$ rpki-client -vvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft File: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft (raw, json) Hash identifier: l9FHEkZvIt5QA7YtddQ8FKfiJ1bOp65CNcIxrnu7muw= Subject key identifier: 39:3C:A5:0F:68:88:0A:88:FB:59:67:DC:0E:09:47:DE:18:C7:8A:B0 Authority key identifier: 6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD Certificate issuer: /CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Certificate serial: 6D3C4A9EBC974C036187CB4E9B1183E7C5806D0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:12:08 +0000 Manifest this update: Tue 16 Jun 2026 23:07:08 +0000 Manifest next update: Wed 17 Jun 2026 23:33:08 +0000 Files and hashes: 1: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl (hash: oqWizPm1OGfjDiG2h/HH1DA1v0a6GyPgfnjwbsGs6EY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3c:4a:9e:bc:97:4c:03:61:87:cb:4e:9b:11:83:e7:c5:80:6d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Validity Not Before: Jun 16 23:07:08 2026 GMT Not After : Jun 17 23:33:08 2026 GMT Subject: CN=393CA50F68880A88FB5967DC0E0947DE18C78AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:b0:1c:1b:fe:b9:58:40:c3:6b:51:f2:1f: b6:64:db:f5:d5:69:89:64:74:48:c0:00:0a:ba:9c: 71:3a:ba:b8:49:89:1b:67:eb:5e:1c:19:4f:4e:25: e1:36:1c:c9:9b:51:64:4f:64:ca:a5:9d:7f:0c:7f: 63:ea:1a:95:95:e3:2d:72:3d:cf:1c:b3:32:8e:ec: 9d:2f:19:ed:c7:9e:d5:e6:f6:2c:88:8a:54:b8:3b: 66:a0:89:b0:40:f0:24:26:31:57:c5:d8:64:48:ec: 44:4d:80:51:2a:35:6f:eb:2a:47:a3:6a:b4:da:4d: b0:aa:e1:81:4d:01:36:82:21:eb:cc:da:b6:08:30: f3:77:85:fe:5b:75:6c:9f:2c:2f:ae:b8:cb:65:a2: 4f:d3:4c:6b:0a:b2:cc:72:00:fe:49:3a:12:b5:25: 34:72:19:ef:ca:1c:a7:ba:ff:7f:23:f3:22:e8:0f: ae:fb:f6:75:1f:4d:04:2d:1f:30:84:03:ed:55:be: 4f:72:70:56:ff:3d:53:23:33:a9:cc:28:e8:b8:eb: a4:af:be:7c:7f:97:db:fb:d8:e6:cd:d2:b3:ae:a3: 52:f3:07:9c:c1:65:33:68:2a:a2:82:83:f1:ac:c2: 70:f5:30:44:89:9f:8f:78:44:dd:94:11:68:f6:86: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3C:A5:0F:68:88:0A:88:FB:59:67:DC:0E:09:47:DE:18:C7:8A:B0 X509v3 Authority Key Identifier: keyid:6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:58:20:85:de:50:51:b6:43:0e:3a:4b:2b:68:34:8a:6b:9c: 55:53:76:ab:8f:f3:a0:00:5d:5e:04:cd:84:c1:76:c2:c6:6a: 02:fc:3b:86:9b:27:80:cf:de:df:da:e7:70:06:c0:86:a9:33: 7a:6b:5d:cd:3a:02:84:04:d3:b4:05:81:d7:de:38:a0:9c:95: 84:eb:b6:bf:b9:c4:62:55:11:ff:b0:ec:ae:2d:cb:64:e9:f3: 82:67:c9:1d:ef:80:97:b2:92:72:00:8e:05:00:26:df:9d:69: 63:20:4d:77:57:73:f9:7b:8d:c8:b0:8d:8f:9f:f0:06:43:49: 82:50:2b:c3:50:5b:3b:59:f8:d2:df:44:61:bc:ee:c3:96:e5: 10:17:bd:67:d6:c3:2b:1c:f7:3f:d2:42:16:bf:50:37:76:8b: 22:23:5c:e4:a2:06:01:be:da:2f:1e:74:e7:79:24:30:2e:52: 68:f7:dd:57:b4:93:6c:4e:02:b8:ab:15:fc:45:fe:32:7d:da: bb:b2:c2:d9:22:88:2d:95:e8:d2:ad:ae:72:a9:de:84:5d:37: 6f:43:3e:9a:33:81:84:81:3e:8b:5a:57:3f:67:11:ea:bc:e0: 69:f3:27:ab:9d:8c:e5:45:41:21:e9:95:e3:fc:77:69:49:48: 9e:6e:61:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTxKnryXTANhh8tOmxGD58WAbQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVB MzMyQUZBRDAeFw0yNjA2MTYyMzA3MDhaFw0yNjA2MTcyMzMzMDhaMDMxMTAvBgNV BAMTKDM5M0NBNTBGNjg4ODBBODhGQjU5NjdEQzBFMDk0N0RFMThDNzhBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8irAcG/65WEDDa1HyH7Zk2/XV aYlkdEjAAAq6nHE6urhJiRtn614cGU9OJeE2HMmbUWRPZMqlnX8Mf2PqGpWV4y1y Pc8cszKO7J0vGe3HntXm9iyIilS4O2agibBA8CQmMVfF2GRI7ERNgFEqNW/rKkej arTaTbCq4YFNATaCIevM2rYIMPN3hf5bdWyfLC+uuMtlok/TTGsKssxyAP5JOhK1 JTRyGe/KHKe6/38j8yLoD6779nUfTQQtHzCEA+1Vvk9ycFb/PVMjM6nMKOi466Sv vnx/l9v72ObN0rOuo1LzB5zBZTNoKqKCg/GswnD1MESJn494RN2UEWj2hvTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOTylD2iICoj7WWfcDglH3hjHirAwHwYDVR0j BBgwFoAUbXPX6mwBZIx7/Qim4rNGhaMyr60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2 QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVBMzMyQUZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDczRDdFQTZDMDE2NDhDN0JGRDA4QTZFMkIzNDY4NUEzMzJB RkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2 ODVBMzMyQUZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANYIIXeUFG2Qw46SytoNIprnFVTdquP86AA XV4EzYTBdsLGagL8O4abJ4DP3t/a53AGwIapM3prXc06AoQE07QFgdfeOKCclYTr tr+5xGJVEf+w7K4ty2Tp84JnyR3vgJeyknIAjgUAJt+daWMgTXdXc/l7jciwjY+f 8AZDSYJQK8NQWztZ+NLfRGG87sOW5RAXvWfWwysc9z/SQha/UDd2iyIjXOSiBgG+ 2i8edOd5JDAuUmj33Ve0k2xOArirFfxF/jJ92ruywtkiiC2V6NKtrnKp3oRdN29D PpozgYSBPotaVz9nEeq84GnzJ6udjOVFQSHpleP8d2lJSJ5uYWA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:16 2026 by rpki-client