$ rpki-client -vvvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft File: 6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json) Hash identifier: UX/SpbQrAVak9sC2GmkrJDqLMdvlS0r2dVinI+LEPz4= Subject key identifier: 48:95:FD:17:3E:B6:21:B2:AB:2A:5C:F9:76:8A:D0:13:58:E8:78:57 Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9 Certificate issuer: /CN=6D171A25D57FF823724FB6208343D200F64CBBB9 Certificate serial: 669FFE116CC43D85664B095FBCEC24D32C2453D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 23:47:13 +0000 Manifest this update: Mon 02 Nov 2026 23:42:13 +0000 Manifest next update: Wed 04 Nov 2026 00:11:13 +0000 Files and hashes: 1: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: jxP1EoXenfR+hM1dcbxXlIGlEbju6x2EBBBgdeSTFmM=) 2: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=) 3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 00:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9f:fe:11:6c:c4:3d:85:66:4b:09:5f:bc:ec:24:d3:2c:24:53:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9 Validity Not Before: Nov 2 23:42:13 2026 GMT Not After : Nov 4 00:11:13 2026 GMT Subject: CN=4895FD173EB621B2AB2A5CF9768AD01358E87857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:3c:39:56:e1:69:d4:d2:cb:26:58:71:ac: f5:cc:43:be:5d:02:56:3e:34:68:6a:cd:62:a9:e0: ea:84:9d:5c:9f:bb:8e:c3:fd:c2:63:8a:64:12:d7: 8d:bd:85:81:22:ee:8d:32:c9:96:69:f9:45:0a:0d: d0:bc:ef:6c:92:b3:15:a2:f6:8e:15:ca:4a:1f:db: 96:48:77:00:05:64:45:16:9b:0c:42:26:15:9d:03: e2:82:1d:47:67:3d:74:e9:8a:33:74:ce:fb:14:56: df:8b:be:1f:11:b0:a0:d3:3a:e3:da:3b:fe:3e:fc: 02:9a:a2:b0:75:c7:98:84:b6:00:09:ad:b2:fc:59: e1:ed:d3:bb:8d:52:0a:36:9e:7f:60:1a:a8:a2:37: 51:60:b7:81:7a:41:99:f5:8b:72:56:20:fe:9e:51: e5:16:82:5a:99:25:60:4a:67:ef:28:d7:2f:fa:89: 10:3d:db:e7:99:68:e6:75:12:b9:ec:8f:a6:71:8e: 55:77:1d:73:4a:ad:30:34:8c:0e:9f:85:e3:ed:af: 12:d6:23:a4:30:87:81:e4:1b:f6:23:2c:25:d7:c3: 98:3a:c7:d3:97:1c:56:65:ea:4b:4c:01:73:12:db: 53:b1:c0:6c:e8:2b:42:98:e8:7c:f5:57:eb:a2:3f: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:95:FD:17:3E:B6:21:B2:AB:2A:5C:F9:76:8A:D0:13:58:E8:78:57 X509v3 Authority Key Identifier: keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:95:1d:96:f7:61:cf:cc:80:5a:bc:a7:ac:52:74:80:d8:71: cc:8e:6c:58:45:4e:f1:32:37:ff:50:64:a4:cf:05:1f:77:37: a1:34:c5:de:38:45:3f:4c:99:62:9c:b8:47:15:33:0d:9c:26: d5:b6:5e:eb:77:c8:af:54:48:e8:71:a0:cf:84:10:1a:15:de: 0c:f5:77:de:92:74:f7:6e:f8:b9:f1:c7:bd:69:18:f8:77:f8: 67:ac:88:d1:df:a3:51:09:9b:42:04:b4:73:74:10:8a:60:6b: f7:97:de:82:dd:26:51:9a:c8:06:12:71:c3:4d:42:81:71:68: cb:2a:66:e2:7a:8c:c2:e5:e3:5a:1a:4c:b8:72:a8:26:52:66: 7e:f8:3f:5d:8d:3e:e1:59:18:c7:ff:29:bf:80:42:5f:29:f1: 18:5a:0d:5b:eb:7f:d8:4b:58:2a:8e:ec:78:34:25:5e:89:0e: 8c:a7:9c:51:bf:bc:46:c7:c1:b5:1e:16:f5:2a:96:82:2b:ae: 47:dd:99:3a:86:35:f9:54:7e:bd:7e:ce:58:1f:34:83:68:a3: 66:29:0a:29:b7:a3:f5:c0:71:9a:67:62:98:2b:a8:89:41:47: 9f:6e:62:17:c8:90:9a:9f:c0:e1:d9:4e:0a:79:37:d5:04:ec: de:1c:85:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZp/+EWzEPYVmSwlfvOwk0ywkU9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxNzFBMjVENTdGRjgyMzcyNEZCNjIwODM0M0QyMDBG NjRDQkJCOTAeFw0yNjExMDIyMzQyMTNaFw0yNjExMDQwMDExMTNaMDMxMTAvBgNV BAMTKDQ4OTVGRDE3M0VCNjIxQjJBQjJBNUNGOTc2OEFEMDEzNThFODc4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NDw5VuFp1NLLJlhxrPXMQ75d AlY+NGhqzWKp4OqEnVyfu47D/cJjimQS1429hYEi7o0yyZZp+UUKDdC872ySsxWi 9o4Vykof25ZIdwAFZEUWmwxCJhWdA+KCHUdnPXTpijN0zvsUVt+Lvh8RsKDTOuPa O/4+/AKaorB1x5iEtgAJrbL8WeHt07uNUgo2nn9gGqiiN1Fgt4F6QZn1i3JWIP6e UeUWglqZJWBKZ+8o1y/6iRA92+eZaOZ1Ernsj6ZxjlV3HXNKrTA0jA6fhePtrxLW I6Qwh4HkG/YjLCXXw5g6x9OXHFZl6ktMAXMS21OxwGzoK0KY6Hz1V+uiP4a9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJX9Fz62IbKrKlz5dorQE1joeFcwHwYDVR0j BBgwFoAUbRcaJdV/+CNyT7Ygg0PSAPZMu7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzE0MDM0MDktYmYwNC00MmU5LTk1NjctYjA2ZWM4MjNkOTAxLzAvNkQxNzFBMjVE NTdGRjgyMzcyNEZCNjIwODM0M0QyMDBGNjRDQkJCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RDE3MUEyNUQ1N0ZGODIzNzI0RkI2MjA4MzQzRDIwMEY2NENC QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvNkQxNzFBMjVENTdGRjgyMzcyNEZCNjIwODM0M0Qy MDBGNjRDQkJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiVHZb3Yc/MgFq8p6xSdIDYccyObFhFTvEy N/9QZKTPBR93N6E0xd44RT9MmWKcuEcVMw2cJtW2Xut3yK9USOhxoM+EEBoV3gz1 d96SdPdu+Lnxx71pGPh3+GesiNHfo1EJm0IEtHN0EIpga/eX3oLdJlGayAYSccNN QoFxaMsqZuJ6jMLl41oaTLhyqCZSZn74P12NPuFZGMf/Kb+AQl8p8RhaDVvrf9hL WCqO7Hg0JV6JDoynnFG/vEbHwbUeFvUqloIrrkfdmTqGNflUfr1+zlgfNINoo2Yp Cim3o/XAcZpnYpgrqIlBR59uYhfIkJqfwOHZTgp5N9UE7N4chS4= -----END CERTIFICATE-----Generated at Tue Nov 3 06:40:28 2026 by rpki-client