$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft File: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft (raw, json) Hash identifier: MjLQcVxJKL0QzncpkH/BGZeckVnv5pdQdwvV1XjmJCQ= Subject key identifier: A0:93:43:40:69:03:A1:B6:7B:C4:55:08:40:52:07:BF:AC:E7:45:F7 Authority key identifier: 6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 Certificate issuer: /CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Certificate serial: 3FB9DC66864CDA4E9C0D7B0CEF80BEF6890270DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 22:30:57 +0000 Manifest this update: Tue 03 Nov 2026 22:25:57 +0000 Manifest next update: Thu 05 Nov 2026 01:43:57 +0000 Files and hashes: 1: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl (hash: v0pAzpdPl+df3JjYAEb+p1y+8790nixGnsLpxg8GdHg=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: /9mhE8hilLMkdKj/KGoukj1sKVJz3HgKOnytnAx8zSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b9:dc:66:86:4c:da:4e:9c:0d:7b:0c:ef:80:be:f6:89:02:70:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497 Validity Not Before: Nov 3 22:25:57 2026 GMT Not After : Nov 5 01:43:57 2026 GMT Subject: CN=A09343406903A1B67BC45508405207BFACE745F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:87:8d:fd:1e:aa:60:ae:c6:9c:d8:7f:75: c2:60:82:29:cf:2c:08:68:ff:98:c2:94:2f:0f:01: 06:e5:6a:1c:12:35:5f:bd:39:cd:f2:f7:0e:d8:c8: 8a:52:bd:48:9f:9b:54:55:d6:fc:ec:0a:9e:55:a0: 69:f9:ab:85:1c:9b:8c:09:85:ff:c6:11:13:dd:f6: 7d:67:4e:e7:17:09:a3:05:40:40:b2:f2:cf:68:23: 28:d1:13:b1:90:58:54:f2:86:9a:11:d7:ca:6e:4e: e8:2b:a5:15:3c:2d:23:6d:db:7e:38:99:14:29:60: 07:7e:98:ea:76:9a:90:cf:fe:10:4b:a3:ab:43:fa: 05:a9:da:c4:b2:6e:8b:03:7e:9f:c8:0b:5f:87:67: 77:7d:26:4e:0a:3c:86:01:dc:57:97:f2:87:9d:6f: 3e:dd:5b:22:af:9f:dc:9e:27:17:60:69:81:4a:89: d3:2b:13:a5:2b:e6:42:8a:74:65:d6:fa:65:5a:f2: 5d:d9:90:db:d3:30:0f:68:8e:72:7c:8a:31:d4:06: ac:33:2a:ba:d8:a7:bd:d6:eb:b4:88:57:a7:89:5c: 9f:39:66:46:1a:b9:23:71:68:cf:f2:2f:2b:53:9c: ce:11:28:e2:4c:8b:41:7a:59:00:ca:19:ef:ab:54: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:93:43:40:69:03:A1:B6:7B:C4:55:08:40:52:07:BF:AC:E7:45:F7 X509v3 Authority Key Identifier: keyid:6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5c:e5:7f:58:30:32:6b:65:2e:4d:9c:b4:8d:ea:0d:f0:d6: 19:3e:f7:4c:e3:83:8d:23:ef:f6:90:7e:e1:6e:45:a0:96:dd: 0f:a4:cb:0e:02:20:19:46:dc:ce:e9:55:41:9d:a0:5e:f0:65: a6:6d:95:b1:d2:0d:44:3e:01:bd:01:94:6f:c3:da:8a:04:0f: ff:0f:9d:6e:b2:0f:0b:52:9f:5d:91:e5:c5:56:b6:10:8e:53: 4e:6e:c2:22:26:f5:98:03:f4:4f:7f:dd:8c:9a:45:a6:5c:ac: 1e:25:c4:c9:fb:a3:c2:53:cc:39:c3:f6:4b:54:c0:72:43:99: 16:fb:91:7f:7c:14:e9:f0:db:60:5b:46:64:e8:dd:67:11:9b: 1a:cb:03:cd:0b:3b:d9:84:e8:fe:66:5d:9b:1e:7c:bf:be:a1: a0:07:6b:52:7d:8a:d8:b1:71:aa:99:fd:85:3b:17:46:f1:6a: f9:d4:e0:09:80:39:46:a7:4a:4b:0d:ed:18:32:fb:05:64:1f: c7:d4:a6:af:72:6e:3a:33:a7:75:d3:4f:bd:1e:11:87:a4:6c: 45:41:80:07:fe:d6:cd:81:1e:68:55:43:ca:b4:85:3c:78:5a: 8f:1a:a5:38:6e:12:84:9a:b9:b6:25:1d:ed:4d:1f:7e:64:71: 89:b4:70:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7ncZoZM2k6cDXsM74C+9okCcNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZD N0NCRDQ5NzAeFw0yNjExMDMyMjI1NTdaFw0yNjExMDUwMTQzNTdaMDMxMTAvBgNV BAMTKEEwOTM0MzQwNjkwM0ExQjY3QkM0NTUwODQwNTIwN0JGQUNFNzQ1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvIeN/R6qYK7GnNh/dcJgginP LAho/5jClC8PAQblahwSNV+9Oc3y9w7YyIpSvUifm1RV1vzsCp5VoGn5q4Ucm4wJ hf/GERPd9n1nTucXCaMFQECy8s9oIyjRE7GQWFTyhpoR18puTugrpRU8LSNt2344 mRQpYAd+mOp2mpDP/hBLo6tD+gWp2sSybosDfp/IC1+HZ3d9Jk4KPIYB3FeX8oed bz7dWyKvn9yeJxdgaYFKidMrE6Ur5kKKdGXW+mVa8l3ZkNvTMA9ojnJ8ijHUBqwz KrrYp73W67SIV6eJXJ85ZkYauSNxaM/yLytTnM4RKOJMi0F6WQDKGe+rVCthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJNDQGkDobZ7xFUIQFIHv6znRfcwHwYDVR0j BBgwFoAUahOHEqHSyDj4Y6e4gu1/1sfL1JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiMWFiN2YtZTQ1MS00MGQxLTliNzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJB MUQyQzgzOEY4NjNBN0I4ODJFRDdGRDZDN0NCRDQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QTEzODcxMkExRDJDODM4Rjg2M0E3Qjg4MkVEN0ZENkM3Q0JE NDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvNkExMzg3MTJBMUQyQzgzOEY4NjNBN0I4ODJFRDdG RDZDN0NCRDQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZc5X9YMDJrZS5NnLSN6g3w1hk+90zjg40j 7/aQfuFuRaCW3Q+kyw4CIBlG3M7pVUGdoF7wZaZtlbHSDUQ+Ab0BlG/D2ooED/8P nW6yDwtSn12R5cVWthCOU05uwiIm9ZgD9E9/3YyaRaZcrB4lxMn7o8JTzDnD9ktU wHJDmRb7kX98FOnw22BbRmTo3WcRmxrLA80LO9mE6P5mXZsefL++oaAHa1J9itix caqZ/YU7F0bxavnU4AmAOUanSksN7Rgy+wVkH8fUpq9ybjozp3XTT70eEYekbEVB gAf+1s2BHmhVQ8q0hTx4Wo8apThuEoSaubYlHe1NH35kcYm0cBk= -----END CERTIFICATE-----Generated at Wed Nov 4 18:07:34 2026 by rpki-client