$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json) Hash identifier: /ns/6jO1nE82bKkXoXkt7LafoQiubeeDSGUQIYwwOg0= Subject key identifier: AF:01:00:FB:32:FA:4F:8E:69:BB:7C:32:AB:45:32:0B:84:8B:39:82 Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Certificate serial: 10BB3378CA431B721755C17FAE028476969FFAF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 10:30:50 +0000 Manifest this update: Mon 02 Nov 2026 10:25:50 +0000 Manifest next update: Tue 03 Nov 2026 11:16:50 +0000 Files and hashes: 1: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=) 2: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=) 3: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: 8Nh63OVd1pe8rLtSzdraCt/HpR/7M/XqovGPLXnSXDU=) 4: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=) 5: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bb:33:78:ca:43:1b:72:17:55:c1:7f:ae:02:84:76:96:9f:fa:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Validity Not Before: Nov 2 10:25:50 2026 GMT Not After : Nov 3 11:16:50 2026 GMT Subject: CN=AF0100FB32FA4F8E69BB7C32AB45320B848B3982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:54:ad:06:68:23:1a:90:e2:2b:c6:dd:9c: 7c:ed:30:a2:0a:7f:76:33:45:bd:08:28:f6:2d:74: 83:f7:23:f2:ab:0a:49:6b:18:8f:a3:8d:42:65:4b: 9e:a9:63:43:a4:a6:7f:38:3a:ed:b0:a1:a1:8c:5b: 09:50:4f:c4:0d:78:2f:a3:9a:c8:ff:d1:8b:0e:04: 4c:46:27:75:aa:2f:b0:4f:19:0f:24:ab:97:fa:93: 60:24:25:20:32:8c:dd:ca:f4:29:53:6e:55:c5:43: 57:87:03:15:a8:f4:af:d3:4f:92:91:12:b9:e1:2e: 3d:5e:44:00:24:dc:54:8d:ec:cb:0d:3c:b6:1d:63: c0:75:ae:4b:8e:c1:8f:0b:ac:f5:0c:ae:87:fd:4d: 62:fc:62:a4:6c:9a:c2:71:70:de:45:e5:e3:ac:37: b3:2c:ed:45:67:24:dd:a2:61:b4:fa:d3:c0:a7:89: 10:ac:b6:12:e7:a4:94:eb:6f:b3:13:21:af:e5:2c: 74:cd:48:3f:21:82:84:b2:0a:ca:13:1d:67:63:c2: ab:a1:03:be:77:e4:ba:f4:70:82:60:b8:d1:c2:10: 97:7e:d0:ce:c4:29:8c:7b:0f:c7:80:98:89:94:c4: 51:c7:6b:b4:36:b8:b2:f9:52:33:6d:5f:e5:aa:a5: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:01:00:FB:32:FA:4F:8E:69:BB:7C:32:AB:45:32:0B:84:8B:39:82 X509v3 Authority Key Identifier: keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6a:14:36:b9:f2:23:f0:47:24:28:99:89:c9:8b:d7:93:37: b8:19:17:cc:fb:0d:0a:5d:41:49:2b:59:11:45:61:f7:21:ee: 92:06:e6:ee:45:09:f3:ba:dc:9c:5a:d8:2e:fd:87:32:26:50: 49:0f:0b:f9:6e:63:8d:28:56:41:36:46:b7:c2:e8:11:e0:26: 2d:1c:da:65:15:a4:fc:9a:4e:df:c0:10:b8:03:ea:1f:9f:2a: 14:1c:ee:96:36:e8:19:14:ef:2f:c8:b7:67:04:c2:37:8b:c1: 02:df:0b:b6:bf:43:e0:98:df:ae:6a:88:cd:8a:db:cd:70:38: da:60:35:08:e6:f4:70:d5:f7:0f:31:58:a4:a9:79:80:ae:ab: 75:a0:dd:a0:d9:75:64:b9:61:12:19:65:d7:1e:e7:1c:22:f0: 38:74:0d:b0:58:88:91:97:2f:2c:df:83:d0:68:da:0b:8c:56: 50:7a:af:f7:5b:cb:bd:34:d6:b2:77:44:0c:00:e1:84:88:5e: 26:2f:52:bf:0e:12:38:12:5c:60:58:8a:c5:f7:77:95:9f:d9: 70:e0:fd:fa:3c:5f:3c:7f:9c:70:fe:48:80:e3:ae:3c:86:bd: 1d:4f:df:5b:55:fd:7a:5a:4b:42:29:e0:10:b1:e7:07:55:bc: bf:eb:fb:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELszeMpDG3IXVcF/rgKEdpaf+vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw RDU1NTlDNjAeFw0yNjExMDIxMDI1NTBaFw0yNjExMDMxMTE2NTBaMDMxMTAvBgNV BAMTKEFGMDEwMEZCMzJGQTRGOEU2OUJCN0MzMkFCNDUzMjBCODQ4QjM5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNwFStBmgjGpDiK8bdnHztMKIK f3YzRb0IKPYtdIP3I/KrCklrGI+jjUJlS56pY0Okpn84Ou2woaGMWwlQT8QNeC+j msj/0YsOBExGJ3WqL7BPGQ8kq5f6k2AkJSAyjN3K9ClTblXFQ1eHAxWo9K/TT5KR ErnhLj1eRAAk3FSN7MsNPLYdY8B1rkuOwY8LrPUMrof9TWL8YqRsmsJxcN5F5eOs N7Ms7UVnJN2iYbT608CniRCsthLnpJTrb7MTIa/lLHTNSD8hgoSyCsoTHWdjwquh A7535Lr0cIJguNHCEJd+0M7EKYx7D8eAmImUxFHHa7Q2uLL5UjNtX+WqpdbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrwEA+zL6T45pu3wyq0UyC4SLOYIwHwYDVR0j BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1 OUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3 RDMwRDU1NTlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1qFDa58iPwRyQomYnJi9eTN7gZF8z7DQpd QUkrWRFFYfch7pIG5u5FCfO63Jxa2C79hzImUEkPC/luY40oVkE2RrfC6BHgJi0c 2mUVpPyaTt/AELgD6h+fKhQc7pY26BkU7y/It2cEwjeLwQLfC7a/Q+CY365qiM2K 281wONpgNQjm9HDV9w8xWKSpeYCuq3Wg3aDZdWS5YRIZZdce5xwi8Dh0DbBYiJGX Lyzfg9Bo2guMVlB6r/dby7001rJ3RAwA4YSIXiYvUr8OEjgSXGBYisX3d5Wf2XDg /fo8Xzx/nHD+SIDjrjyGvR1P31tV/XpaS0Ip4BCx5wdVvL/r+80= -----END CERTIFICATE-----Generated at Tue Nov 3 04:29:24 2026 by rpki-client