$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft File: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft (raw, json) Hash identifier: J+GC8z5zvkjAjaSuWHuhvg6BciIx0BRbLkaXpQrlbA0= Subject key identifier: D4:D4:AD:F3:E5:92:53:ED:E4:2A:1F:E8:8B:79:58:4D:DD:01:22:5F Authority key identifier: 6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 Certificate issuer: /CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Certificate serial: 6D17374F493949642CBBA7B1847D8F5BE69D6E48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:32:01 +0000 Manifest this update: Fri 19 Jun 2026 17:27:01 +0000 Manifest next update: Sat 20 Jun 2026 19:29:01 +0000 Files and hashes: 1: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl (hash: +bO4YE0Z0ti8+vFf5WkALn3EPeax7pl5D0JTImCbENA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:17:37:4f:49:39:49:64:2c:bb:a7:b1:84:7d:8f:5b:e6:9d:6e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Validity Not Before: Jun 19 17:27:01 2026 GMT Not After : Jun 20 19:29:01 2026 GMT Subject: CN=D4D4ADF3E59253EDE42A1FE88B79584DDD01225F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:ca:3b:1b:e4:81:05:90:62:1d:27:49:dd: fd:8b:46:49:d7:2f:07:28:dc:95:c1:4a:fd:de:81: 39:19:1b:17:0e:8b:65:af:de:63:50:60:3d:4c:37: 3e:63:3b:2e:bd:4d:97:74:0c:04:5e:80:33:b9:df: 54:0d:19:8f:6e:3c:a2:61:a1:1d:af:b5:99:ae:7b: 8f:8d:20:8a:c4:cf:48:6a:29:ce:89:fe:f1:50:30: ce:59:85:c3:37:8f:29:72:13:8a:1c:53:0d:f2:16: 70:96:1c:92:dc:9e:69:fd:23:79:ba:71:49:d4:ef: 34:d3:a3:aa:d8:0a:77:a3:12:07:e0:61:1d:b1:36: 3d:1e:dd:47:18:fa:f1:fb:60:f3:61:9a:26:54:8a: 8c:67:5e:db:cd:ed:bc:df:f4:5f:5b:61:45:6c:03: c9:32:83:36:f9:f8:a7:0e:f7:43:ba:eb:31:de:a9: 42:b9:b2:f5:ad:11:3d:f6:9e:33:c2:24:32:d6:99: 0a:37:a7:4e:8a:a9:af:bf:c8:b2:35:8c:c7:a5:9d: 97:6d:69:93:82:46:3f:49:ae:f9:4a:6b:9f:07:96: cd:cb:93:15:d2:5a:97:af:5d:7a:8e:6b:ec:7e:a6: 26:31:9f:63:e3:74:2d:22:cb:e7:4f:26:76:02:7a: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D4:AD:F3:E5:92:53:ED:E4:2A:1F:E8:8B:79:58:4D:DD:01:22:5F X509v3 Authority Key Identifier: keyid:6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2f:70:6b:61:5a:32:1a:8b:13:3f:39:f3:3e:35:dd:73:54: 03:40:d7:1f:46:02:1e:31:de:56:3e:25:bd:24:fd:a7:c6:2d: d5:b0:bd:b1:f5:78:57:11:b9:42:38:9d:13:a3:e7:9b:77:ae: a4:1d:62:b6:b9:b7:6d:fe:91:b4:e2:e5:48:7f:35:e7:53:3e: bd:dc:aa:47:04:0a:46:a5:eb:36:e5:7f:97:34:50:45:20:bc: d5:f6:cf:a9:37:ac:41:bb:90:18:fc:4c:33:db:80:95:7b:8d: d4:2c:ba:7f:a3:16:3d:14:fc:01:76:f0:2b:29:d3:08:c2:3e: 8a:c9:5d:3f:a9:04:29:9c:ba:a3:df:8b:12:cd:d7:45:f7:05: ce:0b:a6:d3:91:96:52:1b:cc:35:b1:3a:4c:07:2d:66:15:db: 76:b7:91:bb:d0:98:9d:2b:2a:b7:19:bf:82:be:cf:86:b3:90: 32:b2:d3:0c:b7:d5:12:5a:d7:24:bc:6c:79:9b:41:ca:fc:56: 30:27:53:99:66:35:c6:a5:d2:a1:a5:94:32:d8:c0:e8:0d:78: e0:c7:d2:b6:4a:ec:d1:fa:75:5e:99:db:e7:33:12:f4:a7:23: f8:66:ef:da:f4:2b:c9:e4:db:d6:43:ef:44:b8:60:ae:ec:0b: 03:e1:dc:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRc3T0k5SWQsu6exhH2PW+adbkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFF NENENjUyMzAeFw0yNjA2MTkxNzI3MDFaFw0yNjA2MjAxOTI5MDFaMDMxMTAvBgNV BAMTKEQ0RDRBREYzRTU5MjUzRURFNDJBMUZFODhCNzk1ODREREQwMTIyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRyco7G+SBBZBiHSdJ3f2LRknX Lwco3JXBSv3egTkZGxcOi2Wv3mNQYD1MNz5jOy69TZd0DARegDO531QNGY9uPKJh oR2vtZmue4+NIIrEz0hqKc6J/vFQMM5ZhcM3jylyE4ocUw3yFnCWHJLcnmn9I3m6 cUnU7zTTo6rYCnejEgfgYR2xNj0e3UcY+vH7YPNhmiZUioxnXtvN7bzf9F9bYUVs A8kygzb5+KcO90O66zHeqUK5svWtET32njPCJDLWmQo3p06Kqa+/yLI1jMelnZdt aZOCRj9JrvlKa58Hls3LkxXSWpevXXqOa+x+piYxn2PjdC0iy+dPJnYCeoZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1NSt8+WSU+3kKh/oi3lYTd0BIl8wHwYDVR0j BBgwFoAUbwaxfDj7ehmeSoUyE8BS6uTNZSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0Mz OEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFFNENENjUyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjA2QjE3QzM4RkI3QTE5OUU0QTg1MzIxM0MwNTJFQUU0Q0Q2 NTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUy RUFFNENENjUyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcvcGthWjIaixM/OfM+Nd1zVANA1x9GAh4x 3lY+Jb0k/afGLdWwvbH1eFcRuUI4nROj55t3rqQdYra5t23+kbTi5Uh/NedTPr3c qkcECkal6zblf5c0UEUgvNX2z6k3rEG7kBj8TDPbgJV7jdQsun+jFj0U/AF28Csp 0wjCPorJXT+pBCmcuqPfixLN10X3Bc4LptORllIbzDWxOkwHLWYV23a3kbvQmJ0r KrcZv4K+z4azkDKy0wy31RJa1yS8bHmbQcr8VjAnU5lmNcal0qGllDLYwOgNeODH 0rZK7NH6dV6Z2+czEvSnI/hm79r0K8nk29ZD70S4YK7sCwPh3Mg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:46 2026 by rpki-client