$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft File: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json) Hash identifier: 1CUYNeFh2dQq7fNbbg713Z1GeDop6LtVXNN+cMpIAKs= Subject key identifier: EA:88:25:AC:52:53:CB:6C:1A:85:0F:67:B0:ED:61:A8:0F:8F:13:76 Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 4BC0258542423C099CBCD7B49D1FA9016916D526 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft Manifest number: D5 Signing time: Wed 07 Oct 2026 21:04:14 +0000 Manifest this update: Wed 07 Oct 2026 20:59:14 +0000 Manifest next update: Fri 09 Oct 2026 00:09:14 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=) 2: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=) 3: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=) 4: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=) 5: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=) 6: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: BxPMYt2V8i9Aev46B2awtq7sQwx3te4K7QNJ58DQTwA=) 7: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=) 8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=) 9: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 00:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c0:25:85:42:42:3c:09:9c:bc:d7:b4:9d:1f:a9:01:69:16:d5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: Oct 7 20:59:14 2026 GMT Not After : Oct 9 00:09:14 2026 GMT Subject: CN=EA8825AC5253CB6C1A850F67B0ED61A80F8F1376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e3:64:b4:f5:63:1a:05:33:45:e1:b0:dd:dc: cc:18:ea:d1:dd:d4:3f:d1:c6:e3:f0:57:1c:6d:4e: 90:15:22:6e:0f:b1:20:fc:38:68:a1:31:b5:97:bf: 22:fc:df:f7:bf:5e:0e:1f:17:13:bd:d5:2b:ef:e4: fd:5b:77:51:57:ab:eb:01:e8:b8:4d:42:cd:0e:0c: a9:2e:fd:cc:d9:90:c7:ed:c1:66:e3:10:f1:e7:b1: f3:a4:30:6f:7b:7e:07:f9:bc:a6:3b:03:71:f9:f8: a4:9c:07:60:d7:cc:fd:25:6a:1c:b8:1b:e2:c7:e8: f9:73:3a:b2:c7:11:e5:e1:2a:76:fd:c8:19:0f:9a: f1:e5:53:c2:5f:82:15:b1:8a:45:81:00:db:b5:79: 84:e9:02:96:0b:f9:35:1e:32:bc:3d:ac:e4:b8:fe: 49:ab:37:93:71:74:11:52:db:f2:1d:0b:ed:12:72: ef:97:f0:5e:77:af:e7:63:93:e6:44:67:9c:84:f1: e1:ad:45:c5:56:c0:e8:a8:74:b0:a7:47:31:a4:c5: d1:52:73:8a:28:80:cd:21:8d:ff:c7:8d:f4:0b:d3: 2e:20:72:c3:79:28:8c:4f:80:4c:cf:b4:ef:23:73: e0:a5:a4:60:ce:ab:cd:bb:d1:94:e1:c9:a0:07:ff: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:25:AC:52:53:CB:6C:1A:85:0F:67:B0:ED:61:A8:0F:8F:13:76 X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f7:92:20:29:d6:15:ef:e2:d4:ce:0a:94:ba:25:10:db:8f: 19:65:9e:38:fd:65:4a:84:bb:80:d4:14:78:3b:79:36:8c:2a: 5b:38:17:9e:47:19:71:3f:bf:53:fd:7f:44:0d:78:22:b6:85: f3:bf:84:4b:11:df:68:c4:7d:b7:c7:72:37:52:47:09:a3:3f: 88:ab:b2:07:16:96:6b:d7:5c:9e:16:91:c1:18:5d:05:32:cb: 23:41:1b:76:b7:5d:14:5c:d8:37:47:92:4b:3d:c6:00:4c:a5: 57:07:6f:3d:63:51:f8:47:e4:62:ee:1b:f5:fd:bb:57:e9:71: e0:8e:e4:e1:95:2b:75:3b:85:1e:82:a6:05:7d:de:ca:f3:13: bd:de:99:0d:6b:1f:5d:67:4a:fa:c7:e9:5d:21:f5:fa:cc:e4: b5:ee:cf:3b:99:30:af:a4:b9:37:55:59:67:65:55:95:ac:e3: cd:47:e9:ad:3e:14:e1:a4:8f:be:65:d1:ec:6e:c9:79:69:f4: 5b:fd:40:cd:3a:77:12:18:30:51:bb:bc:f5:1b:4d:a2:a5:ff: 5c:e3:cf:cf:bf:28:7e:9d:02:db:7e:30:9f:60:ca:b3:e8:f5: 3d:d1:7c:7e:90:30:4f:de:d6:db:20:91:11:14:99:ae:d5:f7: 64:52:70:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8AlhUJCPAmcvNe0nR+pAWkW1SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjEwMDcyMDU5MTRaFw0yNjEwMDkwMDA5MTRaMDMxMTAvBgNV BAMTKEVBODgyNUFDNTI1M0NCNkMxQTg1MEY2N0IwRUQ2MUE4MEY4RjEzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM42S09WMaBTNF4bDd3MwY6tHd 1D/RxuPwVxxtTpAVIm4PsSD8OGihMbWXvyL83/e/Xg4fFxO91Svv5P1bd1FXq+sB 6LhNQs0ODKku/czZkMftwWbjEPHnsfOkMG97fgf5vKY7A3H5+KScB2DXzP0lahy4 G+LH6PlzOrLHEeXhKnb9yBkPmvHlU8JfghWxikWBANu1eYTpApYL+TUeMrw9rOS4 /kmrN5NxdBFS2/IdC+0Scu+X8F53r+djk+ZEZ5yE8eGtRcVWwOiodLCnRzGkxdFS c4oogM0hjf/HjfQL0y4gcsN5KIxPgEzPtO8jc+ClpGDOq8270ZThyaAH/61VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oglrFJTy2wahQ9nsO1hqA+PE3YwHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0Yx RjY5NzlFRTdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr3kiAp1hXv4tTOCpS6JRDbjxllnjj9ZUqE u4DUFHg7eTaMKls4F55HGXE/v1P9f0QNeCK2hfO/hEsR32jEfbfHcjdSRwmjP4ir sgcWlmvXXJ4WkcEYXQUyyyNBG3a3XRRc2DdHkks9xgBMpVcHbz1jUfhH5GLuG/X9 u1fpceCO5OGVK3U7hR6CpgV93srzE73emQ1rH11nSvrH6V0h9frM5LXuzzuZMK+k uTdVWWdlVZWs481H6a0+FOGkj75l0exuyXlp9Fv9QM06dxIYMFG7vPUbTaKl/1zj z8+/KH6dAtt+MJ9gyrPo9T3RfH6QME/e1tsgkREUma7V92RScEQ= -----END CERTIFICATE-----Generated at Thu Oct 8 10:41:26 2026 by rpki-client