$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft File: 6D8C2202C602D4BCB9586F638744BA643908A389.mft (raw, json) Hash identifier: ECUVDvE+wQY0H+Cs7I8fKv23r3fNkolga6us1ee6Lhg= Subject key identifier: B3:2F:48:7C:C8:1B:DE:82:01:FB:1C:85:B8:8A:4F:11:6D:F7:B0:F2 Authority key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 Certificate issuer: /CN=6D8C2202C602D4BCB9586F638744BA643908A389 Certificate serial: 68FA39C2C21971D5F4CA29A0DC7B8729AC4D0983 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 13:27:07 +0000 Manifest this update: Fri 19 Jun 2026 13:22:07 +0000 Manifest next update: Sat 20 Jun 2026 14:59:07 +0000 Files and hashes: 1: 6D8C2202C602D4BCB9586F638744BA643908A389.crl (hash: Mx+HUqTVcu+JM09bceltnHbgx1rg7mpDiwOZrB4eoTY=) 2: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: m+uFtZihUm3fWV/iOrWY8zLaQsNI9BmUlq7mnOF09qo=) 3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: b7wBGbC9SNhjzw8V9K2lv7CY6SFtdKxPdtK4cOG4BhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 14:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fa:39:c2:c2:19:71:d5:f4:ca:29:a0:dc:7b:87:29:ac:4d:09:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D8C2202C602D4BCB9586F638744BA643908A389 Validity Not Before: Jun 19 13:22:07 2026 GMT Not After : Jun 20 14:59:07 2026 GMT Subject: CN=B32F487CC81BDE8201FB1C85B88A4F116DF7B0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:32:5e:c6:61:32:d4:15:5a:91:b9:c7:5a: 4f:dc:56:dd:03:d5:f4:5b:d3:f9:31:55:2f:6e:b7: d0:75:51:35:8c:af:87:33:be:d2:80:e6:f6:19:3a: a3:a6:47:ce:23:ab:0d:e5:21:7c:49:03:6c:ec:9d: 32:93:4d:70:94:2e:26:9c:93:4c:cb:16:0e:18:04: 9c:77:48:69:74:8f:3b:ef:31:dd:cb:cb:0c:e6:e9: b7:39:4f:9c:7a:ea:a4:20:ff:8b:70:f2:ef:b5:00: 47:34:7c:7e:80:11:74:fc:1e:7f:6c:68:3d:de:ef: 61:97:aa:7a:74:37:5c:1d:7d:c2:5d:b0:94:ef:de: d8:59:32:cb:34:2b:6a:e7:6e:bc:f1:17:6b:30:9c: 88:72:da:92:3b:2b:46:ac:6b:a6:8a:c7:68:9f:4c: 2c:41:9c:18:d2:38:9c:31:4b:31:a7:3f:db:cd:c6: 50:8f:a3:21:de:7d:45:ff:c8:65:16:f0:06:36:3e: d4:4e:70:90:b1:de:03:c6:4b:1b:6e:60:a3:b6:3e: 70:c0:06:5f:0e:11:13:6e:6f:02:c9:b2:36:fc:f5: 76:70:d5:32:aa:31:61:e4:5d:e0:1b:d2:5a:ce:78: aa:d7:0a:16:b0:93:fc:27:3b:31:32:1c:a7:b4:7f: 35:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2F:48:7C:C8:1B:DE:82:01:FB:1C:85:B8:8A:4F:11:6D:F7:B0:F2 X509v3 Authority Key Identifier: keyid:6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:09:93:89:ec:52:e0:f5:5e:f1:dd:25:0d:2c:0e:db:b3:92: 69:05:d3:9f:b6:9b:fa:85:2c:f5:0c:af:82:30:33:d5:56:7a: 1b:3a:e6:4d:45:2d:d3:2d:ac:d7:5b:64:68:c1:27:49:e0:0d: c0:01:41:b0:62:95:d1:d8:19:70:83:36:71:6b:de:65:2d:d6: b5:5c:ac:4a:57:d8:dc:55:8f:91:92:fb:b4:77:6e:7a:11:f0: 80:d4:67:ec:32:e1:a1:31:3f:68:78:41:ab:bd:47:37:48:f6: ae:02:03:cd:c6:de:7a:a4:50:8e:46:47:c2:e1:f1:82:00:fb: 8a:71:5b:7e:23:44:7a:c7:bb:ce:2f:f4:0c:f8:d4:96:23:c6: bb:25:4f:4d:f4:7e:cc:bb:1b:b1:61:77:36:81:18:8d:05:65: 55:0d:38:21:33:61:45:71:c4:bb:0c:5e:50:4d:0a:d6:7d:0a: 65:7a:e0:8c:d9:c0:e3:82:9c:a8:3d:40:48:02:b1:77:9f:d4: 27:b0:38:61:fb:ba:53:cf:b7:ea:9c:ab:35:5c:c7:5b:c6:f3: c4:8f:cc:65:99:76:18:a4:5a:f3:ef:01:c1:2b:73:39:84:25: 20:33:92:0c:02:60:d6:fa:14:a3:16:91:09:c5:b4:29:69:cb: cf:79:26:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPo5wsIZcdX0yimg3HuHKaxNCYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ4QzIyMDJDNjAyRDRCQ0I5NTg2RjYzODc0NEJBNjQz OTA4QTM4OTAeFw0yNjA2MTkxMzIyMDdaFw0yNjA2MjAxNDU5MDdaMDMxMTAvBgNV BAMTKEIzMkY0ODdDQzgxQkRFODIwMUZCMUM4NUI4OEE0RjExNkRGN0IwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJTJexmEy1BVakbnHWk/cVt0D 1fRb0/kxVS9ut9B1UTWMr4czvtKA5vYZOqOmR84jqw3lIXxJA2zsnTKTTXCULiac k0zLFg4YBJx3SGl0jzvvMd3Lywzm6bc5T5x66qQg/4tw8u+1AEc0fH6AEXT8Hn9s aD3e72GXqnp0N1wdfcJdsJTv3thZMss0K2rnbrzxF2swnIhy2pI7K0asa6aKx2if TCxBnBjSOJwxSzGnP9vNxlCPoyHefUX/yGUW8AY2PtROcJCx3gPGSxtuYKO2PnDA Bl8OERNubwLJsjb89XZw1TKqMWHkXeAb0lrOeKrXChawk/wnOzEyHKe0fzWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsy9IfMgb3oIB+xyFuIpPEW33sPIwHwYDVR0j BBgwFoAUbYwiAsYC1Ly5WG9jh0S6ZDkIo4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFlZTM3NjUtMGFiYi00YmEzLWEwMGQtY2JjZWM4Mzk5OTI4LzAvNkQ4QzIyMDJD NjAyRDRCQ0I5NTg2RjYzODc0NEJBNjQzOTA4QTM4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDhDMjIwMkM2MDJENEJDQjk1ODZGNjM4NzQ0QkE2NDM5MDhB Mzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNkQ4QzIyMDJDNjAyRDRCQ0I5NTg2RjYzODc0NEJB NjQzOTA4QTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkJk4nsUuD1XvHdJQ0sDtuzkmkF05+2m/qF LPUMr4IwM9VWehs65k1FLdMtrNdbZGjBJ0ngDcABQbBildHYGXCDNnFr3mUt1rVc rEpX2NxVj5GS+7R3bnoR8IDUZ+wy4aExP2h4Qau9RzdI9q4CA83G3nqkUI5GR8Lh 8YIA+4pxW34jRHrHu84v9Az41JYjxrslT030fsy7G7FhdzaBGI0FZVUNOCEzYUVx xLsMXlBNCtZ9CmV64IzZwOOCnKg9QEgCsXef1CewOGH7ulPPt+qcqzVcx1vG88SP zGWZdhikWvPvAcErczmEJSAzkgwCYNb6FKMWkQnFtClpy895JhU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:25 2026 by rpki-client