$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: XNIWV0H8v+GRGtJkWaBGBFmEkbJclRakNqOYuTK/Xo0= Subject key identifier: 09:50:93:EC:29:0D:6B:F1:B7:B3:45:42:1E:7B:83:7A:A5:19:8D:A7 Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 0DAE278158ADA72BB48067AFFEDBBB61B8E428D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:57:26 +0000 Manifest this update: Fri 19 Jun 2026 21:52:26 +0000 Manifest next update: Sat 20 Jun 2026 22:15:26 +0000 Files and hashes: 1: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) 4: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 5: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) 6: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: h9z2FUP1HIHe60N8FUKuvVu+quRtGXD3Qk8s0xxBkqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ae:27:81:58:ad:a7:2b:b4:80:67:af:fe:db:bb:61:b8:e4:28:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: Jun 19 21:52:26 2026 GMT Not After : Jun 20 22:15:26 2026 GMT Subject: CN=095093EC290D6BF1B7B345421E7B837AA5198DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:85:99:93:48:a1:b2:a6:7c:6b:81:c9:1a: 40:51:14:44:a4:a9:06:85:d2:20:e5:15:72:3f:f0: 95:7c:52:9f:2c:65:e8:f8:43:84:bd:85:fd:ee:df: 4f:66:60:d2:c2:15:58:5e:64:f5:fc:fa:37:13:e4: 20:a4:ba:9b:8a:72:86:72:f6:c4:22:90:81:8a:02: f8:40:10:bb:86:04:92:15:ab:9e:7a:d0:7e:e9:1d: 7d:b5:fe:1c:ad:f3:ec:44:c3:7d:8e:f0:5c:86:34: b1:f0:59:0f:91:59:72:65:e4:5f:c0:82:6f:1c:90: 62:e9:95:05:63:0e:e9:2d:5b:50:a8:45:ba:a5:4a: 2b:60:26:31:7c:55:d1:fa:ed:31:f9:a2:b4:c4:79: c0:f9:fa:2a:83:df:fb:e1:3f:d2:6e:85:b7:eb:98: 9d:0a:65:68:8e:5c:57:a1:18:51:3d:a2:77:c7:e2: f7:7e:b2:d3:37:70:be:b5:7a:95:d0:84:e2:bb:fe: ef:1a:73:52:44:59:8c:c6:6b:4c:59:24:68:33:6c: 39:82:42:ef:28:f5:3d:e6:5b:33:47:1b:57:8b:2c: 6a:3e:94:73:eb:6c:28:a7:9c:7a:0c:f2:84:b0:4d: 50:83:01:58:a3:68:bf:e4:2b:38:40:3d:76:81:13: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:50:93:EC:29:0D:6B:F1:B7:B3:45:42:1E:7B:83:7A:A5:19:8D:A7 X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d9:a6:ec:d5:2f:ea:dd:3b:9c:bf:45:9d:b6:b4:24:71:a9: b4:0d:6a:44:10:3b:65:70:ce:f4:4d:d2:5f:7b:44:83:d7:87: 46:98:e4:1c:03:79:f0:ff:81:e1:20:b2:ec:41:e0:46:76:cb: 04:f7:b5:88:b9:09:a0:04:d1:49:b2:94:dc:4e:ca:23:c9:6b: 22:ae:9c:1e:9b:39:a6:fb:cb:eb:52:39:b5:9a:b7:ce:f9:8e: dd:2c:b4:ca:90:4b:22:d5:c9:49:72:57:24:96:6c:31:e7:a2: f8:28:00:39:44:56:4f:d7:bf:61:6b:84:8a:b8:fe:45:0e:85: 5f:a1:19:35:ef:ae:1e:fa:0d:41:53:2d:4b:61:95:b9:af:fe: d4:b6:08:c2:e7:5d:fb:59:a8:9a:ce:86:d5:1b:f8:78:99:d7: 2e:2b:9b:d0:56:a2:df:ac:85:0c:81:3b:d9:87:17:cc:07:79: e5:04:87:f6:02:01:00:08:2f:c7:8d:97:22:bd:14:ed:a6:ab: a2:5c:5c:3d:de:ec:d8:46:d9:69:c5:ed:bf:b3:c1:85:24:ba: 2c:9d:cb:15:12:a8:1e:88:8c:08:60:80:6c:29:e3:ff:3b:48: 95:5b:c8:02:c9:58:7e:9c:1f:a8:ab:ab:8b:a7:76:fb:7e:62: e3:2e:08:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDa4ngVitpyu0gGev/tu7YbjkKNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjA2MTkyMTUyMjZaFw0yNjA2MjAyMjE1MjZaMDMxMTAvBgNV BAMTKDA5NTA5M0VDMjkwRDZCRjFCN0IzNDU0MjFFN0I4MzdBQTUxOThEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDax4WZk0ihsqZ8a4HJGkBRFESk qQaF0iDlFXI/8JV8Up8sZej4Q4S9hf3u309mYNLCFVheZPX8+jcT5CCkupuKcoZy 9sQikIGKAvhAELuGBJIVq5560H7pHX21/hyt8+xEw32O8FyGNLHwWQ+RWXJl5F/A gm8ckGLplQVjDuktW1CoRbqlSitgJjF8VdH67TH5orTEecD5+iqD3/vhP9Juhbfr mJ0KZWiOXFehGFE9onfH4vd+stM3cL61epXQhOK7/u8ac1JEWYzGa0xZJGgzbDmC Qu8o9T3mWzNHG1eLLGo+lHPrbCinnHoM8oSwTVCDAVijaL/kKzhAPXaBEy7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVCT7CkNa/G3s0VCHnuDeqUZjacwHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFF NTkxRUY2RDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3ZpuzVL+rdO5y/RZ22tCRxqbQNakQQO2Vw zvRN0l97RIPXh0aY5BwDefD/geEgsuxB4EZ2ywT3tYi5CaAE0UmylNxOyiPJayKu nB6bOab7y+tSObWat875jt0stMqQSyLVyUlyVySWbDHnovgoADlEVk/Xv2FrhIq4 /kUOhV+hGTXvrh76DUFTLUthlbmv/tS2CMLnXftZqJrOhtUb+HiZ1y4rm9BWot+s hQyBO9mHF8wHeeUEh/YCAQAIL8eNlyK9FO2mq6JcXD3e7NhG2WnF7b+zwYUkuiyd yxUSqB6IjAhggGwp4/87SJVbyALJWH6cH6irq4undvt+YuMuCNY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:01:31 2026 by rpki-client