$ rpki-client -vvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft File: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft (raw, json) Hash identifier: AKDUUHfRouszKE8JpjKVkYBJIqq9CVBnoDoBqOEExBY= Subject key identifier: 79:E4:B4:B4:38:F9:DD:0C:C2:9C:AD:CC:26:DA:74:69:81:5A:F6:D7 Authority key identifier: 6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD Certificate issuer: /CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Certificate serial: 45DF012ACB599B7AEEFBD2282F029473BCA60B88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 21:01:17 +0000 Manifest this update: Fri 19 Jun 2026 20:56:17 +0000 Manifest next update: Sat 20 Jun 2026 21:35:17 +0000 Files and hashes: 1: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl (hash: alB6yPp5OakPbAww6G6P+hj0W6W7Aral1/A6aLIyp+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:df:01:2a:cb:59:9b:7a:ee:fb:d2:28:2f:02:94:73:bc:a6:0b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Validity Not Before: Jun 19 20:56:17 2026 GMT Not After : Jun 20 21:35:17 2026 GMT Subject: CN=79E4B4B438F9DD0CC29CADCC26DA7469815AF6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:23:7c:57:92:c7:3e:60:d2:0e:d7:e9:b8:2f: ea:4c:fc:2e:02:77:79:56:3a:21:87:0b:9a:ef:b5: aa:70:8f:a2:02:b7:7e:5a:b4:83:ff:c2:6c:02:b4: 74:ee:c4:c7:0b:2c:40:72:15:ca:b1:b5:ea:c8:70: 21:c8:db:56:4f:1a:6a:1e:6b:32:41:7c:1e:35:a7: 72:09:57:71:f1:05:3a:c7:8d:8c:46:70:68:58:02: 97:7a:2f:19:38:e4:d2:dd:54:92:cd:11:2b:42:20: 6d:fa:33:0f:5f:4d:5f:b1:14:ac:6b:64:a9:89:26: 46:41:b0:96:0b:7e:ff:51:50:87:08:1e:05:ff:96: 11:fa:b4:b5:c3:06:2f:04:1f:5c:c6:0d:08:1d:38: da:ef:a9:82:8b:0a:a4:fd:f8:5f:9d:8c:a7:92:9b: 7b:a4:7d:02:a7:df:8c:b9:fd:bc:f3:2f:38:81:34: 06:b0:96:1e:0b:d3:94:3a:b6:0a:06:d0:29:22:cc: b2:be:bf:5f:15:ab:ef:74:cd:a2:e3:fe:e2:e9:fc: 06:b4:98:38:6a:56:5c:9e:b5:32:d2:f0:69:df:7d: 01:4e:6b:99:63:0b:f0:25:0d:f1:b5:84:32:11:2e: ff:e7:9c:c6:f2:14:db:6a:d7:62:35:c1:af:59:a7: 40:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:B4:B4:38:F9:DD:0C:C2:9C:AD:CC:26:DA:74:69:81:5A:F6:D7 X509v3 Authority Key Identifier: keyid:6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3c:bf:76:9b:cc:9b:59:82:5b:87:1e:7e:a3:11:20:dc:f4: fe:29:d7:c3:df:c2:e6:1c:97:30:60:fa:36:cc:57:78:fd:00: fb:42:ed:83:76:69:81:3d:c6:4e:ca:82:b1:f0:64:a5:af:89: 08:b8:9e:fb:86:a7:2d:1f:48:db:ef:aa:e8:11:a5:13:0c:1d: 54:ce:43:38:a5:81:77:82:c3:5a:e3:39:87:a1:97:6f:61:b7: bd:62:3b:3e:56:c6:77:91:9d:23:83:bb:91:6d:fc:11:17:16: a1:83:5c:30:9a:bd:b5:9a:eb:ec:c7:87:45:aa:fb:32:68:cd: c3:9f:a6:ba:1d:46:9d:c1:b6:d6:c8:04:6a:07:69:70:37:4e: c2:57:91:c3:84:d6:17:c9:0c:04:af:46:f7:66:47:bd:c2:3b: 43:d5:8d:ed:58:d1:99:91:61:e0:19:24:27:86:b8:a1:1d:b6: 0d:37:26:4b:17:96:4e:0b:19:5b:49:41:66:43:b8:f5:11:e9: 1e:4a:dd:61:04:cb:48:00:51:a0:fc:43:a5:ef:3b:1a:a0:ef: 6e:e2:db:43:20:a0:34:b6:91:3b:ac:6f:59:e5:d1:51:bb:51: 14:71:12:55:96:d3:ad:9d:53:60:e6:f4:54:a3:96:5b:bf:1a: a4:d3:00:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURd8BKstZm3ru+9IoLwKUc7ymC4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVB MzMyQUZBRDAeFw0yNjA2MTkyMDU2MTdaFw0yNjA2MjAyMTM1MTdaMDMxMTAvBgNV BAMTKDc5RTRCNEI0MzhGOUREMENDMjlDQURDQzI2REE3NDY5ODE1QUY2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbI3xXksc+YNIO1+m4L+pM/C4C d3lWOiGHC5rvtapwj6ICt35atIP/wmwCtHTuxMcLLEByFcqxterIcCHI21ZPGmoe azJBfB41p3IJV3HxBTrHjYxGcGhYApd6Lxk45NLdVJLNEStCIG36Mw9fTV+xFKxr ZKmJJkZBsJYLfv9RUIcIHgX/lhH6tLXDBi8EH1zGDQgdONrvqYKLCqT9+F+djKeS m3ukfQKn34y5/bzzLziBNAawlh4L05Q6tgoG0CkizLK+v18Vq+90zaLj/uLp/Aa0 mDhqVlyetTLS8GnffQFOa5ljC/AlDfG1hDIRLv/nnMbyFNtq12I1wa9Zp0BpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeeS0tDj53QzCnK3MJtp0aYFa9tcwHwYDVR0j BBgwFoAUbXPX6mwBZIx7/Qim4rNGhaMyr60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2 QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVBMzMyQUZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDczRDdFQTZDMDE2NDhDN0JGRDA4QTZFMkIzNDY4NUEzMzJB RkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2 ODVBMzMyQUZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk8v3abzJtZgluHHn6jESDc9P4p18PfwuYc lzBg+jbMV3j9APtC7YN2aYE9xk7KgrHwZKWviQi4nvuGpy0fSNvvqugRpRMMHVTO QzilgXeCw1rjOYehl29ht71iOz5WxneRnSODu5Ft/BEXFqGDXDCavbWa6+zHh0Wq +zJozcOfprodRp3BttbIBGoHaXA3TsJXkcOE1hfJDASvRvdmR73CO0PVje1Y0ZmR YeAZJCeGuKEdtg03JksXlk4LGVtJQWZDuPUR6R5K3WEEy0gAUaD8Q6XvOxqg727i 20MgoDS2kTusb1nl0VG7URRxElWW062dU2Dm9FSjllu/GqTTAPQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:19 2026 by rpki-client