$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft File: 15253A2B5044241610CA488254A5FBDEFCA83946.mft (raw, json) Hash identifier: ROHizoRjs5by8xp9vcQI3u8yvjdprD3CDoAWHkUnHZ4= Subject key identifier: 34:66:7C:6D:C2:DE:78:73:22:84:5F:7D:FF:C4:73:52:EF:4A:60:4D Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 Certificate issuer: /CN=15253A2B5044241610CA488254A5FBDEFCA83946 Certificate serial: 346A613C659205635FC629E0A2F99BC7C74AF899 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 15:32:30 +0000 Manifest this update: Mon 02 Nov 2026 15:27:30 +0000 Manifest next update: Tue 03 Nov 2026 18:44:30 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: MIDcVmBGH/hqqNu3jf3HAG0eJ6hq9A6F1DDrnx/T2Oc=) 2: 15253A2B5044241610CA488254A5FBDEFCA83946.crl (hash: jZSNUZ+pqAnhnAfexYprYkOEh0ua3qEChb2f/HmODA4=) 3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: DsGlxrIFXIfC4wlTwbks5STw6xrwCN1b5SZ94KRIDxg=) 4: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: GPQzQ2Y9IpoZxGxlL+qxlZ5PT+jJ6xJj6pibO+05n+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6a:61:3c:65:92:05:63:5f:c6:29:e0:a2:f9:9b:c7:c7:4a:f8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946 Validity Not Before: Nov 2 15:27:30 2026 GMT Not After : Nov 3 18:44:30 2026 GMT Subject: CN=34667C6DC2DE787322845F7DFFC47352EF4A604D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:c2:84:c8:f8:3d:dd:73:08:1b:ba:9e:9c: e4:fb:f8:7a:b9:b8:7a:23:1a:75:f2:f0:ef:34:b2: 4f:18:a4:72:eb:ac:5e:84:a2:dc:4d:a9:9c:13:ed: c1:89:fc:4a:c5:29:3a:6a:af:aa:48:01:b1:29:7f: 88:59:0c:6b:5b:c9:84:3f:1b:f8:57:3e:6e:49:b0: 4f:27:ba:ff:ec:35:53:47:5e:d1:e2:7a:1b:73:b3: 72:e0:5f:7d:3d:a1:90:5e:49:48:40:7c:4d:bd:fc: 5a:df:8b:a8:e9:bc:50:e6:4c:ed:46:02:19:61:76: 91:ac:35:e3:c9:9a:17:87:77:ca:83:23:8c:62:fa: e5:c9:dc:a0:79:c2:d7:5b:c8:47:86:89:de:f2:47: 58:8b:4c:ea:e6:18:e6:94:df:a5:9d:34:47:34:d0: 88:1f:33:5d:55:5f:e3:25:11:2a:b3:ec:39:40:20: 49:02:cd:f3:9c:85:14:cf:39:0c:32:be:15:60:ca: f0:58:81:9c:95:be:38:d1:35:5c:e6:28:7a:40:22: 66:c4:d2:8a:1c:7b:3c:4a:62:f4:54:fb:84:c1:62: 99:0a:01:cf:fb:ba:12:2a:80:7c:7d:83:e4:0b:b8: 0f:62:72:84:45:08:88:a2:63:55:a5:9e:1f:cf:b5: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:66:7C:6D:C2:DE:78:73:22:84:5F:7D:FF:C4:73:52:EF:4A:60:4D X509v3 Authority Key Identifier: keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f8:fa:0a:d6:c6:77:43:d7:db:6c:e8:04:49:73:7e:4f:6a: a9:44:cd:a4:0f:10:d3:2b:5b:a7:1e:c2:cf:f0:c2:d6:bb:94: 1d:c0:5d:1b:78:d2:fd:3c:22:d7:bd:a1:02:52:02:98:54:d3: 2e:3b:ad:9f:93:93:fa:3a:e4:74:8b:b8:bc:3e:04:a9:58:d8: 03:b7:c4:e1:d6:39:96:b7:77:cc:9c:61:65:ac:44:93:ae:98: a1:3b:93:bd:35:66:82:51:cd:11:00:0f:8b:2a:59:1a:1b:95: 37:f4:f0:fd:06:96:7b:de:ec:81:51:80:27:39:67:45:37:12: 45:16:9b:8b:df:40:e7:77:72:95:e0:e1:b8:4c:96:df:b5:47: 3c:d6:2f:1a:54:3d:df:cc:2a:19:b4:f5:04:e3:8c:52:a9:f1: 59:4d:ff:de:54:ab:1e:c3:4f:cf:4f:b1:1d:36:71:e3:19:e4: 08:cf:9d:f1:57:41:c1:09:b4:8b:9f:61:ea:89:15:6f:8c:28: a1:52:41:b5:cb:e0:bc:de:67:2d:b3:93:69:61:96:48:6d:2c: 29:6a:6c:f0:c7:83:cf:12:dd:a5:4a:81:1e:14:56:3c:bd:44: 01:f5:a4:6f:9e:86:35:14:36:d6:97:41:a4:0c:3d:d0:68:d8: 7d:6a:2f:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGphPGWSBWNfxingovmbx8dK+JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVG Q0E4Mzk0NjAeFw0yNjExMDIxNTI3MzBaFw0yNjExMDMxODQ0MzBaMDMxMTAvBgNV BAMTKDM0NjY3QzZEQzJERTc4NzMyMjg0NUY3REZGQzQ3MzUyRUY0QTYwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYsKEyPg93XMIG7qenOT7+Hq5 uHojGnXy8O80sk8YpHLrrF6EotxNqZwT7cGJ/ErFKTpqr6pIAbEpf4hZDGtbyYQ/ G/hXPm5JsE8nuv/sNVNHXtHiehtzs3LgX309oZBeSUhAfE29/Frfi6jpvFDmTO1G AhlhdpGsNePJmheHd8qDI4xi+uXJ3KB5wtdbyEeGid7yR1iLTOrmGOaU36WdNEc0 0IgfM11VX+MlESqz7DlAIEkCzfOchRTPOQwyvhVgyvBYgZyVvjjRNVzmKHpAImbE 0oocezxKYvRU+4TBYpkKAc/7uhIqgHx9g+QLuA9icoRFCIiiY1Wlnh/Ptcw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNGZ8bcLeeHMihF99/8RzUu9KYE0wHwYDVR0j BBgwFoAUFSU6K1BEJBYQykiCVKX73vyoOUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdlZGNiN2UtYzM4ZC00ZTY3LTgyYmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1 MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVGQ0E4Mzk0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTI1M0EyQjUwNDQyNDE2MTBDQTQ4ODI1NEE1RkJERUZDQTgz OTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZC REVGQ0E4Mzk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz4+grWxndD19ts6ARJc35PaqlEzaQPENMr W6cews/wwta7lB3AXRt40v08Ite9oQJSAphU0y47rZ+Tk/o65HSLuLw+BKlY2AO3 xOHWOZa3d8ycYWWsRJOumKE7k701ZoJRzREAD4sqWRoblTf08P0Glnve7IFRgCc5 Z0U3EkUWm4vfQOd3cpXg4bhMlt+1RzzWLxpUPd/MKhm09QTjjFKp8VlN/95Uqx7D T89PsR02ceMZ5AjPnfFXQcEJtIufYeqJFW+MKKFSQbXL4LzeZy2zk2lhlkhtLClq bPDHg88S3aVKgR4UVjy9RAH1pG+ehjUUNtaXQaQMPdBo2H1qL3o= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:11 2026 by rpki-client