$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: 8eXdgqzsO4SSHbPCDVumpeC0pSclTC873CGy8q0eFT8= Subject key identifier: A4:79:29:F9:F0:81:1D:C7:6B:78:98:2C:41:D9:B5:C8:5F:6D:B8:EC Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 1C7DE887DC789F3546A34AD01229B9F6086EE9C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 22:51:10 +0000 Manifest this update: Mon 02 Nov 2026 22:46:10 +0000 Manifest next update: Wed 04 Nov 2026 00:08:10 +0000 Files and hashes: 1: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: bc1AeJ8r3BO8H7iEO1+GXFZzj3FDXqeC7iyYcBDzaOo=) 2: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 3: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) 4: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) 5: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7d:e8:87:dc:78:9f:35:46:a3:4a:d0:12:29:b9:f6:08:6e:e9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: Nov 2 22:46:10 2026 GMT Not After : Nov 4 00:08:10 2026 GMT Subject: CN=A47929F9F0811DC76B78982C41D9B5C85F6DB8EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:95:61:82:5a:14:5e:a9:cc:98:35:e1:40: 60:98:e6:9b:54:46:d3:f7:70:98:b0:e4:36:63:1b: 2c:59:52:c6:6c:a5:81:45:83:27:a3:2b:00:6b:47: ad:e0:fc:e2:b2:62:f1:78:e5:1d:f9:3f:c7:45:b5: 60:85:3f:c7:15:98:d2:67:8c:01:fb:05:7e:7f:05: d1:f9:22:63:25:e4:0d:54:7a:56:36:99:51:5a:03: 58:77:d7:fa:e0:3b:33:bd:f6:fa:b3:61:bd:e1:40: 1a:77:b7:3d:01:37:c1:62:c6:5a:0b:35:69:6f:b0: bc:e8:d9:6f:24:0a:ef:f0:0e:8f:8e:b2:32:c3:e3: 63:8a:f0:70:af:2d:fc:21:70:12:aa:85:e4:df:34: 3d:30:dd:6e:02:16:12:e3:d4:6d:70:d5:5d:78:27: eb:e2:bf:2b:08:d2:4f:ab:10:25:84:36:f3:74:02: 60:80:38:dd:6a:02:d0:43:8d:50:33:ad:57:c9:80: 72:ca:99:6f:e0:7c:4c:d1:cc:8a:c7:1a:2d:2d:3a: 48:ed:e2:4c:8c:d4:81:9b:15:ff:6f:d0:d0:32:90: 8a:05:4c:e5:49:51:23:30:b8:82:b2:a3:2e:c9:28: 1d:b8:bc:1a:de:17:1d:a5:fa:27:e5:20:0e:c2:81: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:79:29:F9:F0:81:1D:C7:6B:78:98:2C:41:D9:B5:C8:5F:6D:B8:EC X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9c:7f:2e:9c:23:37:62:52:64:ab:b7:5a:75:1f:74:9d:5a: 88:33:3d:54:53:9c:07:55:42:61:a0:ab:d1:8b:2e:fb:b5:bc: 42:8b:9b:15:3c:a5:24:0a:fc:67:f1:fc:7b:81:2e:4e:f7:fc: 73:12:e8:37:90:7d:c2:24:08:b1:af:77:0c:af:21:c3:fe:e2: e5:be:73:17:8a:17:f7:b2:0f:f4:04:b9:3b:47:6f:ae:01:03: 6e:b7:69:89:cd:3c:38:40:40:d4:47:2b:f4:4c:ec:66:87:e9: bf:f0:51:15:64:24:f3:e0:d8:88:cf:ba:7c:2d:9f:49:84:ea: 8b:97:74:16:b5:88:f6:70:5a:ea:a2:b1:b5:6f:c5:49:bb:10: 6e:68:c9:fb:85:22:82:9c:7c:61:65:80:77:54:24:91:f3:88: 92:5a:9f:89:25:d7:7b:85:36:a7:13:a1:25:4c:6d:03:2d:f3: 11:37:79:b5:d8:05:76:af:90:1e:46:d9:33:40:b8:5c:ca:d2: c4:97:4f:fd:87:60:c9:a1:ba:30:07:da:89:d2:11:61:55:f4: 0c:2b:89:85:a7:c3:29:a0:d4:84:39:79:3d:dd:c4:1d:a5:ac: 6d:50:a2:ff:45:77:b2:28:ad:4e:d3:72:32:d6:f0:2b:79:d0: 56:0b:77:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHH3oh9x4nzVGo0rQEim59ghu6cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjExMDIyMjQ2MTBaFw0yNjExMDQwMDA4MTBaMDMxMTAvBgNV BAMTKEE0NzkyOUY5RjA4MTFEQzc2Qjc4OTgyQzQxRDlCNUM4NUY2REI4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCJVhgloUXqnMmDXhQGCY5ptU RtP3cJiw5DZjGyxZUsZspYFFgyejKwBrR63g/OKyYvF45R35P8dFtWCFP8cVmNJn jAH7BX5/BdH5ImMl5A1UelY2mVFaA1h31/rgOzO99vqzYb3hQBp3tz0BN8FixloL NWlvsLzo2W8kCu/wDo+OsjLD42OK8HCvLfwhcBKqheTfND0w3W4CFhLj1G1w1V14 J+vivysI0k+rECWENvN0AmCAON1qAtBDjVAzrVfJgHLKmW/gfEzRzIrHGi0tOkjt 4kyM1IGbFf9v0NAykIoFTOVJUSMwuIKyoy7JKB24vBreFx2l+iflIA7CgRgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHkp+fCBHcdreJgsQdm1yF9tuOwwHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOcfy6cIzdiUmSrt1p1H3SdWogzPVRTnAdV QmGgq9GLLvu1vEKLmxU8pSQK/Gfx/HuBLk73/HMS6DeQfcIkCLGvdwyvIcP+4uW+ cxeKF/eyD/QEuTtHb64BA263aYnNPDhAQNRHK/RM7GaH6b/wURVkJPPg2IjPunwt n0mE6ouXdBa1iPZwWuqisbVvxUm7EG5oyfuFIoKcfGFlgHdUJJHziJJan4kl13uF NqcToSVMbQMt8xE3ebXYBXavkB5G2TNAuFzK0sSXT/2HYMmhujAH2onSEWFV9Awr iYWnwymg1IQ5eT3dxB2lrG1Qov9Fd7IorU7TcjLW8Ct50FYLdyw= -----END CERTIFICATE-----Generated at Tue Nov 3 03:53:20 2026 by rpki-client