$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft File: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft (raw, json) Hash identifier: rd6YrH6JZxPIH/uuGmomL+DJMxLqL1diOpduxdweI4o= Subject key identifier: FF:8A:67:10:7C:F0:36:57:3C:88:4E:F5:20:DD:1E:2A:BE:D8:18:BD Authority key identifier: 6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17 Certificate issuer: /CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717 Certificate serial: 38F925FE28A8EDBA12D30372FF0D3EF71076D35E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 18:17:54 +0000 Manifest this update: Fri 19 Jun 2026 18:12:54 +0000 Manifest next update: Sat 20 Jun 2026 21:17:54 +0000 Files and hashes: 1: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl (hash: GLQr4SWo/T3SkjxfUYSaAyBr7qKxUULu8RuenvESF88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f9:25:fe:28:a8:ed:ba:12:d3:03:72:ff:0d:3e:f7:10:76:d3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717 Validity Not Before: Jun 19 18:12:54 2026 GMT Not After : Jun 20 21:17:54 2026 GMT Subject: CN=FF8A67107CF036573C884EF520DD1E2ABED818BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:ef:31:1d:ca:38:3b:56:a3:8b:67:3d:22: 8b:17:ee:87:ec:6f:c7:75:49:1e:eb:c0:bf:09:c6: 89:ec:81:13:7d:28:12:1a:6d:ca:84:55:85:d3:a5: 41:c8:bd:13:71:1b:df:c5:f7:52:f0:97:f1:b3:3d: 93:04:80:b1:dd:e9:70:64:9e:c9:e2:db:c4:23:70: bb:74:82:c0:95:e7:95:fc:fe:d4:e8:e2:d2:97:76: dd:03:5f:e0:b4:39:ff:55:99:94:30:b7:4e:c8:8d: 6b:5a:14:8f:b9:0c:65:ad:37:5e:87:e5:82:ab:e5: ba:ec:18:7c:de:58:0e:6a:bf:ec:84:98:52:8f:fa: d9:6a:28:b2:5f:77:06:ab:cb:6a:56:a1:17:fa:58: fe:d8:b1:67:76:6d:f4:b8:78:8d:d3:c9:a4:0c:60: e3:45:54:0b:ae:cb:c9:2b:ce:d1:02:72:ba:c8:3f: ac:a0:1e:a5:41:66:a2:b0:2b:12:bf:6b:61:08:d8: 3b:de:57:c3:70:49:c9:cd:77:3d:82:6b:69:45:ac: 96:32:f6:00:aa:b5:27:d3:f1:eb:a4:e6:f8:cf:14: b9:fd:e9:d8:9e:1e:fc:63:fa:7b:f3:5f:8c:79:72: 7a:08:60:fa:b7:9a:62:28:f6:bf:83:28:77:fb:9b: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8A:67:10:7C:F0:36:57:3C:88:4E:F5:20:DD:1E:2A:BE:D8:18:BD X509v3 Authority Key Identifier: keyid:6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:38:e1:17:6f:1a:b4:7e:cb:9c:b1:8a:0a:e9:90:5b:86:07: 97:a2:46:f0:c9:2a:10:38:35:04:f9:07:64:d0:cf:44:de:cc: f6:12:1b:60:16:be:30:90:63:7c:b8:01:28:09:09:5d:58:b7: 5c:e7:28:90:29:4b:a8:a0:5d:75:4d:71:52:04:a9:ee:84:95: a9:bf:59:1a:e6:84:e5:1b:6f:32:21:f9:3b:f2:ee:3e:f3:2f: ff:51:5a:6c:dd:8c:b5:a4:58:e4:29:01:6a:9a:5b:c2:63:e1: ba:e6:8f:f0:76:f1:7c:35:1c:79:c2:b1:ad:55:ce:2d:82:2e: a0:2c:c9:9d:af:92:57:53:0f:8a:21:9b:c1:97:f5:64:36:3a: 48:57:35:bd:4f:fa:96:8a:5e:71:7f:16:70:db:08:02:17:96: e3:dc:09:8a:90:ad:fa:d5:2d:32:b3:c0:5a:98:57:46:b6:3d: 9a:8f:32:47:06:12:5c:0c:f1:65:b5:6b:bd:cd:a3:db:89:22: 53:27:fa:ed:ac:fc:9f:f9:06:12:fe:6f:39:72:31:dd:e6:42: 29:d4:38:04:8c:fc:ef:6c:0a:c4:58:78:96:3d:d1:56:1c:c2: 87:4d:a1:77:6c:88:77:47:ee:37:04:d7:23:fc:b5:84:4b:23: db:0d:0a:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPkl/iio7boS0wNy/w0+9xB2014wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDMEI3RTE0QjQxMjY4RUI1MDlDOEQ1NDhDOUFBMDUy RUMxNzcxNzAeFw0yNjA2MTkxODEyNTRaFw0yNjA2MjAyMTE3NTRaMDMxMTAvBgNV BAMTKEZGOEE2NzEwN0NGMDM2NTczQzg4NEVGNTIwREQxRTJBQkVEODE4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmu8xHco4O1aji2c9IosX7ofs b8d1SR7rwL8JxonsgRN9KBIabcqEVYXTpUHIvRNxG9/F91Lwl/GzPZMEgLHd6XBk nsni28QjcLt0gsCV55X8/tTo4tKXdt0DX+C0Of9VmZQwt07IjWtaFI+5DGWtN16H 5YKr5brsGHzeWA5qv+yEmFKP+tlqKLJfdwary2pWoRf6WP7YsWd2bfS4eI3TyaQM YONFVAuuy8krztECcrrIP6ygHqVBZqKwKxK/a2EI2DveV8NwScnNdz2Ca2lFrJYy 9gCqtSfT8euk5vjPFLn96dieHvxj+nvzX4x5cnoIYPq3mmIo9r+DKHf7mxIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4pnEHzwNlc8iE71IN0eKr7YGL0wHwYDVR0j BBgwFoAUbcC34UtBJo61CcjVSMmqBS7BdxcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MjYxMjQtMDU5Yy00M2FkLWExNTAtODIyYjlkNWZiM2YzLzAvNkRDMEI3RTE0 QjQxMjY4RUI1MDlDOEQ1NDhDOUFBMDUyRUMxNzcxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82REMwQjdFMTRCNDEyNjhFQjUwOUM4RDU0OEM5QUEwNTJFQzE3 NzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MjYxMjQtMDU5Yy00M2FkLWEx NTAtODIyYjlkNWZiM2YzLzAvNkRDMEI3RTE0QjQxMjY4RUI1MDlDOEQ1NDhDOUFB MDUyRUMxNzcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ844RdvGrR+y5yxigrpkFuGB5eiRvDJKhA4 NQT5B2TQz0TezPYSG2AWvjCQY3y4ASgJCV1Yt1znKJApS6igXXVNcVIEqe6Elam/ WRrmhOUbbzIh+Tvy7j7zL/9RWmzdjLWkWOQpAWqaW8Jj4brmj/B28Xw1HHnCsa1V zi2CLqAsyZ2vkldTD4ohm8GX9WQ2OkhXNb1P+paKXnF/FnDbCAIXluPcCYqQrfrV LTKzwFqYV0a2PZqPMkcGElwM8WW1a73No9uJIlMn+u2s/J/5BhL+bzlyMd3mQinU OASM/O9sCsRYeJY90VYcwodNoXdsiHdH7jcE1yP8tYRLI9sNCuk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:13:56 2026 by rpki-client