$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.mft File: 6C51F6049FEA49ABFDC27551DEA1C378434ED444.mft (raw, json) Hash identifier: Ew1vl/yOUZ1Z+AGOSAwYwg3LsHb0blWldRDx8Mw6+wg= Subject key identifier: 11:CD:5B:02:6B:4B:28:BC:DC:D4:27:17:40:E8:D1:06:5B:5B:74:92 Authority key identifier: 6C:51:F6:04:9F:EA:49:AB:FD:C2:75:51:DE:A1:C3:78:43:4E:D4:44 Certificate issuer: /CN=6C51F6049FEA49ABFDC27551DEA1C378434ED444 Certificate serial: 33E76040DCD8F36742ED6136C9FA48FC6FED03B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 20:02:32 +0000 Manifest this update: Tue 03 Nov 2026 19:57:32 +0000 Manifest next update: Wed 04 Nov 2026 23:19:32 +0000 Files and hashes: 1: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: TY9xtOQFTiGa56M4F+YE1hmcUj+TGkmqgi8wHfKHu1E=) 2: 6C51F6049FEA49ABFDC27551DEA1C378434ED444.crl (hash: +QL+lcVXX8nYwe0g3gVorh5BvrlDC9jj3rrq3lBz5J4=) 3: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: fkc1XCmqzTU7tOsrLdDfRFEUh2kWe7ghQfxgIMue1ps=) 4: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: eUYjPUMGIIq2haj+zYFju+jv3KcSDuAhPxx4+266i1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.crl rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e7:60:40:dc:d8:f3:67:42:ed:61:36:c9:fa:48:fc:6f:ed:03:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C51F6049FEA49ABFDC27551DEA1C378434ED444 Validity Not Before: Nov 3 19:57:32 2026 GMT Not After : Nov 4 23:19:32 2026 GMT Subject: CN=11CD5B026B4B28BCDCD4271740E8D1065B5B7492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:7b:d8:6b:74:5f:aa:c5:ef:af:00:9d:0e: 4c:0c:c2:3a:e6:67:85:2b:ee:d9:10:bd:49:0a:f2: 77:47:6b:f3:b7:c9:2e:99:70:c7:50:83:03:af:55: 0a:b7:3e:f2:48:23:b5:b3:49:86:8a:01:cd:ac:0a: 75:ea:83:5d:e9:30:04:a0:90:aa:f0:52:26:9e:a9: 8d:8b:e1:fc:16:9d:56:7e:88:9f:4e:f0:e1:7a:58: f7:49:ed:b8:45:d7:15:a0:4f:e2:c9:20:25:ea:37: 65:e9:c4:6f:e0:c9:0a:c7:dd:5c:32:d6:3d:99:a4: d9:7f:12:b2:52:fa:7d:de:f8:d8:d7:fb:1c:37:8b: 54:94:c9:48:09:0e:c7:a8:d8:32:01:a8:6c:e0:da: 48:eb:99:4c:8f:dc:a4:06:c0:d7:eb:e9:90:58:f9: 0a:52:f3:81:c4:cd:14:e0:a7:4e:3b:88:72:ad:2f: e9:2c:dd:6b:f9:1c:3d:b2:fc:2f:4b:d3:03:0e:ec: fe:2b:21:cc:e3:69:e3:18:87:3d:8c:1a:0f:1e:7e: 7d:f1:b6:6c:42:ee:19:70:75:57:c0:69:0e:7c:0b: f7:af:93:c9:c8:c6:c5:1e:11:74:89:88:9d:e7:de: bc:f7:63:7e:e3:dd:39:f4:06:64:21:14:aa:63:a7: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:5B:02:6B:4B:28:BC:DC:D4:27:17:40:E8:D1:06:5B:5B:74:92 X509v3 Authority Key Identifier: keyid:6C:51:F6:04:9F:EA:49:AB:FD:C2:75:51:DE:A1:C3:78:43:4E:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c5:6f:0b:6f:20:d0:cc:a2:d1:4a:1c:cd:21:b4:3d:74:ea: b8:91:49:d6:09:f1:f5:eb:b6:14:28:a4:d3:5f:12:ad:6f:31: 73:76:54:a6:83:67:ed:28:11:e0:3e:5c:70:f2:42:22:d5:67: 2e:47:51:ff:ad:6e:cf:5c:c9:4b:6b:ed:79:1f:ab:41:5c:f2: c6:e6:cd:2c:ba:b9:8e:3e:3f:2b:04:3c:97:5c:29:a5:c7:83: 65:4f:f2:95:9e:a8:fc:d8:78:e4:df:d9:69:1e:6d:8c:12:af: ea:4d:80:13:e8:67:da:70:6e:f5:79:d9:c0:dc:63:ef:3b:b0: 4f:11:cd:38:4f:d8:cb:13:62:d9:ca:31:ee:47:c8:bb:fe:2f: 1f:cf:be:17:21:2c:35:fe:04:1a:1a:de:8a:83:68:ab:53:e4: 4e:52:26:70:be:82:70:cf:5f:c6:5a:59:7b:89:1e:3a:97:67: 64:e0:c4:bc:c8:8b:ed:bd:fe:fc:48:4d:2e:7a:8e:84:8a:94: a3:3c:cc:d5:e5:bd:45:57:ca:dc:9c:0b:f4:17:13:f1:b0:e4: 25:71:0e:ad:df:b5:85:3f:b3:99:bc:0b:43:1c:e1:aa:3b:92: e6:18:e3:09:56:3a:af:81:d6:fe:ce:58:e3:f8:fa:a3:f4:8f: 92:16:a1:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+dgQNzY82dC7WE2yfpI/G/tA7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM1MUY2MDQ5RkVBNDlBQkZEQzI3NTUxREVBMUMzNzg0 MzRFRDQ0NDAeFw0yNjExMDMxOTU3MzJaFw0yNjExMDQyMzE5MzJaMDMxMTAvBgNV BAMTKDExQ0Q1QjAyNkI0QjI4QkNEQ0Q0MjcxNzQwRThEMTA2NUI1Qjc0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjeXvYa3RfqsXvrwCdDkwMwjrm Z4Ur7tkQvUkK8ndHa/O3yS6ZcMdQgwOvVQq3PvJII7WzSYaKAc2sCnXqg13pMASg kKrwUiaeqY2L4fwWnVZ+iJ9O8OF6WPdJ7bhF1xWgT+LJICXqN2XpxG/gyQrH3Vwy 1j2ZpNl/ErJS+n3e+NjX+xw3i1SUyUgJDseo2DIBqGzg2kjrmUyP3KQGwNfr6ZBY +QpS84HEzRTgp047iHKtL+ks3Wv5HD2y/C9L0wMO7P4rIczjaeMYhz2MGg8efn3x tmxC7hlwdVfAaQ58C/evk8nIxsUeEXSJiJ3n3rz3Y37j3Tn0BmQhFKpjp/nLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEc1bAmtLKLzc1CcXQOjRBltbdJIwHwYDVR0j BBgwFoAUbFH2BJ/qSav9wnVR3qHDeENO1EQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBkMWY0Y2UtMTY5Yi00MzFhLTgyODYtYzVmM2EwN2JiYmUzLzAvNkM1MUY2MDQ5 RkVBNDlBQkZEQzI3NTUxREVBMUMzNzg0MzRFRDQ0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82QzUxRjYwNDlGRUE0OUFCRkRDMjc1NTFERUExQzM3ODQzNEVE NDQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy ODYtYzVmM2EwN2JiYmUzLzAvNkM1MUY2MDQ5RkVBNDlBQkZEQzI3NTUxREVBMUMz Nzg0MzRFRDQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvFbwtvINDMotFKHM0htD106riRSdYJ8fXr thQopNNfEq1vMXN2VKaDZ+0oEeA+XHDyQiLVZy5HUf+tbs9cyUtr7Xkfq0Fc8sbm zSy6uY4+PysEPJdcKaXHg2VP8pWeqPzYeOTf2WkebYwSr+pNgBPoZ9pwbvV52cDc Y+87sE8RzThP2MsTYtnKMe5HyLv+Lx/PvhchLDX+BBoa3oqDaKtT5E5SJnC+gnDP X8ZaWXuJHjqXZ2TgxLzIi+29/vxITS56joSKlKM8zNXlvUVXytycC/QXE/Gw5CVx Dq3ftYU/s5m8C0Mc4ao7kuYY4wlWOq+B1v7OWOP4+qP0j5IWofw= -----END CERTIFICATE-----Generated at Wed Nov 4 07:36:04 2026 by rpki-client