$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft File: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft (raw, json) Hash identifier: 66kP1euAGSP7KEyxp/6zdd9xwjPvOSYpdCy1BGtBjeI= Subject key identifier: AD:69:67:D6:9A:66:33:F0:3A:41:70:C1:C2:CA:8D:AC:CA:B2:18:0D Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 Certificate issuer: /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Certificate serial: 6453129FBCB5B1CCBFD64A52A9E325E8741F9649 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:25:09 +0000 Manifest this update: Tue 16 Jun 2026 21:20:09 +0000 Manifest next update: Wed 17 Jun 2026 22:23:09 +0000 Files and hashes: 1: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=) 2: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=) 3: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=) 4: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=) 5: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl (hash: z1Xyb/ssbHVWPtPZG3oL/NFr5z1Tb9i7peBalil+tI8=) 6: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=) 7: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: 1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=) 8: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:53:12:9f:bc:b5:b1:cc:bf:d6:4a:52:a9:e3:25:e8:74:1f:96:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0 Validity Not Before: Jun 16 21:20:09 2026 GMT Not After : Jun 17 22:23:09 2026 GMT Subject: CN=AD6967D69A6633F03A4170C1C2CA8DACCAB2180D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:cf:9d:61:03:e3:de:d4:fe:66:80:43:76: 80:ec:8b:44:5d:e1:8a:55:52:f5:83:1c:72:90:84: 00:91:69:3c:e0:fe:b6:e5:d3:ff:19:df:ba:fa:32: 1d:a9:88:65:5a:70:b6:a0:4e:cc:9a:57:43:7e:ca: d7:ab:f8:b2:2e:8f:3d:13:b9:81:3a:92:06:e7:74: aa:d4:32:71:49:81:09:04:95:52:66:1f:d4:68:bc: 29:3c:fe:67:4e:0f:9e:f3:27:4a:28:e9:b8:fb:fb: 34:d1:67:96:b7:55:7f:95:f4:06:a3:7f:6a:1f:e5: 87:46:04:9d:ef:89:92:c9:37:14:8d:dd:87:2f:da: ad:03:3c:80:65:e6:13:07:c8:01:3b:9f:1f:c0:b8: 0f:c0:69:9e:bc:99:4e:89:2a:c6:ec:5c:5e:6b:c6: c1:fe:3b:5e:90:5f:43:2f:4a:48:6c:11:ab:36:a5: 6b:94:d6:10:5a:0b:35:4c:03:60:14:bd:c4:cc:21: e1:88:a3:cb:a4:e9:fa:29:bc:b5:d5:aa:f7:c1:9d: 2c:62:be:f0:fc:9f:ef:e1:59:aa:18:de:e1:99:d8: c7:e8:53:df:ac:33:1d:a7:1b:c0:a1:19:88:f3:b8: 74:22:f2:38:33:0c:7b:2b:72:f3:17:ad:77:13:85: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:69:67:D6:9A:66:33:F0:3A:41:70:C1:C2:CA:8D:AC:CA:B2:18:0D X509v3 Authority Key Identifier: keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:7e:4c:2f:68:96:f9:79:0e:ef:d9:7c:59:05:93:89:6f: 39:89:d4:01:e7:93:1b:f9:78:e3:30:f6:1b:ab:cf:30:dc:1a: 99:28:11:80:19:6c:34:7b:34:83:fe:53:7c:9c:e9:12:4d:0e: 4b:9a:a3:da:28:fa:d6:21:ce:b5:70:a3:f7:57:a5:26:c0:df: e2:93:3d:49:a6:2b:1e:26:9f:4e:a7:bc:e2:8f:31:b9:e4:ba: 4b:42:c1:cd:9c:5b:64:84:49:80:66:a9:9e:5d:c3:a7:86:eb: ff:c6:58:ea:54:62:95:ad:28:d3:cd:fd:0e:09:bb:56:e2:a7: de:5e:6d:72:14:ac:7c:cf:dc:33:8c:16:a9:4f:87:82:fe:6a: f5:51:66:e1:d3:e7:0e:ae:4d:4e:05:00:fe:38:f1:5f:f9:db: 7f:68:a5:52:d8:a3:e4:6a:61:b3:ff:26:1c:d5:69:cd:45:cb: e1:12:96:12:6f:a6:01:25:75:56:b0:f8:6a:c6:58:43:72:90: 03:bd:72:40:cc:7c:7f:4c:a9:22:9f:cf:89:41:db:15:f9:fc: f8:98:3e:6f:b9:00:48:8b:c2:a0:5f:3b:de:eb:46:30:3e:a9: 7b:51:cc:08:16:ca:cd:1d:ae:ad:29:74:52:87:c5:55:4e:a8: 39:f9:8e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFMSn7y1scy/1kpSqeMl6HQflkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFF QURCNjhEMDAeFw0yNjA2MTYyMTIwMDlaFw0yNjA2MTcyMjIzMDlaMDMxMTAvBgNV BAMTKEFENjk2N0Q2OUE2NjMzRjAzQTQxNzBDMUMyQ0E4REFDQ0FCMjE4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUc+dYQPj3tT+ZoBDdoDsi0Rd 4YpVUvWDHHKQhACRaTzg/rbl0/8Z37r6Mh2piGVacLagTsyaV0N+yter+LIujz0T uYE6kgbndKrUMnFJgQkElVJmH9RovCk8/mdOD57zJ0oo6bj7+zTRZ5a3VX+V9Aaj f2of5YdGBJ3viZLJNxSN3Ycv2q0DPIBl5hMHyAE7nx/AuA/AaZ68mU6JKsbsXF5r xsH+O16QX0MvSkhsEas2pWuU1hBaCzVMA2AUvcTMIeGIo8uk6fopvLXVqvfBnSxi vvD8n+/hWaoY3uGZ2MfoU9+sMx2nG8ChGYjzuHQi8jgzDHsrcvMXrXcThSrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrWln1ppmM/A6QXDBwsqNrMqyGA0wHwYDVR0j BBgwFoAUxqhNi2VF/JGpKzxyP0FqEerbaNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkZDYxMzUtNTQ4Yy00ODgxLWFmNzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2 NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFFQURCNjhEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNkE4NEQ4QjY1NDVGQzkxQTkyQjNDNzIzRjQxNkExMUVBREI2 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZB MTFFQURCNjhEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVjfkwvaJb5eQ7v2XxZBZOJbzmJ1AHnkxv5 eOMw9hurzzDcGpkoEYAZbDR7NIP+U3yc6RJNDkuao9oo+tYhzrVwo/dXpSbA3+KT PUmmKx4mn06nvOKPMbnkuktCwc2cW2SESYBmqZ5dw6eG6//GWOpUYpWtKNPN/Q4J u1bip95ebXIUrHzP3DOMFqlPh4L+avVRZuHT5w6uTU4FAP448V/5239opVLYo+Rq YbP/JhzVac1Fy+ESlhJvpgEldVaw+GrGWENykAO9ckDMfH9MqSKfz4lB2xX5/PiY Pm+5AEiLwqBfO97rRjA+qXtRzAgWys0drq0pdFKHxVVOqDn5jgg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:29 2026 by rpki-client