$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json) Hash identifier: flQWssiFVwEMgYp00JjjsB1aiRa0Clo3VLZ1yZBRahY= Subject key identifier: 1E:1E:2F:7A:4E:D9:07:0F:D4:C6:5C:93:8C:E4:81:B1:61:D0:BB:3F Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 Certificate issuer: /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Certificate serial: 0D77A657C9D45FAE97DF3F0D8097660D6427550E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 07:53:29 +0000 Manifest this update: Sat 13 Jun 2026 07:48:29 +0000 Manifest next update: Sun 14 Jun 2026 11:32:29 +0000 Files and hashes: 1: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=) 2: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: cPL4KMCXHZ4K9BsjFoxhhbmRP6+NfQlrjekU3V/0F18=) 3: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:77:a6:57:c9:d4:5f:ae:97:df:3f:0d:80:97:66:0d:64:27:55:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Validity Not Before: Jun 13 07:48:29 2026 GMT Not After : Jun 14 11:32:29 2026 GMT Subject: CN=1E1E2F7A4ED9070FD4C65C938CE481B161D0BB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:36:21:bb:7e:66:09:eb:f8:e2:70:84:e7:0e: 3b:d3:cb:14:3b:b3:4a:41:5e:ae:04:33:5e:fe:d5: f7:87:08:d1:28:15:fc:a3:45:d7:dd:78:95:eb:cf: 84:74:7c:bf:e3:9e:6e:b2:2c:27:c3:8b:3a:4e:d2: 0c:a7:ce:aa:39:c2:58:5e:38:db:c6:4c:48:be:26: 7d:20:a5:0b:58:1a:54:53:48:9b:91:7e:50:25:2a: 5e:47:c5:84:4f:2c:d4:77:95:3e:bb:50:73:6f:ed: 96:da:a5:e9:40:3a:ab:0d:2b:f2:13:55:a2:77:d0: 6b:86:66:f1:db:18:32:ba:98:5d:dc:d1:f3:a1:5a: 83:25:56:eb:92:de:a8:86:c5:ad:16:f6:56:1b:12: 4a:38:14:e0:97:e9:04:49:4a:f7:84:2e:3c:cf:1f: 5b:4b:4f:33:bd:7b:42:74:e1:4d:5e:60:51:54:df: 1d:58:71:1e:58:6f:22:a5:bb:de:e6:8a:9c:1b:2d: c2:04:c4:51:bf:de:8f:3d:56:65:3c:1b:cc:be:cf: f4:3e:18:2a:f1:26:78:73:c5:d6:3f:7e:39:c9:52: d5:0f:22:4e:f5:f2:d3:7d:e0:d1:9b:ed:37:4f:5b: af:3b:c8:7d:4a:72:f1:da:ba:c8:68:9c:01:17:be: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1E:2F:7A:4E:D9:07:0F:D4:C6:5C:93:8C:E4:81:B1:61:D0:BB:3F X509v3 Authority Key Identifier: keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:85:ed:28:76:3e:1e:c8:11:f2:37:0b:cf:2d:6e:f5:9e:49: 83:ac:c3:5b:e1:a1:77:66:ca:e0:4e:85:4b:67:83:21:43:21: cb:b3:60:6b:c6:e2:8a:e9:9e:d7:c3:7d:e7:48:91:46:3a:48: a4:98:a4:48:e2:de:93:72:e9:4a:e7:19:b6:4e:ac:9a:1b:52: fe:2b:db:f0:75:c5:d2:05:e4:70:ec:6c:93:b4:45:3a:d1:f2: 06:f0:6c:f9:76:93:fa:d0:45:6c:a4:70:db:18:08:22:b1:05: 91:84:95:0f:33:52:fa:09:b8:fc:a9:92:ca:63:0e:36:67:fb: 2f:08:a1:58:22:77:6f:de:99:a0:06:62:4b:c9:b3:ba:4a:76: 7b:ee:9b:64:b0:4b:25:43:ed:95:eb:97:b6:7d:a3:46:9c:b7: 48:d4:cd:64:4e:62:cb:4c:81:f0:5d:54:c2:75:51:83:29:88: fe:5e:41:75:b8:16:53:a4:9a:51:18:f6:e1:33:8e:b4:73:00: b1:a2:6b:44:4b:51:e7:76:f9:d3:39:85:31:fc:6f:d9:7d:7b: 1c:fc:66:2e:1c:bf:39:9c:92:02:13:39:f8:1a:3e:3f:0d:dd: aa:83:40:67:98:c0:88:2c:00:83:7a:e4:a2:77:64:f7:e4:95: 86:c2:b6:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXemV8nUX66X3z8NgJdmDWQnVQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYy QUY3OUJGNjAeFw0yNjA2MTMwNzQ4MjlaFw0yNjA2MTQxMTMyMjlaMDMxMTAvBgNV BAMTKDFFMUUyRjdBNEVEOTA3MEZENEM2NUM5MzhDRTQ4MUIxNjFEMEJCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNiG7fmYJ6/jicITnDjvTyxQ7 s0pBXq4EM17+1feHCNEoFfyjRdfdeJXrz4R0fL/jnm6yLCfDizpO0gynzqo5wlhe ONvGTEi+Jn0gpQtYGlRTSJuRflAlKl5HxYRPLNR3lT67UHNv7ZbapelAOqsNK/IT VaJ30GuGZvHbGDK6mF3c0fOhWoMlVuuS3qiGxa0W9lYbEko4FOCX6QRJSveELjzP H1tLTzO9e0J04U1eYFFU3x1YcR5YbyKlu97mipwbLcIExFG/3o89VmU8G8y+z/Q+ GCrxJnhzxdY/fjnJUtUPIk718tN94NGb7TdPW687yH1KcvHaushonAEXvoaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHh4vek7ZBw/UxlyTjOSBsWHQuz8wHwYDVR0j BBgwFoAUbmXE4EPwSoFfg3flrSwCvyr3m/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0 M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYyQUY3OUJGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RTY1QzRFMDQzRjA0QTgxNUY4Mzc3RTVBRDJDMDJCRjJBRjc5 QkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAy QkYyQUY3OUJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOF7Sh2Ph7IEfI3C88tbvWeSYOsw1vhoXdm yuBOhUtngyFDIcuzYGvG4orpntfDfedIkUY6SKSYpEji3pNy6UrnGbZOrJobUv4r 2/B1xdIF5HDsbJO0RTrR8gbwbPl2k/rQRWykcNsYCCKxBZGElQ8zUvoJuPypkspj DjZn+y8IoVgid2/emaAGYkvJs7pKdnvum2SwSyVD7ZXrl7Z9o0act0jUzWROYstM gfBdVMJ1UYMpiP5eQXW4FlOkmlEY9uEzjrRzALGia0RLUed2+dM5hTH8b9l9exz8 Zi4cvzmckgITOfgaPj8N3aqDQGeYwIgsAIN65KJ3ZPfklYbCtm8= -----END CERTIFICATE-----Generated at Sat Jun 13 15:54:42 2026 by rpki-client