$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft File: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json) Hash identifier: NahXJDlsm/BV/c1RHvjLHopwCMbQ9nNGVUR7C2scR6s= Subject key identifier: E4:C6:AF:F2:D1:89:BE:8E:97:65:9E:CA:71:73:9C:56:D4:1F:1F:9E Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 5FD91CC95F17AA8E4FC4A7460121C5C0F0DF5AA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:37:53 +0000 Manifest this update: Sat 20 Jun 2026 02:32:53 +0000 Manifest next update: Sun 21 Jun 2026 03:58:53 +0000 Files and hashes: 1: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=) 2: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=) 3: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=) 4: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=) 5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=) 6: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: ChMfvUPaZ/5Ru1A5Qirrawf9mebhXWuVkiVnvybwFEU=) 7: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=) 8: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=) 9: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d9:1c:c9:5f:17:aa:8e:4f:c4:a7:46:01:21:c5:c0:f0:df:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: Jun 20 02:32:53 2026 GMT Not After : Jun 21 03:58:53 2026 GMT Subject: CN=E4C6AFF2D189BE8E97659ECA71739C56D41F1F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:93:d6:53:1f:14:07:32:75:1b:ea:48:ae: b2:50:06:86:16:91:f5:ea:35:35:e7:02:ce:0b:3b: 75:66:c3:b9:a7:29:81:eb:51:60:46:fa:18:97:25: c4:dc:7f:c4:49:30:7a:0d:20:cc:54:3a:78:34:f5: 34:7e:7a:16:81:86:af:62:2c:a9:5e:39:e3:1b:32: 69:e5:eb:be:b1:78:20:db:a0:a4:52:ee:ab:49:ac: e8:63:da:bc:54:75:15:81:82:bd:9e:07:84:8b:14: 60:3e:49:bc:b4:36:c6:a1:df:46:78:2a:45:86:43: d1:ab:4e:e2:77:11:2f:21:e2:a3:e7:21:42:a2:66: 5d:a6:c2:c6:d9:b9:13:ea:f9:b0:81:71:7b:93:f9: 7b:1e:eb:6d:02:c9:2c:b3:1c:fa:e7:1d:1a:7c:bb: db:c5:f4:ab:c5:6a:83:28:47:b9:44:18:c4:6b:d9: 9f:8f:74:8f:60:b9:99:e0:35:db:3a:94:a5:c4:4d: 61:ab:85:bd:96:41:fa:eb:d8:ec:65:0a:52:dd:72: d0:7d:64:95:cc:e4:3f:db:19:40:36:a9:27:99:29: aa:36:a8:36:ba:4f:ec:73:5f:3a:9b:a1:f7:9a:51: 05:42:dd:37:3a:7b:4d:66:4f:56:5c:12:bc:44:93: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:AF:F2:D1:89:BE:8E:97:65:9E:CA:71:73:9C:56:D4:1F:1F:9E X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ea:75:49:a9:97:79:cf:05:76:55:d2:c9:a5:42:35:c7:20: 39:b9:67:86:b2:c3:04:96:ee:4b:f2:c1:d3:ed:8d:1b:1d:e0: b8:9e:1f:9f:06:7f:5f:8f:46:81:ef:6d:eb:60:e1:df:1b:c0: 8a:be:ab:be:a8:98:68:12:84:69:8b:71:f1:25:f3:fe:46:b5: 94:be:b3:c8:7d:9e:9f:79:40:71:38:24:bd:44:93:8d:73:62: 43:e3:c1:0b:e7:72:26:1b:06:a4:ff:96:1d:8d:99:ff:7b:37: d6:74:09:32:6d:65:17:76:d0:8d:7b:e5:93:b6:84:c7:32:b0: 95:44:78:82:2c:02:26:b7:14:99:02:69:00:81:58:26:ca:46: b6:6a:08:f0:07:11:9a:fd:3f:14:b7:92:0c:c9:c5:50:63:ea: 11:77:ad:3c:a0:83:c5:c9:73:2c:5b:13:10:2a:46:3a:1f:27: 26:80:fc:c7:0c:ba:68:ea:99:6a:07:de:45:b9:7b:26:eb:04: 63:cb:8e:f6:fa:52:93:23:91:ee:1d:92:fe:56:de:af:45:91: c5:ab:c8:6b:9b:02:21:e3:64:97:2d:41:40:8b:4c:ad:0d:c9: 1a:b0:e1:70:a3:c9:b3:92:e9:e2:42:da:67:14:ff:30:b9:e5: 70:d3:a4:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9kcyV8Xqo5PxKdGASHFwPDfWqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjA2MjAwMjMyNTNaFw0yNjA2MjEwMzU4NTNaMDMxMTAvBgNV BAMTKEU0QzZBRkYyRDE4OUJFOEU5NzY1OUVDQTcxNzM5QzU2RDQxRjFGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9JPWUx8UBzJ1G+pIrrJQBoYW kfXqNTXnAs4LO3Vmw7mnKYHrUWBG+hiXJcTcf8RJMHoNIMxUOng09TR+ehaBhq9i LKleOeMbMmnl676xeCDboKRS7qtJrOhj2rxUdRWBgr2eB4SLFGA+Sby0Nsah30Z4 KkWGQ9GrTuJ3ES8h4qPnIUKiZl2mwsbZuRPq+bCBcXuT+Xse620CySyzHPrnHRp8 u9vF9KvFaoMoR7lEGMRr2Z+PdI9guZngNds6lKXETWGrhb2WQfrr2OxlClLdctB9 ZJXM5D/bGUA2qSeZKao2qDa6T+xzXzqbofeaUQVC3Tc6e01mT1ZcErxEkwgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Mav8tGJvo6XZZ7KcXOcVtQfH54wHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0Yx RjY5NzlFRTdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzqdUmpl3nPBXZV0smlQjXHIDm5Z4aywwSW 7kvywdPtjRsd4LieH58Gf1+PRoHvbetg4d8bwIq+q76omGgShGmLcfEl8/5GtZS+ s8h9np95QHE4JL1Ek41zYkPjwQvnciYbBqT/lh2Nmf97N9Z0CTJtZRd20I175ZO2 hMcysJVEeIIsAia3FJkCaQCBWCbKRrZqCPAHEZr9PxS3kgzJxVBj6hF3rTygg8XJ cyxbExAqRjofJyaA/McMumjqmWoH3kW5eybrBGPLjvb6UpMjke4dkv5W3q9FkcWr yGubAiHjZJctQUCLTK0NyRqw4XCjybOS6eJC2mcU/zC55XDTpO8= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:29 2026 by rpki-client