$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft File: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft (raw, json) Hash identifier: GlJkarx4zyN7QUt+RE/pcB0NyXNX1KWuLKB3LfcJ7Ik= Subject key identifier: 54:E7:CA:47:DA:41:B7:4B:05:CF:F0:BD:20:3D:ED:C1:B9:05:DC:30 Authority key identifier: 6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 Certificate issuer: /CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Certificate serial: 63C7AD68D1BE2997DBBC7DAD3B4B6904BBE0F1EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 15:48:24 +0000 Manifest this update: Tue 16 Jun 2026 15:43:24 +0000 Manifest next update: Wed 17 Jun 2026 18:49:24 +0000 Files and hashes: 1: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl (hash: vLRKxYyahrCKeqZILGdrohWV/Y89Glbj0SesvNGlyXE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c7:ad:68:d1:be:29:97:db:bc:7d:ad:3b:4b:69:04:bb:e0:f1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523 Validity Not Before: Jun 16 15:43:24 2026 GMT Not After : Jun 17 18:49:24 2026 GMT Subject: CN=54E7CA47DA41B74B05CFF0BD203DEDC1B905DC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:4d:69:79:13:28:dc:a4:c1:bd:5c:72:83: 0e:0b:2c:ed:cb:5c:92:a5:4e:dc:fd:44:25:1f:e7: 7a:c0:94:16:09:de:d9:9f:6c:11:93:2f:71:c9:27: 66:7d:1f:82:f6:90:45:54:68:ae:bd:1c:32:93:9e: 13:36:69:a5:bf:a8:80:47:98:00:23:5b:03:3f:f1: 58:b0:92:f7:69:21:d6:a0:7d:6b:ee:76:71:7b:89: 8d:d3:20:48:95:6d:54:b6:56:35:12:19:9e:ef:d0: 57:8f:0d:00:4d:dd:dc:60:f1:c8:ab:34:79:74:5b: ff:85:7b:21:32:93:f9:f9:16:39:6b:d9:cd:30:37: d2:18:8e:fd:43:12:bc:a2:1b:a1:a3:62:d6:7b:40: 56:52:06:b3:0b:19:cc:b9:2a:eb:c4:db:54:e3:2b: c9:1e:5a:b7:b6:ef:e6:bb:ba:8c:5e:db:ed:9d:66: 70:e1:a3:c8:20:e2:08:3b:37:93:d8:1a:3f:44:0e: 19:a1:c6:7e:b2:19:56:26:5e:7a:42:24:3e:fa:9c: b4:b8:fb:ee:a3:37:b2:23:77:51:20:c2:1b:38:f3: 87:e6:a4:1e:cb:46:af:6c:fd:0c:3d:c3:eb:f1:ec: db:af:94:40:0d:6d:b6:9b:bb:8d:4f:61:f4:92:84: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E7:CA:47:DA:41:B7:4B:05:CF:F0:BD:20:3D:ED:C1:B9:05:DC:30 X509v3 Authority Key Identifier: keyid:6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:21:a9:56:47:de:19:b0:13:a6:dc:96:d1:c4:4c:9c:cf:80: 11:1d:69:25:b5:fc:9a:5d:66:29:38:d7:0e:05:d5:ac:37:6c: 6a:63:db:a0:db:1f:55:d6:2e:5e:2f:c1:db:51:63:01:07:d3: 92:f1:25:31:73:29:5f:fc:b1:60:bd:df:c6:71:ed:38:ec:f4: 1a:de:c0:c2:3e:f9:f7:18:3f:c7:1d:eb:de:21:42:55:88:0f: 69:0f:dc:fe:71:6f:ae:0f:db:09:ec:c4:7c:0b:b3:98:11:a3: b3:dc:84:b6:3c:0e:19:67:ce:85:39:73:40:78:9d:27:8e:4b: b7:51:80:04:05:09:e3:26:ff:23:10:92:2e:f4:c4:cb:1b:15: 43:bf:a9:63:31:48:87:77:89:b8:0a:68:f0:c6:fa:8f:bb:bf: 23:b5:87:12:47:a0:74:f4:ef:b4:ac:e5:78:c6:58:90:18:8e: af:4f:44:7d:8b:56:a4:19:46:cd:3a:18:df:d1:6c:ed:b5:c8: db:83:a7:d5:ba:12:2f:16:77:1a:21:b6:e7:ed:7c:0a:34:02: ed:88:0c:4d:52:87:6d:8c:b5:75:b1:21:c9:da:e7:b9:d4:a1: b4:e4:b8:5c:01:25:26:0b:0e:13:25:17:8d:15:6f:5b:3f:fa: 12:47:91:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8etaNG+KZfbvH2tO0tpBLvg8ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFF NENENjUyMzAeFw0yNjA2MTYxNTQzMjRaFw0yNjA2MTcxODQ5MjRaMDMxMTAvBgNV BAMTKDU0RTdDQTQ3REE0MUI3NEIwNUNGRjBCRDIwM0RFREMxQjkwNURDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WU1peRMo3KTBvVxygw4LLO3L XJKlTtz9RCUf53rAlBYJ3tmfbBGTL3HJJ2Z9H4L2kEVUaK69HDKTnhM2aaW/qIBH mAAjWwM/8ViwkvdpIdagfWvudnF7iY3TIEiVbVS2VjUSGZ7v0FePDQBN3dxg8cir NHl0W/+FeyEyk/n5Fjlr2c0wN9IYjv1DEryiG6GjYtZ7QFZSBrMLGcy5KuvE21Tj K8keWre27+a7uoxe2+2dZnDho8gg4gg7N5PYGj9EDhmhxn6yGVYmXnpCJD76nLS4 ++6jN7Ijd1Egwhs484fmpB7LRq9s/Qw9w+vx7NuvlEANbbabu41PYfSShIBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOfKR9pBt0sFz/C9ID3twbkF3DAwHwYDVR0j BBgwFoAUbwaxfDj7ehmeSoUyE8BS6uTNZSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0Mz OEZCN0ExOTlFNEE4NTMyMTNDMDUyRUFFNENENjUyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RjA2QjE3QzM4RkI3QTE5OUU0QTg1MzIxM0MwNTJFQUU0Q0Q2 NTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzEvNkYwNkIxN0MzOEZCN0ExOTlFNEE4NTMyMTNDMDUy RUFFNENENjUyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkhqVZH3hmwE6bcltHETJzPgBEdaSW1/Jpd Zik41w4F1aw3bGpj26DbH1XWLl4vwdtRYwEH05LxJTFzKV/8sWC938Zx7Tjs9Bre wMI++fcYP8cd694hQlWID2kP3P5xb64P2wnsxHwLs5gRo7PchLY8DhlnzoU5c0B4 nSeOS7dRgAQFCeMm/yMQki70xMsbFUO/qWMxSId3ibgKaPDG+o+7vyO1hxJHoHT0 77Ss5XjGWJAYjq9PRH2LVqQZRs06GN/RbO21yNuDp9W6Ei8WdxohtuftfAo0Au2I DE1Sh22MtXWxIcna57nUobTkuFwBJSYLDhMlF40Vb1s/+hJHkaY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:31 2026 by rpki-client