$ rpki-client -vvf rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft File: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft (raw, json) Hash identifier: F9I+dB8J1GaTOO0W75+5Dpw7wNV8JWhksaRp9EoUBeM= Subject key identifier: 3B:4F:DF:43:3B:3C:4C:47:E1:DA:C7:03:A1:F9:86:2F:25:0C:CD:A0 Authority key identifier: 0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6 Certificate issuer: /CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6 Certificate serial: 5B366133B4215EB67CF7CC4C7E9B30BE27D915F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:23:49 +0000 Manifest this update: Tue 16 Jun 2026 20:18:49 +0000 Manifest next update: Wed 17 Jun 2026 21:25:49 +0000 Files and hashes: 1: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: RduQCu6LK4ze8a1KtgwVd9edcTww6Gh3TJk7wQrWXc0=) 2: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl (hash: /g5pWsXipcqRXVdLRxSFOpErPtrQEtcKnmFCW1ioxJ4=) 3: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: bOv9UB+jH3yIgez1h0+9f0ARyXLXbtpazjPu+Jy6jyY=) 4: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: uH7wCiM64P68t/GjuIUuXpirB813LNqvCv6j5LUhOUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:36:61:33:b4:21:5e:b6:7c:f7:cc:4c:7e:9b:30:be:27:d9:15:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6 Validity Not Before: Jun 16 20:18:49 2026 GMT Not After : Jun 17 21:25:49 2026 GMT Subject: CN=3B4FDF433B3C4C47E1DAC703A1F9862F250CCDA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4e:8b:60:68:bc:c5:7f:e2:47:27:bc:79:3b: 77:8f:c9:3a:fa:bc:70:95:b8:9b:56:63:0a:63:09: 3c:92:c2:6f:b8:37:fa:09:a6:31:9b:98:a7:cc:05: af:9a:67:c7:f7:ba:66:b5:94:09:73:d0:a7:34:9e: f7:b5:11:1c:8e:47:96:e1:9e:f2:b7:42:3f:2d:ad: b6:ed:0e:22:d9:f7:cb:a4:c6:68:05:0a:46:ab:b4: b0:4a:c5:b1:b9:ac:78:8a:7a:95:d6:87:27:82:aa: 35:81:eb:e4:79:b2:73:66:61:2c:69:a2:e4:5f:be: 9e:c3:22:6f:95:54:88:85:9e:18:5d:49:0f:a8:9e: 7f:3e:64:1e:53:a1:96:f2:41:f2:d4:e6:75:66:a2: be:bf:df:0d:fd:a9:a2:89:fd:3a:36:96:a9:0a:f0: 8b:85:e2:b6:36:25:b7:75:24:7a:69:f9:88:99:3b: 86:f7:49:c9:c9:4e:0b:c2:80:39:b6:40:65:f8:a4: 5d:fc:0a:ae:f6:f9:f2:83:0d:4d:65:f0:1f:76:11: 7d:a2:38:69:6f:16:1c:16:1e:ef:f2:a5:85:68:c1: 0b:88:15:57:59:c5:c2:ab:47:37:fb:8f:ce:66:c2: b4:b1:5a:ce:f9:e7:8e:05:30:25:4b:30:7c:b1:44: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4F:DF:43:3B:3C:4C:47:E1:DA:C7:03:A1:F9:86:2F:25:0C:CD:A0 X509v3 Authority Key Identifier: keyid:0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:70:af:18:9b:d1:ee:db:c3:6e:1b:60:d2:bd:82:ce:e1:5c: ea:4a:14:ed:3b:74:d3:05:eb:4f:74:85:03:ae:f9:6a:22:f3: 72:ff:c0:7f:d9:c4:82:49:25:66:50:44:4c:f9:92:0b:e0:67: 24:30:5e:97:a2:c1:ca:81:cd:f2:aa:d0:84:cb:49:4c:37:7a: 22:8a:4c:d2:92:b9:bc:43:0a:47:b2:df:ff:80:fc:3d:65:89: 06:8d:b4:e0:9d:09:18:a7:82:25:ff:3c:e8:d9:e0:bb:5e:e6: a4:ed:d6:ae:62:dc:c3:29:bc:ef:12:ce:93:39:93:46:c3:1d: 89:7a:3e:ef:0a:5d:03:31:4e:7a:0a:e4:bb:8d:46:94:32:9b: 6a:be:57:cb:64:36:f4:e8:43:92:7d:5d:a7:6d:61:38:b2:bf: a1:7c:56:97:88:2c:15:a0:f3:f4:64:44:51:26:2f:8b:a8:ea: 5a:5d:9d:7f:6f:26:11:d0:03:d2:53:99:a0:05:ae:b0:70:f8: 33:a2:64:91:27:ab:ff:a4:e6:f2:20:4f:9c:1a:df:bc:02:d2: d1:41:10:86:61:7a:76:14:d3:4d:d2:dc:95:11:e8:b1:fc:2b: d1:37:97:e9:44:13:0b:fe:52:c9:61:ae:89:3b:40:0c:2a:e7: a8:60:cf:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzZhM7QhXrZ898xMfpswvifZFfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI2REZDODFGNkE1QTRDNTFDOTMzNjA1MENGOUM2N0VC RTI4RjJGNjAeFw0yNjA2MTYyMDE4NDlaFw0yNjA2MTcyMTI1NDlaMDMxMTAvBgNV BAMTKDNCNEZERjQzM0IzQzRDNDdFMURBQzcwM0ExRjk4NjJGMjUwQ0NEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTotgaLzFf+JHJ7x5O3ePyTr6 vHCVuJtWYwpjCTySwm+4N/oJpjGbmKfMBa+aZ8f3uma1lAlz0Kc0nve1ERyOR5bh nvK3Qj8trbbtDiLZ98ukxmgFCkartLBKxbG5rHiKepXWhyeCqjWB6+R5snNmYSxp ouRfvp7DIm+VVIiFnhhdSQ+onn8+ZB5ToZbyQfLU5nVmor6/3w39qaKJ/To2lqkK 8IuF4rY2Jbd1JHpp+YiZO4b3ScnJTgvCgDm2QGX4pF38Cq72+fKDDU1l8B92EX2i OGlvFhwWHu/ypYVowQuIFVdZxcKrRzf7j85mwrSxWs75544FMCVLMHyxRKu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO0/fQzs8TEfh2scDofmGLyUMzaAwHwYDVR0j BBgwFoAUC238gfalpMUckzYFDPnGfr4o8vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxMWFhNDYtZjI4ZS00YzU1LWI5YmEtN2Q1YmRjOTViNGY2LzAvMEI2REZDODFG NkE1QTRDNTFDOTMzNjA1MENGOUM2N0VCRTI4RjJGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjZERkM4MUY2QTVBNEM1MUM5MzM2MDUwQ0Y5QzY3RUJFMjhG MkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvMEI2REZDODFGNkE1QTRDNTFDOTMzNjA1MENGOUM2 N0VCRTI4RjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJwrxib0e7bw24bYNK9gs7hXOpKFO07dNMF 6090hQOu+Woi83L/wH/ZxIJJJWZQREz5kgvgZyQwXpeiwcqBzfKq0ITLSUw3eiKK TNKSubxDCkey3/+A/D1liQaNtOCdCRingiX/POjZ4Lte5qTt1q5i3MMpvO8SzpM5 k0bDHYl6Pu8KXQMxTnoK5LuNRpQym2q+V8tkNvToQ5J9XadtYTiyv6F8VpeILBWg 8/RkRFEmL4uo6lpdnX9vJhHQA9JTmaAFrrBw+DOiZJEnq/+k5vIgT5wa37wC0tFB EIZhenYU003S3JUR6LH8K9E3l+lEEwv+Uslhrok7QAwq56hgz2s= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:08 2026 by rpki-client