$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json) Hash identifier: QbgU1l4kIRq9g/kBBQu2aKbstGHqRfhZA7uSyOw6Hkc= Subject key identifier: 32:3E:F2:7F:CD:BC:D3:50:6F:C1:24:43:97:54:B2:49:95:FF:ED:8E Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 Certificate issuer: /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Certificate serial: 0AD6A8176D26D7A87CE88D83B4EB7089B7B7F928 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 17:33:36 +0000 Manifest this update: Sun 02 Aug 2026 17:28:36 +0000 Manifest next update: Mon 03 Aug 2026 18:42:36 +0000 Files and hashes: 1: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: zkrWw7uQ4Bph5kTpGmSOBdeTXJebS9snLhNQd2BDYK0=) 2: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=) 3: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d6:a8:17:6d:26:d7:a8:7c:e8:8d:83:b4:eb:70:89:b7:b7:f9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Validity Not Before: Aug 2 17:28:36 2026 GMT Not After : Aug 3 18:42:36 2026 GMT Subject: CN=323EF27FCDBCD3506FC124439754B24995FFED8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:c2:d2:46:2a:13:ea:4c:32:51:98:04:3b: e5:41:be:3a:12:4e:8a:ad:cc:ac:e7:c8:ac:d8:17: 9d:b4:8d:5d:5d:81:7e:ff:b0:5b:81:e9:54:40:f9: de:f7:6d:7f:8b:8e:2f:96:2d:a8:4c:80:82:be:c7: 8f:db:0d:ad:4c:50:02:9a:d4:ba:0e:6e:10:8a:30: d7:c4:05:01:62:9d:2c:83:9c:f3:29:e7:24:f8:6a: b7:61:2b:c5:80:af:b5:2b:61:f4:7d:77:85:d3:00: 64:34:09:34:7e:6b:dc:aa:59:0f:7d:90:ca:57:e1: 42:6e:4d:96:d0:d1:b0:0a:99:f1:5c:1e:ce:6b:83: 54:b5:e4:6a:5c:db:e3:e9:12:9f:e1:c7:3d:87:02: 6a:89:c1:ff:7b:72:82:6a:3d:4c:08:b7:5d:8c:d5: 9a:6d:aa:30:7a:5b:91:80:8b:70:0b:c3:86:86:64: d2:19:b1:11:a4:56:5a:e6:c0:42:ad:98:bb:8d:a8: c0:f7:fe:11:b8:59:9a:82:7e:0e:0d:52:40:ab:90: c1:96:cb:a4:ab:a6:6d:71:34:5a:20:01:5e:9c:e6: 85:de:e1:15:90:30:66:fc:7d:89:3c:9a:d6:b9:cd: 85:63:0d:ad:f8:80:ba:e6:0f:3b:54:64:40:c1:4b: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:F2:7F:CD:BC:D3:50:6F:C1:24:43:97:54:B2:49:95:FF:ED:8E X509v3 Authority Key Identifier: keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:db:68:53:2f:4a:35:25:af:d4:3d:1a:10:7e:11:b1:03:9f: 54:f5:3e:01:e6:ce:6e:a2:f4:10:63:23:6a:09:59:ad:5f:9b: 97:4a:66:0c:88:7c:35:84:47:d1:10:07:f7:f5:37:e0:85:2d: 77:61:65:b4:54:cc:b4:76:e7:7f:98:7e:ac:2b:9c:91:e1:9e: 55:e1:45:94:74:40:fa:a5:a2:43:5d:27:64:fc:5b:e6:3b:0d: 82:ab:63:33:e8:5e:82:5c:b1:33:6d:e2:5c:80:e8:17:d6:76: 72:dd:87:c3:89:1c:70:3b:4d:8a:61:15:6f:5c:29:0f:21:1c: 5c:27:14:a9:e7:84:ab:71:9f:1e:95:97:64:64:60:db:a3:f1: 6a:6d:bb:e9:40:1c:77:b7:2a:31:f8:f2:24:6c:93:77:1b:45: 34:dc:9e:61:01:e1:d4:3b:e3:f2:10:fb:d1:e7:94:c3:38:cf: e0:8d:63:3c:db:3f:4f:e6:9c:34:1e:4f:58:6b:da:04:a3:ac: 71:d3:dc:4f:35:f7:d8:c3:bb:91:e9:b4:57:3d:25:49:48:95: ac:72:53:7f:80:06:4e:eb:5c:a6:df:c8:42:f3:fa:55:4d:08: f5:fd:54:be:a3:24:84:79:c4:a2:6b:03:9e:fd:06:8e:1b:f2: 35:21:5b:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtaoF20m16h86I2DtOtwibe3+SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYy QUY3OUJGNjAeFw0yNjA4MDIxNzI4MzZaFw0yNjA4MDMxODQyMzZaMDMxMTAvBgNV BAMTKDMyM0VGMjdGQ0RCQ0QzNTA2RkMxMjQ0Mzk3NTRCMjQ5OTVGRkVEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gMLSRioT6kwyUZgEO+VBvjoS ToqtzKznyKzYF520jV1dgX7/sFuB6VRA+d73bX+Lji+WLahMgIK+x4/bDa1MUAKa 1LoObhCKMNfEBQFinSyDnPMp5yT4ardhK8WAr7UrYfR9d4XTAGQ0CTR+a9yqWQ99 kMpX4UJuTZbQ0bAKmfFcHs5rg1S15Gpc2+PpEp/hxz2HAmqJwf97coJqPUwIt12M 1ZptqjB6W5GAi3ALw4aGZNIZsRGkVlrmwEKtmLuNqMD3/hG4WZqCfg4NUkCrkMGW y6Srpm1xNFogAV6c5oXe4RWQMGb8fYk8mta5zYVjDa34gLrmDztUZEDBS6V1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMj7yf82801BvwSRDl1SySZX/7Y4wHwYDVR0j BBgwFoAUbmXE4EPwSoFfg3flrSwCvyr3m/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0 M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYyQUY3OUJGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RTY1QzRFMDQzRjA0QTgxNUY4Mzc3RTVBRDJDMDJCRjJBRjc5 QkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAy QkYyQUY3OUJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrbaFMvSjUlr9Q9GhB+EbEDn1T1PgHmzm6i 9BBjI2oJWa1fm5dKZgyIfDWER9EQB/f1N+CFLXdhZbRUzLR253+YfqwrnJHhnlXh RZR0QPqlokNdJ2T8W+Y7DYKrYzPoXoJcsTNt4lyA6BfWdnLdh8OJHHA7TYphFW9c KQ8hHFwnFKnnhKtxnx6Vl2RkYNuj8Wptu+lAHHe3KjH48iRsk3cbRTTcnmEB4dQ7 4/IQ+9HnlMM4z+CNYzzbP0/mnDQeT1hr2gSjrHHT3E8199jDu5HptFc9JUlIlaxy U3+ABk7rXKbfyELz+lVNCPX9VL6jJIR5xKJrA579Bo4b8jUhW0E= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client