$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json) Hash identifier: hq1Rvrw4ABYuCeU9mVGMcBmTvm3GLkDWK6Xh24gISqM= Subject key identifier: 9E:EC:7D:E6:62:70:BB:3F:BB:7E:FC:37:D0:56:B5:19:29:18:0C:40 Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Certificate serial: 1B4B6A90ACEF7B3633441B2C9B3D37FEA2B7BC12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 16:17:59 +0000 Manifest this update: Tue 03 Nov 2026 16:12:59 +0000 Manifest next update: Wed 04 Nov 2026 19:16:59 +0000 Files and hashes: 1: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=) 2: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=) 3: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: BUspDnSRgcqWfj+zpglgjoOCnHSW35MkZpF+B/roG9w=) 4: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=) 5: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4b:6a:90:ac:ef:7b:36:33:44:1b:2c:9b:3d:37:fe:a2:b7:bc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Validity Not Before: Nov 3 16:12:59 2026 GMT Not After : Nov 4 19:16:59 2026 GMT Subject: CN=9EEC7DE66270BB3FBB7EFC37D056B51929180C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:25:7d:00:b0:ed:d7:3e:12:78:e8:22:2e: 25:30:75:e3:fa:cc:1c:a9:1f:aa:1e:a3:32:2a:ab: 8d:30:b9:4f:01:71:9d:7c:a5:02:b4:4f:5b:fc:84: 99:c1:3b:d9:3b:a8:d3:0b:13:b3:4d:e9:70:6f:17: 7b:ed:7b:23:93:16:93:0a:f7:b2:e0:51:91:5b:f8: e6:99:14:c4:d9:3e:d9:ef:45:66:7f:0e:61:22:86: 63:30:45:22:14:05:b3:47:0b:cf:22:38:ab:b7:fd: 66:f2:d7:dc:bc:ea:fa:0a:84:e6:ec:b4:97:9d:2d: 66:2c:fb:54:3a:af:da:b7:7f:bc:c8:1e:bc:18:e3: eb:29:9c:2f:74:b9:54:58:93:f3:c9:4b:9c:26:dc: 83:c4:c4:bc:32:ee:8d:50:6f:ad:37:af:81:c8:1e: f8:69:1c:f3:09:e3:ea:32:83:a2:8c:5d:ab:31:cd: 34:b3:55:33:57:a9:e9:ac:b0:c6:e8:6a:c8:b4:d3: ce:f7:76:e8:49:c4:3a:bf:ea:11:10:9f:2a:6a:74: 0b:64:a2:c5:e8:3e:63:9e:fb:9b:ec:1a:55:38:8c: 86:7b:8f:a5:89:74:61:b2:3a:43:ae:bd:96:02:f6: 22:12:a9:81:25:c8:78:1d:5c:dd:7d:56:58:5c:9e: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EC:7D:E6:62:70:BB:3F:BB:7E:FC:37:D0:56:B5:19:29:18:0C:40 X509v3 Authority Key Identifier: keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:57:51:a3:84:39:d8:9c:9b:f0:1f:25:5c:ff:f9:8c:9d:27: e3:8d:56:af:64:39:81:8e:18:c8:32:1f:91:06:3c:d7:d3:2e: df:fd:72:58:5e:b2:14:9e:ec:85:84:a6:92:fa:60:16:91:91: 4a:a8:91:9c:70:9b:d1:41:97:46:3d:d4:1e:42:25:a6:25:ff: 5c:f2:f2:2f:d4:9d:0b:99:3d:5a:60:32:c7:4e:e4:44:05:1b: 10:27:fe:3c:29:cf:6e:6c:24:78:b6:71:93:95:b9:d3:0b:d3: 3d:32:49:95:49:14:3d:59:c6:2e:d6:24:40:46:c2:f3:a0:7d: 86:bd:e3:44:2d:22:28:9f:cc:0d:b3:c1:43:a4:22:38:dc:01: 62:b3:9b:d4:49:5d:0e:94:b0:47:e9:5c:0e:88:7c:c4:1f:31: 03:02:37:e9:42:46:99:b3:c1:91:5b:3d:49:95:e0:0e:ae:0f: 7c:24:de:91:ac:7f:80:27:84:5b:57:fa:40:6f:1d:d1:d2:27: 0f:5e:ac:7c:56:65:fe:30:c2:1a:8b:1f:78:51:d1:0b:e1:8b: 6b:57:26:86:53:72:85:e5:ab:d1:e0:1d:b4:8b:56:68:44:c7: 7a:2f:5d:89:04:5b:e9:60:ca:6e:74:c1:f4:28:77:d8:ef:d1: 19:53:9e:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0tqkKzvezYzRBssmz03/qK3vBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4 MDc5RjQ2MjAeFw0yNjExMDMxNjEyNTlaFw0yNjExMDQxOTE2NTlaMDMxMTAvBgNV BAMTKDlFRUM3REU2NjI3MEJCM0ZCQjdFRkMzN0QwNTZCNTE5MjkxODBDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QiV9ALDt1z4SeOgiLiUwdeP6 zBypH6oeozIqq40wuU8BcZ18pQK0T1v8hJnBO9k7qNMLE7NN6XBvF3vteyOTFpMK 97LgUZFb+OaZFMTZPtnvRWZ/DmEihmMwRSIUBbNHC88iOKu3/Wby19y86voKhObs tJedLWYs+1Q6r9q3f7zIHrwY4+spnC90uVRYk/PJS5wm3IPExLwy7o1Qb603r4HI HvhpHPMJ4+oyg6KMXasxzTSzVTNXqemssMboasi00873duhJxDq/6hEQnypqdAtk osXoPmOe+5vsGlU4jIZ7j6WJdGGyOkOuvZYC9iISqYElyHgdXN19VlhcnnZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnux95mJwuz+7fvw30Fa1GSkYDEAwHwYDVR0j BBgwFoAUpq/WWsZtTrcCeu1fiY6OzYB59GIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4ODY4MDUtM2I4NS00YzViLTliNmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFD NjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4MDc5RjQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNkFGRDY1QUM2NkQ0RUI3MDI3QUVENUY4OThFOEVDRDgwNzlG NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThF Q0Q4MDc5RjQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVXUaOEOdicm/AfJVz/+YydJ+ONVq9kOYGO GMgyH5EGPNfTLt/9clheshSe7IWEppL6YBaRkUqokZxwm9FBl0Y91B5CJaYl/1zy 8i/UnQuZPVpgMsdO5EQFGxAn/jwpz25sJHi2cZOVudML0z0ySZVJFD1Zxi7WJEBG wvOgfYa940QtIiifzA2zwUOkIjjcAWKzm9RJXQ6UsEfpXA6IfMQfMQMCN+lCRpmz wZFbPUmV4A6uD3wk3pGsf4AnhFtX+kBvHdHSJw9erHxWZf4wwhqLH3hR0Qvhi2tX JoZTcoXlq9HgHbSLVmhEx3ovXYkEW+lgym50wfQod9jv0RlTnoA= -----END CERTIFICATE-----Generated at Wed Nov 4 05:28:57 2026 by rpki-client