$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json) Hash identifier: lOnL1s6jKYmYexHfM5ukYkMjHfyIs0AMwcPxu9aPJLY= Subject key identifier: 35:DC:3F:2A:14:DE:DD:93:86:94:E5:14:DE:E8:4A:52:69:7F:70:91 Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Certificate serial: 71E3AC0E37F3B2788456078B57C048DE98C9A7A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:58:22 +0000 Manifest this update: Tue 16 Jun 2026 19:53:22 +0000 Manifest next update: Wed 17 Jun 2026 22:26:22 +0000 Files and hashes: 1: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=) 2: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=) 3: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=) 4: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: 5D/EJs9a+ABvxctIwLNCL6JfRWsDLU71c5z1WVrR+y0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e3:ac:0e:37:f3:b2:78:84:56:07:8b:57:c0:48:de:98:c9:a7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A Validity Not Before: Jun 16 19:53:22 2026 GMT Not After : Jun 17 22:26:22 2026 GMT Subject: CN=35DC3F2A14DEDD938694E514DEE84A52697F7091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:ff:eb:93:23:91:f5:6a:fa:45:b3:14:cd: f2:b0:a1:7d:fc:a6:23:de:e7:ad:e5:9c:0b:fa:87: 89:7d:26:f4:96:49:fc:b2:61:3d:65:2b:74:69:cc: 43:85:08:32:c9:bd:2e:87:bf:13:78:19:c3:bb:1d: 1e:ed:b7:0c:dd:e0:65:c0:65:1b:18:d7:fd:d7:a1: fb:c1:d9:e2:25:c2:32:e7:67:53:c4:4d:02:ca:5e: d0:94:84:8b:97:84:4b:1e:e3:0a:ab:9b:13:d2:86: 76:6a:f9:7e:00:4f:58:4f:73:93:1d:23:45:ae:15: 00:2c:85:7c:84:90:d0:4e:47:87:cb:49:37:d3:9c: 44:d8:f1:f9:63:0f:07:f5:0d:30:d6:00:5d:20:0d: 48:b2:c6:1c:2b:ee:a6:be:99:cf:86:57:c6:59:9b: de:06:1a:91:88:35:b8:4a:9c:45:d0:02:75:42:81: 1a:4d:9b:59:1a:94:c1:50:7d:d3:d0:a6:5d:0e:10: 94:62:29:67:c0:9c:82:1f:86:32:53:18:1a:37:8c: d9:9f:2a:19:55:b9:d9:f3:4d:00:ff:d5:6e:76:b4: 89:42:4e:44:db:95:c3:c6:3b:38:8c:12:9c:59:81: 7a:4d:87:6d:6c:a3:c4:18:69:ec:ec:00:2a:95:a7: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DC:3F:2A:14:DE:DD:93:86:94:E5:14:DE:E8:4A:52:69:7F:70:91 X509v3 Authority Key Identifier: keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:21:91:1f:12:44:08:f3:16:9e:59:44:83:44:2e:74:4a:d9: 16:67:36:89:34:4f:35:c8:93:9c:5b:f4:ea:43:f5:62:aa:75: 60:31:48:d8:69:7b:1d:ae:b6:56:a3:c3:6a:49:4b:5a:91:bb: ff:2d:3c:16:00:26:74:d4:9b:10:9a:f8:fd:64:a3:93:1a:56: 78:a4:9b:5c:8f:3d:8e:ca:17:4b:26:26:81:8e:a2:4a:5b:93: d7:93:5a:0f:8c:4c:61:b5:a2:92:06:75:76:0a:3a:02:3c:28: 43:45:2c:e4:12:eb:d3:08:ad:86:8b:2a:bc:aa:ba:bf:37:3c: 8b:55:a4:4c:4b:60:83:cd:22:e6:db:20:cd:a6:f3:eb:a6:bc: b4:6e:fc:f1:46:a2:83:a6:c5:3f:6c:f3:fb:18:b3:9d:04:75: 4c:98:6a:af:1c:2a:6d:87:2b:c7:37:ce:d5:f7:fb:54:e9:23: b3:58:43:5c:b4:c5:e3:d6:de:d1:0b:64:b2:4f:dc:db:29:a1: e2:9b:32:12:18:7d:87:aa:c3:64:fe:1b:16:6a:7e:12:3e:d3: 40:af:95:df:16:5d:d7:29:90:db:b8:72:81:78:ef:e9:11:b3: 2f:5d:6c:44:cf:66:ab:e7:2a:51:35:03:d5:a8:2c:86:53:96: d9:fc:29:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUceOsDjfzsniEVgeLV8BI3pjJp6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5NTFG OTk1MDc5QTAeFw0yNjA2MTYxOTUzMjJaFw0yNjA2MTcyMjI2MjJaMDMxMTAvBgNV BAMTKDM1REMzRjJBMTRERUREOTM4Njk0RTUxNERFRTg0QTUyNjk3RjcwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNf/rkyOR9Wr6RbMUzfKwoX38 piPe563lnAv6h4l9JvSWSfyyYT1lK3RpzEOFCDLJvS6HvxN4GcO7HR7ttwzd4GXA ZRsY1/3XofvB2eIlwjLnZ1PETQLKXtCUhIuXhEse4wqrmxPShnZq+X4AT1hPc5Md I0WuFQAshXyEkNBOR4fLSTfTnETY8fljDwf1DTDWAF0gDUiyxhwr7qa+mc+GV8ZZ m94GGpGINbhKnEXQAnVCgRpNm1kalMFQfdPQpl0OEJRiKWfAnIIfhjJTGBo3jNmf KhlVudnzTQD/1W52tIlCTkTblcPGOziMEpxZgXpNh21so8QYaezsACqVpzHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdw/KhTe3ZOGlOUU3uhKUml/cJEwHwYDVR0j BBgwFoAUbCHzcfzt0t4prpFLNT9pUfmVB5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVlYzZjZjgtOTY1NS00Mzc5LWJmMzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFG Q0VERDJERTI5QUU5MTRCMzUzRjY5NTFGOTk1MDc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzIxRjM3MUZDRUREMkRFMjlBRTkxNEIzNTNGNjk1MUY5OTUw NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvNkMyMUYzNzFGQ0VERDJERTI5QUU5MTRCMzUzRjY5 NTFGOTk1MDc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUhkR8SRAjzFp5ZRINELnRK2RZnNok0TzXI k5xb9OpD9WKqdWAxSNhpex2utlajw2pJS1qRu/8tPBYAJnTUmxCa+P1ko5MaVnik m1yPPY7KF0smJoGOokpbk9eTWg+MTGG1opIGdXYKOgI8KENFLOQS69MIrYaLKryq ur83PItVpExLYIPNIubbIM2m8+umvLRu/PFGooOmxT9s8/sYs50EdUyYaq8cKm2H K8c3ztX3+1TpI7NYQ1y0xePW3tELZLJP3NspoeKbMhIYfYeqw2T+GxZqfhI+00Cv ld8WXdcpkNu4coF47+kRsy9dbETPZqvnKlE1A9WoLIZTltn8KfU= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:31 2026 by rpki-client