8f:b2:4f:e9: 05:cd:b5:b0:b4:bb:f8:bc:3b:3b:73:bc:c8:53:d4: 76:7f:0d:16:8e:a6:a9:52:d3:eb:7d:cf:cc:52:98: b2:e7:47:5b:07:dd:ec:68:3e:e2:f2:3d:6a:d0:49: 10:82:67:d2:19:27:05:d0:a5:fc:c4:16:20:a5:b3: 97:6f:81:fb:3f:fa:79:09:12:31:28:1d:1b:01:59: 49:a9:9a:ec:2c:c7:22:78:ed:bc:5c:11:de:fd:b8: 0e:2b:e8:ab:24:27:9b:a7:fa:b8:33:fa:04:c8:ea: 24:bd:40:0f:2e:2e:d2:23:4f:cc:9b:be:d7:76:d9: a2:67:86:ed:16:b3:36:fb:e4:7e:aa:78:d8:e9:0b: aa:35:a7:fe:63:69:26:9b:ae:1f:31:cf:29:f8:40: ed:82:2f:2e:da:4e:06:31:87:48:71:2c:ba:37:ef: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BA:0E:C3:4E:9E:6A:17:BC:A2:72:53:39:C9:30:FE:C5:AD:BD:D4 X509v3 Authority Key Identifier: keyid:6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:31:ec:2f:43:f2:25:ac:8d:cc:dd:6c:bf:67:65:1f:e1:bf: 23:1b:ba:c3:38:ca:62:59:f4:1d:a6:55:3a:15:d8:ab:eb:7a: ec:b3:56:05:af:ef:99:3b:69:07:53:50:e4:43:11:c1:c9:5e: 69:6b:69:08:31:67:f6:f1:f1:18:6b:e0:6c:51:6f:66:c4:bb: a2:d7:14:a5:62:10:07:87:6d:2d:7c:70:78:84:ea:7c:19:84: d3:94:c6:64:67:5e:ef:02:9f:6f:2d:cb:f9:81:d1:62:78:25: 91:bc:df:b4:51:79:15:88:6d:bb:9f:d7:c4:49:3a:10:c2:e3: 7d:d4:8d:79:55:ba:1c:6b:af:28:79:e5:15:92:8c:49:5a:cb: 63:e6:f8:53:ca:66:bd:2c:12:46:97:c3:60:cd:8f:cd:0f:9a: d5:ec:d7:43:0a:ba:e6:59:ab:da:02:a0:6b:f1:db:6d:ee:c9: d8:4a:a2:3f:05:1d:d9:02:9c:38:3e:f6:65:4c:68:58:ae:a4: 17:35:ec:a0:9d:0b:93:65:26:a8:ce:bf:9a:d1:ea:a5:c9:d8: 51:fd:40:1f:86:23:bc:5d:0e:d5:0c:5f:82:23:94:1d:9c:7e: a3:49:28:a3:78:09:3e:e3:6e:a0:75:63:c2:80:d2:ad:79:1f: 56:cd:39:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWE3OUuzjJIUGDDIopRd6z7FOtmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQx RDVFNDQxNzAeFw0yNjA2MTgxNDM5NDBaFw0yNjA2MTkxNTMxNDBaMDMxMTAvBgNV BAMTKEM1QkEwRUMzNEU5RTZBMTdCQ0EyNzI1MzM5QzkzMEZFQzVBREJERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL2X2P66xfz+VRG7TSvTAOQJqQ /+mbUVho2NpJLqnjUlcDR4HWMmOq30ifuZNr3olS4pBdegllksjF1Ap2AgefGZBm cuVkhMko+aoCIxIniXzWwwsjj7JP6QXNtbC0u/i8OztzvMhT1HZ/DRaOpqlS0+t9 z8xSmLLnR1sH3exoPuLyPWrQSRCCZ9IZJwXQpfzEFiCls5dvgfs/+nkJEjEoHRsB WUmpmuwsxyJ47bxcEd79uA4r6KskJ5un+rgz+gTI6iS9QA8uLtIjT8ybvtd22aJn hu0Wszb75H6qeNjpC6o1p/5jaSabrh8xzyn4QO2CLy7aTgYxh0hxLLo378RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxboOw06eahe8onJTOckw/sWtvdQwHwYDVR0j BBgwFoAUa5lVIN1C4qpjBqiYYYxHLR1eRBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkZDRjY2ItNDJlMy00YjcyLTkxOTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBE RDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQxRDVFNDQxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Qjk5NTUyMERENDJFMkFBNjMwNkE4OTg2MThDNDcyRDFENUU0 NDE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3 MkQxRDVFNDQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcx7C9D8iWsjczdbL9nZR/hvyMbusM4ymJZ 9B2mVToV2KvreuyzVgWv75k7aQdTUORDEcHJXmlraQgxZ/bx8Rhr4GxRb2bEu6LX FKViEAeHbS18cHiE6nwZhNOUxmRnXu8Cn28ty/mB0WJ4JZG837RReRWIbbuf18RJ OhDC433UjXlVuhxrryh55RWSjElay2Pm+FPKZr0sEkaXw2DNj80PmtXs10MKuuZZ q9oCoGvx223uydhKoj8FHdkCnDg+9mVMaFiupBc17KCdC5NlJqjOv5rR6qXJ2FH9 QB+GI7xdDtUMX4IjlB2cfqNJKKN4CT7jbqB1Y8KA0q15H1bNOaA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:54 2026 by rpki-client