$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: eIicCyEXH5M4twvGTK0HYCSZum5eor5uTBRN8uJpCDY= Subject key identifier: 61:8A:E2:CA:0E:2E:B0:97:0E:B5:6B:2A:FA:49:AE:FC:C0:B1:78:D1 Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 0D101F5336AEDE84A609CCC978BF66B1B9F021F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 19:02:01 +0000 Manifest this update: Wed 07 Oct 2026 18:57:01 +0000 Manifest next update: Thu 08 Oct 2026 21:44:01 +0000 Files and hashes: 1: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 3: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: t0VeDEMwoP8lZ4ph+yWiyAbKRLSf/dezSYaakIR/rpk=) 4: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 21:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:10:1f:53:36:ae:de:84:a6:09:cc:c9:78:bf:66:b1:b9:f0:21:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Oct 7 18:57:01 2026 GMT Not After : Oct 8 21:44:01 2026 GMT Subject: CN=618AE2CA0E2EB0970EB56B2AFA49AEFCC0B178D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:03:d8:d2:71:22:d3:55:d6:4a:6b:7d:7f: 7e:b1:d3:ee:dc:ba:0c:80:34:42:8b:ae:e5:8c:8c: d2:ed:3e:1a:1f:34:ab:ab:65:34:0c:83:61:21:51: 6c:e9:d9:43:25:ab:42:6d:8b:c1:a5:88:56:58:a4: ee:8c:3d:2a:6a:c3:57:5c:9d:27:aa:a5:7b:a1:eb: c1:fe:df:80:79:c9:3a:6d:08:86:ea:01:b7:6c:8c: c3:d1:6a:b4:8b:d6:94:f6:10:0f:4c:22:35:ba:df: 47:66:f2:93:a6:d4:9b:26:f9:3e:20:28:f3:5d:c5: 13:4e:96:2f:17:81:26:10:2c:98:ba:e9:61:c5:41: db:bb:a2:ad:48:3d:c2:92:bb:11:b9:88:d4:0b:e3: b7:f7:f7:dc:39:84:f1:9e:53:e4:ce:9f:c1:91:7f: 1d:21:b6:5b:bd:17:a8:e0:e5:7a:95:68:5c:b7:10: 14:fd:e9:7a:1d:a6:6b:75:a5:5c:67:9a:f4:bf:85: 8b:41:ec:bc:f9:89:90:9c:4e:4c:85:15:68:4a:9b: 0b:4d:41:5d:54:0e:79:89:d8:bf:90:e3:bb:09:91: 12:87:51:00:bc:3b:97:d0:72:c3:79:b4:f8:35:f2: 9a:2a:45:1e:cc:6f:63:cf:40:96:dd:d8:7e:ed:79: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8A:E2:CA:0E:2E:B0:97:0E:B5:6B:2A:FA:49:AE:FC:C0:B1:78:D1 X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fe:14:7c:db:97:48:4f:93:46:13:08:27:ef:3e:c1:72:7d: c5:49:4f:b0:7c:e6:04:9e:a3:72:fa:6a:a7:26:63:51:73:70: 8e:4e:67:d9:77:1d:f4:9f:6d:1c:77:c7:b7:bb:a9:15:a1:bc: 03:4e:24:6b:6c:58:dc:aa:a1:fc:c0:9c:bc:3b:04:c3:49:49: ad:60:db:83:c1:83:aa:d3:b9:71:66:a2:59:ae:a7:c1:67:aa: 1a:f2:c7:c7:14:b4:78:c8:f1:f2:e5:c5:6d:7d:9a:81:8b:d3: 35:07:af:bb:26:36:55:96:f1:28:5f:be:2b:86:e4:59:a2:99: 46:0b:05:16:85:e6:ac:bf:3b:42:8e:09:93:0d:20:a5:ff:ad: d2:d8:74:8f:ab:98:d2:f5:d4:2b:97:a0:85:28:49:68:64:0a: 9e:6d:a2:2b:90:36:ef:6b:d7:ed:40:e3:eb:c2:5b:61:b2:92: 8c:42:28:b6:eb:df:50:db:de:11:aa:5a:f3:08:96:6d:90:72: 59:47:71:72:17:5d:93:52:8b:ce:8a:5f:29:19:7b:e0:ff:1a: 4d:78:6d:24:7e:b3:f1:a2:ef:46:2c:83:7a:bd:81:e8:ec:7e: 87:fc:c9:f0:1a:4e:d5:4a:7a:b1:40:76:89:98:0c:21:e8:be: 31:bd:a1:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRAfUzau3oSmCczJeL9msbnwIfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjEwMDcxODU3MDFaFw0yNjEwMDgyMTQ0MDFaMDMxMTAvBgNV BAMTKDYxOEFFMkNBMEUyRUIwOTcwRUI1NkIyQUZBNDlBRUZDQzBCMTc4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpQPY0nEi01XWSmt9f36x0+7c ugyANEKLruWMjNLtPhofNKurZTQMg2EhUWzp2UMlq0Jti8GliFZYpO6MPSpqw1dc nSeqpXuh68H+34B5yTptCIbqAbdsjMPRarSL1pT2EA9MIjW630dm8pOm1Jsm+T4g KPNdxRNOli8XgSYQLJi66WHFQdu7oq1IPcKSuxG5iNQL47f399w5hPGeU+TOn8GR fx0htlu9F6jg5XqVaFy3EBT96Xodpmt1pVxnmvS/hYtB7Lz5iZCcTkyFFWhKmwtN QV1UDnmJ2L+Q47sJkRKHUQC8O5fQcsN5tPg18poqRR7Mb2PPQJbd2H7teQBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYYriyg4usJcOtWsq+kmu/MCxeNEwHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALj+FHzbl0hPk0YTCCfvPsFyfcVJT7B85gSe o3L6aqcmY1FzcI5OZ9l3HfSfbRx3x7e7qRWhvANOJGtsWNyqofzAnLw7BMNJSa1g 24PBg6rTuXFmolmup8Fnqhryx8cUtHjI8fLlxW19moGL0zUHr7smNlWW8ShfviuG 5FmimUYLBRaF5qy/O0KOCZMNIKX/rdLYdI+rmNL11CuXoIUoSWhkCp5toiuQNu9r 1+1A4+vCW2GykoxCKLbr31Db3hGqWvMIlm2QcllHcXIXXZNSi86KXykZe+D/Gk14 bSR+s/Gi70Ysg3q9gejsfof8yfAaTtVKerFAdomYDCHovjG9obk= -----END CERTIFICATE-----Generated at Thu Oct 8 10:29:34 2026 by rpki-client