$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft File: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft (raw, json) Hash identifier: Pots0sNArjn3wPHlxqzFsGVMt5YgL9fMB1mgFiTyUqY= Subject key identifier: B3:25:09:23:21:67:5A:CF:A2:B7:77:7A:49:33:7C:B7:07:E8:52:09 Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Certificate serial: 263BF800150CED1D461071D8840C03526A7C0C4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 18:00:00 +0000 Manifest this update: Sun 01 Nov 2026 17:55:00 +0000 Manifest next update: Mon 02 Nov 2026 21:53:00 +0000 Files and hashes: 1: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=) 2: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 1n9vrO/e00jv7CzxxHzwEFPz/e1n9uFRka2H9k4SRco=) 3: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: bx3Jz5RMo6M/oNMchr0+LwmSKVwAEYYJfafpXARS4Ho=) 4: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=) 5: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl (hash: lTD/ePn0oOS+4cwaAHzNsscNPRvhX9oO9gHUubqzn3o=) 6: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 21:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3b:f8:00:15:0c:ed:1d:46:10:71:d8:84:0c:03:52:6a:7c:0c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Validity Not Before: Nov 1 17:55:00 2026 GMT Not After : Nov 2 21:53:00 2026 GMT Subject: CN=B325092321675ACFA2B7777A49337CB707E85209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:0e:6f:16:5f:67:35:b5:1d:96:48:bd:76: 81:78:0d:2b:1a:9d:b7:32:9b:0f:02:98:5f:db:f0: db:95:45:70:e4:f4:50:9e:a4:11:18:24:3c:95:05: 3f:ec:87:06:6a:d6:da:ea:22:90:1b:8a:57:98:96: 01:77:49:a0:78:de:99:f8:c5:cc:3d:65:b4:3f:44: 0b:f7:98:c0:45:06:08:c2:4f:35:a2:69:03:ee:b9: b5:41:e0:8d:cc:99:a8:66:6d:90:dc:2d:18:3b:a7: 4e:6b:93:05:11:b9:1a:e9:63:2f:fc:d3:90:16:a7: 8d:4d:5d:ac:9a:89:d8:11:0f:55:ce:b8:4a:1b:7d: a5:c2:f1:4d:c0:8e:37:d4:96:6a:a3:65:57:fe:82: 55:3a:fd:3c:5b:68:1e:dc:4f:e2:39:e2:52:93:74: 18:86:b2:ca:ee:bb:1d:2e:f0:8c:f5:42:a1:ab:f4: be:8c:d4:93:52:31:9b:be:85:78:3a:ff:18:53:0d: 43:20:41:4c:59:ac:38:79:fc:60:ae:38:86:6e:71: 97:5d:40:a8:75:9e:35:65:e7:0f:85:6b:bd:12:bc: 0b:85:3b:57:48:b3:ac:b3:51:8c:0c:74:bd:b2:a9: 63:7f:1d:3c:db:76:62:8c:88:bf:21:57:cf:a9:8a: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:25:09:23:21:67:5A:CF:A2:B7:77:7A:49:33:7C:B7:07:E8:52:09 X509v3 Authority Key Identifier: keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e3:33:b3:ad:58:45:a4:d1:ad:d3:d1:b7:f7:66:4e:98:e7: d7:83:ca:1a:e0:c4:c6:e3:44:77:d3:a9:6c:e6:3e:ca:3f:86: f1:3f:16:dd:2e:41:d8:a4:3c:c8:7b:19:4f:c3:86:4f:58:30: 95:ca:2f:da:6b:ca:38:42:e6:a9:47:d0:b2:4a:1c:3e:fd:ce: 7a:08:8b:6f:1e:d1:9e:26:55:35:cc:2e:1d:6c:d9:5e:de:f7: dd:78:6d:bb:29:22:7c:7b:89:09:c8:ca:ba:6f:cf:cc:fe:26: c7:7f:45:df:39:0f:45:de:13:5c:ab:1b:6b:89:60:7e:aa:a7: 51:fb:73:a1:59:76:f9:e5:1a:c3:e8:4b:3a:25:df:69:0b:3a: 81:de:cd:38:24:54:00:b7:3c:18:5d:ac:a9:79:90:1c:0c:16: 85:73:0c:25:79:20:fe:c4:01:54:37:c1:da:42:71:24:fe:a1: 2a:f7:79:a7:bb:94:d3:f1:35:71:bb:ca:fd:17:8b:e1:02:3d: c7:cb:03:86:c8:3e:76:ac:76:3c:c4:d3:76:4e:66:1e:39:ca: 23:46:25:cf:85:b2:f9:d9:8f:91:1f:5b:ea:4a:bf:71:4d:7c: a1:03:67:d6:45:f9:b3:0b:b3:34:00:bc:19:bf:6a:1c:37:42: b1:1b:06:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjv4ABUM7R1GEHHYhAwDUmp8DEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND OTFGRURCRjAeFw0yNjExMDExNzU1MDBaFw0yNjExMDIyMTUzMDBaMDMxMTAvBgNV BAMTKEIzMjUwOTIzMjE2NzVBQ0ZBMkI3Nzc3QTQ5MzM3Q0I3MDdFODUyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMQ5vFl9nNbUdlki9doF4DSsa nbcymw8CmF/b8NuVRXDk9FCepBEYJDyVBT/shwZq1trqIpAbileYlgF3SaB43pn4 xcw9ZbQ/RAv3mMBFBgjCTzWiaQPuubVB4I3MmahmbZDcLRg7p05rkwURuRrpYy/8 05AWp41NXayaidgRD1XOuEobfaXC8U3AjjfUlmqjZVf+glU6/TxbaB7cT+I54lKT dBiGssruux0u8Iz1QqGr9L6M1JNSMZu+hXg6/xhTDUMgQUxZrDh5/GCuOIZucZdd QKh1njVl5w+Fa70SvAuFO1dIs6yzUYwMdL2yqWN/HTzbdmKMiL8hV8+pirUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyUJIyFnWs+it3d6STN8twfoUgkwHwYDVR0j BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0 RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThF NkNDOTFGRURCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbjM7OtWEWk0a3T0bf3Zk6Y59eDyhrgxMbj RHfTqWzmPso/hvE/Ft0uQdikPMh7GU/Dhk9YMJXKL9pryjhC5qlH0LJKHD79znoI i28e0Z4mVTXMLh1s2V7e9914bbspInx7iQnIyrpvz8z+Jsd/Rd85D0XeE1yrG2uJ YH6qp1H7c6FZdvnlGsPoSzol32kLOoHezTgkVAC3PBhdrKl5kBwMFoVzDCV5IP7E AVQ3wdpCcST+oSr3eae7lNPxNXG7yv0Xi+ECPcfLA4bIPnasdjzE03ZOZh45yiNG Jc+FsvnZj5EfW+pKv3FNfKEDZ9ZF+bMLszQAvBm/ahw3QrEbBiM= -----END CERTIFICATE-----Generated at Mon Nov 2 07:12:18 2026 by rpki-client