$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft File: B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft (raw, json) Hash identifier: s/IpYvqhZ5b8s39Txz0MZGDuxWiG+bHaWUzXlBnf1t0= Subject key identifier: F6:E5:84:BC:CD:D6:72:20:AC:55:A3:32:97:F8:71:7C:EE:6F:BB:5E Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C Certificate issuer: /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C Certificate serial: 299FC2D2C87ACE0A3230A570EAA350633DB6C47D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft Manifest number: EA Signing time: Sat 24 Oct 2026 03:18:11 +0000 Manifest this update: Sat 24 Oct 2026 03:13:11 +0000 Manifest next update: Sun 25 Oct 2026 06:28:11 +0000 Files and hashes: 1: B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl (hash: Kf2320S6NOJnIg8pKF9CRJ17ct1ta1va2AkUh0XPaic=) 2: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: Cl+3Yo+bu8lAW/IU+MoES7T3F7PhgakZcVRu4FSP59E=) 3: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: TiDTdLFtscLo1gjWjoWEhnPEKlKIibkgXZac0KwabKk=) 4: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: hhoCmD2A3Hrpt2QLVgfRu8FAamoEY4vI2CK2lYPT4Mg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9f:c2:d2:c8:7a:ce:0a:32:30:a5:70:ea:a3:50:63:3d:b6:c4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C Validity Not Before: Oct 24 03:13:11 2026 GMT Not After : Oct 25 06:28:11 2026 GMT Subject: CN=F6E584BCCDD67220AC55A33297F8717CEE6FBB5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:30:e5:71:8e:bb:39:aa:4e:fa:37:0c:6d: fc:57:41:93:f0:6f:a3:f2:54:d8:76:31:18:1b:09: cf:76:d0:a4:f5:23:34:3b:23:76:eb:df:7e:d3:11: 01:eb:0a:e9:bc:cb:34:d0:71:3a:af:bf:4f:1c:20: 6d:cf:57:75:3d:76:4b:c4:dd:eb:59:ad:48:5c:a0: 94:51:e4:51:2c:d4:e2:3f:ce:01:e5:63:e6:f2:1b: 61:90:a8:b6:32:f0:d8:0b:d1:b2:16:e6:6d:d3:03: cc:31:fd:c5:f4:70:a5:c5:82:4e:bd:e6:5f:d6:29: 88:42:9f:68:36:6d:02:55:29:d9:31:6d:d8:37:5f: 35:b0:f9:03:56:de:0b:ab:f4:c9:e5:97:24:d9:b7: 95:e2:75:82:9d:91:d9:08:18:3f:ef:6d:90:83:c7: 30:3c:1f:43:d0:81:bc:a5:a5:9f:14:3b:0a:47:1a: 1c:dc:63:45:7c:52:01:fa:7b:f7:02:8f:b4:93:3b: d5:93:8a:7d:51:80:32:8e:4c:66:ed:21:69:72:4e: 78:70:ac:4a:2a:bc:6e:52:3f:03:5c:0b:54:fa:dd: 94:ef:b0:d6:0d:54:07:02:ec:44:a7:07:dd:54:1e: 49:c3:45:e0:a3:39:15:84:30:89:88:f9:21:48:bb: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E5:84:BC:CD:D6:72:20:AC:55:A3:32:97:F8:71:7C:EE:6F:BB:5E X509v3 Authority Key Identifier: keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ce:70:be:d4:c2:fb:dc:5a:30:e8:f1:1e:78:a5:60:c6:d7: 5c:58:98:3d:e4:d3:77:38:f2:43:11:c9:c3:a3:cb:8e:ae:d3: ba:0a:bd:67:da:e5:3f:d9:77:02:90:66:c4:67:2a:e7:d1:6b: a1:04:3f:13:cc:d1:69:82:a8:80:53:2a:76:e2:1c:d8:3d:17: 09:24:bc:eb:e3:2f:40:bc:41:4f:12:8d:cb:f8:c6:a3:85:b5: 53:94:7c:30:4b:ba:73:17:64:2c:61:f7:58:fc:cf:78:61:fd: 61:ba:5c:7a:76:e3:88:1b:c9:d7:6f:b6:fc:a5:61:91:13:44: f9:42:b5:b1:9a:a7:e8:70:c4:94:17:56:19:99:bc:58:2d:77: 00:07:d5:d4:86:43:6a:fe:7f:f2:6e:8c:56:05:d8:09:08:42: 33:e2:ee:9a:a0:fa:1f:f2:69:0a:d0:c6:14:dd:1a:9e:64:13: 3f:09:e8:cb:0c:28:87:b2:de:3e:88:ec:e2:55:8d:5c:d1:72: 20:7f:7d:2e:de:b0:4a:e0:07:23:a7:18:aa:fc:89:2d:09:3f: db:7f:6f:a5:cf:8b:67:74:9c:d3:bf:a3:14:13:4e:65:d6:09: b3:50:6f:1d:cd:45:5d:60:f3:1f:b3:6f:10:1b:35:e5:d5:f6: b7:43:1d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZ/C0sh6zgoyMKVw6qNQYz22xH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZEQTY4NEU0NDgwOTM1QTk1RTZGMzM3M0NDREFDQUE5 OUI4ODgzQzAeFw0yNjEwMjQwMzEzMTFaFw0yNjEwMjUwNjI4MTFaMDMxMTAvBgNV BAMTKEY2RTU4NEJDQ0RENjcyMjBBQzU1QTMzMjk3Rjg3MTdDRUU2RkJCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXzDlcY67OapO+jcMbfxXQZPw b6PyVNh2MRgbCc920KT1IzQ7I3br337TEQHrCum8yzTQcTqvv08cIG3PV3U9dkvE 3etZrUhcoJRR5FEs1OI/zgHlY+byG2GQqLYy8NgL0bIW5m3TA8wx/cX0cKXFgk69 5l/WKYhCn2g2bQJVKdkxbdg3XzWw+QNW3gur9MnllyTZt5XidYKdkdkIGD/vbZCD xzA8H0PQgbylpZ8UOwpHGhzcY0V8UgH6e/cCj7STO9WTin1RgDKOTGbtIWlyTnhw rEoqvG5SPwNcC1T63ZTvsNYNVAcC7ESnB91UHknDReCjORWEMImI+SFIu+e3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9uWEvM3WciCsVaMyl/hxfO5vu14wHwYDVR0j BBgwFoAUttpoTkSAk1qV5vM3PM2sqpm4iDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ1NWNiMjktNTI3Ni00YTc5LWIzM2EtY2M1MTUxN2JkZDE4LzAvQjZEQTY4NEU0 NDgwOTM1QTk1RTZGMzM3M0NDREFDQUE5OUI4ODgzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNkRBNjg0RTQ0ODA5MzVBOTVFNkYzMzczQ0NEQUNBQTk5Qjg4 ODNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvQjZEQTY4NEU0NDgwOTM1QTk1RTZGMzM3M0NDREFD QUE5OUI4ODgzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbOcL7UwvvcWjDo8R54pWDG11xYmD3k03c4 8kMRycOjy46u07oKvWfa5T/ZdwKQZsRnKufRa6EEPxPM0WmCqIBTKnbiHNg9Fwkk vOvjL0C8QU8Sjcv4xqOFtVOUfDBLunMXZCxh91j8z3hh/WG6XHp244gbyddvtvyl YZETRPlCtbGap+hwxJQXVhmZvFgtdwAH1dSGQ2r+f/JujFYF2AkIQjPi7pqg+h/y aQrQxhTdGp5kEz8J6MsMKIey3j6I7OJVjVzRciB/fS7esErgByOnGKr8iS0JP9t/ b6XPi2d0nNO/oxQTTmXWCbNQbx3NRV1g8x+zbxAbNeXV9rdDHaU= -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:01 2026 by rpki-client