$ rpki-client -vvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft File: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft (raw, json) Hash identifier: mCgmIo3+dP5q9OC8oeI47ezYBXBZZAak6MjGv/ObxtQ= Subject key identifier: B4:2A:EF:0E:E6:6A:58:3F:76:1B:3F:9A:60:BA:97:50:A8:48:D3:4F Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Certificate serial: 7C495123A206808AE98FEEEF0E20DD886789C106 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 11:36:08 +0000 Manifest this update: Thu 18 Jun 2026 11:31:08 +0000 Manifest next update: Fri 19 Jun 2026 13:02:08 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=) 2: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl (hash: qURdK5WcBi6IV+AnUVr3ZRUmCTv10LEDA+2txxgIbtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:49:51:23:a2:06:80:8a:e9:8f:ee:ef:0e:20:dd:88:67:89:c1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9 Validity Not Before: Jun 18 11:31:08 2026 GMT Not After : Jun 19 13:02:08 2026 GMT Subject: CN=B42AEF0EE66A583F761B3F9A60BA9750A848D34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:95:dd:04:9a:16:0f:ab:b5:6f:5f:7c:26: 6c:f0:96:a2:91:06:c5:30:a9:14:9c:14:85:37:91: 6b:29:09:9e:76:d2:fa:bf:6d:21:75:c0:20:16:45: ec:d4:f8:ff:ea:e7:4c:2c:a6:28:9e:95:c1:b4:85: 91:68:ce:0b:40:5f:af:6e:3e:84:3f:12:da:dd:92: d3:b5:99:c9:18:44:61:d1:17:01:0f:63:bf:7e:11: 4a:ca:49:5f:fa:87:53:76:46:c9:fd:9c:34:0d:63: e2:ba:f7:87:50:37:2e:dc:e0:61:47:d9:62:d4:33: 77:11:9b:86:f0:b8:ab:0a:ba:cb:4f:49:ce:a8:48: 2b:77:39:0d:d4:02:eb:d1:83:9e:88:20:58:c8:1f: 4c:25:65:a6:2e:7d:d8:e1:78:a2:26:0f:05:5d:ff: aa:d7:23:2e:22:ed:d1:28:9a:54:24:fc:6a:b6:1f: 48:70:40:fc:ab:4b:58:06:6c:5b:3e:ef:06:40:08: 5d:8d:8e:4a:17:13:ff:2b:64:b5:55:fb:3e:d7:47: cf:82:d0:cb:5c:ab:2f:f8:f2:84:d0:af:46:df:dc: 7e:72:f5:dd:ef:f9:61:c6:b1:c9:3d:e1:09:b7:4c: 2f:df:51:5d:78:1a:e5:22:35:ef:74:6c:13:9c:bf: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2A:EF:0E:E6:6A:58:3F:76:1B:3F:9A:60:BA:97:50:A8:48:D3:4F X509v3 Authority Key Identifier: keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:36:81:64:2d:d2:c5:08:9c:29:bf:c8:c5:4b:e5:b7:05:f9: d4:45:36:56:b7:db:14:05:8e:f9:de:01:d6:ca:b3:75:90:1f: 19:9c:ea:50:17:33:68:0a:48:56:f4:f6:06:82:e9:27:a3:6b: 77:b0:2d:66:12:48:31:f4:d9:78:4c:e0:a6:72:23:7c:a3:1e: 85:f4:5d:e7:54:85:0c:b9:af:e6:15:cc:90:07:fd:9f:96:a9: 56:37:78:94:b0:68:25:0f:2e:b9:bc:38:bf:c3:c0:a2:6a:ab: 29:ae:1f:03:39:2c:ec:bb:1a:2c:5d:4e:b7:05:66:e8:07:b6: a8:fc:fd:88:29:f4:e1:ef:b3:a5:5d:b0:93:f3:a7:f6:22:2a: b6:90:36:fe:eb:73:32:99:3f:93:40:4d:49:39:12:16:9c:1a: ac:76:19:98:37:7b:7b:f2:33:a7:19:ec:e1:e8:14:3f:9f:62: c4:fa:b9:44:ff:be:3c:20:59:c6:d3:58:b0:a1:69:76:08:1f: d1:a1:4e:49:c6:ae:c1:1c:cb:e8:71:7c:e1:6a:9b:93:14:6c: 12:af:c1:7e:3e:08:4c:d0:5d:ac:f5:24:7d:5a:31:42:4d:94: 97:96:a5:18:25:20:ea:d3:e3:35:57:c6:da:0e:2b:0d:55:c3: 98:20:7b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfElRI6IGgIrpj+7vDiDdiGeJwQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFF RjI1QURBOTAeFw0yNjA2MTgxMTMxMDhaFw0yNjA2MTkxMzAyMDhaMDMxMTAvBgNV BAMTKEI0MkFFRjBFRTY2QTU4M0Y3NjFCM0Y5QTYwQkE5NzUwQTg0OEQzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UpXdBJoWD6u1b198JmzwlqKR BsUwqRScFIU3kWspCZ520vq/bSF1wCAWRezU+P/q50wspiielcG0hZFozgtAX69u PoQ/EtrdktO1mckYRGHRFwEPY79+EUrKSV/6h1N2Rsn9nDQNY+K694dQNy7c4GFH 2WLUM3cRm4bwuKsKustPSc6oSCt3OQ3UAuvRg56IIFjIH0wlZaYufdjheKImDwVd /6rXIy4i7dEomlQk/Gq2H0hwQPyrS1gGbFs+7wZACF2NjkoXE/8rZLVV+z7XR8+C 0Mtcqy/48oTQr0bf3H5y9d3v+WHGsck94Qm3TC/fUV14GuUiNe90bBOcvweLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCrvDuZqWD92Gz+aYLqXUKhI008wHwYDVR0j BBgwFoAUbsqak276gnbkQSXgtMe/Qe8lrakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlkYWU5N2YtMWFkMS00YjM0LThmZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2 RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFFRjI1QURBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RUNBOUE5MzZFRkE4Mjc2RTQ0MTI1RTBCNEM3QkY0MUVGMjVB REE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JG NDFFRjI1QURBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA2gWQt0sUInCm/yMVL5bcF+dRFNla32xQF jvneAdbKs3WQHxmc6lAXM2gKSFb09gaC6Seja3ewLWYSSDH02XhM4KZyI3yjHoX0 XedUhQy5r+YVzJAH/Z+WqVY3eJSwaCUPLrm8OL/DwKJqqymuHwM5LOy7GixdTrcF ZugHtqj8/Ygp9OHvs6VdsJPzp/YiKraQNv7rczKZP5NATUk5EhacGqx2GZg3e3vy M6cZ7OHoFD+fYsT6uUT/vjwgWcbTWLChaXYIH9GhTknGrsEcy+hxfOFqm5MUbBKv wX4+CEzQXaz1JH1aMUJNlJeWpRglIOrT4zVXxtoOKw1Vw5gge8w= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:59 2026 by rpki-client