$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft File: 06AAF713D939AC6C090B6343B6905318B83A1DE3.mft (raw, json) Hash identifier: uDnlCdUTkDdg+MY/BE9nNxJ+AwutZ2vx1qZCxWIwRP0= Subject key identifier: 3F:E4:0D:58:44:DC:3D:A6:AB:A1:C3:1A:7B:3D:D2:07:B2:C4:3B:5D Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3 Certificate issuer: /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3 Certificate serial: 700D14208719D7B0238B2E2DEFFAE4E01BC96BE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft Manifest number: EB Signing time: Sun 25 Oct 2026 01:41:10 +0000 Manifest this update: Sun 25 Oct 2026 01:36:10 +0000 Manifest next update: Mon 26 Oct 2026 03:17:10 +0000 Files and hashes: 1: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=) 2: 06AAF713D939AC6C090B6343B6905318B83A1DE3.crl (hash: BpIMkQg18zFu7gU7egnVdOcZuNcXqj4SH3aXVi7cWvA=) 3: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=) 4: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: 4RQga7sC7v8Tfsu3sFFTumIkJvaZxGdgZNTnQPnNeyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 03:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0d:14:20:87:19:d7:b0:23:8b:2e:2d:ef:fa:e4:e0:1b:c9:6b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3 Validity Not Before: Oct 25 01:36:10 2026 GMT Not After : Oct 26 03:17:10 2026 GMT Subject: CN=3FE40D5844DC3DA6ABA1C31A7B3DD207B2C43B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:5a:22:f9:af:8b:bd:21:76:12:d1:b5:f1: 4f:cc:c2:da:1a:7c:16:c2:9c:72:d3:5e:ba:c5:7b: f0:9b:da:ef:76:7f:57:f9:bc:46:ee:ed:dd:02:dd: 16:f3:2d:af:6b:2a:a4:1e:bc:27:ff:98:8c:9b:01: bf:00:a8:9d:b2:a7:89:db:96:9c:cc:da:14:25:23: b6:55:2d:1c:c6:dd:a9:f2:82:4d:42:13:3b:76:25: 30:09:b0:70:7b:7e:90:d2:d5:d0:92:7d:c0:e0:dd: 6f:06:44:28:a1:12:16:e0:c6:53:48:39:43:af:01: 84:00:e7:3b:b5:09:d5:8a:be:34:1e:dd:ac:4e:51: fe:6b:92:f9:35:f0:87:7c:c0:35:ef:be:53:a1:86: c7:61:9b:f8:69:5f:38:47:ee:0a:47:6a:71:f7:9d: 81:97:9e:9f:77:fb:ed:44:0a:77:d2:37:f8:dc:93: ca:a4:ea:98:b7:0c:9e:7c:b6:e8:18:ad:f1:e3:00: e4:b8:b0:75:7a:34:c4:2f:a2:d9:0e:df:47:b1:61: e7:0d:0d:10:ba:d2:49:ef:bf:0f:a4:c2:56:01:7a: 62:5c:54:73:9a:db:63:ac:54:b8:c9:6f:6d:f6:d6: ed:c8:dd:9b:13:f2:0b:f2:f0:57:09:76:60:9a:0c: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E4:0D:58:44:DC:3D:A6:AB:A1:C3:1A:7B:3D:D2:07:B2:C4:3B:5D X509v3 Authority Key Identifier: keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:74:e8:b3:49:97:f4:90:cf:d2:5c:6a:9b:ca:93:ce:4a:d2: a5:4f:3e:66:3c:b7:ae:14:20:68:47:36:0e:9d:ad:cf:db:b6: b2:ad:f0:c6:d9:2a:82:fe:60:f4:1a:2c:5a:bf:32:b6:f8:fb: 6f:50:05:35:ae:9c:9c:55:2a:c4:46:60:f3:03:65:e0:53:9e: da:40:34:c0:e4:73:7b:61:82:ff:3c:f4:41:a4:69:72:9d:42: 7c:af:e5:38:ec:bd:7c:a2:fa:35:74:2a:09:4d:8a:39:92:1c: 1d:2f:39:04:1d:9d:6e:1a:34:69:d5:c8:1b:7e:e1:f1:cc:6c: 95:33:83:1d:c4:24:7f:a0:ed:3e:08:d4:40:ff:f5:e3:26:93: 33:cd:8a:6b:96:1f:64:09:57:5c:67:f5:16:e7:0b:e0:17:14: 3a:e0:f4:33:82:9f:63:34:9a:9f:bd:18:c8:4b:8d:88:ec:ff: 61:36:78:1e:63:05:0c:27:a3:d7:1b:3e:ac:c6:ac:8b:f7:05: 9d:8d:0a:7c:0e:e0:c9:4e:7c:c5:48:54:2e:7d:02:6c:85:c6: 00:88:15:1d:84:d5:01:c3:eb:ae:76:0d:9e:d7:40:5a:21:6c: db:53:b8:ca:d4:dc:b9:ad:68:ac:ab:59:f8:4a:fd:40:2a:61: 45:67:c4:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcA0UIIcZ17Ajiy4t7/rk4BvJa+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUzMThC ODNBMURFMzAeFw0yNjEwMjUwMTM2MTBaFw0yNjEwMjYwMzE3MTBaMDMxMTAvBgNV BAMTKDNGRTQwRDU4NDREQzNEQTZBQkExQzMxQTdCM0REMjA3QjJDNDNCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKVoi+a+LvSF2EtG18U/Mwtoa fBbCnHLTXrrFe/Cb2u92f1f5vEbu7d0C3RbzLa9rKqQevCf/mIybAb8AqJ2yp4nb lpzM2hQlI7ZVLRzG3anygk1CEzt2JTAJsHB7fpDS1dCSfcDg3W8GRCihEhbgxlNI OUOvAYQA5zu1CdWKvjQe3axOUf5rkvk18Id8wDXvvlOhhsdhm/hpXzhH7gpHanH3 nYGXnp93++1ECnfSN/jck8qk6pi3DJ58tugYrfHjAOS4sHV6NMQvotkO30exYecN DRC60knvvw+kwlYBemJcVHOa22OsVLjJb2321u3I3ZsT8gvy8FcJdmCaDFwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+QNWETcPaarocMaez3SB7LEO10wHwYDVR0j BBgwFoAUBqr3E9k5rGwJC2NDtpBTGLg6HeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA0NDIwNDMtMjQ0ZS00Yjg3LWIwMGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNE OTM5QUM2QzA5MEI2MzQzQjY5MDUzMThCODNBMURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNkFBRjcxM0Q5MzlBQzZDMDkwQjYzNDNCNjkwNTMxOEI4M0Ex REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUz MThCODNBMURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI106LNJl/SQz9JcapvKk85K0qVPPmY8t64U IGhHNg6drc/btrKt8MbZKoL+YPQaLFq/Mrb4+29QBTWunJxVKsRGYPMDZeBTntpA NMDkc3thgv889EGkaXKdQnyv5TjsvXyi+jV0KglNijmSHB0vOQQdnW4aNGnVyBt+ 4fHMbJUzgx3EJH+g7T4I1ED/9eMmkzPNimuWH2QJV1xn9RbnC+AXFDrg9DOCn2M0 mp+9GMhLjYjs/2E2eB5jBQwno9cbPqzGrIv3BZ2NCnwO4MlOfMVIVC59AmyFxgCI FR2E1QHD6652DZ7XQFohbNtTuMrU3LmtaKyrWfhK/UAqYUVnxHQ= -----END CERTIFICATE-----Generated at Sun Oct 25 21:53:15 2026 by rpki-client