$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: 2OoR+iKMwJ7v7Md4mqm6DHaODa9wairWnL/WhCHgQUs= Subject key identifier: 49:8B:FA:B6:5A:FC:64:56:5D:F0:25:9E:63:2D:C2:E0:D3:C4:A6:20 Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 456B76F5AEDCEE4309084756F1E16D907BC95CCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: E2 Signing time: Sun 18 Oct 2026 02:17:07 +0000 Manifest this update: Sun 18 Oct 2026 02:12:07 +0000 Manifest next update: Mon 19 Oct 2026 05:20:07 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) 2: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: wpYJlEUR4RNjsgfg/eopQVJXeKT31RbpI5VFufC8YpI=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 01:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6b:76:f5:ae:dc:ee:43:09:08:47:56:f1:e1:6d:90:7b:c9:5c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: Oct 18 02:12:07 2026 GMT Not After : Oct 19 05:20:07 2026 GMT Subject: CN=498BFAB65AFC64565DF0259E632DC2E0D3C4A620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a8:ea:21:6c:ee:d2:60:2b:8b:59:50:d6:7f: 1d:f3:8c:51:ff:40:0d:9f:3b:aa:bf:00:04:78:30: 4a:73:a7:a9:93:94:46:c8:93:55:47:98:42:e3:8a: 26:dc:12:6a:ac:5d:fe:ae:e8:4e:e3:b6:fe:af:36: bb:92:d4:68:4e:b0:b3:79:a8:8a:ae:52:96:fe:56: 64:a3:a4:87:ee:eb:e2:28:46:2c:f0:96:bd:05:32: 88:ad:98:30:88:aa:b0:1d:96:85:a5:e9:94:c7:a7: 78:6e:04:a9:5d:2b:37:8b:f3:85:b0:88:f7:ff:26: 86:75:48:cd:ab:e0:59:3e:2d:e8:ff:dd:fb:a4:6f: 87:15:80:00:22:3e:de:ab:53:34:0b:3f:95:88:54: b1:14:54:de:31:c7:bd:90:3c:da:c8:0a:12:11:92: 99:7e:e6:fe:b9:7b:2d:7e:58:64:2c:30:c4:7a:8b: 44:18:ff:f7:3e:2d:70:7d:5e:33:d6:76:29:6c:f4: f8:6d:ed:fb:30:fe:98:b1:06:e1:8b:d0:42:65:1f: 24:84:08:05:9c:eb:b5:67:03:5b:1b:33:84:ae:62: 7e:47:0c:d6:f2:7d:9f:58:d8:52:16:6d:b6:49:43: 7f:f8:bb:55:9e:d9:a7:83:71:78:83:c3:23:e8:6f: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8B:FA:B6:5A:FC:64:56:5D:F0:25:9E:63:2D:C2:E0:D3:C4:A6:20 X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:12:bf:e5:33:2e:74:be:0c:4b:9a:1a:5a:c3:52:e1:29:2a: 70:bf:10:6f:83:b6:af:55:f0:21:2a:22:65:58:66:75:9b:4f: b5:18:8a:c3:45:0d:5d:46:2c:bd:7f:a1:1c:b1:86:72:0c:44: 4d:fa:3a:b6:60:86:43:03:e8:2b:bb:e1:16:a8:25:47:f1:76: 2a:6c:91:3b:bc:e0:5c:a3:0e:10:2c:2d:08:bd:39:d5:a6:00: 9e:ee:e9:9c:ee:e9:6d:26:e6:1c:d7:5e:9a:cf:3c:c4:81:7a: dc:fc:55:f5:df:8b:57:2f:19:cc:19:a1:36:9f:8f:fa:39:3f: 30:c4:7e:7e:9c:a2:dd:4a:7b:77:dd:d8:d3:0b:e5:8e:ea:ea: 16:bd:e4:6e:65:8a:58:f0:d2:e5:35:30:61:92:09:76:62:47: 05:ba:9a:8e:e7:8d:61:bb:e6:c0:83:2e:be:3b:7c:90:8d:19: a6:a7:e6:ec:15:2d:43:2c:78:01:a5:a0:83:d0:94:ba:06:94: 6d:e8:6a:ca:cf:6b:28:d0:10:6e:10:9d:31:60:7b:d6:17:a4: 7f:3f:00:29:43:cb:67:b0:a7:29:4d:15:40:cd:0e:f6:27:e8: d8:2a:79:f6:ea:22:62:0f:ed:68:58:10:da:84:41:b5:41:66: 8f:1e:6a:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWt29a7c7kMJCEdW8eFtkHvJXMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjEwMTgwMjEyMDdaFw0yNjEwMTkwNTIwMDdaMDMxMTAvBgNV BAMTKDQ5OEJGQUI2NUFGQzY0NTY1REYwMjU5RTYzMkRDMkUwRDNDNEE2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2qOohbO7SYCuLWVDWfx3zjFH/ QA2fO6q/AAR4MEpzp6mTlEbIk1VHmELjiibcEmqsXf6u6E7jtv6vNruS1GhOsLN5 qIquUpb+VmSjpIfu6+IoRizwlr0FMoitmDCIqrAdloWl6ZTHp3huBKldKzeL84Ww iPf/JoZ1SM2r4Fk+Lej/3fukb4cVgAAiPt6rUzQLP5WIVLEUVN4xx72QPNrIChIR kpl+5v65ey1+WGQsMMR6i0QY//c+LXB9XjPWdils9Pht7fsw/pixBuGL0EJlHySE CAWc67VnA1sbM4SuYn5HDNbyfZ9Y2FIWbbZJQ3/4u1We2aeDcXiDwyPob6XhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSYv6tlr8ZFZd8CWeYy3C4NPEpiAwHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcSv+UzLnS+DEuaGlrDUuEpKnC/EG+Dtq9V 8CEqImVYZnWbT7UYisNFDV1GLL1/oRyxhnIMRE36OrZghkMD6Cu74RaoJUfxdips kTu84FyjDhAsLQi9OdWmAJ7u6Zzu6W0m5hzXXprPPMSBetz8VfXfi1cvGcwZoTaf j/o5PzDEfn6cot1Ke3fd2NML5Y7q6ha95G5liljw0uU1MGGSCXZiRwW6mo7njWG7 5sCDLr47fJCNGaan5uwVLUMseAGloIPQlLoGlG3oasrPayjQEG4QnTFge9YXpH8/ AClDy2ewpylNFUDNDvYn6NgqefbqImIP7WhYENqEQbVBZo8easQ= -----END CERTIFICATE-----Generated at Sun Oct 18 07:08:27 2026 by rpki-client