$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft File: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft (raw, json) Hash identifier: FjOJ2+R/M9eQWAo59Ov+bVjwWGXcXxpvh5GEZNYWLzQ= Subject key identifier: 6A:9A:EE:8F:EC:DF:BF:9F:58:11:F9:27:D6:96:68:E1:BE:A4:5B:D2 Authority key identifier: 6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17 Certificate issuer: /CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717 Certificate serial: 05C67E8336C15DEB7C9F3F4F6B191B61703EF86C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 16:29:11 +0000 Manifest this update: Tue 16 Jun 2026 16:24:11 +0000 Manifest next update: Wed 17 Jun 2026 19:11:11 +0000 Files and hashes: 1: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl (hash: pV4sYvnmKiYFsb2WvOtsMj1Gui0+hMu9PqQ5qP691j0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c6:7e:83:36:c1:5d:eb:7c:9f:3f:4f:6b:19:1b:61:70:3e:f8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717 Validity Not Before: Jun 16 16:24:11 2026 GMT Not After : Jun 17 19:11:11 2026 GMT Subject: CN=6A9AEE8FECDFBF9F5811F927D69668E1BEA45BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:cf:35:67:33:f7:f4:a5:5b:61:61:8a:31: 00:1d:b1:94:06:76:41:b5:e1:44:34:85:15:62:6d: 6a:28:e2:51:de:9c:6c:ca:c3:39:85:b8:e8:85:a8: c3:4c:4a:54:a9:77:b9:6a:fc:fb:77:12:a6:5b:40: f5:be:20:67:fa:4e:4e:3d:45:a3:2e:06:b5:97:1c: 93:48:26:f6:1f:76:1f:f7:df:4e:a4:a7:e7:84:9a: af:f4:ce:f7:bf:eb:e1:db:ce:c7:5f:83:cb:8f:09: 7c:30:f4:6b:72:3d:6c:a3:17:29:20:ae:e6:9c:df: 2c:ee:61:71:e3:e8:cd:e5:e3:3f:13:e4:38:1e:63: ba:0c:c3:16:ec:89:c4:be:3f:44:c0:bc:b5:71:f1: 33:3b:7b:c3:93:d9:4d:67:f2:e2:b0:67:9d:c2:8b: 82:d2:6a:74:4b:ed:4a:76:d7:32:07:ce:95:2d:0e: b4:6d:7c:c5:d2:16:d2:dd:ce:9e:21:c2:de:6f:c9: b8:1f:b6:d2:7b:b8:33:3c:84:b6:29:8b:fc:88:08: 40:51:e9:26:57:6e:5c:80:4d:4f:5d:4d:6d:bb:47: c0:81:d0:56:d7:a8:9a:88:de:5d:be:3d:72:a6:3c: 65:3b:f2:5e:72:7c:3a:c8:fb:8a:c0:3b:26:c6:7d: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9A:EE:8F:EC:DF:BF:9F:58:11:F9:27:D6:96:68:E1:BE:A4:5B:D2 X509v3 Authority Key Identifier: keyid:6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3f:a1:9f:39:3a:06:61:f6:79:a6:07:49:7f:88:2e:95:60: ac:1c:b2:70:19:e8:04:f0:39:b4:79:f9:c3:f2:6d:d7:a0:23: d9:ef:12:95:51:9c:89:29:6c:79:f6:1c:30:80:13:02:0c:42: c0:44:d5:85:99:5f:dc:86:b9:c1:44:c5:5f:14:5d:4b:a9:dc: d3:6b:38:c6:6b:f7:84:97:71:eb:52:15:b4:73:86:56:8d:30: db:29:77:13:a2:d5:65:0a:fe:40:34:19:cf:39:79:13:d5:94: a9:e1:34:60:7e:af:f6:36:c9:44:49:06:e6:fa:3b:ed:52:9d: c2:6e:d6:7e:d9:91:b1:4d:ba:d5:73:6d:57:32:7f:a1:79:22: 05:6b:54:f3:1a:18:97:0a:1f:f2:81:7e:f0:29:7c:f4:8d:d1: 32:af:17:54:d4:6e:3c:6f:4b:82:fb:2a:b7:66:a0:dd:30:23: 29:f7:2d:9f:95:e0:f6:96:34:f4:a2:d4:90:4a:97:cb:08:c0: 77:6d:f2:18:1f:2d:9b:04:44:90:91:b0:4e:d1:22:bc:d1:e1: 67:5d:b6:6d:30:1c:6d:3a:eb:bb:29:06:f6:0e:67:75:2f:9f: ba:6f:01:28:2c:14:74:e9:28:bb:c5:45:89:fd:7c:81:ad:e1: 37:14:72:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcZ+gzbBXet8nz9PaxkbYXA++GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDMEI3RTE0QjQxMjY4RUI1MDlDOEQ1NDhDOUFBMDUy RUMxNzcxNzAeFw0yNjA2MTYxNjI0MTFaFw0yNjA2MTcxOTExMTFaMDMxMTAvBgNV BAMTKDZBOUFFRThGRUNERkJGOUY1ODExRjkyN0Q2OTY2OEUxQkVBNDVCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotM81ZzP39KVbYWGKMQAdsZQG dkG14UQ0hRVibWoo4lHenGzKwzmFuOiFqMNMSlSpd7lq/Pt3EqZbQPW+IGf6Tk49 RaMuBrWXHJNIJvYfdh/3306kp+eEmq/0zve/6+Hbzsdfg8uPCXww9GtyPWyjFykg ruac3yzuYXHj6M3l4z8T5DgeY7oMwxbsicS+P0TAvLVx8TM7e8OT2U1n8uKwZ53C i4LSanRL7Up21zIHzpUtDrRtfMXSFtLdzp4hwt5vybgfttJ7uDM8hLYpi/yICEBR 6SZXblyATU9dTW27R8CB0FbXqJqI3l2+PXKmPGU78l5yfDrI+4rAOybGfdu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUapruj+zfv59YEfkn1pZo4b6kW9IwHwYDVR0j BBgwFoAUbcC34UtBJo61CcjVSMmqBS7BdxcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MjYxMjQtMDU5Yy00M2FkLWExNTAtODIyYjlkNWZiM2YzLzAvNkRDMEI3RTE0 QjQxMjY4RUI1MDlDOEQ1NDhDOUFBMDUyRUMxNzcxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82REMwQjdFMTRCNDEyNjhFQjUwOUM4RDU0OEM5QUEwNTJFQzE3 NzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MjYxMjQtMDU5Yy00M2FkLWEx NTAtODIyYjlkNWZiM2YzLzAvNkRDMEI3RTE0QjQxMjY4RUI1MDlDOEQ1NDhDOUFB MDUyRUMxNzcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8/oZ85OgZh9nmmB0l/iC6VYKwcsnAZ6ATw ObR5+cPybdegI9nvEpVRnIkpbHn2HDCAEwIMQsBE1YWZX9yGucFExV8UXUup3NNr OMZr94SXcetSFbRzhlaNMNspdxOi1WUK/kA0Gc85eRPVlKnhNGB+r/Y2yURJBub6 O+1SncJu1n7ZkbFNutVzbVcyf6F5IgVrVPMaGJcKH/KBfvApfPSN0TKvF1TUbjxv S4L7KrdmoN0wIyn3LZ+V4PaWNPSi1JBKl8sIwHdt8hgfLZsERJCRsE7RIrzR4Wdd tm0wHG0667spBvYOZ3Uvn7pvASgsFHTpKLvFRYn9fIGt4TcUcm4= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:38 2026 by rpki-client