$ rpki-client -vvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft File: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft (raw, json) Hash identifier: 3+BD3y1alpQp4pP5OOpvO29p93cXFQu3BfyFf81Zf5s= Subject key identifier: C2:5D:F7:5F:FF:22:DE:FC:27:76:1E:01:83:E9:89:7A:5D:3F:2D:70 Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Certificate serial: 71ACC106BFF20ED2F868808A443A382952156CC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:11:04 +0000 Manifest this update: Tue 16 Jun 2026 22:06:04 +0000 Manifest next update: Wed 17 Jun 2026 23:09:04 +0000 Files and hashes: 1: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=) 2: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 1n9vrO/e00jv7CzxxHzwEFPz/e1n9uFRka2H9k4SRco=) 3: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: bx3Jz5RMo6M/oNMchr0+LwmSKVwAEYYJfafpXARS4Ho=) 4: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=) 5: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl (hash: Nq4oJIoOa4eBiq+vDEFrp13IdzV6NXWo/gUr13WgXgM=) 6: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ac:c1:06:bf:f2:0e:d2:f8:68:80:8a:44:3a:38:29:52:15:6c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Validity Not Before: Jun 16 22:06:04 2026 GMT Not After : Jun 17 23:09:04 2026 GMT Subject: CN=C25DF75FFF22DEFC27761E0183E9897A5D3F2D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:ee:cc:67:56:db:5d:06:67:c7:f6:76:74: f0:12:63:da:41:3c:e2:0f:f5:b2:42:a7:74:55:16: 7d:99:b1:f9:f9:d7:01:a1:f0:0f:72:0e:27:22:ab: bb:f4:a0:3b:f6:06:a3:12:a8:15:d9:c6:c4:1e:15: 87:a5:44:76:2d:89:6d:bc:0e:26:c0:82:70:6b:84: a2:36:de:8e:69:60:29:a3:11:81:1f:25:85:30:ec: d5:bf:79:58:73:37:39:aa:f0:e3:d2:31:55:b9:4d: 2e:7b:1f:26:dc:3d:58:47:31:ab:f2:4e:ad:d4:7b: dd:67:06:1e:2e:68:96:57:e2:f7:e1:b2:1c:a4:f4: 64:5a:1c:4d:c3:47:b1:11:bb:67:72:06:49:16:34: 9e:7c:ea:cc:6f:5f:25:0d:2a:3d:23:4e:e4:3b:bf: c5:5f:f4:00:e9:ad:90:14:d6:eb:97:d4:48:25:c2: 99:88:60:19:2a:79:e3:34:92:b9:7d:a3:e0:27:57: a6:66:16:d5:82:0d:5a:8d:57:60:3b:ed:59:67:f7: 48:77:b5:e7:e7:f6:51:5c:59:93:13:99:06:8c:99: 4a:90:3f:cc:d7:c3:94:01:d5:56:65:82:fe:fd:a0: 4e:85:42:3a:db:ea:9b:1e:79:19:71:48:fc:61:be: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5D:F7:5F:FF:22:DE:FC:27:76:1E:01:83:E9:89:7A:5D:3F:2D:70 X509v3 Authority Key Identifier: keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6a:2f:d1:c6:8a:f1:25:82:0c:a3:ef:aa:fe:69:4d:5f:03: 70:01:74:dd:5d:01:b5:4c:ab:97:8a:5b:a5:e5:67:72:4c:91: 0b:fc:61:1e:dd:3e:b3:e4:58:ad:15:36:a6:fb:25:45:54:80: e9:a1:9d:15:90:8a:4f:10:5b:4a:96:4e:61:7c:f0:18:5a:02: 77:ef:93:9b:92:30:29:35:28:c2:e7:25:01:e8:93:2c:d4:7d: 7f:c7:3b:ef:28:40:a0:20:f3:ca:05:ee:23:a6:8b:c2:44:b8: aa:15:b8:35:fc:df:59:b6:f5:d1:c6:72:1c:d1:57:13:70:56: 6f:63:2e:89:95:6c:b1:bc:28:cf:2d:56:60:10:1c:5b:40:7f: 1b:40:0d:8d:50:18:29:63:bc:dc:48:5d:90:33:de:41:37:8d: 21:79:46:52:ee:16:12:84:c9:4f:d6:50:9d:62:a2:73:3d:df: 88:8c:ae:a6:2b:ee:53:18:c0:1b:81:86:34:92:cf:11:b5:8d: 68:25:9f:d1:2a:57:d2:0f:1c:19:66:a0:3a:82:df:f2:e6:84: 3e:54:1a:4c:ad:99:5b:2f:31:84:d8:d8:b2:4e:0c:a9:06:c0: c0:f6:68:b4:56:9e:4a:4d:b5:15:30:c8:67:6d:6a:eb:a6:87: b5:f6:c4:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcazBBr/yDtL4aICKRDo4KVIVbMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND OTFGRURCRjAeFw0yNjA2MTYyMjA2MDRaFw0yNjA2MTcyMzA5MDRaMDMxMTAvBgNV BAMTKEMyNURGNzVGRkYyMkRFRkMyNzc2MUUwMTgzRTk4OTdBNUQzRjJENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdVu7MZ1bbXQZnx/Z2dPASY9pB POIP9bJCp3RVFn2Zsfn51wGh8A9yDiciq7v0oDv2BqMSqBXZxsQeFYelRHYtiW28 DibAgnBrhKI23o5pYCmjEYEfJYUw7NW/eVhzNzmq8OPSMVW5TS57HybcPVhHMavy Tq3Ue91nBh4uaJZX4vfhshyk9GRaHE3DR7ERu2dyBkkWNJ586sxvXyUNKj0jTuQ7 v8Vf9ADprZAU1uuX1EglwpmIYBkqeeM0krl9o+AnV6ZmFtWCDVqNV2A77Vln90h3 tefn9lFcWZMTmQaMmUqQP8zXw5QB1VZlgv79oE6FQjrb6pseeRlxSPxhvknTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwl33X/8i3vwndh4Bg+mJel0/LXAwHwYDVR0j BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0 RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThF NkNDOTFGRURCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9qL9HGivElggyj76r+aU1fA3ABdN1dAbVM q5eKW6XlZ3JMkQv8YR7dPrPkWK0VNqb7JUVUgOmhnRWQik8QW0qWTmF88BhaAnfv k5uSMCk1KMLnJQHokyzUfX/HO+8oQKAg88oF7iOmi8JEuKoVuDX831m29dHGchzR VxNwVm9jLomVbLG8KM8tVmAQHFtAfxtADY1QGCljvNxIXZAz3kE3jSF5RlLuFhKE yU/WUJ1ionM934iMrqYr7lMYwBuBhjSSzxG1jWgln9EqV9IPHBlmoDqC3/LmhD5U GkytmVsvMYTY2LJODKkGwMD2aLRWnkpNtRUwyGdtauumh7X2xGU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:06 2026 by rpki-client