$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft File: E6D8657E7EEA10982DC10335C8109731A067DDF4.mft (raw, json) Hash identifier: fdP+DtcxaNLdwn2ZuJyt9V4Sau0NNj9xHDEidScEiRM= Subject key identifier: D9:40:46:F1:E7:F7:C5:32:3E:C3:11:AB:89:DF:44:98:93:C8:B9:08 Authority key identifier: E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 Certificate issuer: /CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Certificate serial: 4BC0907CA2D06FF34FBF4FB7932311771CE13A77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 11:06:44 +0000 Manifest this update: Mon 02 Nov 2026 11:01:44 +0000 Manifest next update: Tue 03 Nov 2026 15:02:44 +0000 Files and hashes: 1: E6D8657E7EEA10982DC10335C8109731A067DDF4.crl (hash: ICWTybCvEZUg/egBzYlQlZBNBgmV5Lrmuhfr87xB4g4=) 2: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: Q0bQ3r6hiZxbkMHCrchZCQ8u853MF4yPWxTMqg5/h/A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c0:90:7c:a2:d0:6f:f3:4f:bf:4f:b7:93:23:11:77:1c:e1:3a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Validity Not Before: Nov 2 11:01:44 2026 GMT Not After : Nov 3 15:02:44 2026 GMT Subject: CN=D94046F1E7F7C5323EC311AB89DF449893C8B908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:bc:f6:e2:94:68:41:a8:ee:01:f1:3e:5f: 58:1f:9b:4f:b0:79:c2:27:a9:eb:dd:df:95:59:d2: 9e:99:cc:37:1c:bc:3f:79:51:fe:89:e9:bc:44:f6: 5f:9b:4d:f2:8d:f3:76:2a:26:c6:65:eb:94:15:31: e6:2f:23:3f:47:47:74:85:ad:8e:e4:9d:6e:21:32: 59:1b:02:61:8f:85:50:4f:e5:01:6f:39:74:1f:5c: 2b:da:e3:2b:2b:51:a1:ba:12:07:be:fe:cb:49:90: 3f:65:44:62:88:0c:8b:7e:8a:34:e2:4b:c5:f0:e2: 53:f4:d7:b3:95:64:c8:f8:ab:41:a8:2c:6e:b0:59: a2:eb:df:7c:f0:f7:f4:df:18:3e:d2:88:17:67:69: 27:53:19:a2:b6:94:4e:c7:ce:20:8a:5a:fc:bc:f2: b3:9e:6d:d7:eb:40:73:ef:c7:71:ff:98:ac:70:ef: 39:48:02:36:7b:30:de:63:ba:90:b2:f1:08:d3:27: 00:a2:f6:b1:3d:41:0a:ee:65:c1:87:22:01:58:36: 1c:4c:39:e4:8e:8a:cf:c7:cc:9d:0e:eb:69:23:dd: 5d:17:85:4f:5d:0e:71:4f:82:08:0e:45:6f:b3:a5: 7b:78:ee:30:65:41:eb:16:1e:6b:fb:34:cf:4d:7c: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:40:46:F1:E7:F7:C5:32:3E:C3:11:AB:89:DF:44:98:93:C8:B9:08 X509v3 Authority Key Identifier: keyid:E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f5:2f:c6:10:c6:b4:d0:bf:e8:98:04:e3:8a:29:0a:c9:0a: f9:91:69:6f:17:87:0b:f6:93:55:e4:1d:27:fc:ba:ea:ea:b0: e9:e3:b8:df:a3:34:d9:95:18:f9:a3:07:02:b9:81:9f:80:1c: f0:74:21:a8:0d:41:38:be:66:29:42:25:d0:a5:90:0c:98:97: 4d:80:a1:46:1b:4a:d8:ce:a1:0c:20:ba:3a:76:6e:4f:43:94: 6c:a0:b6:3a:f8:4b:a6:6b:f3:ac:26:8d:67:49:2b:58:75:5c: f6:63:08:77:58:16:96:ad:0a:91:5d:32:9e:37:ff:ac:de:e0: 97:93:64:b0:1c:4e:95:60:00:41:03:7e:1c:93:e0:17:f8:ec: 45:0e:b9:b0:ff:8e:31:5a:3f:c3:3e:62:dd:6e:77:b6:54:6b: ab:3f:ed:0a:fd:c1:64:2f:87:c7:23:57:83:57:db:7b:e2:dc: 85:e2:10:4d:c5:15:2d:69:9b:32:f4:85:87:49:c4:83:93:3a: 4f:9d:af:e5:2e:4e:3a:41:94:d6:8b:32:54:c9:2b:d3:56:2b: fc:63:9a:a5:dc:13:01:94:ff:0e:22:c8:ee:a7:13:40:27:fa: cb:0a:a4:1e:21:4f:04:84:17:4b:4c:ac:2e:1c:2f:a5:c2:24: 43:74:36:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8CQfKLQb/NPv0+3kyMRdxzhOncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFB MDY3RERGNDAeFw0yNjExMDIxMTAxNDRaFw0yNjExMDMxNTAyNDRaMDMxMTAvBgNV BAMTKEQ5NDA0NkYxRTdGN0M1MzIzRUMzMTFBQjg5REY0NDk4OTNDOEI5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdbz24pRoQajuAfE+X1gfm0+w ecInqevd35VZ0p6ZzDccvD95Uf6J6bxE9l+bTfKN83YqJsZl65QVMeYvIz9HR3SF rY7knW4hMlkbAmGPhVBP5QFvOXQfXCva4ysrUaG6Ege+/stJkD9lRGKIDIt+ijTi S8Xw4lP017OVZMj4q0GoLG6wWaLr33zw9/TfGD7SiBdnaSdTGaK2lE7HziCKWvy8 8rOebdfrQHPvx3H/mKxw7zlIAjZ7MN5jupCy8QjTJwCi9rE9QQruZcGHIgFYNhxM OeSOis/HzJ0O62kj3V0XhU9dDnFPgggORW+zpXt47jBlQesWHmv7NM9NfAJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UBG8ef3xTI+wxGrid9EmJPIuQgwHwYDVR0j BBgwFoAU5thlfn7qEJgtwQM1yBCXMaBn3fQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2MzZTY4YmQtYjA0Yy00ZDM1LTgwMjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3 RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFBMDY3RERGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNkQ4NjU3RTdFRUExMDk4MkRDMTAzMzVDODEwOTczMUEwNjdE REY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3 MzFBMDY3RERGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALL1L8YQxrTQv+iYBOOKKQrJCvmRaW8Xhwv2 k1XkHSf8uurqsOnjuN+jNNmVGPmjBwK5gZ+AHPB0IagNQTi+ZilCJdClkAyYl02A oUYbStjOoQwgujp2bk9DlGygtjr4S6Zr86wmjWdJK1h1XPZjCHdYFpatCpFdMp43 /6ze4JeTZLAcTpVgAEEDfhyT4Bf47EUOubD/jjFaP8M+Yt1ud7ZUa6s/7Qr9wWQv h8cjV4NX23vi3IXiEE3FFS1pmzL0hYdJxIOTOk+dr+UuTjpBlNaLMlTJK9NWK/xj mqXcEwGU/w4iyO6nE0An+ssKpB4hTwSEF0tMrC4cL6XCJEN0NnQ= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:53 2026 by rpki-client