$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft File: C7CDFA6BC067C7A495919AAD0E26180B86353954.mft (raw, json) Hash identifier: 5c4EEBI225N9dQ2BmSyi6YeXmr62TEOKtGK3KmSZnIQ= Subject key identifier: FE:8A:03:71:B9:07:A6:4A:AE:00:06:F3:60:14:3D:AE:AA:23:8A:AF Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 5678CFB3E86859BDBA36890816A016DF19509C67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 04:58:47 +0000 Manifest this update: Mon 02 Nov 2026 04:53:47 +0000 Manifest next update: Tue 03 Nov 2026 07:27:47 +0000 Files and hashes: 1: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ=) 2: C7CDFA6BC067C7A495919AAD0E26180B86353954.crl (hash: CPCsYOtD4+NQn1ZYVlhhwt7VHuMYwQ3fDmo9cnIURzg=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=) 4: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=) 5: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: LgH9oXeBcuQFeopdycllX9ZwgANBmbEdowpLFMRb868=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:78:cf:b3:e8:68:59:bd:ba:36:89:08:16:a0:16:df:19:50:9c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: Nov 2 04:53:47 2026 GMT Not After : Nov 3 07:27:47 2026 GMT Subject: CN=FE8A0371B907A64AAE0006F360143DAEAA238AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:db:0d:4d:6a:e2:27:c9:4d:43:ed:c3:59: 79:8e:56:6b:e3:bf:8a:4d:0a:63:dd:13:04:c8:44: a5:bc:b3:a2:ba:76:be:f0:da:3c:f3:c4:4c:d6:c6: 35:be:37:38:62:54:a0:9e:1f:cf:5f:58:e8:fe:9b: 8b:a4:07:d2:b8:52:fc:43:d0:43:1c:19:fc:3d:a6: 0d:c5:fc:78:e0:a4:ac:71:ff:38:22:2b:96:cd:3d: 22:ce:eb:0e:55:9d:2f:53:c6:58:40:b5:02:c8:a5: 97:b0:8d:31:0f:e8:a3:ab:53:fd:47:4a:b6:e0:20: b5:cc:05:21:58:d1:be:62:26:ab:16:a1:1c:71:87: da:10:ad:79:77:bd:03:11:12:1c:81:66:a2:d1:a4: e0:4b:bd:95:ba:66:ca:86:49:53:04:f0:2f:66:23: 9a:c5:7d:92:36:54:00:c0:6c:1c:74:65:3e:b3:ce: cb:9c:13:ce:43:b8:ba:5f:b8:03:ab:6a:34:4a:bd: 0d:01:30:cf:7d:9f:39:ff:8f:24:86:01:da:ea:e4: f3:ab:34:2a:ab:49:b3:2e:3d:46:94:3b:bf:e8:48: 96:ac:0c:b8:68:01:51:1b:76:a2:43:c8:63:dd:1e: 8a:b2:25:52:fa:65:9d:ee:84:61:e3:31:63:ec:71: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:03:71:B9:07:A6:4A:AE:00:06:F3:60:14:3D:AE:AA:23:8A:AF X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:42:da:bb:3f:41:ec:1d:1e:a2:99:d1:40:4c:fe:74:0f:72: 60:37:63:77:e6:26:e9:7f:71:ec:92:fd:17:76:ef:c0:a5:14: b6:b9:4a:45:14:6f:a2:05:96:f3:21:0e:c9:e4:21:c5:65:c0: 87:5a:72:31:fc:39:ec:fa:8f:8a:8e:39:27:dc:5a:40:53:18: b8:f4:71:4b:53:ce:e8:b7:3a:91:3a:c7:6e:72:08:3c:e6:99: e7:15:60:99:a5:4a:d5:fa:de:50:e0:70:2d:af:ac:ac:32:24: eb:c6:97:fc:b9:1d:8f:14:8d:cf:66:21:9f:17:0e:e0:12:13: 1e:a9:5f:9e:cf:e1:11:7f:12:cd:d0:70:14:8d:0b:2d:4a:34: 98:ac:d3:c7:92:bf:a5:f8:c2:4e:3e:c4:5e:2e:c6:20:54:b0: 9f:f0:93:d7:f1:a3:5c:1e:78:96:6c:39:a9:5e:08:a1:f2:81: 9c:37:44:67:95:c9:0c:b1:99:06:ba:15:2c:9b:eb:9c:ba:b5: c8:1a:3a:ad:2e:fb:8f:98:7b:dc:ff:29:b1:2e:f2:5a:32:c5: fc:5a:3d:1d:5b:64:e1:22:75:0f:c4:d3:3c:ab:0b:c5:c5:25: c1:29:f2:11:37:ed:1e:fd:25:ba:85:7a:cc:7b:e1:00:93:f6: 1a:63:9a:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVnjPs+hoWb26NokIFqAW3xlQnGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjExMDIwNDUzNDdaFw0yNjExMDMwNzI3NDdaMDMxMTAvBgNV BAMTKEZFOEEwMzcxQjkwN0E2NEFBRTAwMDZGMzYwMTQzREFFQUEyMzhBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBUtsNTWriJ8lNQ+3DWXmOVmvj v4pNCmPdEwTIRKW8s6K6dr7w2jzzxEzWxjW+NzhiVKCeH89fWOj+m4ukB9K4UvxD 0EMcGfw9pg3F/HjgpKxx/zgiK5bNPSLO6w5VnS9TxlhAtQLIpZewjTEP6KOrU/1H SrbgILXMBSFY0b5iJqsWoRxxh9oQrXl3vQMREhyBZqLRpOBLvZW6ZsqGSVME8C9m I5rFfZI2VADAbBx0ZT6zzsucE85DuLpfuAOrajRKvQ0BMM99nzn/jySGAdrq5POr NCqrSbMuPUaUO7/oSJasDLhoAVEbdqJDyGPdHoqyJVL6ZZ3uhGHjMWPscWrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ooDcbkHpkquAAbzYBQ9rqojiq8wHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4 MEI4NjM1Mzk1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJC2rs/QewdHqKZ0UBM/nQPcmA3Y3fmJul/ ceyS/Rd278ClFLa5SkUUb6IFlvMhDsnkIcVlwIdacjH8Oez6j4qOOSfcWkBTGLj0 cUtTzui3OpE6x25yCDzmmecVYJmlStX63lDgcC2vrKwyJOvGl/y5HY8Ujc9mIZ8X DuASEx6pX57P4RF/Es3QcBSNCy1KNJis08eSv6X4wk4+xF4uxiBUsJ/wk9fxo1we eJZsOaleCKHygZw3RGeVyQyxmQa6FSyb65y6tcgaOq0u+4+Ye9z/KbEu8loyxfxa PR1bZOEidQ/E0zyrC8XFJcEp8hE37R79JbqFesx74QCT9hpjmgQ= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:20 2026 by rpki-client