$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft (raw, json) Hash identifier: BXl1Os2pLZccn4zh/fA1dW9omT/yuZA/zIOtbHhRT+M= Subject key identifier: B8:82:D9:B6:B5:36:9B:C9:55:D5:43:3B:18:87:45:E6:C8:7A:A6:4C Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 605322130B187655713C26A21BFA2A2E716D96C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:08:33 +0000 Manifest this update: Tue 16 Jun 2026 20:03:33 +0000 Manifest next update: Wed 17 Jun 2026 21:15:33 +0000 Files and hashes: 1: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (hash: nyADTvjCRlTj9e8fj9mC1v9a/bZDx0y80bWakXf5ms4=) 2: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (hash: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=) 4: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl (hash: GLd7b1EztpyoVlyJJKDBfyCUQ9nwL0gN5/H3li1AymQ=) 5: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: wOyLuMco6f7BHQMgPIqIl6jEP062z2RuGWdQ0ZM/QzQ=) 6: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:53:22:13:0b:18:76:55:71:3c:26:a2:1b:fa:2a:2e:71:6d:96:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: Jun 16 20:03:33 2026 GMT Not After : Jun 17 21:15:33 2026 GMT Subject: CN=B882D9B6B5369BC955D5433B188745E6C87AA64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:65:79:93:bd:dc:c2:24:0d:dd:33:f5:31: af:7c:1e:f3:c8:14:4e:e0:33:15:0e:30:0c:0d:ca: 19:db:c2:03:ab:23:de:b7:4a:dc:f3:5f:8e:bf:7a: 0f:a7:5b:88:ea:31:22:28:8b:d5:60:37:a6:28:ec: 38:1f:35:41:b9:0f:69:98:ab:2e:08:9b:e5:74:e0: c2:4d:01:57:da:06:86:fe:a7:36:0c:08:e9:8f:8c: 73:15:97:90:02:16:4a:76:8d:b1:00:d0:83:8c:fa: 40:63:7a:eb:8b:85:99:b8:e1:8c:ea:3a:5e:22:da: dd:d0:6c:8a:f2:31:3f:d3:19:cf:f9:98:c7:5c:ad: 1f:ea:ac:7b:2a:a2:26:f6:e7:56:1f:d3:9b:78:cb: 06:1a:38:a1:8e:47:77:4a:75:d9:16:e9:50:08:09: e4:e4:ec:73:32:15:12:3a:04:7b:ea:d0:52:76:3e: 7f:1d:5a:d2:50:89:80:56:86:1c:df:fb:ab:7c:fc: 42:c7:79:d8:7f:e8:fc:f8:54:15:10:da:e4:34:91: 79:22:8a:65:b8:af:c4:9c:a2:e0:13:2b:fd:db:5a: 18:86:f4:74:20:4d:d3:a1:20:b3:04:4a:2b:53:e4: 07:a4:c4:50:9a:bc:aa:8f:5e:dd:d7:3d:66:8c:f4: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:82:D9:B6:B5:36:9B:C9:55:D5:43:3B:18:87:45:E6:C8:7A:A6:4C X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:60:1c:c8:1a:8e:b1:af:7a:80:cb:2b:d3:47:58:13:e1:77: 14:d3:48:1b:9c:a2:18:4f:d5:d3:42:37:12:15:41:a2:fd:6e: c3:1b:a8:6f:94:cb:19:af:e0:59:0c:1b:a8:df:6b:d7:ce:22: dc:0f:65:48:47:00:21:6e:bc:90:18:ba:ca:8e:c8:3b:1d:c7: b2:43:02:46:8b:1f:14:57:40:e0:85:73:24:08:5f:2c:b5:76: cf:b9:95:61:c8:94:c6:40:c5:27:4a:b6:55:1b:22:af:4a:9a: ac:06:87:37:61:d6:4c:46:d6:3c:b9:21:f6:ee:92:5b:84:82: 6b:a9:b8:1b:e1:cb:a8:bf:b2:a5:f3:a8:eb:7e:d5:5c:2c:e6: ac:70:40:70:af:7a:1b:ac:d5:cf:1d:d1:c4:95:2c:20:36:66: 06:5c:b3:c1:4e:fa:39:ee:79:1d:72:92:b7:24:3c:9c:38:07: 51:d7:f9:ca:b0:60:fd:57:52:50:96:db:79:12:d1:8a:b7:3d: 27:fd:42:ee:65:e9:7d:11:a9:63:23:8f:f8:ff:6d:02:f9:6e: 8a:58:c1:bf:d6:bf:af:f5:7e:33:e0:39:0d:d1:87:de:bd:0a: 88:3e:81:06:aa:47:c0:c9:63:08:e8:20:28:ed:29:f1:a6:49: 24:c7:82:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFMiEwsYdlVxPCaiG/oqLnFtlsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjA2MTYyMDAzMzNaFw0yNjA2MTcyMTE1MzNaMDMxMTAvBgNV BAMTKEI4ODJEOUI2QjUzNjlCQzk1NUQ1NDMzQjE4ODc0NUU2Qzg3QUE2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoGV5k73cwiQN3TP1Ma98HvPI FE7gMxUOMAwNyhnbwgOrI963StzzX46/eg+nW4jqMSIoi9VgN6Yo7DgfNUG5D2mY qy4Im+V04MJNAVfaBob+pzYMCOmPjHMVl5ACFkp2jbEA0IOM+kBjeuuLhZm44Yzq Ol4i2t3QbIryMT/TGc/5mMdcrR/qrHsqoib251Yf05t4ywYaOKGOR3dKddkW6VAI CeTk7HMyFRI6BHvq0FJ2Pn8dWtJQiYBWhhzf+6t8/ELHedh/6Pz4VBUQ2uQ0kXki imW4r8ScouATK/3bWhiG9HQgTdOhILMESitT5AekxFCavKqPXt3XPWaM9PYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuILZtrU2m8lV1UM7GIdF5sh6pkwwHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFF NTkxRUY2RDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpgHMgajrGveoDLK9NHWBPhdxTTSBucohhP 1dNCNxIVQaL9bsMbqG+Uyxmv4FkMG6jfa9fOItwPZUhHACFuvJAYusqOyDsdx7JD AkaLHxRXQOCFcyQIXyy1ds+5lWHIlMZAxSdKtlUbIq9KmqwGhzdh1kxG1jy5Ifbu kluEgmupuBvhy6i/sqXzqOt+1Vws5qxwQHCvehus1c8d0cSVLCA2ZgZcs8FO+jnu eR1ykrckPJw4B1HX+cqwYP1XUlCW23kS0Yq3PSf9Qu5l6X0RqWMjj/j/bQL5bopY wb/Wv6/1fjPgOQ3Rh969Cog+gQaqR8DJYwjoICjtKfGmSSTHgi8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:25 2026 by rpki-client