$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: YDZdo9Ytt46zWF8oYkJMQplfNzbzYBujH6+QN5FU8fw= Subject key identifier: 7D:40:0B:BF:DB:05:82:3A:89:63:E4:21:6B:C2:7F:F1:6C:2E:56:C8 Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 2599A048A77471543B5298EA541EA99879542170 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 10:30:54 +0000 Manifest this update: Mon 02 Nov 2026 10:25:54 +0000 Manifest next update: Tue 03 Nov 2026 14:19:54 +0000 Files and hashes: 1: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: e7YWQO2a70dn8MOMaMSogZpowmBramLMVXGEnz9+xyQ=) 2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 4: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:99:a0:48:a7:74:71:54:3b:52:98:ea:54:1e:a9:98:79:54:21:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Nov 2 10:25:54 2026 GMT Not After : Nov 3 14:19:54 2026 GMT Subject: CN=7D400BBFDB05823A8963E4216BC27FF16C2E56C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:41:d9:10:2b:9e:72:c9:30:a6:b8:6d:5e: 28:7b:d7:22:4f:c3:0d:2a:93:5f:a5:be:0e:4a:c6: 95:68:4c:0c:52:23:2a:53:cc:31:e9:44:ba:aa:2c: 76:5d:58:a8:1d:48:cd:99:a5:73:e3:95:bb:96:ad: 9c:f9:78:81:2b:20:c7:74:72:bb:c9:9f:cd:93:0c: da:3d:ec:27:98:cd:70:f6:46:52:bd:4d:1a:ce:4c: db:90:83:ee:d4:01:00:f1:20:cf:36:87:58:2a:ab: 48:dd:bf:a9:79:5c:f8:c3:c2:57:a9:db:a6:fe:5a: e3:5d:8a:f8:f8:46:6f:14:83:4b:59:2f:22:a8:72: 60:11:a2:cf:10:57:cc:c7:e1:98:9d:b9:a4:d3:be: 6d:55:53:ce:a6:46:38:f7:5b:9f:03:c0:b5:c6:48: 1f:20:e1:91:89:86:ea:ca:e2:92:08:2d:b7:67:e1: b9:73:7f:e9:3d:b8:84:18:98:27:71:7f:3f:c5:9c: 21:d4:29:d5:5f:bf:aa:90:b7:00:65:33:18:a6:31: b9:c6:55:37:17:be:e2:ff:4c:d3:90:e2:4e:6e:d1: a0:26:f4:af:45:48:32:d5:f2:e6:e4:35:8d:a9:dc: 7e:a9:cf:a0:f8:75:85:36:41:16:48:60:31:61:36: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:40:0B:BF:DB:05:82:3A:89:63:E4:21:6B:C2:7F:F1:6C:2E:56:C8 X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8c:f6:3d:0f:fb:c7:5e:b8:dc:e8:12:76:b2:96:46:55:34: 4c:58:a6:9a:9d:64:96:20:62:3d:64:01:a9:f9:35:52:07:7c: 32:03:4d:45:53:03:df:ae:a7:5b:46:b2:ec:4f:45:39:8d:b6: c8:da:0f:34:4e:b4:8a:00:61:6c:39:ef:16:b9:5a:2d:64:c4: 49:05:33:fe:bb:9e:7f:1e:a1:60:67:2e:d2:cc:b3:67:06:81: 72:65:ab:8f:b0:c5:8e:59:94:23:db:21:a4:87:46:70:39:ab: 0c:b7:9e:3f:ae:fa:90:81:29:9a:b0:4c:0c:c6:7a:09:31:54: 1b:ce:c8:22:f1:64:c2:0d:4d:38:1c:1d:f6:a6:91:9b:cb:be: e1:50:67:b6:f5:43:64:5c:93:67:82:04:b8:aa:6d:d7:4b:9b: b5:91:40:eb:20:27:6f:01:9b:28:68:43:13:0f:84:b2:93:9b: 4e:a8:ba:aa:7d:82:5f:c9:1c:81:72:a7:0e:2d:cc:2c:42:48: dc:ed:6c:66:14:6f:8a:47:2e:c0:c9:26:73:6c:ad:31:b1:0d: ca:e0:24:1e:92:55:ff:bf:14:47:d4:95:5a:a7:a0:de:f5:b0: 87:f2:c6:9f:e2:f0:ca:1a:84:7d:a3:74:b5:10:8c:5c:1f:dc: 33:03:71:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZmgSKd0cVQ7UpjqVB6pmHlUIXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjExMDIxMDI1NTRaFw0yNjExMDMxNDE5NTRaMDMxMTAvBgNV BAMTKDdENDAwQkJGREIwNTgyM0E4OTYzRTQyMTZCQzI3RkYxNkMyRTU2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyUHZECuecskwprhtXih71yJP ww0qk1+lvg5KxpVoTAxSIypTzDHpRLqqLHZdWKgdSM2ZpXPjlbuWrZz5eIErIMd0 crvJn82TDNo97CeYzXD2RlK9TRrOTNuQg+7UAQDxIM82h1gqq0jdv6l5XPjDwlep 26b+WuNdivj4Rm8Ug0tZLyKocmARos8QV8zH4ZiduaTTvm1VU86mRjj3W58DwLXG SB8g4ZGJhurK4pIILbdn4blzf+k9uIQYmCdxfz/FnCHUKdVfv6qQtwBlMximMbnG VTcXvuL/TNOQ4k5u0aAm9K9FSDLV8ubkNY2p3H6pz6D4dYU2QRZIYDFhNq5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUALv9sFgjqJY+Qha8J/8WwuVsgwHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+M9j0P+8deuNzoEnaylkZVNExYppqdZJYg Yj1kAan5NVIHfDIDTUVTA9+up1tGsuxPRTmNtsjaDzROtIoAYWw57xa5Wi1kxEkF M/67nn8eoWBnLtLMs2cGgXJlq4+wxY5ZlCPbIaSHRnA5qwy3nj+u+pCBKZqwTAzG egkxVBvOyCLxZMINTTgcHfamkZvLvuFQZ7b1Q2Rck2eCBLiqbddLm7WRQOsgJ28B myhoQxMPhLKTm06ouqp9gl/JHIFypw4tzCxCSNztbGYUb4pHLsDJJnNsrTGxDcrg JB6SVf+/FEfUlVqnoN71sIfyxp/i8MoahH2jdLUQjFwf3DMDcRc= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:44 2026 by rpki-client