$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.mft File: 6957BD591F986806CBC922522309E3C29A646240.mft (raw, json) Hash identifier: w7opnFKV9RyZ+wT0xufmGbB1miM+M59WzXuUFc+nU9g= Subject key identifier: 19:80:40:D4:B4:1E:B4:46:EE:34:78:C8:15:0C:10:54:54:A5:05:FE Authority key identifier: 69:57:BD:59:1F:98:68:06:CB:C9:22:52:23:09:E3:C2:9A:64:62:40 Certificate issuer: /CN=6957BD591F986806CBC922522309E3C29A646240 Certificate serial: 7D9CD8510B03DDD4F067D366F6C71862C45589AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6957BD591F986806CBC922522309E3C29A646240.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.mft Manifest number: 0A Signing time: Tue 03 Nov 2026 06:56:46 +0000 Manifest this update: Tue 03 Nov 2026 06:51:46 +0000 Manifest next update: Wed 04 Nov 2026 07:56:46 +0000 Files and hashes: 1: 3135372e31302e3139322e302f32342d3234203d3e20313532333437.roa (hash: NZcCRE3eV07uI/ni90H6kZ9+IY9CeeEkE0nW+cg3PWQ=) 2: 6957BD591F986806CBC922522309E3C29A646240.crl (hash: 0lbNJPcSbSsJAiXSRIMyBb5h2k9iExIpKJfS0QZICm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.crl rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6957BD591F986806CBC922522309E3C29A646240.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 07:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9c:d8:51:0b:03:dd:d4:f0:67:d3:66:f6:c7:18:62:c4:55:89:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6957BD591F986806CBC922522309E3C29A646240 Validity Not Before: Nov 3 06:51:46 2026 GMT Not After : Nov 4 07:56:46 2026 GMT Subject: CN=198040D4B41EB446EE3478C8150C105454A505FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:64:ae:97:cf:1d:fe:d8:7d:39:7e:e7:e9:14: 5b:ba:9e:b8:56:99:c5:9a:e1:16:9d:30:7f:7f:89: a5:a5:b8:76:62:9c:8b:d7:4f:ec:3a:fa:0e:6d:8d: 54:90:14:87:22:58:0e:fb:36:65:c7:f4:73:a8:68: f8:5b:2c:26:9c:6f:da:30:13:81:76:8c:b7:22:aa: 5a:dc:a1:40:d5:cf:09:c5:1c:1e:4d:d7:a5:a6:8d: cd:c3:ac:59:1f:16:6e:51:dd:4b:ba:a1:b4:7b:80: aa:96:2d:cc:00:84:60:db:ba:c3:1c:4d:b5:74:ec: 4f:e7:63:e3:1f:36:3f:43:f3:ef:13:ca:89:eb:9a: 54:b8:d8:b8:27:85:d7:1c:b6:0d:59:39:b3:8e:9b: 52:88:7e:94:01:32:f1:57:42:52:37:2d:30:11:07: e0:ae:81:61:ae:bd:07:44:f8:97:08:f8:f9:3f:2c: 4d:76:3f:b7:7c:43:07:2c:65:ba:56:9a:33:6f:89: 7c:ae:03:e1:10:f0:d5:f7:aa:fa:93:1e:46:28:df: b3:34:ca:49:e8:f0:74:c7:28:15:f7:52:7e:d8:87: 8a:98:c7:81:65:d5:54:c9:d7:a8:d1:20:d3:45:d6: 40:92:56:ee:b5:04:f0:a0:2a:cb:3c:b5:e0:23:4e: 02:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:80:40:D4:B4:1E:B4:46:EE:34:78:C8:15:0C:10:54:54:A5:05:FE X509v3 Authority Key Identifier: keyid:69:57:BD:59:1F:98:68:06:CB:C9:22:52:23:09:E3:C2:9A:64:62:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6957BD591F986806CBC922522309E3C29A646240.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:71:9a:58:c0:a4:06:c6:28:0a:de:ac:a9:72:c5:ae:9b:79: 92:0c:bb:d7:e3:c7:e5:e8:c6:3b:98:e6:8e:2d:3d:1b:12:ab: ea:12:04:1d:0d:af:98:2d:d8:0a:db:6f:ac:43:99:2e:71:77: f5:7e:b6:e8:d1:7f:3f:33:00:16:88:1f:e7:7a:11:bf:2e:3f: b6:c5:3f:8a:c3:9c:6b:ef:ee:4b:ad:a4:76:f5:2d:18:68:f1: fd:db:a0:01:7c:ec:18:61:30:eb:b6:fc:00:01:7d:4e:48:ef: b2:e7:c5:30:86:4a:f0:be:c7:e2:a5:1c:3d:f1:30:6f:60:a9: b4:42:29:cb:12:14:84:07:c6:dd:89:35:59:0c:d3:4d:84:19: 8f:a1:67:99:14:23:71:84:e6:9d:53:1e:91:fe:79:62:2c:53: 03:8e:9b:ba:37:ec:dc:31:36:19:59:ca:e0:04:01:d5:90:49: ae:6c:5c:8c:83:a8:17:ff:f3:96:b8:2e:4d:78:cb:61:9c:bc: e9:4e:11:8b:a8:06:f3:c2:3b:fb:89:ef:e3:49:1c:0b:21:96: 0d:63:34:be:4a:90:09:20:7d:84:82:42:64:69:61:bb:36:14: d1:d5:3e:c8:44:18:b7:36:19:48:bd:ac:df:ed:82:23:ef:e1: 63:82:14:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZzYUQsD3dTwZ9Nm9scYYsRViaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk1N0JENTkxRjk4NjgwNkNCQzkyMjUyMjMwOUUzQzI5 QTY0NjI0MDAeFw0yNjExMDMwNjUxNDZaFw0yNjExMDQwNzU2NDZaMDMxMTAvBgNV BAMTKDE5ODA0MEQ0QjQxRUI0NDZFRTM0NzhDODE1MEMxMDU0NTRBNTA1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8ZK6Xzx3+2H05fufpFFu6nrhW mcWa4RadMH9/iaWluHZinIvXT+w6+g5tjVSQFIciWA77NmXH9HOoaPhbLCacb9ow E4F2jLciqlrcoUDVzwnFHB5N16Wmjc3DrFkfFm5R3Uu6obR7gKqWLcwAhGDbusMc TbV07E/nY+MfNj9D8+8TyonrmlS42Lgnhdcctg1ZObOOm1KIfpQBMvFXQlI3LTAR B+CugWGuvQdE+JcI+Pk/LE12P7d8QwcsZbpWmjNviXyuA+EQ8NX3qvqTHkYo37M0 ykno8HTHKBX3Un7Yh4qYx4Fl1VTJ16jRINNF1kCSVu61BPCgKss8teAjTgJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGYBA1LQetEbuNHjIFQwQVFSlBf4wHwYDVR0j BBgwFoAUaVe9WR+YaAbLySJSIwnjwppkYkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTE3MzYyNGItOTU2Ni00ODMzLWJhOWUtNjkxYjAwMTg0Y2Y2LzEvNjk1N0JENTkx Rjk4NjgwNkNCQzkyMjUyMjMwOUUzQzI5QTY0NjI0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OTU3QkQ1OTFGOTg2ODA2Q0JDOTIyNTIyMzA5RTNDMjlBNjQ2 MjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTE3MzYyNGItOTU2Ni00ODMzLWJh OWUtNjkxYjAwMTg0Y2Y2LzEvNjk1N0JENTkxRjk4NjgwNkNCQzkyMjUyMjMwOUUz QzI5QTY0NjI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1xmljApAbGKArerKlyxa6beZIMu9fjx+Xo xjuY5o4tPRsSq+oSBB0Nr5gt2Arbb6xDmS5xd/V+tujRfz8zABaIH+d6Eb8uP7bF P4rDnGvv7kutpHb1LRho8f3boAF87BhhMOu2/AABfU5I77LnxTCGSvC+x+KlHD3x MG9gqbRCKcsSFIQHxt2JNVkM002EGY+hZ5kUI3GE5p1THpH+eWIsUwOOm7o37Nwx NhlZyuAEAdWQSa5sXIyDqBf/85a4Lk14y2GcvOlOEYuoBvPCO/uJ7+NJHAshlg1j NL5KkAkgfYSCQmRpYbs2FNHVPshEGLc2GUi9rN/tgiPv4WOCFBY= -----END CERTIFICATE-----Generated at Tue Nov 3 22:57:44 2026 by rpki-client