$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft File: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft (raw, json) Hash identifier: L9iHXjC22E2wiagKn9jwPz6g3spMoxDWlkJvnSwltnw= Subject key identifier: 95:29:85:F3:8B:36:56:F8:1D:81:89:55:88:08:93:76:9F:05:DE:DF Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Certificate serial: 4C76A11B06ACBA31DE5CBE01F8AAF1400A8437DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:36:36 +0000 Manifest this update: Tue 16 Jun 2026 18:31:36 +0000 Manifest next update: Wed 17 Jun 2026 19:59:36 +0000 Files and hashes: 1: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=) 2: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: AZDpkOWjnamEqT8fmcEDZ5d6r3arhBukAiqycsYxsj0=) 3: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: mk6P6nzKZPfeuKq11ThKG2gxjN5qYDKYLpgARoWf7Rc=) 4: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (hash: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=) 5: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl (hash: LMunfNBe5765CYmlhyt4drWKZCnWyYT2hr5l/Y56P68=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:76:a1:1b:06:ac:ba:31:de:5c:be:01:f8:aa:f1:40:0a:84:37:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E Validity Not Before: Jun 16 18:31:36 2026 GMT Not After : Jun 17 19:59:36 2026 GMT Subject: CN=952985F38B3656F81D818955880893769F05DEDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9f:93:ac:b1:4a:04:a4:32:69:60:ce:e8:37: 05:3c:f1:fc:1c:b3:96:98:29:dc:a8:13:8a:9d:3f: ab:01:1a:96:7e:9b:20:58:cd:7e:fa:8c:55:05:ae: 48:da:4b:41:de:5a:7b:e9:b3:9b:a7:e6:48:7c:ac: 43:8b:fa:b4:e3:03:b8:6b:b2:c8:b3:f7:e7:4e:f2: 65:d0:70:dc:26:62:42:be:68:96:59:e9:d8:d8:66: 1b:01:90:d4:43:c6:7a:8b:79:ad:bc:d7:90:b6:4c: 24:89:1d:49:96:76:b1:81:8e:19:26:8a:10:ee:2a: 92:8c:dc:8d:d8:b0:44:86:48:f3:94:85:76:89:aa: 45:c6:3c:b3:6c:3e:53:da:99:ec:1f:c2:c9:c7:44: a2:ca:01:16:8c:ee:90:12:b1:5f:5d:98:3e:a4:e0: 79:b9:ab:cb:0e:be:3c:6c:15:13:40:c5:82:0e:97: 1d:44:74:f6:06:1b:d8:f5:6e:8c:53:d7:4c:0a:92: 19:45:73:14:71:6f:a9:20:74:c7:70:2b:97:68:b3: 85:08:ff:8d:8c:b1:72:fc:a6:e7:95:90:b6:12:93: 31:2f:59:9a:bd:bb:99:9a:22:eb:d8:8a:2f:4d:8a: d1:94:ff:85:23:7c:6f:7d:bd:9c:9d:28:8a:52:0e: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:29:85:F3:8B:36:56:F8:1D:81:89:55:88:08:93:76:9F:05:DE:DF X509v3 Authority Key Identifier: keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a7:86:e1:d8:7a:a5:62:94:6b:0a:fc:82:e1:41:98:5a:5d: 5b:c9:ff:27:f7:db:a8:56:87:ac:8b:00:cc:30:c8:b0:53:6d: b1:d5:e7:b9:c8:ef:83:64:c7:33:cf:0c:0b:b9:5c:4d:30:c6: 9a:ff:5a:8e:34:1b:0b:40:67:a4:32:ee:03:25:46:a6:44:b7: 1e:ad:9f:95:fd:9f:38:2c:68:c8:25:81:8c:b7:51:ae:0b:b8: 9a:42:0f:8a:a9:f4:06:d4:a2:0f:14:27:c3:d8:15:76:41:ec: 61:f6:14:3c:a0:63:37:8e:9d:40:1b:0e:f7:61:ae:e8:7b:76: d7:28:ce:0b:85:ca:ae:f9:2c:97:d6:bd:44:15:cd:81:f1:80: 7a:29:90:0a:df:9d:ca:29:98:f7:34:d1:e3:70:d2:d2:07:63: cf:c2:2e:a6:6d:9a:4f:71:21:8a:57:b3:04:2d:09:b5:37:43: 23:55:0e:f3:bf:66:0e:4b:d5:4e:39:07:70:9f:fe:e7:af:90: 9a:a2:64:d7:ef:9a:e9:db:87:fc:75:4f:fa:59:7e:3b:9e:e0: 0d:18:02:65:5b:20:a1:23:28:37:d1:35:43:81:19:4d:3d:e1: 5d:d4:d1:22:2b:63:3b:90:d2:57:99:1f:32:26:56:a8:4a:8e: 5a:10:e8:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHahGwasujHeXL4B+KrxQAqEN98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FB RTQ5QjY1RTAeFw0yNjA2MTYxODMxMzZaFw0yNjA2MTcxOTU5MzZaMDMxMTAvBgNV BAMTKDk1Mjk4NUYzOEIzNjU2RjgxRDgxODk1NTg4MDg5Mzc2OUYwNURFREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwn5OssUoEpDJpYM7oNwU88fwc s5aYKdyoE4qdP6sBGpZ+myBYzX76jFUFrkjaS0HeWnvps5un5kh8rEOL+rTjA7hr ssiz9+dO8mXQcNwmYkK+aJZZ6djYZhsBkNRDxnqLea2815C2TCSJHUmWdrGBjhkm ihDuKpKM3I3YsESGSPOUhXaJqkXGPLNsPlPamewfwsnHRKLKARaM7pASsV9dmD6k 4Hm5q8sOvjxsFRNAxYIOlx1EdPYGG9j1boxT10wKkhlFcxRxb6kgdMdwK5dos4UI /42MsXL8pueVkLYSkzEvWZq9u5maIuvYii9NitGU/4UjfG99vZydKIpSDl/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlSmF84s2VvgdgYlViAiTdp8F3t8wHwYDVR0j BBgwFoAUb7JTpPmcD4Eerg0UK3J1yq5Jtl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiYWJmMGItMTEwMS00YWE5LWE0ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRG OTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FBRTQ5QjY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RkIyNTNBNEY5OUMwRjgxMUVBRTBEMTQyQjcyNzVDQUFFNDlC NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1 Q0FBRTQ5QjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6nhuHYeqVilGsK/ILhQZhaXVvJ/yf326hW h6yLAMwwyLBTbbHV57nI74NkxzPPDAu5XE0wxpr/Wo40GwtAZ6Qy7gMlRqZEtx6t n5X9nzgsaMglgYy3Ua4LuJpCD4qp9AbUog8UJ8PYFXZB7GH2FDygYzeOnUAbDvdh ruh7dtcozguFyq75LJfWvUQVzYHxgHopkArfncopmPc00eNw0tIHY8/CLqZtmk9x IYpXswQtCbU3QyNVDvO/Zg5L1U45B3Cf/uevkJqiZNfvmunbh/x1T/pZfjue4A0Y AmVbIKEjKDfRNUOBGU094V3U0SIrYzuQ0leZHzImVqhKjloQ6CM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:08 2026 by rpki-client