$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: Sg1+sQ+WBriKUH0P7AynSm7axIgXYuZ0zjxrjDmnJR4= Subject key identifier: 06:AB:2F:93:F1:9C:93:BD:43:89:75:5C:3A:A9:FC:8B:A5:21:4A:F0 Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 435713E1A88E59D0B9682379667755C69C293459 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 09:20:08 +0000 Manifest this update: Sat 13 Jun 2026 09:15:08 +0000 Manifest next update: Sun 14 Jun 2026 10:52:08 +0000 Files and hashes: 1: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: gdMvDIZ2izhAhyydGvJieSZ8dEGrCV7/0hvgg8dkoBs=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 4: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 10:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:57:13:e1:a8:8e:59:d0:b9:68:23:79:66:77:55:c6:9c:29:34:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Jun 13 09:15:08 2026 GMT Not After : Jun 14 10:52:08 2026 GMT Subject: CN=06AB2F93F19C93BD4389755C3AA9FC8BA5214AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:e9:22:1b:d3:2a:a8:fe:48:84:5e:8f:d4: 1f:9d:5c:25:79:be:5c:88:56:5a:d1:1e:f2:d8:b7: 15:33:bd:eb:85:4e:eb:80:e6:a6:37:92:da:fd:54: e2:3e:9a:7a:cc:aa:a7:31:3f:5e:89:d4:14:8f:50: d8:7c:f3:87:af:67:bd:f2:23:6c:31:d0:93:24:83: ee:06:44:d0:73:23:9d:0c:39:46:3d:e4:36:70:dd: 10:cc:ee:0a:37:53:f1:88:37:4c:5b:90:95:b5:f8: 9c:b6:6f:b0:4d:ea:65:45:83:3f:8c:e6:a9:34:37: 09:8d:f5:55:c2:6d:5b:73:02:05:ea:e6:55:e9:fa: ee:3a:31:ac:75:fd:13:55:68:12:da:bb:65:8b:e9: 39:a4:17:76:dd:6d:45:d7:66:74:e4:37:c0:64:12: f1:7f:7e:85:c5:56:fc:7d:fb:17:09:50:34:eb:1c: 07:43:05:68:9c:43:09:e4:7b:f0:51:6e:e4:42:34: 62:07:11:63:ff:5d:8c:ab:5d:1c:00:c4:d7:6b:90: dd:5c:1c:8f:3c:29:9a:2c:2d:c7:8a:0c:3d:31:e0: 8d:52:fe:81:cd:79:6b:3a:86:c0:68:35:d2:8f:d9: 56:0e:96:b2:c7:ca:be:ac:80:5b:f5:00:65:94:eb: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AB:2F:93:F1:9C:93:BD:43:89:75:5C:3A:A9:FC:8B:A5:21:4A:F0 X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8d:20:b7:fb:4b:69:4f:57:a5:a4:03:c8:fa:d8:f1:50:ef: 26:a2:e0:26:3b:c6:b8:61:d3:d5:bc:52:38:1c:31:46:92:5d: 68:04:a7:54:e4:81:be:2f:b2:21:9c:8e:3d:57:31:cf:f5:12: 5e:a1:ac:5c:75:e1:1d:82:8c:6d:42:4a:4a:37:d1:1f:f3:94: 98:d3:47:ad:28:99:a1:e1:8f:5a:c7:04:7a:57:ce:5b:a2:f6: d4:1f:78:e5:14:93:ea:cd:63:68:e8:a6:2a:2f:74:4f:eb:ba: 88:ec:bd:84:74:ff:48:2f:c2:7d:e7:f7:fd:13:5d:ca:02:db: 9d:26:a8:91:e0:89:d2:7b:7a:2c:a1:7a:ee:d7:25:59:6c:49: 3c:19:be:45:8b:1f:8a:d6:ee:3a:c8:38:b3:19:76:72:bc:c4: c9:e4:00:b3:0f:a5:ff:f8:5a:21:a4:43:8d:ab:eb:5d:34:d2: 77:4a:db:c1:b8:f5:b8:0f:c3:da:60:f1:46:c8:65:cf:d3:3e: 23:b8:f8:4c:c3:cd:55:d9:7f:fd:e3:27:ef:e0:bd:9c:d5:dd: ba:d5:12:a1:52:15:05:e2:9f:94:df:f8:b8:90:a3:c5:7c:e6: 46:35:a8:46:8b:b5:8a:6d:b0:c0:d6:17:ae:e8:5d:d2:c1:96: dc:31:bb:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1cT4aiOWdC5aCN5ZndVxpwpNFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA2MTMwOTE1MDhaFw0yNjA2MTQxMDUyMDhaMDMxMTAvBgNV BAMTKDA2QUIyRjkzRjE5QzkzQkQ0Mzg5NzU1QzNBQTlGQzhCQTUyMTRBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMekiG9MqqP5IhF6P1B+dXCV5 vlyIVlrRHvLYtxUzveuFTuuA5qY3ktr9VOI+mnrMqqcxP16J1BSPUNh884evZ73y I2wx0JMkg+4GRNBzI50MOUY95DZw3RDM7go3U/GIN0xbkJW1+Jy2b7BN6mVFgz+M 5qk0NwmN9VXCbVtzAgXq5lXp+u46Max1/RNVaBLau2WL6TmkF3bdbUXXZnTkN8Bk EvF/foXFVvx9+xcJUDTrHAdDBWicQwnke/BRbuRCNGIHEWP/XYyrXRwAxNdrkN1c HI88KZosLceKDD0x4I1S/oHNeWs6hsBoNdKP2VYOlrLHyr6sgFv1AGWU6y0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBqsvk/Gck71DiXVcOqn8i6UhSvAwHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6NILf7S2lPV6WkA8j62PFQ7yai4CY7xrhh 09W8UjgcMUaSXWgEp1Tkgb4vsiGcjj1XMc/1El6hrFx14R2CjG1CSko30R/zlJjT R60omaHhj1rHBHpXzlui9tQfeOUUk+rNY2jopiovdE/ruojsvYR0/0gvwn3n9/0T XcoC250mqJHgidJ7eiyheu7XJVlsSTwZvkWLH4rW7jrIOLMZdnK8xMnkALMPpf/4 WiGkQ42r61000ndK28G49bgPw9pg8UbIZc/TPiO4+EzDzVXZf/3jJ+/gvZzV3brV EqFSFQXin5Tf+LiQo8V85kY1qEaLtYptsMDWF67oXdLBltwxu6c= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:24 2026 by rpki-client