$ rpki-client -vvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json) Hash identifier: mbMdHeWRWmduHr8JByLdkJLxrz3EiJOhlAv19Fx01nw= Subject key identifier: 28:6B:DA:8F:6A:DD:A3:99:30:63:6A:19:65:C4:6E:60:2E:BB:81:EF Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Certificate serial: 0ECBC028EEA4A6C5B905C60DB39070FF2304B993 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:30:47 +0000 Manifest this update: Wed 17 Jun 2026 02:25:47 +0000 Manifest next update: Thu 18 Jun 2026 05:30:47 +0000 Files and hashes: 1: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: gM0hrqy5vhkWaJy3uf5agCLUhiuUduVqbRICVVyV+EI=) 2: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=) 3: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=) 4: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=) 5: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cb:c0:28:ee:a4:a6:c5:b9:05:c6:0d:b3:90:70:ff:23:04:b9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Validity Not Before: Jun 17 02:25:47 2026 GMT Not After : Jun 18 05:30:47 2026 GMT Subject: CN=286BDA8F6ADDA39930636A1965C46E602EBB81EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b8:8d:85:58:e4:7d:75:1d:48:d2:e7:34:63: af:ca:19:94:68:3b:0e:c1:43:99:a6:21:6b:a4:35: 3c:df:71:2c:07:a4:d6:98:87:6c:f9:ff:74:28:cc: a9:c3:c9:6a:c9:17:cf:17:4c:56:c4:68:de:11:da: 96:8e:54:8a:f7:5b:6d:2d:66:49:e2:3f:2b:44:07: 56:f3:a0:97:cd:ae:7f:d8:5a:8e:ea:50:0c:23:49: cb:7d:1a:a4:b2:6b:f0:c9:1b:75:d1:a0:71:46:c8: 92:77:77:56:23:54:06:d4:39:90:07:ff:f6:3f:bc: 31:ae:4a:88:5e:56:c1:4a:a5:84:8c:4a:5b:f5:80: 01:8e:bb:3f:e2:5f:a1:fe:b1:5d:e4:fa:9d:ba:92: 44:a1:9e:e2:da:08:70:d5:9e:1c:3a:73:ff:68:8d: c9:ff:26:0f:e3:a0:9d:5a:f2:25:4c:9c:70:8d:0d: 40:1e:9d:d8:05:aa:a4:da:f2:24:d1:e8:43:70:57: 43:a4:8b:3d:6d:df:b6:ab:36:59:a8:b3:05:94:32: 0e:a1:2f:54:13:c9:64:bf:ee:a1:a1:95:95:33:5b: 2a:9e:72:d4:eb:2c:b1:89:dc:f0:22:91:43:98:da: a4:4a:ea:4f:fb:1b:d6:b3:1d:3e:10:fc:cf:8e:64: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:DA:8F:6A:DD:A3:99:30:63:6A:19:65:C4:6E:60:2E:BB:81:EF X509v3 Authority Key Identifier: keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:38:9d:d7:94:4b:26:9a:9d:9b:74:d4:93:a7:eb:aa:c0:de: 4f:c3:d9:ef:83:65:f7:2e:c9:07:d5:d3:2f:c3:2c:f5:0e:c1: cf:83:20:f1:fd:a3:ee:1f:b6:a2:d0:44:8e:f4:15:eb:c4:db: 7e:a5:09:03:99:d7:55:bb:47:1d:57:bf:ac:26:15:6c:07:9f: f5:b1:92:60:36:1d:87:ab:cb:bd:c6:b4:17:db:e7:7c:ee:ae: 15:d9:9d:c4:57:4a:13:db:cf:70:2c:30:f9:fd:13:85:aa:26: b6:dd:b4:d9:de:77:1d:60:ce:03:4f:53:41:67:6b:54:36:61: 37:3d:b6:22:91:f1:36:f7:e0:c5:dd:40:e6:e8:4d:37:bc:19: 98:84:94:1c:a1:3c:fc:1a:21:d7:b7:26:35:7b:c7:73:d7:9f: eb:8a:0e:1a:b7:f6:5e:34:0d:50:49:7e:cf:d2:e6:bf:f9:c8: 08:b0:f8:44:42:14:5f:00:74:52:14:2d:97:f3:b5:c7:23:d0: e0:be:5b:93:8c:45:98:94:8e:09:8f:78:61:e8:f8:1f:b6:cb: 2d:96:e6:8b:b3:d9:60:71:9d:49:96:7f:3e:ba:50:cb:8a:53: cc:2b:65:f5:ac:ef:e8:a1:1b:e4:a0:d5:96:1f:c3:4d:ec:74: 1a:0a:72:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsvAKO6kpsW5BcYNs5Bw/yMEuZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4 MDc5RjQ2MjAeFw0yNjA2MTcwMjI1NDdaFw0yNjA2MTgwNTMwNDdaMDMxMTAvBgNV BAMTKDI4NkJEQThGNkFEREEzOTkzMDYzNkExOTY1QzQ2RTYwMkVCQjgxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUuI2FWOR9dR1I0uc0Y6/KGZRo Ow7BQ5mmIWukNTzfcSwHpNaYh2z5/3QozKnDyWrJF88XTFbEaN4R2paOVIr3W20t ZkniPytEB1bzoJfNrn/YWo7qUAwjSct9GqSya/DJG3XRoHFGyJJ3d1YjVAbUOZAH //Y/vDGuSoheVsFKpYSMSlv1gAGOuz/iX6H+sV3k+p26kkShnuLaCHDVnhw6c/9o jcn/Jg/joJ1a8iVMnHCNDUAendgFqqTa8iTR6ENwV0Okiz1t37arNlmoswWUMg6h L1QTyWS/7qGhlZUzWyqectTrLLGJ3PAikUOY2qRK6k/7G9azHT4Q/M+OZMTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGvaj2rdo5kwY2oZZcRuYC67ge8wHwYDVR0j BBgwFoAUpq/WWsZtTrcCeu1fiY6OzYB59GIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4ODY4MDUtM2I4NS00YzViLTliNmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFD NjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4MDc5RjQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNkFGRDY1QUM2NkQ0RUI3MDI3QUVENUY4OThFOEVDRDgwNzlG NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThF Q0Q4MDc5RjQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo4ndeUSyaanZt01JOn66rA3k/D2e+DZfcu yQfV0y/DLPUOwc+DIPH9o+4ftqLQRI70FevE236lCQOZ11W7Rx1Xv6wmFWwHn/Wx kmA2HYery73GtBfb53zurhXZncRXShPbz3AsMPn9E4WqJrbdtNnedx1gzgNPU0Fn a1Q2YTc9tiKR8Tb34MXdQOboTTe8GZiElByhPPwaIde3JjV7x3PXn+uKDhq39l40 DVBJfs/S5r/5yAiw+ERCFF8AdFIULZfztccj0OC+W5OMRZiUjgmPeGHo+B+2yy2W 5ouz2WBxnUmWfz66UMuKU8wrZfWs7+ihG+Sg1ZYfw03sdBoKckU= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:35 2026 by rpki-client