$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft File: 511F1AA1B492F6794EF165F62B075919F2B16E44.mft (raw, json) Hash identifier: 3rrYvHnObRJ0MnoWoOjJF/ay2EI8n9T4Ae9dYwYRotY= Subject key identifier: FF:65:6F:01:39:2A:4A:97:69:E1:A0:85:3B:0A:E5:FD:C8:9B:96:74 Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 Certificate issuer: /CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Certificate serial: 45E8D51400F0B396DE0CCBE81846D8665BD89612 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft Manifest number: D2 Signing time: Tue 06 Oct 2026 05:40:52 +0000 Manifest this update: Tue 06 Oct 2026 05:35:52 +0000 Manifest next update: Wed 07 Oct 2026 08:16:52 +0000 Files and hashes: 1: 511F1AA1B492F6794EF165F62B075919F2B16E44.crl (hash: t6vXbeKL1mFYAKslClUkJX9TImleMe5eiWqgnI62m9c=) 2: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 23fAd0P4P+mgKNL3oa2CrgF3dqXD3ZtfsTB8p14sYV4=) 3: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: E1+7D4tNcCRDkcP3qmZK/bR+JhJZ6mmoU1gs2WuZdOo=) 4: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: FVP2US2KHUP1OZkRW6LNBrYfqVg0Zj0UfccY8UblEsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 08:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e8:d5:14:00:f0:b3:96:de:0c:cb:e8:18:46:d8:66:5b:d8:96:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Validity Not Before: Oct 6 05:35:52 2026 GMT Not After : Oct 7 08:16:52 2026 GMT Subject: CN=FF656F01392A4A9769E1A0853B0AE5FDC89B9674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:c1:6d:1d:86:5d:6f:bc:ac:93:ce:bf:47: 6a:f7:12:2d:c4:21:bf:0a:2d:1d:7a:5f:d4:88:43: 01:38:e9:f4:3a:ee:bb:ac:b8:2f:2b:fc:ed:60:fa: c5:8b:30:b5:28:ca:60:f8:54:14:e7:1d:82:9f:8b: 11:29:d7:77:fa:fb:2f:80:e2:c5:e7:ed:82:3c:2b: cb:b3:24:34:4c:8c:26:e9:c3:58:50:d4:3a:19:0b: 9f:48:fd:57:f5:f2:a8:a2:54:ce:cd:43:99:af:e4: b9:df:43:37:3d:c1:62:17:40:76:ee:6e:1f:95:4f: 6e:7b:b6:86:34:18:94:f3:89:fe:5b:89:e2:19:06: 90:ea:33:16:88:23:85:f5:d7:3a:73:da:d8:1f:aa: 2a:1e:2d:2b:07:cb:f6:17:b6:ac:38:5d:0c:b7:cf: f3:22:de:03:2f:82:13:71:c1:b3:5c:20:1b:13:19: 64:ad:76:38:8d:ef:8f:64:7c:84:64:6e:63:d3:db: d3:15:db:de:d5:2b:b7:b7:7d:65:0d:1f:cc:21:62: a0:d6:51:37:21:bd:20:2f:e1:01:4c:99:47:3e:fc: cb:9e:59:4e:ac:a0:ca:3e:2b:e7:dc:cd:35:df:12: 03:ff:02:a5:43:c7:6f:82:a3:dd:0c:1b:5d:89:e3: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:65:6F:01:39:2A:4A:97:69:E1:A0:85:3B:0A:E5:FD:C8:9B:96:74 X509v3 Authority Key Identifier: keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:98:2f:d4:91:45:59:a2:92:e6:dd:ea:82:af:26:d1:ad:50: d0:4c:79:e6:8f:eb:61:d6:d4:3c:89:0f:95:16:22:7f:09:3d: 25:1a:81:a0:73:d7:62:45:b6:e1:b7:ea:e1:77:69:fc:8c:08: 34:83:00:6a:25:14:0a:d6:67:9a:85:e0:9b:6f:b1:71:6a:08: 9e:e1:a5:3f:d6:02:75:ea:04:b4:ed:4b:00:19:82:fe:1e:3e: 86:02:c1:b0:03:97:06:7b:cd:a1:be:9f:37:b6:0c:fc:24:4d: 8b:43:68:bd:50:56:f4:eb:6f:69:ca:77:b0:ac:76:72:78:94: 13:bc:0b:99:92:ab:d1:4e:f1:db:dc:d3:27:f7:94:f1:cd:7c: a2:56:5f:90:c2:63:32:68:20:99:7e:f1:ad:3f:63:0b:4e:6d: 49:d1:4d:6b:2c:2c:6c:40:9f:5c:45:26:6d:1f:a5:1d:2d:f5: 31:a7:dd:5f:2f:65:af:ae:f3:9e:c6:83:b6:04:ef:82:06:f8: 41:a7:c5:a3:b2:60:bc:c0:8c:91:26:4c:48:ca:45:35:b8:0d: fa:77:ab:a7:11:9b:c7:30:e4:69:c8:73:64:58:a6:12:cc:e4: 26:a4:f4:24:8e:71:70:8d:11:31:32:5c:33:1c:82:cc:3a:84: 67:36:85:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURejVFADws5beDMvoGEbYZlvYlhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlG MkIxNkU0NDAeFw0yNjEwMDYwNTM1NTJaFw0yNjEwMDcwODE2NTJaMDMxMTAvBgNV BAMTKEZGNjU2RjAxMzkyQTRBOTc2OUUxQTA4NTNCMEFFNUZEQzg5Qjk2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhMFtHYZdb7ysk86/R2r3Ei3E Ib8KLR16X9SIQwE46fQ67rusuC8r/O1g+sWLMLUoymD4VBTnHYKfixEp13f6+y+A 4sXn7YI8K8uzJDRMjCbpw1hQ1DoZC59I/Vf18qiiVM7NQ5mv5LnfQzc9wWIXQHbu bh+VT257toY0GJTzif5bieIZBpDqMxaII4X11zpz2tgfqioeLSsHy/YXtqw4XQy3 z/Mi3gMvghNxwbNcIBsTGWStdjiN749kfIRkbmPT29MV297VK7e3fWUNH8whYqDW UTchvSAv4QFMmUc+/MueWU6soMo+K+fczTXfEgP/AqVDx2+Co90MG12J49zjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/2VvATkqSpdp4aCFOwrl/ciblnQwHwYDVR0j BBgwFoAUUR8aobSS9nlO8WX2KwdZGfKxbkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1NzkyMWQtZWUxOC00MzVjLThiNmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFC NDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlGMkIxNkU0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81MTFGMUFBMUI0OTJGNjc5NEVGMTY1RjYyQjA3NTkxOUYyQjE2 RTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5 MTlGMkIxNkU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaYL9SRRVmikubd6oKvJtGtUNBMeeaP62HW 1DyJD5UWIn8JPSUagaBz12JFtuG36uF3afyMCDSDAGolFArWZ5qF4JtvsXFqCJ7h pT/WAnXqBLTtSwAZgv4ePoYCwbADlwZ7zaG+nze2DPwkTYtDaL1QVvTrb2nKd7Cs dnJ4lBO8C5mSq9FO8dvc0yf3lPHNfKJWX5DCYzJoIJl+8a0/YwtObUnRTWssLGxA n1xFJm0fpR0t9TGn3V8vZa+u857Gg7YE74IG+EGnxaOyYLzAjJEmTEjKRTW4Dfp3 q6cRm8cw5GnIc2RYphLM5Cak9CSOcXCNETEyXDMcgsw6hGc2hfs= -----END CERTIFICATE-----Generated at Tue Oct 6 14:58:55 2026 by rpki-client