$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft File: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft (raw, json) Hash identifier: bHdWRU1aR1JqRjl8giMO9MNeTBA9DnIZjgaF2LpgXws= Subject key identifier: 9C:A2:19:BF:55:B9:4F:1D:BC:D0:45:48:55:58:C8:9D:97:50:99:B4 Authority key identifier: 6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD Certificate issuer: /CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD Certificate serial: 19D442FDAC2A2486D0D49C0F2222725AE5B56AF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 14:05:38 +0000 Manifest this update: Mon 02 Nov 2026 14:00:38 +0000 Manifest next update: Tue 03 Nov 2026 17:51:38 +0000 Files and hashes: 1: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl (hash: ZOh29juPXWOxzZVz/VRBGmViniL7yaiINSVK8fZ6KNg=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: Td28/CJkhSrDBpr5GMD46a5qt8s5yGrgfbAD8PtUEzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d4:42:fd:ac:2a:24:86:d0:d4:9c:0f:22:22:72:5a:e5:b5:6a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD Validity Not Before: Nov 2 14:00:38 2026 GMT Not After : Nov 3 17:51:38 2026 GMT Subject: CN=9CA219BF55B94F1DBCD045485558C89D975099B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:c1:48:22:d3:5b:56:3a:14:c0:e2:7b:bd: 57:be:8c:84:69:e3:89:8b:53:39:27:6d:0f:cb:e6: a6:d6:de:f1:4a:a8:5f:43:13:21:75:f6:da:e2:c7: 5f:ff:6e:cc:31:ff:93:29:50:dc:7f:f1:7c:d3:e1: 5b:d3:a2:f1:f4:77:36:dc:1c:5d:9a:23:c0:22:3f: 70:b0:29:ff:1c:be:65:93:87:43:1a:dc:d6:50:08: 30:e7:75:9d:6a:62:94:d8:f1:6e:a9:eb:62:38:c8: ee:f3:e1:6e:10:2c:b9:55:3c:43:c3:82:70:d6:8a: 37:41:0f:3e:06:97:d8:dd:4e:6d:e1:28:da:db:68: 3b:d9:7c:e4:fe:c5:2c:b8:7a:a2:c0:90:02:a7:18: a9:01:b8:44:a3:ba:ac:22:a4:c3:f4:a9:b0:f8:6f: 06:4e:a9:dd:78:64:36:db:16:46:90:84:6f:20:82: a1:cf:a5:f0:f6:65:17:38:7d:40:a4:6a:5b:d3:8d: 52:87:5c:8d:19:e9:9b:ec:df:aa:10:e7:c2:01:7f: 14:7e:d8:3f:ad:c6:2e:4f:38:2e:f2:66:5d:ce:fd: 5f:39:e0:99:97:0a:cf:e9:37:0d:a6:cd:f7:5b:18: e1:43:dc:78:8e:ec:54:fb:c6:56:36:c2:ac:ea:28: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:19:BF:55:B9:4F:1D:BC:D0:45:48:55:58:C8:9D:97:50:99:B4 X509v3 Authority Key Identifier: keyid:6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d0:85:f1:54:f2:81:ce:e7:9c:24:3c:27:0d:da:7a:72:34: d0:b5:c3:2f:61:53:14:a0:49:f2:59:0c:bc:08:2f:85:96:4f: 1c:d1:26:c8:59:49:b5:d1:37:44:64:91:7c:eb:8e:45:4a:0b: 9a:27:18:6b:ea:98:e0:68:2f:5b:ad:fd:d8:98:32:b2:d1:3c: b6:7b:d5:a8:9a:ce:81:20:90:90:47:4f:49:75:1a:de:20:2d: 0e:d2:11:44:86:cd:12:9d:ad:08:78:92:e8:90:b6:4f:07:46: 51:20:9c:45:86:79:b6:54:13:92:f0:ce:85:46:5e:a4:4d:41: d3:52:7f:dd:86:5f:96:39:88:98:aa:0b:07:49:68:71:97:c2: e2:6c:c8:1a:f2:50:61:27:a3:bc:ce:80:25:f3:00:a1:cf:3b: 1e:19:45:b9:fc:5a:f8:99:b5:2e:26:81:fd:42:10:e5:67:a8: b6:fc:3b:33:45:b3:18:42:7b:62:ad:d4:b4:9d:e4:00:d2:c2: 4b:c2:4a:9c:e2:72:e3:78:0c:12:5a:21:34:04:90:08:88:46: 62:f9:cd:7e:41:13:9f:e0:0d:f8:8f:38:a1:d5:74:da:3d:a5: a8:17:7c:87:2d:3c:1f:27:12:0d:f3:56:71:f6:69:bb:dc:9f: 50:43:3c:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdRC/awqJIbQ1JwPIiJyWuW1avAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5QkYxRTE5RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2 RjZGQkJCRDAeFw0yNjExMDIxNDAwMzhaFw0yNjExMDMxNzUxMzhaMDMxMTAvBgNV BAMTKDlDQTIxOUJGNTVCOTRGMURCQ0QwNDU0ODU1NThDODlEOTc1MDk5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38MFIItNbVjoUwOJ7vVe+jIRp 44mLUzknbQ/L5qbW3vFKqF9DEyF19trix1//bswx/5MpUNx/8XzT4VvTovH0dzbc HF2aI8AiP3CwKf8cvmWTh0Ma3NZQCDDndZ1qYpTY8W6p62I4yO7z4W4QLLlVPEPD gnDWijdBDz4Gl9jdTm3hKNrbaDvZfOT+xSy4eqLAkAKnGKkBuESjuqwipMP0qbD4 bwZOqd14ZDbbFkaQhG8ggqHPpfD2ZRc4fUCkalvTjVKHXI0Z6Zvs36oQ58IBfxR+ 2D+txi5POC7yZl3O/V854JmXCs/pNw2mzfdbGOFD3HiO7FT7xlY2wqzqKIC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnKIZv1W5Tx280EVIVVjInZdQmbQwHwYDVR0j BBgwFoAUa5vx4Z97qo/Eu0cK4Z7EGG9vu70wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY5ZTFhOGEtMzlmMS00ZmUyLTgzMmEtYmIyZjIwOTJmYmY2LzAvNkI5QkYxRTE5 RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2RjZGQkJCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QjlCRjFFMTlGN0JBQThGQzRCQjQ3MEFFMTlFQzQxODZGNkZC QkJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvNkI5QkYxRTE5RjdCQUE4RkM0QkI0NzBBRTE5RUM0 MTg2RjZGQkJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHQhfFU8oHO55wkPCcN2npyNNC1wy9hUxSg SfJZDLwIL4WWTxzRJshZSbXRN0RkkXzrjkVKC5onGGvqmOBoL1ut/diYMrLRPLZ7 1aiazoEgkJBHT0l1Gt4gLQ7SEUSGzRKdrQh4kuiQtk8HRlEgnEWGebZUE5LwzoVG XqRNQdNSf92GX5Y5iJiqCwdJaHGXwuJsyBryUGEno7zOgCXzAKHPOx4ZRbn8WviZ tS4mgf1CEOVnqLb8OzNFsxhCe2Kt1LSd5ADSwkvCSpzicuN4DBJaITQEkAiIRmL5 zX5BE5/gDfiPOKHVdNo9pagXfIctPB8nEg3zVnH2abvcn1BDPBM= -----END CERTIFICATE-----Generated at Tue Nov 3 02:25:21 2026 by rpki-client