$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft File: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft (raw, json) Hash identifier: 6l42xYsgVpFjg8fkPEB7WI/7Uyv+myPCxRgpMARFeyk= Subject key identifier: BF:AE:16:20:3D:F9:56:40:1F:80:CA:2F:8F:74:B6:25:6C:40:1F:A2 Authority key identifier: 6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D Certificate issuer: /CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Certificate serial: 58B29451871A88306F0AA788E354ACEF95F7A5A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:48:09 +0000 Manifest this update: Tue 16 Jun 2026 19:43:09 +0000 Manifest next update: Wed 17 Jun 2026 20:41:09 +0000 Files and hashes: 1: 6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl (hash: ZkqtlpN47z0VTnbC4s6L8A2WPwRDsdmG/VV4OLBpwGI=) 2: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: w2x/b2ifWwyHpRZZLutwbvw8gPy4dmo/jJsRdtth0Pg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b2:94:51:87:1a:88:30:6f:0a:a7:88:e3:54:ac:ef:95:f7:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D Validity Not Before: Jun 16 19:43:09 2026 GMT Not After : Jun 17 20:41:09 2026 GMT Subject: CN=BFAE16203DF956401F80CA2F8F74B6256C401FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:22:f5:15:25:f0:24:70:90:be:9a:7e:21: 34:48:ea:23:29:b0:80:7d:1b:59:a8:9f:a0:8f:9c: dd:73:42:40:cd:45:60:df:45:23:a6:3d:00:a1:c2: 8d:0a:fb:9d:2a:f7:d1:4d:3c:a4:87:8f:eb:b3:13: 76:22:f5:b3:3c:7c:55:cd:f9:e3:2f:69:78:97:82: 52:9a:7f:16:22:fa:06:17:d1:ed:92:8b:f3:57:21: 34:8d:8f:fe:ee:91:01:3c:ef:78:9b:d7:e1:90:02: 86:f6:c2:ac:6c:b4:ba:e1:4d:78:c2:35:74:e0:32: 85:48:e6:55:4d:6d:ee:d5:35:17:c6:94:b6:a9:23: ae:da:b6:d5:b3:15:28:80:10:04:6b:63:d8:21:bd: 23:20:7c:a6:01:e8:b5:7f:c8:13:97:97:3e:1d:97: 27:9a:d8:07:b2:82:00:fd:16:1c:23:bd:8b:26:3f: f3:33:da:5b:ab:94:7a:3b:cf:ec:bc:13:f8:06:d5: 3b:99:db:81:d8:cf:39:62:84:b6:88:a5:59:82:61: 03:00:3f:87:8b:80:8b:2c:06:3a:94:62:01:d3:7b: 77:6d:d7:8f:1b:a7:78:48:51:3d:3e:f9:fd:03:5b: 56:cf:0d:3b:de:ec:7b:2b:af:2f:92:4a:8e:8e:02: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AE:16:20:3D:F9:56:40:1F:80:CA:2F:8F:74:B6:25:6C:40:1F:A2 X509v3 Authority Key Identifier: keyid:6C:C9:C0:D7:3D:9C:3E:08:67:EA:D1:A6:3A:B0:D5:34:D3:80:27:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/6CC9C0D73D9C3E0867EAD1A63AB0D534D380274D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:2a:a0:25:e3:9d:81:f3:b5:f2:a4:33:5c:fd:78:f7:28:17: 8b:da:7b:de:e5:f8:65:51:0f:1b:22:40:28:89:19:e1:f2:55: e3:17:4b:af:a7:5f:b1:22:76:c5:a3:ca:e5:73:fe:92:77:82: 6d:33:01:b8:0b:cc:fe:3b:85:c5:48:89:91:28:a9:c8:cf:16: 24:5f:52:14:98:6e:48:4f:46:da:0b:09:62:b6:a4:3a:14:63: 61:40:55:f6:3d:44:81:d9:c0:5e:c5:63:6d:1f:b4:b7:9f:5b: d6:8e:b0:78:f7:58:7e:a9:40:0d:e9:d1:8c:73:da:06:30:2f: 3c:ac:73:4c:d0:ed:d1:44:6c:e5:4a:ce:53:db:dd:df:74:9d: 5e:c6:71:a9:05:a3:1b:5e:06:bb:b1:88:fd:07:3d:3f:27:6b: ae:e8:eb:10:4b:23:4d:96:46:87:99:78:26:69:c6:94:9b:0c: a3:bd:3f:37:1a:c9:d6:71:d8:e4:5f:f1:56:65:d9:9b:60:6a: 93:90:2c:80:b3:a6:80:7f:c6:7e:03:56:0f:c2:a1:33:c7:5b: f4:98:81:78:db:5f:fa:ff:d6:ee:9a:50:78:9d:fc:00:ad:f0: e2:19:3d:9c:37:26:45:1b:b6:cf:68:1b:4e:09:ad:b1:e4:53: 84:5c:a8:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLKUUYcaiDBvCqeI41Ss75X3paAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1MzRE MzgwMjc0RDAeFw0yNjA2MTYxOTQzMDlaFw0yNjA2MTcyMDQxMDlaMDMxMTAvBgNV BAMTKEJGQUUxNjIwM0RGOTU2NDAxRjgwQ0EyRjhGNzRCNjI1NkM0MDFGQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDSL1FSXwJHCQvpp+ITRI6iMp sIB9G1mon6CPnN1zQkDNRWDfRSOmPQChwo0K+50q99FNPKSHj+uzE3Yi9bM8fFXN +eMvaXiXglKafxYi+gYX0e2Si/NXITSNj/7ukQE873ib1+GQAob2wqxstLrhTXjC NXTgMoVI5lVNbe7VNRfGlLapI67attWzFSiAEARrY9ghvSMgfKYB6LV/yBOXlz4d lyea2AeyggD9FhwjvYsmP/Mz2lurlHo7z+y8E/gG1TuZ24HYzzlihLaIpVmCYQMA P4eLgIssBjqUYgHTe3dt148bp3hIUT0++f0DW1bPDTve7Hsrry+SSo6OAs+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv64WID35VkAfgMovj3S2JWxAH6IwHwYDVR0j BBgwFoAUbMnA1z2cPghn6tGmOrDVNNOAJ00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwOTYyZjctNjdlYS00NzBlLWE1MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDcz RDlDM0UwODY3RUFEMUE2M0FCMEQ1MzREMzgwMjc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Q0M5QzBENzNEOUMzRTA4NjdFQUQxQTYzQUIwRDUzNEQzODAy NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvNkNDOUMwRDczRDlDM0UwODY3RUFEMUE2M0FCMEQ1 MzREMzgwMjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOYqoCXjnYHztfKkM1z9ePcoF4vae97l+GVR DxsiQCiJGeHyVeMXS6+nX7EidsWjyuVz/pJ3gm0zAbgLzP47hcVIiZEoqcjPFiRf UhSYbkhPRtoLCWK2pDoUY2FAVfY9RIHZwF7FY20ftLefW9aOsHj3WH6pQA3p0Yxz 2gYwLzysc0zQ7dFEbOVKzlPb3d90nV7GcakFoxteBruxiP0HPT8na67o6xBLI02W RoeZeCZpxpSbDKO9PzcaydZx2ORf8VZl2ZtgapOQLICzpoB/xn4DVg/CoTPHW/SY gXjbX/r/1u6aUHid/ACt8OIZPZw3JkUbts9oG04JrbHkU4RcqPc= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:17 2026 by rpki-client