$ rpki-client -vvf rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft File: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft (raw, json) Hash identifier: pkR+hxU+CN/FGFc09nHQmkYz99xua6bTQMNPHBFELO4= Subject key identifier: E1:1B:8A:05:B1:97:E7:68:4F:F9:82:04:DD:E2:13:47:A5:59:34:D2 Authority key identifier: 6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF Certificate issuer: /CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Certificate serial: 25C2A6DED46A39AC612B16FEB12BB291187FA24E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:05:17 +0000 Manifest this update: Wed 17 Jun 2026 06:00:17 +0000 Manifest next update: Thu 18 Jun 2026 08:27:17 +0000 Files and hashes: 1: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: 8mfpAqlBNjaIkK/YqdqwM4IvfsvZ409bkNBx3HDJzaQ=) 2: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl (hash: j2T7fF12VRvfrjC69eeir2uKvGpJXKu3uGMywxPuj78=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: yRu2jjYmsdVB4YWUV1S9avXrEbZsjqsyyjcuTEPOAYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c2:a6:de:d4:6a:39:ac:61:2b:16:fe:b1:2b:b2:91:18:7f:a2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Validity Not Before: Jun 17 06:00:17 2026 GMT Not After : Jun 18 08:27:17 2026 GMT Subject: CN=E11B8A05B197E7684FF98204DDE21347A55934D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:42:47:3b:63:f9:23:00:0f:8a:04:72:b4: 34:0c:3e:4b:fe:f8:64:93:3f:0c:61:f0:cd:7f:ea: d2:f9:5a:33:ff:d7:2e:11:1c:c2:c5:5a:2d:e8:eb: 63:bb:5c:59:26:e4:87:fe:62:cb:e1:41:cb:34:30: 3d:3b:f1:92:e2:3d:d1:a5:05:2c:86:d5:7d:b3:64: d9:51:c0:b3:d4:5e:86:ea:51:1a:1b:22:e1:22:93: 4c:7c:13:e7:86:9d:5e:02:bf:13:42:87:a1:86:be: f4:71:1a:fc:4e:b1:87:80:2a:2e:59:a9:28:57:34: fc:1d:1e:3d:0e:8d:38:e8:45:ac:bf:ae:05:28:38: 00:af:d1:27:64:af:10:70:67:be:55:0a:8e:a6:3f: d0:64:9c:a7:11:c2:f6:e6:ef:dd:32:93:c6:e6:a4: 24:ba:39:3f:f5:c9:cf:e7:94:56:62:f9:42:99:3e: c6:e9:f9:c9:ef:6c:97:3b:2c:4d:ee:67:0a:cf:2a: ad:cb:66:57:ed:a9:a7:cd:97:bd:ac:a5:a2:45:41: ad:e7:5d:dd:ed:ae:32:66:fd:2c:ff:4b:be:53:fd: f3:cf:73:ef:34:ff:17:69:95:62:a8:f1:44:9a:d3: 38:fd:e3:79:85:c1:86:67:0c:16:da:d2:e1:75:03: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:8A:05:B1:97:E7:68:4F:F9:82:04:DD:E2:13:47:A5:59:34:D2 X509v3 Authority Key Identifier: keyid:6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3b:c3:bf:3d:7c:df:79:2e:27:23:0e:f0:49:cc:37:da:5e: 7d:1d:e6:bf:71:74:ad:29:11:c5:9a:0b:ef:a3:2c:95:0d:f5: 4c:fd:73:9d:fa:36:10:f7:77:7d:56:af:d4:8c:32:75:1f:4f: 0e:8a:b6:21:a5:24:a0:dc:a9:fd:d5:11:ca:a4:43:29:e1:5a: 22:b8:b2:e2:7b:bc:8f:9c:80:dc:be:e5:3e:21:8a:32:89:04: c7:e7:9c:24:fc:6c:6a:24:23:60:d5:38:54:31:66:04:38:55: 7c:cb:b6:f7:45:f3:42:b1:28:9a:b0:15:15:33:b3:5d:7a:39: c8:0d:b2:1a:11:90:b6:f1:40:5e:a6:39:af:60:25:dc:e8:e1: 3c:8a:c1:6c:f0:72:2e:90:83:f3:0b:e8:60:b1:e9:40:7e:63: f3:17:6d:19:65:95:21:7e:88:42:aa:9d:4b:48:f2:73:8e:5b: b8:41:67:fb:16:b1:80:18:16:7b:a0:11:76:d5:8b:c8:46:51: 97:0b:2e:25:23:70:50:bb:ba:b3:e4:2c:55:d7:6a:05:80:55: cc:21:79:c5:d0:24:97:fb:46:10:e4:55:6b:67:19:ad:20:0a: c0:fb:24:8a:14:a1:a1:10:21:9b:0f:ca:32:c2:a3:0f:01:ba: dd:df:26:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcKm3tRqOaxhKxb+sSuykRh/ok4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdBQkVF ODNDMjdCRjAeFw0yNjA2MTcwNjAwMTdaFw0yNjA2MTgwODI3MTdaMDMxMTAvBgNV BAMTKEUxMUI4QTA1QjE5N0U3Njg0RkY5ODIwNERERTIxMzQ3QTU1OTM0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnEJHO2P5IwAPigRytDQMPkv+ +GSTPwxh8M1/6tL5WjP/1y4RHMLFWi3o62O7XFkm5If+YsvhQcs0MD078ZLiPdGl BSyG1X2zZNlRwLPUXobqURobIuEik0x8E+eGnV4CvxNCh6GGvvRxGvxOsYeAKi5Z qShXNPwdHj0OjTjoRay/rgUoOACv0SdkrxBwZ75VCo6mP9BknKcRwvbm790yk8bm pCS6OT/1yc/nlFZi+UKZPsbp+cnvbJc7LE3uZwrPKq3LZlftqafNl72spaJFQa3n Xd3trjJm/Sz/S75T/fPPc+80/xdplWKo8USa0zj943mFwYZnDBba0uF1A5yFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RuKBbGX52hP+YIE3eITR6VZNNIwHwYDVR0j BBgwFoAUbIn2+ealGHvhCFRTgH96vug8J78wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ZlMzVmYWEtZWQyYi00MjcxLWI0OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlF NkE1MTg3QkUxMDg1NDUzODA3RjdBQkVFODNDMjdCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Qzg5RjZGOUU2QTUxODdCRTEwODU0NTM4MDdGN0FCRUU4M0My N0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvNkM4OUY2RjlFNkE1MTg3QkUxMDg1NDUzODA3RjdB QkVFODNDMjdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc7w789fN95LicjDvBJzDfaXn0d5r9xdK0p EcWaC++jLJUN9Uz9c536NhD3d31Wr9SMMnUfTw6KtiGlJKDcqf3VEcqkQynhWiK4 suJ7vI+cgNy+5T4hijKJBMfnnCT8bGokI2DVOFQxZgQ4VXzLtvdF80KxKJqwFRUz s116OcgNshoRkLbxQF6mOa9gJdzo4TyKwWzwci6Qg/ML6GCx6UB+Y/MXbRlllSF+ iEKqnUtI8nOOW7hBZ/sWsYAYFnugEXbVi8hGUZcLLiUjcFC7urPkLFXXagWAVcwh ecXQJJf7RhDkVWtnGa0gCsD7JIoUoaEQIZsPyjLCow8But3fJuQ= -----END CERTIFICATE-----Generated at Wed Jun 17 13:15:11 2026 by rpki-client