$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft File: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft (raw, json) Hash identifier: 2PAqnjg7vHSRimH8Z/H9mPcn05TwijLdUb2EaIJ3Ke4= Subject key identifier: 0B:84:8C:B6:48:95:B7:58:02:81:3A:F7:C2:64:5C:6A:0C:23:35:41 Authority key identifier: B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 Certificate issuer: /CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Certificate serial: 7884FAA6FAD70C63D8E4EC86BEB91A354659B686 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft Manifest number: 05 Signing time: Tue 05 May 2026 10:40:54 +0000 Manifest this update: Tue 05 May 2026 10:35:54 +0000 Manifest next update: Wed 06 May 2026 10:49:54 +0000 Files and hashes: 1: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl (hash: kL719lyNn4UkY+6VGZO1NHgnlOnOBkvT5JEucSRwu+o=) 2: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: v0xv6ts8xNGmfAQ65ctkAG3Fqvb6dUvN83XOnaYe2GA=) 3: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: XBc3ZVVKXIlCbURfHv+y5tJpz8Y5k76pERxRfF4D1As=) 4: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 8e9FrxOA/xN95Yot7Ymznk0AodzlekAylsbbF3Artc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:84:fa:a6:fa:d7:0c:63:d8:e4:ec:86:be:b9:1a:35:46:59:b6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108 Validity Not Before: May 5 10:35:54 2026 GMT Not After : May 6 10:49:54 2026 GMT Subject: CN=0B848CB64895B75802813AF7C2645C6A0C233541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:7c:b5:45:eb:79:82:91:6f:12:73:2e:28: 69:5a:d8:3f:72:60:c1:94:35:53:14:da:bf:7e:21: 74:a5:23:88:49:65:7b:52:9e:ba:55:9e:6d:09:5a: ab:fb:e5:3f:bd:22:91:e5:23:29:37:03:15:ba:a3: 7f:6d:e8:5c:ef:34:0d:2b:e6:39:6d:2c:76:08:24: a4:e3:06:7b:18:da:ab:01:0e:70:62:fc:8f:13:9f: 8d:9b:12:c1:eb:11:25:b2:b3:79:31:8b:6d:74:3e: 44:8c:b6:ee:31:3a:0e:d2:e4:03:f3:0c:10:e5:97: aa:83:02:01:b6:21:74:c7:79:f8:9f:c3:90:5e:7e: 8e:54:42:5b:8c:a3:a7:1f:2a:3b:f9:fc:07:64:b0: 3b:17:08:7b:e1:cd:5b:67:7c:14:4b:c5:ec:53:38: 6c:11:37:c1:cb:97:64:c3:77:93:39:bd:74:b8:b5: 25:be:6d:6d:33:8a:ac:a0:3e:e8:65:d1:17:61:ff: b1:6e:49:8f:89:6d:95:ef:82:dd:fc:4a:2e:38:a3: 73:9e:61:31:9e:69:cf:18:19:5a:33:60:e9:fa:6f: b1:e0:a7:33:e7:6a:f0:ec:95:70:54:f1:d2:05:9d: 87:ad:c6:2a:44:83:d1:51:7d:00:36:11:a8:26:14: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:8C:B6:48:95:B7:58:02:81:3A:F7:C2:64:5C:6A:0C:23:35:41 X509v3 Authority Key Identifier: keyid:B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:26:91:ac:4c:56:cb:71:85:96:0f:e3:27:57:85:3b:e8:e4: ea:97:14:5f:be:a3:fc:46:94:c8:5b:c4:b5:f2:0e:fd:de:2c: 5b:7c:74:e7:21:bb:be:53:fb:ae:af:62:20:54:02:dc:0d:08: b2:a6:de:ef:aa:88:76:8a:c4:89:a2:07:2c:7b:cc:87:93:54: ce:5e:f6:7e:e8:ab:84:34:41:e9:a0:9e:e3:f2:15:63:cf:a0: 04:d1:be:d0:09:ef:06:d4:c8:bd:16:bf:0d:db:6a:1f:a0:40: 8c:a6:ba:ae:c7:aa:cc:9a:a7:70:d5:4b:f1:9c:2e:d5:67:43: 72:62:d3:cf:c2:a2:f7:f8:3b:30:37:ff:6d:4a:63:f7:37:de: 1c:f0:fc:5a:f5:bc:7b:c2:12:06:fd:1c:04:9f:20:b8:7f:13: ce:bd:30:0d:cc:1a:5d:71:9d:f1:bf:73:9f:ce:37:36:93:28: b9:fc:5e:07:05:cb:49:ae:76:22:0c:d0:08:4a:20:d6:04:db: 6d:38:4f:cf:fc:8e:58:aa:ba:cc:3e:b7:5b:01:50:11:93:48: f5:f6:9d:dd:a4:35:61:15:05:ed:34:bb:44:d2:bf:e3:b2:68: 47:71:3d:1a:62:cb:d3:da:89:9f:14:2c:17:33:66:49:6c:2c: 85:f3:18:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIT6pvrXDGPY5OyGvrkaNUZZtoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5 NkIzMDEwODAeFw0yNjA1MDUxMDM1NTRaFw0yNjA1MDYxMDQ5NTRaMDMxMTAvBgNV BAMTKDBCODQ4Q0I2NDg5NUI3NTgwMjgxM0FGN0MyNjQ1QzZBMEMyMzM1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqHy1Ret5gpFvEnMuKGla2D9y YMGUNVMU2r9+IXSlI4hJZXtSnrpVnm0JWqv75T+9IpHlIyk3AxW6o39t6FzvNA0r 5jltLHYIJKTjBnsY2qsBDnBi/I8Tn42bEsHrESWys3kxi210PkSMtu4xOg7S5APz DBDll6qDAgG2IXTHefifw5Befo5UQluMo6cfKjv5/AdksDsXCHvhzVtnfBRLxexT OGwRN8HLl2TDd5M5vXS4tSW+bW0ziqygPuhl0Rdh/7FuSY+JbZXvgt38Si44o3Oe YTGeac8YGVozYOn6b7HgpzPnavDslXBU8dIFnYetxipEg9FRfQA2EagmFEsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4SMtkiVt1gCgTr3wmRcagwjNUEwHwYDVR0j BBgwFoAUtvgQ8ik8v9vD1vqpKIjpx5azAQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY2NTk5MDQtMzcwMi00Nzk3LWJkMWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIy OTNDQkZEQkMzRDZGQUE5Mjg4OEU5Qzc5NkIzMDEwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkY4MTBGMjI5M0NCRkRCQzNENkZBQTkyODg4RTlDNzk2QjMw MTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvQjZGODEwRjIyOTNDQkZEQkMzRDZGQUE5Mjg4OEU5 Qzc5NkIzMDEwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAComkaxMVstxhZYP4ydXhTvo5OqXFF++o/xG lMhbxLXyDv3eLFt8dOchu75T+66vYiBUAtwNCLKm3u+qiHaKxImiByx7zIeTVM5e 9n7oq4Q0QemgnuPyFWPPoATRvtAJ7wbUyL0Wvw3bah+gQIymuq7Hqsyap3DVS/Gc LtVnQ3Ji08/Covf4OzA3/21KY/c33hzw/Fr1vHvCEgb9HASfILh/E869MA3MGl1x nfG/c5/ONzaTKLn8XgcFy0mudiIM0AhKINYE2204T8/8jliqusw+t1sBUBGTSPX2 nd2kNWEVBe00u0TSv+OyaEdxPRpiy9PaiZ8ULBczZklsLIXzGNk= -----END CERTIFICATE-----Generated at Tue May 5 14:20:13 2026 by rpki-client