$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: YjzoLe8HPTE2k9P8In60Q1CzA74hodHo6F+NZg69xag= Subject key identifier: FE:B5:8C:29:76:92:6B:7E:21:1F:CE:1A:A4:F7:51:AC:C2:9D:8D:3E Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 6B9291B19B00F8172B6E190F6F7A7E3DC29735B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 47 Signing time: Tue 23 Jun 2026 22:38:50 +0000 Manifest this update: Tue 23 Jun 2026 22:33:50 +0000 Manifest next update: Wed 24 Jun 2026 22:48:50 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 2: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: 3GRghJYbbWCsoCaTgV3l5I3wa26nsK/oD4zTrv0xLkg=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Jun 2026 22:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:92:91:b1:9b:00:f8:17:2b:6e:19:0f:6f:7a:7e:3d:c2:97:35:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Jun 23 22:33:50 2026 GMT Not After : Jun 24 22:48:50 2026 GMT Subject: CN=FEB58C2976926B7E211FCE1AA4F751ACC29D8D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:92:37:14:1f:3c:42:a3:a6:90:8d:6b:06: 41:47:5d:54:04:40:ac:3a:76:81:a2:21:26:b5:1a: 99:55:cc:9e:6e:6e:ce:01:fb:19:68:fb:04:e7:cb: 33:7b:71:e1:13:18:55:0a:81:b9:0d:73:26:cb:f9: 81:91:57:d9:51:bd:e1:98:d8:55:07:bf:7d:7f:ee: bd:95:3f:26:58:a2:db:74:d7:a7:64:4b:1b:d3:b3: 77:e3:4d:8f:da:67:83:0d:41:b7:3d:e0:7a:cd:1e: b9:b9:eb:60:de:2b:75:76:68:ba:bf:17:3b:fb:01: 84:9a:a5:6a:fc:b8:98:76:6a:db:77:06:79:1f:0e: 0c:7d:27:d3:e3:4e:7d:0e:de:39:d0:37:18:a4:62: 4d:28:7a:45:72:d8:50:fb:3f:71:1e:b1:30:c7:d5: e8:05:28:5f:79:74:07:d1:b8:b7:6f:a9:78:d7:70: c5:ea:74:37:4d:e6:71:de:8f:c5:f1:5e:22:04:73: 2f:34:07:af:30:6c:5d:c2:90:7c:35:b2:5e:95:a2: 7c:4f:6d:33:46:f5:c9:e1:f7:31:1d:10:27:fb:65: ef:ab:38:4c:fb:cc:83:59:21:8e:59:da:c2:44:b1: 38:7e:f7:2b:42:26:fb:e2:b4:83:70:c7:55:2a:f1: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B5:8C:29:76:92:6B:7E:21:1F:CE:1A:A4:F7:51:AC:C2:9D:8D:3E X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:28:87:18:69:38:ce:58:62:72:5f:8c:63:21:ea:6e:ee:22: 15:39:53:38:52:ed:db:e5:68:6a:9b:5d:1b:f6:12:7e:5b:d9: 4d:62:87:87:72:d5:01:68:d8:4a:f4:13:c5:96:53:8a:aa:a2: 87:1a:8b:4a:ed:9e:d6:c7:0d:57:9b:b8:24:ae:d8:27:70:26: dd:36:31:00:1b:f4:a7:24:20:04:e2:8e:43:c4:41:7f:05:60: e3:f7:15:5c:9b:50:49:2e:33:88:54:45:4a:72:dd:73:ab:b3: 8b:08:51:9f:43:81:2f:96:0b:cd:5f:84:2f:12:e7:d4:eb:d0: 90:94:f1:09:93:e6:61:f9:f1:82:3b:98:68:7e:4f:4a:f9:82: e6:99:32:ef:21:48:b2:ce:65:75:5b:2d:24:75:62:17:e4:be: b7:c2:c2:12:31:01:28:3a:15:71:09:bd:6f:d5:57:e2:9e:5d: 53:21:6e:e2:48:64:35:df:02:1e:46:c5:ac:5c:36:69:9f:ae: f3:b7:48:3c:ef:45:6d:3d:dc:39:6d:40:8a:dc:3b:bd:fe:7b: 44:f3:3b:11:fa:91:a9:13:b0:0c:2a:18:5d:58:81:c6:77:6b: 19:64:6a:95:02:54:ee:8b:29:30:1e:c2:a1:bd:ac:d1:a7:d5: 2b:f9:f9:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5KRsZsA+BcrbhkPb3p+PcKXNbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA2MjMyMjMzNTBaFw0yNjA2MjQyMjQ4NTBaMDMxMTAvBgNV BAMTKEZFQjU4QzI5NzY5MjZCN0UyMTFGQ0UxQUE0Rjc1MUFDQzI5RDhEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIpI3FB88QqOmkI1rBkFHXVQE QKw6doGiISa1GplVzJ5ubs4B+xlo+wTnyzN7ceETGFUKgbkNcybL+YGRV9lRveGY 2FUHv31/7r2VPyZYott016dkSxvTs3fjTY/aZ4MNQbc94HrNHrm562DeK3V2aLq/ Fzv7AYSapWr8uJh2att3BnkfDgx9J9PjTn0O3jnQNxikYk0oekVy2FD7P3EesTDH 1egFKF95dAfRuLdvqXjXcMXqdDdN5nHej8XxXiIEcy80B68wbF3CkHw1sl6VonxP bTNG9cnh9zEdECf7Ze+rOEz7zINZIY5Z2sJEsTh+9ytCJvvitINwx1Uq8d/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rWMKXaSa34hH84apPdRrMKdjT4wHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0ohxhpOM5YYnJfjGMh6m7uIhU5UzhS7dvl aGqbXRv2En5b2U1ih4dy1QFo2Er0E8WWU4qqoocai0rtntbHDVebuCSu2CdwJt02 MQAb9KckIATijkPEQX8FYOP3FVybUEkuM4hURUpy3XOrs4sIUZ9DgS+WC81fhC8S 59Tr0JCU8QmT5mH58YI7mGh+T0r5guaZMu8hSLLOZXVbLSR1YhfkvrfCwhIxASg6 FXEJvW/VV+KeXVMhbuJIZDXfAh5GxaxcNmmfrvO3SDzvRW093DltQIrcO73+e0Tz OxH6kakTsAwqGF1YgcZ3axlkapUCVO6LKTAewqG9rNGn1Sv5+bA= -----END CERTIFICATE-----Generated at Wed Jun 24 15:29:08 2026 by rpki-client