$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json) Hash identifier: 5GzhtRc52Ph3G7y2bh0p8F84pWxSYPWadVM+A1t/knw= Subject key identifier: 6B:C9:A7:0F:F2:FD:EC:43:1B:E3:43:DA:D5:0F:BE:DF:12:D2:0C:AF Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Certificate issuer: /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Certificate serial: 550B7A08A25913C998D747140954721E1F7D85E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:11:09 +0000 Manifest this update: Sat 20 Jun 2026 01:06:09 +0000 Manifest next update: Sun 21 Jun 2026 04:21:09 +0000 Files and hashes: 1: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: dTDKjOfKIRwHosmqxxNzMdAnUTQ9h/+JT1yjsidpulQ=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0b:7a:08:a2:59:13:c9:98:d7:47:14:09:54:72:1e:1f:7d:85:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Validity Not Before: Jun 20 01:06:09 2026 GMT Not After : Jun 21 04:21:09 2026 GMT Subject: CN=6BC9A70FF2FDEC431BE343DAD50FBEDF12D20CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:4a:ba:70:ff:b8:77:08:94:c0:a4:94:20: 84:5b:83:c5:6a:b0:93:d7:e8:b1:c7:1d:59:91:e7: 02:36:59:7f:84:3f:bb:15:1f:ac:f1:29:7e:ae:a1: 5c:f0:c1:61:e5:52:28:cb:5d:13:0c:fc:e7:98:0b: 5a:b3:ac:2e:3a:fa:94:64:2c:34:5a:38:e8:bf:a9: 44:63:2d:1a:4e:27:01:bc:59:d0:a2:f1:66:54:11: 0e:b7:7a:42:76:97:53:63:6c:57:95:37:18:1d:9c: ae:87:45:c4:c5:a6:1b:f5:96:b9:00:09:81:ad:c2: b9:0c:84:16:a9:55:90:86:95:55:f8:06:5c:15:6f: ed:6f:90:c3:79:48:2f:84:60:50:94:ec:6b:4c:b4: 4e:d7:aa:de:0a:ed:5a:48:cb:71:b0:69:17:78:8a: a9:7b:35:73:b4:f6:36:e2:e1:10:eb:84:5d:a6:cd: db:1b:8a:96:15:f7:b4:61:54:c6:dd:63:00:30:e5: a8:e0:4a:a9:70:f1:6b:dc:bc:65:f1:9e:be:6a:d0: 3c:7f:95:b9:fd:ac:f9:6e:5a:81:90:22:fd:b4:63: e6:58:1f:19:1a:c5:8d:40:7c:05:87:f1:1e:92:96: 59:54:55:6a:e4:76:a8:e0:f3:a6:64:c8:57:ec:e8: 90:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C9:A7:0F:F2:FD:EC:43:1B:E3:43:DA:D5:0F:BE:DF:12:D2:0C:AF X509v3 Authority Key Identifier: keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:5b:e3:7d:66:04:0c:ec:3b:4c:81:b2:a8:70:de:37:c7:a1: 4e:07:44:1c:59:0e:b4:4c:72:3c:78:7f:28:22:69:dd:f4:3f: 9b:c9:47:0d:6e:78:c5:9a:66:b1:3c:31:b7:64:e2:89:a7:48: 60:c4:f7:4e:8c:bd:14:7b:9b:d8:89:61:bd:71:ab:21:9e:81: b9:dc:cd:37:a3:f5:a2:2b:04:c3:2a:a6:1d:37:84:9d:60:b6: 62:71:27:c5:ba:9d:bb:6c:b0:1e:39:3d:5d:41:48:18:72:cb: 48:da:e4:ef:56:7e:dc:cb:46:82:1a:de:9c:40:12:86:9a:57: dd:63:6f:3d:1f:60:ab:8f:00:2b:d4:5f:c0:fe:a3:13:8f:3f: ed:f2:b1:d1:c1:e1:1f:4b:1f:49:0f:56:46:47:67:0a:bf:62: 91:f1:d5:8a:52:6f:f0:66:74:49:16:af:59:94:57:20:7d:ee: f6:bf:1c:c4:5b:8c:ea:c7:cf:52:43:f4:61:e2:49:98:6c:17: 49:c1:76:41:34:de:a6:f3:45:4f:c3:fd:14:44:11:6c:ce:47: 63:b0:60:b0:70:91:ae:c1:b3:b0:0b:f5:1f:51:38:e9:a7:81: c4:45:89:56:28:a7:e0:7f:eb:ed:09:f2:08:ae:cb:0c:31:68: b2:0f:b0:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQt6CKJZE8mY10cUCVRyHh99heIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3 NUZDQzEwRDAeFw0yNjA2MjAwMTA2MDlaFw0yNjA2MjEwNDIxMDlaMDMxMTAvBgNV BAMTKDZCQzlBNzBGRjJGREVDNDMxQkUzNDNEQUQ1MEZCRURGMTJEMjBDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXEq6cP+4dwiUwKSUIIRbg8Vq sJPX6LHHHVmR5wI2WX+EP7sVH6zxKX6uoVzwwWHlUijLXRMM/OeYC1qzrC46+pRk LDRaOOi/qURjLRpOJwG8WdCi8WZUEQ63ekJ2l1NjbFeVNxgdnK6HRcTFphv1lrkA CYGtwrkMhBapVZCGlVX4BlwVb+1vkMN5SC+EYFCU7GtMtE7Xqt4K7VpIy3GwaRd4 iql7NXO09jbi4RDrhF2mzdsbipYV97RhVMbdYwAw5ajgSqlw8WvcvGXxnr5q0Dx/ lbn9rPluWoGQIv20Y+ZYHxkaxY1AfAWH8R6SlllUVWrkdqjg86ZkyFfs6JB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa8mnD/L97EMb40Pa1Q++3xLSDK8wHwYDVR0j BBgwFoAUzWrtsCn6MgnVunBGt7j1JHX8wQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmI0YzcwYTEtNTAzNi00NTBiLWI5MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAy OUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3NUZDQzEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDZBRURCMDI5RkEzMjA5RDVCQTcwNDZCN0I4RjUyNDc1RkND MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1 MjQ3NUZDQzEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1b431mBAzsO0yBsqhw3jfHoU4HRBxZDrRM cjx4fygiad30P5vJRw1ueMWaZrE8Mbdk4omnSGDE906MvRR7m9iJYb1xqyGegbnc zTej9aIrBMMqph03hJ1gtmJxJ8W6nbtssB45PV1BSBhyy0ja5O9WftzLRoIa3pxA EoaaV91jbz0fYKuPACvUX8D+oxOPP+3ysdHB4R9LH0kPVkZHZwq/YpHx1YpSb/Bm dEkWr1mUVyB97va/HMRbjOrHz1JD9GHiSZhsF0nBdkE03qbzRU/D/RREEWzOR2Ow YLBwka7Bs7AL9R9ROOmngcRFiVYop+B/6+0J8giuywwxaLIPsNQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:37 2026 by rpki-client