$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft File: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft (raw, json) Hash identifier: qhNvaeyaKPf5BfYiQOIYDembBEvzlxKAAAbHnoicq/k= Subject key identifier: 4F:D1:9E:5E:84:52:3E:2A:2B:5F:2E:E8:AC:B3:7B:14:EB:2D:B1:CD Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F Certificate issuer: /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Certificate serial: 0F961BD0CDA9FB3A283B9377D113CADEC2F6B031 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 14:26:00 +0000 Manifest this update: Mon 02 Nov 2026 14:21:00 +0000 Manifest next update: Tue 03 Nov 2026 18:08:00 +0000 Files and hashes: 1: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: 5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=) 2: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl (hash: j552NHUepO/Qu0XSwdyXn3w3X7TTfA7i/5fWW/G370g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:96:1b:d0:cd:a9:fb:3a:28:3b:93:77:d1:13:ca:de:c2:f6:b0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Validity Not Before: Nov 2 14:21:00 2026 GMT Not After : Nov 3 18:08:00 2026 GMT Subject: CN=4FD19E5E84523E2A2B5F2EE8ACB37B14EB2DB1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:b4:f5:fe:fb:67:22:7f:50:ca:24:9f:75: fd:ba:76:92:39:e2:d3:71:be:ed:c7:6b:05:92:8b: a1:eb:09:e1:3f:77:03:06:13:fa:03:6b:ac:1b:93: 42:98:d5:cc:db:a8:d9:24:bc:62:77:0e:f0:17:43: 8d:21:41:8c:22:13:43:a2:dd:86:68:4d:da:f1:ca: 1e:cb:ca:52:83:70:55:fc:c6:f7:3d:10:4c:f9:20: 10:88:2d:24:35:76:12:17:91:35:75:df:42:5b:78: 84:a4:cd:60:8d:1b:0c:26:ab:91:d1:cc:fa:7d:b4: 5d:d4:35:aa:73:7c:4e:51:1e:b3:e5:c7:44:10:5c: 91:94:83:64:27:93:1d:21:e3:c8:86:b7:35:e2:ce: 55:2d:51:68:e6:e3:58:5a:91:14:7b:2a:5b:ef:d5: ca:7f:3c:21:95:60:b5:f8:e4:fc:ce:02:05:1b:e2: cf:e5:ad:a5:b7:bf:e0:fc:64:61:c1:ec:6c:08:b3: 39:f3:a9:3d:fb:de:b5:0a:6b:94:c3:71:23:d5:e5: 7a:80:fb:5a:96:2e:81:0b:6f:f7:d6:b2:2d:6e:a1: 35:42:40:3e:ed:0f:98:d6:b9:73:9f:b4:bb:b7:52: f4:2a:db:e1:56:7a:a8:39:65:09:c2:87:35:0a:2b: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D1:9E:5E:84:52:3E:2A:2B:5F:2E:E8:AC:B3:7B:14:EB:2D:B1:CD X509v3 Authority Key Identifier: keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2e:a3:7e:08:10:91:e3:3f:c1:c9:c9:55:f6:4b:26:a6:b7: b2:99:09:be:48:32:46:22:e6:01:7c:9c:4e:86:7f:0e:3f:c2: d4:46:21:7f:40:dc:21:62:2c:bf:d3:f3:7f:f5:a6:60:de:3e: 73:18:b3:f1:74:a9:b9:cf:f2:14:b9:67:a7:fe:b1:b6:65:ba: 87:87:e5:ac:52:6e:44:41:b8:db:13:08:de:f1:29:cb:64:d3: af:d0:93:bb:75:ac:f9:3d:f8:ee:17:22:d3:ba:15:b0:97:35: 95:69:ee:49:cb:02:cd:75:db:62:4b:d0:bb:c3:c7:1f:78:06: 5c:d3:72:f3:f5:11:ab:3e:c1:5e:16:44:6e:52:23:66:1e:fa: 04:1e:9e:e1:67:a5:cc:19:2d:4e:95:16:f1:01:0e:f3:38:11: fb:35:31:b5:39:fb:93:b1:74:7e:cb:3d:5f:97:2e:51:72:6c: 81:ac:07:d3:ad:3b:83:1a:b6:1a:79:ce:95:67:0e:dd:d8:bc: 24:67:0c:6a:5f:3e:e1:8e:9b:df:c5:71:a7:e8:04:2e:97:ed: d0:97:16:c8:5d:63:08:78:1a:fe:7e:56:be:ef:bd:d7:ba:e3: fd:8b:e4:d0:f4:d8:80:57:bd:ef:fa:d9:ab:d1:a8:88:d8:68: 42:53:bb:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD5Yb0M2p+zooO5N30RPK3sL2sDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNEQzJG OTI2RkI3RjAeFw0yNjExMDIxNDIxMDBaFw0yNjExMDMxODA4MDBaMDMxMTAvBgNV BAMTKDRGRDE5RTVFODQ1MjNFMkEyQjVGMkVFOEFDQjM3QjE0RUIyREIxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rLT1/vtnIn9QyiSfdf26dpI5 4tNxvu3HawWSi6HrCeE/dwMGE/oDa6wbk0KY1czbqNkkvGJ3DvAXQ40hQYwiE0Oi 3YZoTdrxyh7LylKDcFX8xvc9EEz5IBCILSQ1dhIXkTV130JbeISkzWCNGwwmq5HR zPp9tF3UNapzfE5RHrPlx0QQXJGUg2Qnkx0h48iGtzXizlUtUWjm41hakRR7Klvv 1cp/PCGVYLX45PzOAgUb4s/lraW3v+D8ZGHB7GwIsznzqT373rUKa5TDcSPV5XqA +1qWLoELb/fWsi1uoTVCQD7tD5jWuXOftLu3UvQq2+FWeqg5ZQnChzUKK9LNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9GeXoRSPiorXy7orLN7FOstsc0wHwYDVR0j BBgwFoAUYwkJG499SmroxqEWhdg9wvkm+38wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU0NmUwOWEtYzAwNy00YjBjLTk0NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4 RjdENEE2QUU4QzZBMTE2ODVEODNEQzJGOTI2RkI3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MzA5MDkxQjhGN0Q0QTZBRThDNkExMTY4NUQ4M0RDMkY5MjZG QjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNE QzJGOTI2RkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJouo34IEJHjP8HJyVX2Syamt7KZCb5IMkYi 5gF8nE6Gfw4/wtRGIX9A3CFiLL/T83/1pmDePnMYs/F0qbnP8hS5Z6f+sbZluoeH 5axSbkRBuNsTCN7xKctk06/Qk7t1rPk9+O4XItO6FbCXNZVp7knLAs1122JL0LvD xx94BlzTcvP1Eas+wV4WRG5SI2Ye+gQenuFnpcwZLU6VFvEBDvM4Efs1MbU5+5Ox dH7LPV+XLlFybIGsB9OtO4Mathp5zpVnDt3YvCRnDGpfPuGOm9/FcafoBC6X7dCX FshdYwh4Gv5+Vr7vvde64/2L5ND02IBXve/62avRqIjYaEJTuw4= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:11 2026 by rpki-client