$ rpki-client -vvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: BpBbXIrJ6Wd6M8ugZN0ARzEMPwE/tP81LTRgpAzIhe4= Subject key identifier: 49:3D:83:F8:03:0C:1B:41:39:77:13:C0:1B:60:5F:5A:F4:FF:46:5F Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 21DF230CC35767E2F62182FEF781025A276EF2A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 13:05:34 +0000 Manifest this update: Sat 13 Jun 2026 13:00:34 +0000 Manifest next update: Sun 14 Jun 2026 13:47:34 +0000 Files and hashes: 1: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: d0LNupyziMUnCf4kY3NfZIYRWRmbP7DT6U2F3EDNZhk=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) 3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:df:23:0c:c3:57:67:e2:f6:21:82:fe:f7:81:02:5a:27:6e:f2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: Jun 13 13:00:34 2026 GMT Not After : Jun 14 13:47:34 2026 GMT Subject: CN=493D83F8030C1B41397713C01B605F5AF4FF465F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:c5:02:e4:db:b9:d5:33:dd:93:05:24:65: 37:cd:01:24:1e:b3:88:69:81:30:57:35:76:6a:b3: a9:e6:4a:1e:24:4d:27:8d:cb:f9:93:d1:4b:34:63: 91:fa:eb:cb:60:e8:76:f5:a9:60:97:f5:4a:6a:37: 9d:ce:eb:3c:2e:69:db:6f:41:90:0b:29:6b:7f:b0: 44:e3:6b:97:b8:c1:37:a5:81:a0:39:6b:83:e1:42: c0:bc:d1:27:7f:a1:ed:1a:db:2a:0e:89:94:58:ae: ca:71:80:b3:b8:d1:93:d2:92:ea:0b:95:44:b7:29: 5a:f5:8a:0b:6e:69:bb:6a:39:c6:15:08:89:e7:b2: ec:d7:db:e4:20:df:21:e3:b2:8f:fc:5b:e9:ba:e5: 2a:e4:9b:ed:62:90:0e:d6:ac:ac:04:14:b8:c3:42: 9b:78:31:ec:f4:43:38:a5:01:20:11:f3:87:3b:55: df:60:d4:c9:a2:3c:ed:33:34:fc:dc:88:51:24:7f: 7c:ff:38:1b:09:d3:69:97:86:d4:91:61:9a:e9:8b: 89:c2:7b:c8:ad:da:d9:e9:fe:bc:21:1b:67:d4:d5: 82:ae:2c:ef:4d:6d:d7:40:d4:46:35:cc:72:98:ad: c1:28:0a:ea:53:fc:eb:35:a9:fc:63:87:93:3e:46: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3D:83:F8:03:0C:1B:41:39:77:13:C0:1B:60:5F:5A:F4:FF:46:5F X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:48:d4:2d:31:c6:33:1c:70:a9:aa:f6:6b:ab:e9:2f:5e:27: 4f:f1:80:81:2e:51:c4:35:b8:85:38:98:6a:bb:19:e6:5f:3b: f1:0a:22:5d:42:e7:69:ff:99:bb:21:32:98:da:49:9c:72:9c: e2:6a:c4:a5:74:75:92:af:78:02:56:0a:e9:e2:0d:c1:10:1c: b0:a4:f4:cd:af:1c:1a:b7:12:f5:83:30:dc:b1:44:21:ed:9a: ea:a3:a2:83:b8:92:40:f8:d7:a5:8c:6f:3e:3e:d5:06:e7:62: 97:ec:c1:48:ec:4d:3e:85:28:14:d4:fb:db:cb:5c:37:17:ff: 5a:4c:4f:bf:7d:92:f6:5e:bb:64:7f:ff:ce:63:49:00:a6:e0: 21:18:35:a2:3f:06:f4:d8:eb:e8:69:aa:e3:ee:df:5a:22:a0: 23:30:c3:60:15:fd:2b:5b:30:50:78:ad:9f:52:7f:78:da:5d: 3e:3b:63:37:8e:ac:54:2f:e3:e0:ea:17:bf:fc:cf:52:34:0c: db:2f:2b:26:14:bb:6a:9b:e7:cf:97:6e:b6:6d:dd:dd:57:92: 32:b2:17:38:b7:ca:1f:94:b0:0c:b6:6c:b2:a7:45:ba:fb:b3: 64:c4:e6:13:79:5f:99:7d:b9:56:57:c5:b8:b9:aa:88:b1:64: c2:f5:18:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId8jDMNXZ+L2IYL+94ECWidu8qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA2MTMxMzAwMzRaFw0yNjA2MTQxMzQ3MzRaMDMxMTAvBgNV BAMTKDQ5M0Q4M0Y4MDMwQzFCNDEzOTc3MTNDMDFCNjA1RjVBRjRGRjQ2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZMUC5Nu51TPdkwUkZTfNASQe s4hpgTBXNXZqs6nmSh4kTSeNy/mT0Us0Y5H668tg6Hb1qWCX9UpqN53O6zwuadtv QZALKWt/sETja5e4wTelgaA5a4PhQsC80Sd/oe0a2yoOiZRYrspxgLO40ZPSkuoL lUS3KVr1igtuabtqOcYVCInnsuzX2+Qg3yHjso/8W+m65Srkm+1ikA7WrKwEFLjD Qpt4Mez0QzilASAR84c7Vd9g1MmiPO0zNPzciFEkf3z/OBsJ02mXhtSRYZrpi4nC e8it2tnp/rwhG2fU1YKuLO9NbddA1EY1zHKYrcEoCupT/Os1qfxjh5M+RrlnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUST2D+AMMG0E5dxPAG2BfWvT/Rl8wHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJI1C0xxjMccKmq9mur6S9eJ0/xgIEuUcQ1 uIU4mGq7GeZfO/EKIl1C52n/mbshMpjaSZxynOJqxKV0dZKveAJWCuniDcEQHLCk 9M2vHBq3EvWDMNyxRCHtmuqjooO4kkD416WMbz4+1QbnYpfswUjsTT6FKBTU+9vL XDcX/1pMT799kvZeu2R//85jSQCm4CEYNaI/BvTY6+hpquPu31oioCMww2AV/Stb MFB4rZ9Sf3jaXT47YzeOrFQv4+DqF7/8z1I0DNsvKyYUu2qb58+XbrZt3d1XkjKy Fzi3yh+UsAy2bLKnRbr7s2TE5hN5X5l9uVZXxbi5qoixZML1GGI= -----END CERTIFICATE-----Generated at Sat Jun 13 16:10:49 2026 by rpki-client