$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: AmB0Y3NQVT5Q9kipHDTU2E5nl4Kitdd4GCwdgkOcrcE= Subject key identifier: EF:95:78:3F:07:C9:EB:76:BE:1B:F4:B8:16:A5:3C:6B:CF:51:C8:15 Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 4E60D14DF27F08A2BB35FC2F6F16E240E68D7C91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 09:39:40 +0000 Manifest this update: Mon 02 Nov 2026 09:34:40 +0000 Manifest next update: Tue 03 Nov 2026 13:11:40 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 2: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) 3: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) 5: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: DVJb/UyUhQ2lV0Fngr8gFE9FHVkFZlWtOWR+rpjhloc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:60:d1:4d:f2:7f:08:a2:bb:35:fc:2f:6f:16:e2:40:e6:8d:7c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: Nov 2 09:34:40 2026 GMT Not After : Nov 3 13:11:40 2026 GMT Subject: CN=EF95783F07C9EB76BE1BF4B816A53C6BCF51C815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2b:01:92:b1:ee:54:60:2b:1e:3e:28:45:91: f2:ce:7b:73:ae:39:f9:3c:11:ae:cf:8d:a3:64:fb: 6b:c2:e2:ed:c9:01:9b:73:95:6b:3c:70:78:f3:a0: 47:43:d0:10:8c:96:bb:05:57:d4:e7:9d:5d:69:cd: 3c:99:91:b1:60:69:d3:bb:e3:0b:86:6b:07:43:2d: 8e:17:47:aa:c6:06:95:d2:fb:05:98:cc:95:5a:49: 72:cc:f7:17:29:44:ff:22:ae:df:28:89:ad:10:2b: 2b:cf:85:4d:eb:cc:33:e8:94:28:41:df:f3:8d:42: 76:4b:ee:ac:8e:d9:3c:da:29:a8:14:05:76:84:dd: 47:ec:9d:7b:67:a8:52:cd:30:91:e1:0c:f1:a8:03: 86:d5:5c:87:93:f9:e9:11:d5:4f:b9:5e:ed:69:f0: 40:03:86:af:38:a5:1b:3b:20:68:0a:31:fc:0c:9a: 64:20:92:cb:36:bd:ae:81:b7:64:22:c9:60:05:84: ae:72:50:3d:1f:79:c7:a1:2b:78:1f:de:54:b7:88: 21:bb:88:da:20:f2:2b:47:a7:f2:aa:2d:53:9a:6a: c4:31:ce:c6:eb:ca:93:96:31:10:c2:8f:c7:ea:09: 3e:c5:a1:1e:e3:18:16:dc:de:24:df:b3:15:16:28: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:95:78:3F:07:C9:EB:76:BE:1B:F4:B8:16:A5:3C:6B:CF:51:C8:15 X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:93:f9:c4:a7:ed:58:7a:f4:e2:01:91:41:55:ed:bd:7b:e6: 15:8c:87:06:da:43:91:b0:e9:27:84:28:0f:09:99:63:81:5a: 54:24:61:0f:7f:20:0e:4f:7a:7e:54:c7:58:af:29:11:3e:0e: 93:ed:27:03:5e:25:80:87:e3:7f:ca:ae:fc:38:67:0c:bb:a1: 6d:76:eb:0c:e7:0d:a0:c3:2e:19:91:db:3e:49:f9:c9:42:ed: 87:be:4a:74:c2:31:8b:fa:9b:6d:ef:45:b5:f2:56:d0:6d:b4: 37:65:3a:cc:76:f7:01:d5:c6:a5:30:f6:51:ed:7f:14:90:24: 98:e8:04:aa:2e:27:28:43:03:07:8b:7a:11:9d:4c:91:c7:be: 50:84:64:24:02:a2:e7:00:61:55:08:88:5d:31:e6:ac:4e:fe: 7b:49:c4:03:32:8a:dc:9e:1a:0d:e9:05:08:16:36:55:b0:90: 93:ec:b5:e8:dc:a3:9c:61:f4:7f:25:4e:2a:7d:f5:11:6f:69: 05:d8:f4:40:99:ed:12:38:44:9d:06:33:5c:60:51:e5:62:96: 45:8a:79:62:a6:7c:bb:c5:05:e0:69:0b:23:12:46:d5:fa:3c: 79:6e:27:70:c6:ff:4e:8a:2b:8d:c8:55:54:a8:88:c3:6f:49: da:d5:28:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmDRTfJ/CKK7NfwvbxbiQOaNfJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjExMDIwOTM0NDBaFw0yNjExMDMxMzExNDBaMDMxMTAvBgNV BAMTKEVGOTU3ODNGMDdDOUVCNzZCRTFCRjRCODE2QTUzQzZCQ0Y1MUM4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBKwGSse5UYCsePihFkfLOe3Ou Ofk8Ea7PjaNk+2vC4u3JAZtzlWs8cHjzoEdD0BCMlrsFV9TnnV1pzTyZkbFgadO7 4wuGawdDLY4XR6rGBpXS+wWYzJVaSXLM9xcpRP8irt8oia0QKyvPhU3rzDPolChB 3/ONQnZL7qyO2TzaKagUBXaE3UfsnXtnqFLNMJHhDPGoA4bVXIeT+ekR1U+5Xu1p 8EADhq84pRs7IGgKMfwMmmQgkss2va6Bt2QiyWAFhK5yUD0fecehK3gf3lS3iCG7 iNog8itHp/KqLVOaasQxzsbrypOWMRDCj8fqCT7FoR7jGBbc3iTfsxUWKD2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU75V4PwfJ63a+G/S4FqU8a89RyBUwHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqT+cSn7Vh69OIBkUFV7b175hWMhwbaQ5Gw 6SeEKA8JmWOBWlQkYQ9/IA5Pen5Ux1ivKRE+DpPtJwNeJYCH43/Krvw4Zwy7oW12 6wznDaDDLhmR2z5J+clC7Ye+SnTCMYv6m23vRbXyVtBttDdlOsx29wHVxqUw9lHt fxSQJJjoBKouJyhDAweLehGdTJHHvlCEZCQCoucAYVUIiF0x5qxO/ntJxAMyitye Gg3pBQgWNlWwkJPstejco5xh9H8lTip99RFvaQXY9ECZ7RI4RJ0GM1xgUeVilkWK eWKmfLvFBeBpCyMSRtX6PHluJ3DG/06KK43IVVSoiMNvSdrVKB4= -----END CERTIFICATE-----Generated at Tue Nov 3 03:53:31 2026 by rpki-client