$ rpki-client -vvf rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft File: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft (raw, json) Hash identifier: xAvn62+vAv3bmAGW6Hat5/Ez2nGouCqHeTzDyUi7/Rk= Subject key identifier: 96:3B:D3:7C:0A:BE:53:6E:DB:F7:01:A7:81:A3:74:48:13:BD:E5:5B Authority key identifier: 6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 Certificate issuer: /CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Certificate serial: 1C251F9EDA783D781DEA5A49F498688B5D4CA086 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 05:19:20 +0000 Manifest this update: Wed 17 Jun 2026 05:14:20 +0000 Manifest next update: Thu 18 Jun 2026 08:16:20 +0000 Files and hashes: 1: 6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl (hash: iSFUWieugYo9eDwjGAH6netgCiXKi3cubFQVhfqyO9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:25:1f:9e:da:78:3d:78:1d:ea:5a:49:f4:98:68:8b:5d:4c:a0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F5D62ED719BAC26322B80E7329F307D1C1E57D7 Validity Not Before: Jun 17 05:14:20 2026 GMT Not After : Jun 18 08:16:20 2026 GMT Subject: CN=963BD37C0ABE536EDBF701A781A3744813BDE55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:30:49:1a:6a:a2:c9:a3:23:db:96:75:c3: 82:cf:24:c3:30:23:cd:37:78:21:ec:1d:79:b4:6a: d3:7d:13:54:5c:e8:82:60:0d:9b:86:7b:52:19:d0: e3:70:ad:21:e9:92:4f:18:e3:11:81:4a:d3:05:91: ac:f5:47:91:07:27:5e:f4:68:9a:02:c6:e0:48:5b: c4:cb:f0:34:8f:07:0d:c7:6b:65:85:81:1c:97:1d: 5b:d5:1c:4b:c3:38:16:33:c3:e2:97:af:87:01:51: e5:80:28:46:6b:71:f6:f0:82:de:6b:a0:af:4b:c3: 7e:5a:6d:d1:33:53:0e:7d:26:9e:7c:71:7a:77:0e: 2d:e5:6e:ab:e0:35:cc:ee:33:97:69:dd:4f:f2:f8: 20:bb:59:84:37:17:3c:71:ef:94:93:c6:c4:a5:31: 04:64:3c:47:40:a8:ef:26:f9:5b:f3:2c:87:6a:d5: 24:64:e9:6a:70:c6:45:c5:37:c9:8b:38:9d:3d:a5: 1d:8d:4e:b0:15:02:1b:58:b5:4e:4b:89:6e:e1:8f: c8:fd:7f:f0:38:c3:94:42:ae:47:e9:e9:f1:88:80: d5:d1:02:c7:17:73:a0:67:34:57:b0:ba:c2:8f:11: ab:75:cd:f0:89:c5:6f:be:34:d0:47:de:df:c2:37: a4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3B:D3:7C:0A:BE:53:6E:DB:F7:01:A7:81:A3:74:48:13:BD:E5:5B X509v3 Authority Key Identifier: keyid:6F:5D:62:ED:71:9B:AC:26:32:2B:80:E7:32:9F:30:7D:1C:1E:57:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/6F5D62ED719BAC26322B80E7329F307D1C1E57D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:10:a1:15:cf:78:82:dc:dc:ec:0a:1d:c3:c8:0c:36:43:bf: 61:1e:6f:6f:38:7f:be:a2:4c:ba:bf:14:20:d4:4f:a9:fa:0b: 50:5b:c9:99:98:5d:de:6f:33:24:f8:36:95:e3:64:f5:3a:82: 6a:a7:fc:8e:dd:25:45:44:2e:d7:f0:43:3c:ff:ba:8d:8a:d8: 8c:03:80:74:eb:c1:fd:cd:ac:2e:7a:c6:31:05:d1:25:6d:c1: 72:71:9d:f5:91:5d:94:74:c7:60:73:b9:22:ac:71:81:bb:4c: 2e:f6:12:a6:24:f4:58:47:73:16:f9:8b:5a:47:55:0e:22:17: 94:1c:1f:77:8e:aa:46:57:62:fa:ac:d7:af:a3:4c:cc:7a:2e: 24:33:ef:fe:95:87:6d:c6:a8:a5:aa:00:6c:04:be:4b:f7:8e: 49:30:8d:42:09:78:60:6c:03:82:da:8e:c8:71:ca:fd:9f:7c: 7c:c2:bb:84:ba:a2:6c:24:8c:df:68:f7:0f:3c:f8:dd:75:9a: ad:11:c3:f8:d4:ba:d2:e5:01:9e:91:40:5d:f0:75:f3:61:9a: 4a:cb:b6:65:ab:f5:0e:66:ca:87:c3:4d:1c:e1:5f:c4:02:6e: 97:4b:1d:74:1a:59:76:a8:9f:9d:3b:3a:f7:bd:28:a3:bc:58: 62:57:1b:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCUfntp4PXgd6lpJ9Jhoi11MoIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0Qx QzFFNTdENzAeFw0yNjA2MTcwNTE0MjBaFw0yNjA2MTgwODE2MjBaMDMxMTAvBgNV BAMTKDk2M0JEMzdDMEFCRTUzNkVEQkY3MDFBNzgxQTM3NDQ4MTNCREU1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LzBJGmqiyaMj25Z1w4LPJMMw I803eCHsHXm0atN9E1Rc6IJgDZuGe1IZ0ONwrSHpkk8Y4xGBStMFkaz1R5EHJ170 aJoCxuBIW8TL8DSPBw3Ha2WFgRyXHVvVHEvDOBYzw+KXr4cBUeWAKEZrcfbwgt5r oK9Lw35abdEzUw59Jp58cXp3Di3lbqvgNczuM5dp3U/y+CC7WYQ3Fzxx75STxsSl MQRkPEdAqO8m+VvzLIdq1SRk6WpwxkXFN8mLOJ09pR2NTrAVAhtYtU5LiW7hj8j9 f/A4w5RCrkfp6fGIgNXRAscXc6BnNFewusKPEat1zfCJxW++NNBH3t/CN6QhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUljvTfAq+U27b9wGngaN0SBO95VswHwYDVR0j BBgwFoAUb11i7XGbrCYyK4DnMp8wfRweV9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA5YzIyYjEtMWI3Yi00NjcxLWFiOTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3 MTlCQUMyNjMyMkI4MEU3MzI5RjMwN0QxQzFFNTdENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjVENjJFRDcxOUJBQzI2MzIyQjgwRTczMjlGMzA3RDFDMUU1 N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvNkY1RDYyRUQ3MTlCQUMyNjMyMkI4MEU3MzI5RjMw N0QxQzFFNTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwQoRXPeILc3OwKHcPIDDZDv2Eeb284f76i TLq/FCDUT6n6C1BbyZmYXd5vMyT4NpXjZPU6gmqn/I7dJUVELtfwQzz/uo2K2IwD gHTrwf3NrC56xjEF0SVtwXJxnfWRXZR0x2BzuSKscYG7TC72EqYk9FhHcxb5i1pH VQ4iF5QcH3eOqkZXYvqs16+jTMx6LiQz7/6Vh23GqKWqAGwEvkv3jkkwjUIJeGBs A4Lajshxyv2ffHzCu4S6omwkjN9o9w88+N11mq0Rw/jUutLlAZ6RQF3wdfNhmkrL tmWr9Q5myofDTRzhX8QCbpdLHXQaWXaon507Ove9KKO8WGJXGy8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:44 2026 by rpki-client