$ rpki-client -vvf rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft File: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft (raw, json) Hash identifier: o8gqgIAwFoDaOp385IYIoKS4/heZR/orD6OZOJM03FE= Subject key identifier: 2E:D9:26:6C:21:E8:59:EC:7F:A7:C1:71:F7:13:D9:86:C0:76:DB:44 Authority key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 Certificate issuer: /CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5 Certificate serial: 53F062CDF7FA1348D6F7418403EB9FF019BC9592 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:20:32 +0000 Manifest this update: Fri 19 Jun 2026 20:15:32 +0000 Manifest next update: Sat 20 Jun 2026 22:40:32 +0000 Files and hashes: 1: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl (hash: fpjxL3VMGGf518avYg3p8UcFOeCGnaaMi/uD5JsWv/4=) 2: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: S9Rn028mN4RxKRfk1o8rZH0hTRoX3/5ujuVLyQFUwsA=) 3: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: y9avoo0XnwxjsH45wOCvll+IYaXWnM223zX3g6ZS9kU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f0:62:cd:f7:fa:13:48:d6:f7:41:84:03:eb:9f:f0:19:bc:95:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5 Validity Not Before: Jun 19 20:15:32 2026 GMT Not After : Jun 20 22:40:32 2026 GMT Subject: CN=2ED9266C21E859EC7FA7C171F713D986C076DB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:0e:32:fc:3b:bf:af:4d:0e:04:57:12:b1: 05:a5:5a:26:4e:4e:c5:ff:94:58:50:d9:c8:91:4a: c4:e7:33:a3:6d:81:3f:de:b3:3b:62:bc:09:03:85: 48:7d:9c:bf:53:bf:12:f4:d5:a9:72:3b:c9:8f:e9: e9:d1:4f:b5:9b:11:a0:83:98:17:56:fd:04:d7:6f: 46:d1:4f:a3:54:10:26:81:67:2d:2c:1d:b6:a9:d6: 08:ab:62:6e:1b:a8:19:72:e2:64:7f:d2:52:ed:ec: 5d:ae:6b:a1:fc:da:c8:44:7f:3f:c9:6b:6b:ed:a6: 1f:f5:8e:f8:35:39:23:d4:ce:2d:af:93:7c:a4:ad: a9:d1:a8:7c:2e:c8:f0:85:0d:35:6f:7e:94:9e:77: 00:45:18:21:1b:96:33:47:45:8b:c4:96:b1:60:d6: 8a:88:62:1b:9e:42:e0:f5:19:27:46:aa:d0:f0:bf: 26:ce:83:20:0f:3d:d8:17:43:f3:c7:87:bd:0c:44: 59:58:f7:67:6f:53:0e:2e:b1:96:23:61:3d:46:63: ab:b3:2d:db:6b:8d:a9:fa:2d:16:28:74:a3:52:89: b2:1a:2d:d3:2d:47:eb:3d:99:a9:ad:a9:be:3a:fa: 3d:a3:27:1e:a0:da:7f:2e:74:6a:05:d0:9b:23:72: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D9:26:6C:21:E8:59:EC:7F:A7:C1:71:F7:13:D9:86:C0:76:DB:44 X509v3 Authority Key Identifier: keyid:6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5d:b1:a9:fe:2e:e0:69:50:51:00:eb:b4:c3:3f:e4:8d:78: 31:66:70:06:aa:72:65:a1:75:01:30:83:1d:40:56:fa:e4:26: a7:6f:e0:94:bb:89:99:c0:2d:4f:8e:a2:ed:a5:cd:ef:c6:48: 94:18:0b:0c:1a:83:59:bd:78:74:8e:c6:13:11:2a:09:dc:fc: 78:89:ed:61:76:93:93:58:bf:7c:93:9e:df:e6:e1:bf:d1:e6: 5a:27:6f:0a:5b:7e:76:a6:93:9d:e0:9f:31:70:87:c1:8f:0e: 0c:88:e2:71:34:2b:df:3f:a0:7f:18:cc:95:b3:ca:5f:f1:2a: 5e:ae:2c:cc:24:f9:3b:55:99:ca:46:1a:08:d1:d3:58:d0:9f: dc:2c:38:05:fc:07:45:3f:12:5d:b6:a7:89:fa:8a:5f:46:2c: 34:c1:e9:a6:b3:ab:b1:87:6f:17:d1:08:6c:fc:14:60:b6:2a: 07:0a:bb:6c:92:bf:1f:ff:32:20:bf:5f:a3:bd:26:9d:93:de: c6:70:5b:96:8a:1b:3e:cf:50:82:be:42:49:c0:31:79:8a:db: 0d:54:07:c7:f7:ca:bb:bc:62:d0:fe:26:dd:11:b9:8d:37:5d: f8:c5:92:6e:33:e1:c2:c6:5f:7c:98:ab:c4:c6:3b:b4:77:74: 3e:bb:10:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/Bizff6E0jW90GEA+uf8Bm8lZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGQ0ExQUE3NDUyRjU4M0I0MzMxN0U1NjBDQzkzRjhD OUNCOERDNTAeFw0yNjA2MTkyMDE1MzJaFw0yNjA2MjAyMjQwMzJaMDMxMTAvBgNV BAMTKDJFRDkyNjZDMjFFODU5RUM3RkE3QzE3MUY3MTNEOTg2QzA3NkRCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycQ4y/Du/r00OBFcSsQWlWiZO TsX/lFhQ2ciRSsTnM6NtgT/esztivAkDhUh9nL9TvxL01alyO8mP6enRT7WbEaCD mBdW/QTXb0bRT6NUECaBZy0sHbap1girYm4bqBly4mR/0lLt7F2ua6H82shEfz/J a2vtph/1jvg1OSPUzi2vk3ykranRqHwuyPCFDTVvfpSedwBFGCEbljNHRYvElrFg 1oqIYhueQuD1GSdGqtDwvybOgyAPPdgXQ/PHh70MRFlY92dvUw4usZYjYT1GY6uz Ldtrjan6LRYodKNSibIaLdMtR+s9mamtqb46+j2jJx6g2n8udGoF0JsjcioXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULtkmbCHoWex/p8Fx9xPZhsB220QwHwYDVR0j BBgwFoAUbvyhqnRS9YO0MxflYMyT+MnLjcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ2YjUyNDgtY2UzMy00ZTk3LTg4MmYtZjYxNDVmMzE5MDI2LzAvNkVGQ0ExQUE3 NDUyRjU4M0I0MzMxN0U1NjBDQzkzRjhDOUNCOERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUZDQTFBQTc0NTJGNTgzQjQzMzE3RTU2MENDOTNGOEM5Q0I4 REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvNkVGQ0ExQUE3NDUyRjU4M0I0MzMxN0U1NjBDQzkz RjhDOUNCOERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9dsan+LuBpUFEA67TDP+SNeDFmcAaqcmWh dQEwgx1AVvrkJqdv4JS7iZnALU+Oou2lze/GSJQYCwwag1m9eHSOxhMRKgnc/HiJ 7WF2k5NYv3yTnt/m4b/R5lonbwpbfnamk53gnzFwh8GPDgyI4nE0K98/oH8YzJWz yl/xKl6uLMwk+TtVmcpGGgjR01jQn9wsOAX8B0U/El22p4n6il9GLDTB6aazq7GH bxfRCGz8FGC2KgcKu2ySvx//MiC/X6O9Jp2T3sZwW5aKGz7PUIK+QknAMXmK2w1U B8f3yru8YtD+Jt0RuY03XfjFkm4z4cLGX3yYq8TGO7R3dD67EBg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:45 2026 by rpki-client