$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft File: 6FFB900EDEAE8469264C3200683452F52D2C7D20.mft (raw, json) Hash identifier: 8PfeFTQtsw5QJbX/ppwJxfNjXj43K1DbiypqIsBSfGU= Subject key identifier: E5:12:10:33:36:45:AC:BD:DE:4E:74:D3:C8:36:C0:F1:6C:22:B1:EB Authority key identifier: 6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20 Certificate issuer: /CN=6FFB900EDEAE8469264C3200683452F52D2C7D20 Certificate serial: 2802B22B7B40E51846F165F1331DC8C387D6AF8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft Manifest number: FA Signing time: Wed 04 Nov 2026 13:55:33 +0000 Manifest this update: Wed 04 Nov 2026 13:50:33 +0000 Manifest next update: Thu 05 Nov 2026 17:15:33 +0000 Files and hashes: 1: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: 2EwjI2yaWnE5gULqJdGsbLF8ZASObltpfAUMyYETxbI=) 2: 6FFB900EDEAE8469264C3200683452F52D2C7D20.crl (hash: gv3BD/+ZrwoTvCRBYjnAYmex+ViKOfIEpNV48CUnel4=) 3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: wSTIS3GtulXBIyX85d5grLpnIqXDyNCDJIfxayh+SJY=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: X+J06+s9GFmOyzL8tq52i7jtkOJP8+Epb+CH1drPU9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:02:b2:2b:7b:40:e5:18:46:f1:65:f1:33:1d:c8:c3:87:d6:af:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FFB900EDEAE8469264C3200683452F52D2C7D20 Validity Not Before: Nov 4 13:50:33 2026 GMT Not After : Nov 5 17:15:33 2026 GMT Subject: CN=E51210333645ACBDDE4E74D3C836C0F16C22B1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:dd:64:2b:81:0c:35:8b:0f:ea:df:50:dd: 30:99:49:f9:a0:96:e7:19:e8:b3:a4:f5:b5:a9:86: 89:fe:b0:82:81:35:80:2e:a8:a5:fc:eb:50:4b:e8: 95:3f:0b:9f:01:e4:83:2c:08:0b:20:0c:4f:0c:e2: 1a:e9:8a:6e:68:10:5f:53:cb:13:1a:31:72:69:c8: 91:8e:00:96:3e:3e:14:40:e0:fb:7d:41:87:13:fa: 43:10:c2:03:97:18:82:05:36:7f:9f:07:55:c3:84: 18:a4:75:fa:93:b9:09:e2:52:f6:a2:dc:32:10:c7: 7d:58:7a:c8:d8:92:77:a3:70:8e:4d:5b:97:a2:3d: a4:de:bd:9a:2f:83:c4:fa:de:60:94:00:1f:94:f6: fe:b5:b6:3c:c8:d3:b0:f4:b0:94:d1:3a:f4:36:44: f6:fb:ef:96:01:64:68:dc:64:ab:1a:a0:22:a9:ed: d2:04:94:fb:9a:9d:ae:9f:40:07:fd:7b:2e:c0:37: 5e:3e:d1:3a:55:92:72:cb:31:29:b1:40:6f:1a:36: 38:ce:7f:f0:72:ef:57:54:bf:bc:b8:e9:22:a2:6b: 9a:2f:e8:c6:ff:e2:63:f8:e5:4a:d7:60:ac:65:16: 71:09:aa:fc:71:87:d4:3e:f9:7a:9e:9f:95:4e:e9: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:12:10:33:36:45:AC:BD:DE:4E:74:D3:C8:36:C0:F1:6C:22:B1:EB X509v3 Authority Key Identifier: keyid:6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:49:f2:95:ad:32:4f:b1:3b:88:07:7d:ba:48:bc:ff:77:da: 74:c7:69:7b:bf:a6:45:68:31:a6:b7:10:ca:16:6e:cd:a0:ea: b4:dd:97:cb:b4:2d:c9:6a:b4:f2:b0:77:3e:71:f6:ff:b0:56: 52:29:3e:ef:97:0e:8b:55:b1:54:83:97:45:93:98:81:85:ed: 7f:72:15:21:da:bc:7d:61:db:d3:3e:88:48:3b:42:8e:0e:a9: fd:58:43:79:e2:ae:b9:ba:47:60:75:14:99:ad:e8:2f:a9:c9: 52:f3:33:08:19:c9:9e:10:b4:55:d2:d1:8e:3c:46:f8:c5:3a: bc:26:71:00:7f:57:bf:3d:57:d8:e6:e0:87:ac:f3:da:8c:25: 57:42:28:5c:cc:e7:8b:5e:23:90:54:e1:6e:eb:05:96:38:ad: e0:20:8b:8d:75:d2:63:12:84:b2:77:be:df:89:8e:40:5a:3f: 85:91:c5:b8:b8:e3:a3:1f:46:4e:59:a7:4e:ea:8e:05:47:c2: 2f:77:89:20:4f:b2:73:cb:9c:df:29:e7:0a:3f:bb:17:3e:3f: 68:1c:08:15:90:89:53:a7:60:b9:74:31:09:d9:e6:fc:31:f7: 53:c6:0f:86:3c:9d:ff:cb:36:03:92:bc:1a:a4:18:bf:01:71: f6:08:54:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAKyK3tA5RhG8WXxMx3Iw4fWr4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGQjkwMEVERUFFODQ2OTI2NEMzMjAwNjgzNDUyRjUy RDJDN0QyMDAeFw0yNjExMDQxMzUwMzNaFw0yNjExMDUxNzE1MzNaMDMxMTAvBgNV BAMTKEU1MTIxMDMzMzY0NUFDQkRERTRFNzREM0M4MzZDMEYxNkMyMkIxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmN1kK4EMNYsP6t9Q3TCZSfmg lucZ6LOk9bWphon+sIKBNYAuqKX861BL6JU/C58B5IMsCAsgDE8M4hrpim5oEF9T yxMaMXJpyJGOAJY+PhRA4Pt9QYcT+kMQwgOXGIIFNn+fB1XDhBikdfqTuQniUvai 3DIQx31YesjYknejcI5NW5eiPaTevZovg8T63mCUAB+U9v61tjzI07D0sJTROvQ2 RPb775YBZGjcZKsaoCKp7dIElPuana6fQAf9ey7AN14+0TpVknLLMSmxQG8aNjjO f/By71dUv7y46SKia5ov6Mb/4mP45UrXYKxlFnEJqvxxh9Q++Xqen5VO6bg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5RIQMzZFrL3eTnTTyDbA8WwiseswHwYDVR0j BBgwFoAUb/uQDt6uhGkmTDIAaDRS9S0sfSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzAvNkZGQjkwMEVE RUFFODQ2OTI2NEMzMjAwNjgzNDUyRjUyRDJDN0QyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RkZCOTAwRURFQUU4NDY5MjY0QzMyMDA2ODM0NTJGNTJEMkM3 RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvNkZGQjkwMEVERUFFODQ2OTI2NEMzMjAwNjgzNDUy RjUyRDJDN0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZJ8pWtMk+xO4gHfbpIvP932nTHaXu/pkVo Maa3EMoWbs2g6rTdl8u0LclqtPKwdz5x9v+wVlIpPu+XDotVsVSDl0WTmIGF7X9y FSHavH1h29M+iEg7Qo4Oqf1YQ3nirrm6R2B1FJmt6C+pyVLzMwgZyZ4QtFXS0Y48 RvjFOrwmcQB/V789V9jm4Ies89qMJVdCKFzM54teI5BU4W7rBZY4reAgi4110mMS hLJ3vt+JjkBaP4WRxbi446MfRk5Zp07qjgVHwi93iSBPsnPLnN8p5wo/uxc+P2gc CBWQiVOnYLl0MQnZ5vwx91PGD4Y8nf/LNgOSvBqkGL8BcfYIVOE= -----END CERTIFICATE-----Generated at Thu Nov 5 01:19:19 2026 by rpki-client