$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: HBbbvBE0W2fPhhhDruO2EEf93GJsasTO1qm6MZ3PfdU= Subject key identifier: 12:5E:EB:6F:5A:C0:26:E6:7C:D9:7A:57:33:3A:F1:32:97:95:EC:AB Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 35AA6A7EC21F5A36A30C680D47B77E97B805FCAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 15:06:47 +0000 Manifest this update: Tue 03 Nov 2026 15:01:47 +0000 Manifest next update: Wed 04 Nov 2026 17:13:47 +0000 Files and hashes: 1: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: u48jMqoHP8IYFSUMyXg0v4QybwaE/clkEQ36ltaoNms=) 2: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 3: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) 4: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) 5: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:aa:6a:7e:c2:1f:5a:36:a3:0c:68:0d:47:b7:7e:97:b8:05:fc:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: Nov 3 15:01:47 2026 GMT Not After : Nov 4 17:13:47 2026 GMT Subject: CN=125EEB6F5AC026E67CD97A57333AF1329795ECAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:32:b0:9f:af:3d:c4:26:f3:88:19:9f:69: dc:e6:74:63:86:36:a5:23:1d:c9:cb:b5:d7:55:58: 2a:7e:de:31:12:4f:72:5c:be:bc:ae:bc:51:0f:13: 71:7b:99:79:38:ca:f5:bd:ed:f3:21:21:1b:4f:77: d3:93:a3:15:0e:70:38:1f:dd:7c:e0:ec:c0:ff:12: af:b5:fd:d5:46:53:e7:3e:84:1b:81:41:bd:62:be: a3:35:59:0e:68:35:c6:1d:63:0d:96:27:96:fd:7f: 55:e2:b1:70:71:50:a1:d9:0f:06:0c:61:d9:9e:72: b2:88:b7:52:07:f3:17:45:2f:48:f8:03:fe:1b:69: eb:0e:8b:5e:b6:cf:ed:53:60:f6:0f:44:b1:8c:39: 38:b9:79:6e:a7:73:41:3f:1d:ce:fc:d7:93:2f:15: 83:54:22:b1:4c:e8:78:ae:a3:bc:17:ff:3c:aa:92: 25:77:3f:e6:ff:55:7b:25:68:29:1d:5b:77:6c:f9: e2:f9:57:20:f7:a7:4c:ad:b9:05:47:e1:ad:7d:5b: 03:80:aa:b8:39:ac:28:3c:91:49:44:b8:c7:64:8a: 2f:52:3f:74:ed:5b:7a:6c:de:1b:79:e2:aa:de:16: 4e:23:44:fa:53:35:16:73:a2:79:f1:1f:d3:37:94: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5E:EB:6F:5A:C0:26:E6:7C:D9:7A:57:33:3A:F1:32:97:95:EC:AB X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e5:68:64:ce:67:5c:be:0b:30:17:97:d5:32:d4:f0:95:b7: 56:5f:be:c9:d9:8a:c7:0d:b2:97:1c:d1:95:c6:64:0a:c2:47: 1f:d5:49:8b:57:b6:04:94:06:b6:a3:e6:19:89:f4:41:22:08: b2:51:12:b7:61:0a:7a:d9:30:74:ee:5d:8a:ec:cf:f1:58:c3: 96:4c:f6:23:1d:d1:58:9e:81:50:c1:20:05:81:fe:21:c5:5d: 4e:38:06:d1:73:83:19:b2:e0:9e:f1:be:c6:7f:a4:7e:bf:72: a2:04:e9:a9:8f:88:28:ce:cb:09:f1:c2:03:b0:03:5e:dd:96: 45:ad:d1:b0:78:82:e4:d4:f7:96:95:9a:6a:44:52:ac:41:c7: ef:9e:c6:e9:76:df:a2:94:ba:8c:7b:4d:f7:fd:f2:01:af:f8: ab:e8:c3:e0:9b:89:84:5a:ef:4a:f3:46:90:13:d9:0b:8d:6f: c0:aa:51:41:26:06:15:ac:38:d7:2d:28:b0:cc:27:3e:a2:79: 52:29:2c:d4:41:88:1e:a8:da:52:dc:a2:3a:9e:43:ba:32:d6: 07:7c:9c:da:43:9f:cb:6b:eb:db:f0:be:93:12:4e:63:0a:8d: a8:dc:a5:bd:84:2e:9a:05:6f:5b:8d:5c:c5:ad:e5:21:eb:e0: a3:ab:1b:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNapqfsIfWjajDGgNR7d+l7gF/KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjExMDMxNTAxNDdaFw0yNjExMDQxNzEzNDdaMDMxMTAvBgNV BAMTKDEyNUVFQjZGNUFDMDI2RTY3Q0Q5N0E1NzMzM0FGMTMyOTc5NUVDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GjKwn689xCbziBmfadzmdGOG NqUjHcnLtddVWCp+3jEST3JcvryuvFEPE3F7mXk4yvW97fMhIRtPd9OToxUOcDgf 3Xzg7MD/Eq+1/dVGU+c+hBuBQb1ivqM1WQ5oNcYdYw2WJ5b9f1XisXBxUKHZDwYM YdmecrKIt1IH8xdFL0j4A/4baesOi162z+1TYPYPRLGMOTi5eW6nc0E/Hc7815Mv FYNUIrFM6Hiuo7wX/zyqkiV3P+b/VXslaCkdW3ds+eL5VyD3p0ytuQVH4a19WwOA qrg5rCg8kUlEuMdkii9SP3TtW3ps3ht54qreFk4jRPpTNRZzonnxH9M3lCPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEl7rb1rAJuZ82XpXMzrxMpeV7KswHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXlaGTOZ1y+CzAXl9Uy1PCVt1ZfvsnZiscN spcc0ZXGZArCRx/VSYtXtgSUBraj5hmJ9EEiCLJRErdhCnrZMHTuXYrsz/FYw5ZM 9iMd0ViegVDBIAWB/iHFXU44BtFzgxmy4J7xvsZ/pH6/cqIE6amPiCjOywnxwgOw A17dlkWt0bB4guTU95aVmmpEUqxBx++exul236KUuox7Tff98gGv+Kvow+CbiYRa 70rzRpAT2QuNb8CqUUEmBhWsONctKLDMJz6ieVIpLNRBiB6o2lLcojqeQ7oy1gd8 nNpDn8tr69vwvpMSTmMKjajcpb2ELpoFb1uNXMWt5SHr4KOrG1Y= -----END CERTIFICATE-----Generated at Tue Nov 3 19:43:46 2026 by rpki-client