$ rpki-client -vvf rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft File: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft (raw, json) Hash identifier: BTJ7/cpTRKskkMTMumYDsYHu4nZgq8WF5wmetYEoDfA= Subject key identifier: 58:1C:EE:DC:20:0E:AA:2A:BE:C9:9E:64:B2:60:3B:8E:C7:8B:00:1B Authority key identifier: 00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 Certificate issuer: /CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Certificate serial: 38A226588474E2DC195BA73A9BB6E447CF90FA64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 19:32:55 +0000 Manifest this update: Sat 13 Jun 2026 19:27:55 +0000 Manifest next update: Sun 14 Jun 2026 20:55:55 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: Q/80xzITob9EDyGUauN9lSkFfskt31UxgEkyUCmZLOE=) 2: 006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl (hash: ODyIDEvm8Gae72C1l65C5BapASIqQcaoMmeyB5GpbUc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a2:26:58:84:74:e2:dc:19:5b:a7:3a:9b:b6:e4:47:cf:90:fa:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8 Validity Not Before: Jun 13 19:27:55 2026 GMT Not After : Jun 14 20:55:55 2026 GMT Subject: CN=581CEEDC200EAA2ABEC99E64B2603B8EC78B001B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:67:77:60:c2:2f:9e:5e:5c:21:36:2e:5f: 84:b2:38:f0:ad:16:75:54:7d:44:8c:bd:0a:6a:28: ff:5e:40:93:d8:60:f6:84:16:75:8a:42:ae:03:a3: 22:f4:f7:43:76:bd:53:bf:bf:36:36:f9:0a:3f:d5: 96:6e:82:60:f7:69:6f:91:0b:81:d3:db:ee:74:14: 90:6d:34:c5:69:3b:d9:23:2d:f7:44:05:ae:f3:ef: 43:4a:f7:a7:0c:f4:b0:d6:d1:fa:66:c6:7a:9f:83: e8:f4:39:7e:76:81:f5:10:18:58:5c:0d:5f:c0:46: a7:07:be:34:82:c8:6c:77:95:d9:f5:29:47:39:29: 7c:65:2a:0b:ca:ca:11:c8:2d:f8:b5:77:d7:69:27: 5a:63:0b:57:0b:fb:e3:74:e1:1a:4e:43:c8:e0:b4: e0:b0:5d:42:30:84:7c:93:3f:ca:dc:d6:7b:ab:14: a1:c7:e6:e1:81:63:a9:c4:50:33:84:63:3a:92:a1: 69:d7:7e:e2:34:fe:81:d6:b0:33:02:f1:19:0c:30: 2b:3b:51:25:73:74:a6:07:75:f2:86:37:0d:52:b6: ba:9c:72:d9:fa:02:51:f6:39:1a:96:16:78:74:5c: c1:31:ce:e3:9c:4d:31:58:5c:5e:48:38:20:f8:66: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1C:EE:DC:20:0E:AA:2A:BE:C9:9E:64:B2:60:3B:8E:C7:8B:00:1B X509v3 Authority Key Identifier: keyid:00:6B:8E:85:B6:FC:EB:99:4A:D0:0B:A6:E6:4E:AF:20:A2:F4:D9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/006B8E85B6FCEB994AD00BA6E64EAF20A2F4D9E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:dc:b5:b1:71:c6:c4:be:16:e6:54:57:bb:d5:36:1c:f9:14: 2a:86:1f:01:71:9f:ce:7b:c0:d0:01:78:63:59:df:3f:62:09: e3:cc:f4:c3:b7:43:89:6e:61:0f:6a:d4:4f:0a:89:b3:be:15: 7c:16:3e:81:65:96:5b:d6:6e:cb:ab:62:41:68:2b:46:01:0e: c7:50:fe:c5:7c:9d:7f:36:49:72:e9:7e:3c:e0:b2:4c:98:34: 09:d6:36:8f:bf:ed:d0:e9:41:fe:7d:0a:9f:dd:2c:d1:1d:02: e9:aa:50:3b:f1:58:89:c6:89:ac:bd:6e:7e:15:9e:7e:7a:bd: 73:a8:28:0b:f4:36:ce:b6:c6:30:a0:32:bb:84:0c:45:1c:a2: 1a:9e:96:13:49:b6:eb:34:6b:65:e1:11:c3:a6:46:af:4b:0b: 4b:cf:7a:84:b8:f1:cd:73:93:83:ff:44:55:17:38:8d:da:57: 23:a8:13:a8:ad:e6:06:95:2a:3a:33:04:24:29:86:ce:dc:0c: d7:8e:53:c3:46:e8:c2:e6:46:5b:0c:dc:08:70:85:4b:c2:e4: db:68:6c:9e:95:6a:2d:ae:7f:81:d8:f7:15:45:9a:b1:8b:f8: 31:9c:7f:b1:0c:d7:67:d4:e3:48:eb:cd:eb:8e:aa:e9:6d:7c: 87:d7:4a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKImWIR04twZW6c6m7bkR8+Q+mQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBB MkY0RDlFODAeFw0yNjA2MTMxOTI3NTVaFw0yNjA2MTQyMDU1NTVaMDMxMTAvBgNV BAMTKDU4MUNFRURDMjAwRUFBMkFCRUM5OUU2NEIyNjAzQjhFQzc4QjAwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhmd3YMIvnl5cITYuX4SyOPCt FnVUfUSMvQpqKP9eQJPYYPaEFnWKQq4DoyL090N2vVO/vzY2+Qo/1ZZugmD3aW+R C4HT2+50FJBtNMVpO9kjLfdEBa7z70NK96cM9LDW0fpmxnqfg+j0OX52gfUQGFhc DV/ARqcHvjSCyGx3ldn1KUc5KXxlKgvKyhHILfi1d9dpJ1pjC1cL++N04RpOQ8jg tOCwXUIwhHyTP8rc1nurFKHH5uGBY6nEUDOEYzqSoWnXfuI0/oHWsDMC8RkMMCs7 USVzdKYHdfKGNw1Strqcctn6AlH2ORqWFnh0XMExzuOcTTFYXF5IOCD4ZptjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBzu3CAOqiq+yZ5ksmA7jseLABswHwYDVR0j BBgwFoAUAGuOhbb865lK0Aum5k6vIKL02egwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM3NTA2YzUtNWVmMS00Mjk0LTg5MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVC NkZDRUI5OTRBRDAwQkE2RTY0RUFGMjBBMkY0RDlFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDZCOEU4NUI2RkNFQjk5NEFEMDBCQTZFNjRFQUYyMEEyRjRE OUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMDA2QjhFODVCNkZDRUI5OTRBRDAwQkE2RTY0RUFG MjBBMkY0RDlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErctbFxxsS+FuZUV7vVNhz5FCqGHwFxn857 wNABeGNZ3z9iCePM9MO3Q4luYQ9q1E8KibO+FXwWPoFlllvWbsurYkFoK0YBDsdQ /sV8nX82SXLpfjzgskyYNAnWNo+/7dDpQf59Cp/dLNEdAumqUDvxWInGiay9bn4V nn56vXOoKAv0Ns62xjCgMruEDEUcohqelhNJtus0a2XhEcOmRq9LC0vPeoS48c1z k4P/RFUXOI3aVyOoE6it5gaVKjozBCQphs7cDNeOU8NG6MLmRlsM3AhwhUvC5Nto bJ6Vai2uf4HY9xVFmrGL+DGcf7EM12fU40jrzeuOqultfIfXSiY= -----END CERTIFICATE-----Generated at Sun Jun 14 02:58:36 2026 by rpki-client