$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft File: 6B995520DD42E2AA6306A898618C472D1D5E4417.mft (raw, json) Hash identifier: +mFBeh8r+5802rj7SDSSQvNpqxDalJJzLVSddQp/+G8= Subject key identifier: B4:5A:80:23:28:2C:F1:F0:82:43:EC:B1:2B:BE:C3:67:EA:CD:AB:F3 Authority key identifier: 6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 Certificate issuer: /CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Certificate serial: 6B204DF843897D3010DF489898B6591A02D3A3E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 00:33:16 +0000 Manifest this update: Mon 02 Nov 2026 00:28:16 +0000 Manifest next update: Tue 03 Nov 2026 02:05:16 +0000 Files and hashes: 1: 6B995520DD42E2AA6306A898618C472D1D5E4417.crl (hash: i5yWzLFNHn/TUDTXYoYKxi9fXcbYmR7rhIAoXok0Xps=) 2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: RIdJ/cXYXoiLhfv+EGFjwti65Zd3wn1vdkd4IsQmrxo=) 3: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: XXmEikeW7+xMma0RK8ROxLTllOgfRUh6Qpdpx7HKJyc=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: EocJEXTX0mSSr7fMVzkhuxkZ+TwRT9I+6KSMP/66yxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:20:4d:f8:43:89:7d:30:10:df:48:98:98:b6:59:1a:02:d3:a3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Validity Not Before: Nov 2 00:28:16 2026 GMT Not After : Nov 3 02:05:16 2026 GMT Subject: CN=B45A8023282CF1F08243ECB12BBEC367EACDABF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f8:1d:6a:69:b4:17:c9:59:56:10:af:aa:c9: f4:fd:ab:85:e8:c0:92:88:80:d5:a5:64:d3:f6:0c: 83:59:e5:3b:a3:73:5f:b1:e4:1b:18:5f:f6:ea:d3: d4:51:7e:40:8a:9f:13:71:b5:c1:3e:ee:83:ec:44: 99:60:bd:9c:4b:25:ba:31:94:bd:9c:7c:1f:6f:5c: 20:00:7f:ff:54:5e:ea:33:81:b6:c4:b5:e5:27:bd: 18:a3:a4:ae:af:17:cc:0f:48:27:7c:cb:de:4f:c9: 3b:f2:c2:66:45:67:09:06:57:49:e0:06:c6:32:ea: a3:cd:a9:a6:6e:57:ac:11:48:0d:8b:fc:25:7f:ab: 8b:e0:90:a8:94:c1:90:5e:47:c7:a8:4e:c0:c8:8b: 72:f9:6d:34:64:f3:fc:bf:78:e2:c9:6f:a1:e3:d3: d1:02:7a:51:4a:42:20:71:24:43:f1:38:6c:65:6e: 62:0c:d7:59:f5:6c:9c:8a:5b:0f:54:7f:be:11:6c: 50:f0:4b:ff:f8:12:41:85:0b:e4:08:9f:e5:b8:7e: 3c:a7:89:ec:49:3a:f0:d5:71:9b:a1:93:1c:fc:2a: c5:c4:9c:fd:dd:3e:ac:9d:a2:07:7b:51:9d:5a:8a: 4d:dd:9b:ea:24:a4:9a:dc:a4:2c:f0:39:45:02:f4: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:80:23:28:2C:F1:F0:82:43:EC:B1:2B:BE:C3:67:EA:CD:AB:F3 X509v3 Authority Key Identifier: keyid:6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5b:04:b0:c6:82:97:a2:3a:34:6e:76:3e:c2:2b:58:c4:be: bc:b6:dc:97:61:c5:62:7e:77:a7:69:5e:a4:3c:61:f8:36:fa: 19:bd:a9:ef:26:d7:d0:f4:c4:12:7d:f9:93:6c:04:1d:d4:35: c9:a6:5e:3d:8c:50:3b:14:ca:cf:86:a0:b5:ff:30:f4:72:63: cb:6e:c0:67:1b:ce:c5:73:9e:8d:44:9e:81:aa:b2:2c:f9:9e: da:39:9e:1d:a2:e7:f1:31:69:23:45:84:f7:86:69:8d:b9:e9: b7:b5:fd:ef:0b:b3:76:b7:f6:54:73:5e:90:67:6a:e4:ab:60: 9f:3a:a2:fa:1f:19:cb:5e:b9:a7:33:e3:c3:25:23:dd:55:b6: a6:99:f1:1f:ae:e1:ee:4f:22:52:9d:a6:49:0d:5c:9f:51:c5: c2:fd:2e:fc:c1:c4:6c:9e:c6:37:23:fa:93:30:75:e2:5c:3d: 60:91:00:f4:e3:86:69:8a:ef:a4:bb:f1:ea:ef:d7:7c:ec:7e: 3f:84:cd:6f:5f:8e:d4:bf:0a:d7:80:a2:0e:83:1f:fd:b0:00: 16:31:08:42:c6:3e:41:ab:59:8a:48:f2:a1:60:0b:e6:cc:a7: 39:ff:50:f0:11:8c:e4:7a:82:0a:51:55:14:2d:74:85:e6:22: ff:f3:50:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayBN+EOJfTAQ30iYmLZZGgLTo+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQx RDVFNDQxNzAeFw0yNjExMDIwMDI4MTZaFw0yNjExMDMwMjA1MTZaMDMxMTAvBgNV BAMTKEI0NUE4MDIzMjgyQ0YxRjA4MjQzRUNCMTJCQkVDMzY3RUFDREFCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+B1qabQXyVlWEK+qyfT9q4Xo wJKIgNWlZNP2DINZ5Tujc1+x5BsYX/bq09RRfkCKnxNxtcE+7oPsRJlgvZxLJbox lL2cfB9vXCAAf/9UXuozgbbEteUnvRijpK6vF8wPSCd8y95PyTvywmZFZwkGV0ng BsYy6qPNqaZuV6wRSA2L/CV/q4vgkKiUwZBeR8eoTsDIi3L5bTRk8/y/eOLJb6Hj 09ECelFKQiBxJEPxOGxlbmIM11n1bJyKWw9Uf74RbFDwS//4EkGFC+QIn+W4fjyn iexJOvDVcZuhkxz8KsXEnP3dPqydogd7UZ1aik3dm+okpJrcpCzwOUUC9M9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFqAIygs8fCCQ+yxK77DZ+rNq/MwHwYDVR0j BBgwFoAUa5lVIN1C4qpjBqiYYYxHLR1eRBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkZDRjY2ItNDJlMy00YjcyLTkxOTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBE RDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQxRDVFNDQxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Qjk5NTUyMERENDJFMkFBNjMwNkE4OTg2MThDNDcyRDFENUU0 NDE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3 MkQxRDVFNDQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItbBLDGgpeiOjRudj7CK1jEvry23JdhxWJ+ d6dpXqQ8Yfg2+hm9qe8m19D0xBJ9+ZNsBB3UNcmmXj2MUDsUys+GoLX/MPRyY8tu wGcbzsVzno1EnoGqsiz5nto5nh2i5/ExaSNFhPeGaY256be1/e8Ls3a39lRzXpBn auSrYJ86ovofGcteuacz48MlI91VtqaZ8R+u4e5PIlKdpkkNXJ9RxcL9LvzBxGye xjcj+pMwdeJcPWCRAPTjhmmK76S78erv13zsfj+EzW9fjtS/CteAog6DH/2wABYx CELGPkGrWYpI8qFgC+bMpzn/UPARjOR6ggpRVRQtdIXmIv/zUA4= -----END CERTIFICATE-----Generated at Mon Nov 2 18:17:20 2026 by rpki-client