$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json) Hash identifier: m3tOtW2AFpWCUCGFAF9X1BM6HGWrDoajTUOu1aj4PLs= Subject key identifier: 86:41:7C:80:70:5C:55:F2:0A:50:50:8E:44:2C:5F:9E:73:99:B8:45 Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Certificate serial: 1A47E2D2C7BDDE704C21EAE53B06C2C570E14195 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft Manifest number: EA Signing time: Sat 24 Oct 2026 16:29:49 +0000 Manifest this update: Sat 24 Oct 2026 16:24:49 +0000 Manifest next update: Sun 25 Oct 2026 18:24:49 +0000 Files and hashes: 1: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=) 2: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=) 3: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=) 4: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=) 5: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: 8sr5Q4akbjg0QB3jOoZv6vRaGR8PeQJVRztX4o6ORKk=) 6: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 18:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:47:e2:d2:c7:bd:de:70:4c:21:ea:e5:3b:06:c2:c5:70:e1:41:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Validity Not Before: Oct 24 16:24:49 2026 GMT Not After : Oct 25 18:24:49 2026 GMT Subject: CN=86417C80705C55F20A50508E442C5F9E7399B845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:55:95:a3:49:c0:98:79:25:8a:55:a1:7d: e2:9f:57:a2:a2:65:f1:f6:b7:f3:e6:89:3e:3d:a9: 4a:ca:be:ef:16:5b:00:03:de:e4:87:fd:49:b2:48: 61:a5:94:6f:ef:ea:81:98:cf:ed:16:43:6f:11:e6: 06:cf:22:2f:20:1d:9f:1a:4c:c3:28:fa:e9:e1:75: 90:ec:0a:2b:a2:f7:90:62:da:93:10:21:16:38:89: 2c:31:27:06:67:fd:cc:a2:4e:6e:86:02:ed:cf:fc: dd:e4:58:3a:15:92:2d:5d:67:37:5b:3c:e7:2c:00: 20:71:a7:3a:f3:10:d6:8f:e9:81:77:62:5d:1e:92: 1a:18:56:14:fb:da:44:5a:a2:98:a7:8d:ac:6c:1d: 3d:30:e6:99:ed:83:1a:89:67:87:80:f8:e7:3c:70: 4e:38:20:8e:42:8a:6a:00:23:2a:3d:b2:ce:8b:c7: 78:db:ea:23:87:b8:bb:2d:63:b8:63:a4:74:b4:e0: b6:dc:11:7e:85:1d:83:ad:e4:9f:27:2e:16:86:46: 8d:03:94:4b:0c:1a:5a:1f:f3:31:ab:38:32:de:73: 48:ed:da:b1:4a:9d:0f:94:1e:db:0f:8e:e2:3b:69: 30:9c:8b:5a:e2:64:3c:4b:80:41:b3:c1:6d:e0:f9: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:41:7C:80:70:5C:55:F2:0A:50:50:8E:44:2C:5F:9E:73:99:B8:45 X509v3 Authority Key Identifier: keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:11:69:6b:d5:52:3d:85:e9:94:64:cd:af:ed:b3:22:3c:60: f3:59:f2:5d:d4:56:03:40:9b:04:57:7a:20:04:ab:2c:92:77: 29:4b:92:a7:48:63:c0:54:61:ef:77:c4:2b:91:46:e0:ce:50: f9:68:d6:01:cc:d1:b9:6a:fd:ef:f0:80:b3:e8:6b:00:5f:0b: ca:aa:d5:69:1b:da:a1:c1:da:6f:9f:e5:16:0b:c3:6b:26:4f: 27:bd:01:99:23:d5:52:7b:a6:39:aa:4f:1c:d7:a6:e4:fb:90: e9:50:82:8d:5c:7e:7b:2d:84:db:8a:76:1a:c8:36:27:87:75: d7:75:77:74:cc:63:46:94:6c:c0:a7:27:79:e6:3b:68:d0:17: df:d0:77:cb:96:a9:e2:0a:6a:82:62:79:b2:ef:f3:b3:66:0f: 3f:37:cf:fa:5d:0e:56:c6:d1:18:e9:cc:43:da:14:d6:6f:89: 56:33:db:e1:84:36:84:bb:9c:6d:a0:cd:d6:ad:8f:4a:33:bd: 9e:0d:bb:69:b3:e8:c5:22:80:04:28:1a:27:31:60:7c:64:7d: c4:a9:ec:b2:46:f8:df:21:8f:1a:ec:87:12:f8:95:72:66:6c: b1:d7:2d:7f:9a:08:79:5c:a0:da:6e:53:44:5b:ef:e6:bd:0e: be:8d:07:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkfi0se93nBMIerlOwbCxXDhQZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQxQUQw NEFERjE3OTAeFw0yNjEwMjQxNjI0NDlaFw0yNjEwMjUxODI0NDlaMDMxMTAvBgNV BAMTKDg2NDE3QzgwNzA1QzU1RjIwQTUwNTA4RTQ0MkM1RjlFNzM5OUI4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWAVWVo0nAmHklilWhfeKfV6Ki ZfH2t/PmiT49qUrKvu8WWwAD3uSH/UmySGGllG/v6oGYz+0WQ28R5gbPIi8gHZ8a TMMo+unhdZDsCiui95Bi2pMQIRY4iSwxJwZn/cyiTm6GAu3P/N3kWDoVki1dZzdb POcsACBxpzrzENaP6YF3Yl0ekhoYVhT72kRaopinjaxsHT0w5pntgxqJZ4eA+Oc8 cE44II5CimoAIyo9ss6Lx3jb6iOHuLstY7hjpHS04LbcEX6FHYOt5J8nLhaGRo0D lEsMGlof8zGrODLec0jt2rFKnQ+UHtsPjuI7aTCci1riZDxLgEGzwW3g+TIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhkF8gHBcVfIKUFCORCxfnnOZuEUwHwYDVR0j BBgwFoAU2226NGqPgj6mI/1RYE3RrQSt8XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwY2U3MzMtNzdmNC00ZTFkLWI1ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2 QThGODIzRUE2MjNGRDUxNjA0REQxQUQwNEFERjE3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjZEQkEzNDZBOEY4MjNFQTYyM0ZENTE2MDRERDFBRDA0QURG MTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQx QUQwNEFERjE3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABERaWvVUj2F6ZRkza/tsyI8YPNZ8l3UVgNA mwRXeiAEqyySdylLkqdIY8BUYe93xCuRRuDOUPlo1gHM0blq/e/wgLPoawBfC8qq 1Wkb2qHB2m+f5RYLw2smTye9AZkj1VJ7pjmqTxzXpuT7kOlQgo1cfnsthNuKdhrI NieHddd1d3TMY0aUbMCnJ3nmO2jQF9/Qd8uWqeIKaoJiebLv87NmDz83z/pdDlbG 0RjpzEPaFNZviVYz2+GENoS7nG2gzdatj0ozvZ4Nu2mz6MUigAQoGicxYHxkfcSp 7LJG+N8hjxrshxL4lXJmbLHXLX+aCHlcoNpuU0Rb7+a9Dr6NB9s= -----END CERTIFICATE-----Generated at Sun Oct 25 03:06:34 2026 by rpki-client