$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft File: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft (raw, json) Hash identifier: oDCI0Ex/7EK29QOgndCvZ8Lb4QafRoq6GM5UHvr3WpI= Subject key identifier: B7:8C:BA:8B:90:09:46:70:01:B6:2D:77:72:44:78:0C:30:D5:88:43 Authority key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD Certificate issuer: /CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Certificate serial: 525689961ECC14F8F050309C1F85B126E54AA253 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 18:51:20 +0000 Manifest this update: Mon 02 Nov 2026 18:46:20 +0000 Manifest next update: Tue 03 Nov 2026 21:32:20 +0000 Files and hashes: 1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: E+hRgGJJ8C/Srz5/ghgOOJ3QwYrgYhMnvxLJoD14unU=) 2: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl (hash: FCfkl/7iUKG//91VCOeq9QM2V17i9SYfl+9vxmBCNj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:56:89:96:1e:cc:14:f8:f0:50:30:9c:1f:85:b1:26:e5:4a:a2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Validity Not Before: Nov 2 18:46:20 2026 GMT Not After : Nov 3 21:32:20 2026 GMT Subject: CN=B78CBA8B9009467001B62D777244780C30D58843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6b:fc:9e:e9:8d:9a:d8:06:26:49:66:ee:aa: 27:d9:6c:15:5f:d0:62:99:3b:bb:a3:c8:41:77:d1: 63:de:e5:28:12:82:ff:17:94:80:fd:1a:d0:0b:25: f5:79:be:bb:ec:12:49:80:98:f5:b7:e3:cc:fa:e1: 55:e2:7a:69:a1:6c:de:a5:26:86:6c:fc:01:8f:62: bc:40:90:ae:09:59:71:c1:69:48:7d:27:b8:e3:f5: bc:d3:ea:9f:43:07:c5:e5:9c:2d:84:49:c2:89:5f: 91:21:67:e1:a0:fb:48:9a:13:3b:04:fe:b5:cc:80: 6c:3d:4b:af:65:1a:19:da:18:de:ed:ac:2c:fd:ed: 4f:21:c0:2e:64:f7:7e:e8:29:a3:e6:3e:a0:ca:62: eb:ee:ed:a2:0b:d5:44:9d:9e:b8:f4:96:bd:9e:cf: e6:af:f7:27:ec:fa:f6:92:31:14:c0:e7:ed:ea:3b: 48:a1:47:c4:fb:f5:07:ef:ba:26:c5:3b:1b:13:33: 2c:05:d7:85:41:86:e5:f7:24:a8:e2:68:46:7c:f4: ba:7a:39:ee:6a:f5:c7:3c:ce:40:48:98:ba:02:07: 2a:0b:cc:a4:2f:25:5e:d4:26:25:30:81:8e:4c:0f: 4d:84:5a:7b:77:83:e0:a9:96:5c:c6:63:2c:31:74: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:BA:8B:90:09:46:70:01:B6:2D:77:72:44:78:0C:30:D5:88:43 X509v3 Authority Key Identifier: keyid:6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e1:ff:19:76:97:4f:04:6e:6c:46:65:df:5a:49:66:82:42: af:bb:7f:6d:33:8f:48:3f:3c:0d:e7:ed:95:cc:f5:a4:3e:01: b8:ff:44:76:ed:06:88:f7:e7:97:d6:33:b7:f9:3c:fe:65:1b: 0e:4b:67:8c:9b:66:44:9e:02:b3:6a:70:4d:7e:47:95:ae:35: 4a:58:b9:34:b8:43:c6:d5:85:9c:b4:28:5e:c6:98:24:63:ab: 39:67:06:95:ac:3c:fd:ed:26:2e:7b:04:9e:75:16:64:dd:d7: 58:74:e3:98:bc:df:c3:81:c5:88:a9:3f:02:e7:90:9a:86:09: 96:65:f9:22:55:8e:2a:10:7c:52:f9:19:b8:af:f1:ac:b4:a2: 36:dc:19:12:22:b9:76:91:e4:ec:72:48:f2:15:07:3b:17:69: 0f:6a:42:ca:ff:29:71:bc:a1:0e:09:f2:43:b0:f6:b8:be:26: a2:ac:83:11:66:ef:c8:b8:3f:95:f8:dd:2d:1b:c7:c9:3f:de: 25:af:3e:46:4b:b5:fa:12:1b:42:dd:d4:96:f7:83:85:18:8a: 97:5e:d4:28:5f:e4:6f:c8:30:64:5e:30:b6:ad:00:05:a9:29: a6:32:8b:4c:93:1b:25:2e:57:b3:34:d9:a7:4d:6f:5a:f9:11: 68:43:22:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlaJlh7MFPjwUDCcH4WxJuVKolMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5 RTYzOUFDRDAeFw0yNjExMDIxODQ2MjBaFw0yNjExMDMyMTMyMjBaMDMxMTAvBgNV BAMTKEI3OENCQThCOTAwOTQ2NzAwMUI2MkQ3NzcyNDQ3ODBDMzBENTg4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1a/ye6Y2a2AYmSWbuqifZbBVf 0GKZO7ujyEF30WPe5SgSgv8XlID9GtALJfV5vrvsEkmAmPW348z64VXiemmhbN6l JoZs/AGPYrxAkK4JWXHBaUh9J7jj9bzT6p9DB8XlnC2EScKJX5EhZ+Gg+0iaEzsE /rXMgGw9S69lGhnaGN7trCz97U8hwC5k937oKaPmPqDKYuvu7aIL1USdnrj0lr2e z+av9yfs+vaSMRTA5+3qO0ihR8T79QfvuibFOxsTMywF14VBhuX3JKjiaEZ89Lp6 Oe5q9cc8zkBImLoCByoLzKQvJV7UJiUwgY5MD02EWnt3g+CpllzGYywxdJaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4y6i5AJRnABti13ckR4DDDViEMwHwYDVR0j BBgwFoAUbziDE0uux8EAyLKkk31T3p5jms0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVkNzM2ZGMtZTVkYi00MzgxLTk3MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0 QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5RTYzOUFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RjM4ODMxMzRCQUVDN0MxMDBDOEIyQTQ5MzdENTNERTlFNjM5 QUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVkNzM2ZGMtZTVkYi00MzgxLTk3 MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUz REU5RTYzOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHh/xl2l08EbmxGZd9aSWaCQq+7f20zj0g/ PA3n7ZXM9aQ+Abj/RHbtBoj355fWM7f5PP5lGw5LZ4ybZkSeArNqcE1+R5WuNUpY uTS4Q8bVhZy0KF7GmCRjqzlnBpWsPP3tJi57BJ51FmTd11h045i838OBxYipPwLn kJqGCZZl+SJVjioQfFL5Gbiv8ay0ojbcGRIiuXaR5OxySPIVBzsXaQ9qQsr/KXG8 oQ4J8kOw9ri+JqKsgxFm78i4P5X43S0bx8k/3iWvPkZLtfoSG0Ld1Jb3g4UYipde 1Chf5G/IMGReMLatAAWpKaYyi0yTGyUuV7M02adNb1r5EWhDIsQ= -----END CERTIFICATE-----Generated at Mon Nov 2 22:32:19 2026 by rpki-client