$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: y0FrCNltFv/VcQNo2dWdC075+aAEDrndQY7vcwq0opI= Subject key identifier: 07:51:A5:A0:2E:CA:F6:33:7A:99:F9:43:EB:D3:A1:0C:DE:EA:CD:5C Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 5AEFE1833D8F7DABC41EF6EC01A4B57318B70144 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: D6 Signing time: Fri 09 Oct 2026 08:23:01 +0000 Manifest this update: Fri 09 Oct 2026 08:18:01 +0000 Manifest next update: Sat 10 Oct 2026 10:10:01 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) 2: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) 4: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) 5: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: aOzIe8pyMF49Jfg8e8eLW/mRrhPmC+rqLoINmH7x8dc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ef:e1:83:3d:8f:7d:ab:c4:1e:f6:ec:01:a4:b5:73:18:b7:01:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: Oct 9 08:18:01 2026 GMT Not After : Oct 10 10:10:01 2026 GMT Subject: CN=0751A5A02ECAF6337A99F943EBD3A10CDEEACD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:23:ea:15:ae:70:4e:77:58:14:2c:98:54: 47:46:71:61:c6:59:30:31:a2:9f:69:af:60:55:5b: 4d:e9:7f:b7:19:23:c4:53:79:c0:fb:01:fa:9f:a4: 9c:8d:82:01:32:5c:1e:3c:e2:d8:95:67:bf:29:7c: f9:9a:0c:b4:74:8d:56:8d:45:c9:21:a3:b9:05:9f: d0:ac:98:e9:9e:d3:68:93:3c:c3:a9:1b:fa:56:9f: 84:37:ad:bc:0f:cd:c5:2b:e3:df:50:43:26:20:db: 7b:73:6b:b6:c6:b4:80:c4:a0:38:58:5c:19:c0:58: 09:89:86:63:0d:d3:f1:e4:e6:82:ce:43:96:06:59: 1a:38:f5:15:30:4d:e9:5d:87:63:be:3e:06:9c:e8: 40:6b:4b:58:15:74:19:04:c5:89:7c:cb:c4:fc:e6: a3:7d:9c:6a:6c:92:dd:b4:1f:fd:e0:bb:69:15:bb: 96:6a:ec:1a:ea:00:2e:50:02:14:ca:61:f4:f5:ca: 07:b2:8b:f6:44:fe:29:21:8c:c6:23:1c:c7:d9:c4: c1:45:ba:47:c6:30:55:ba:59:a4:ca:f9:04:b2:2f: 44:88:77:e3:f9:cb:5d:30:13:ca:04:96:1d:db:ac: 1b:6f:49:64:8f:b1:5c:13:8a:6d:79:83:0b:53:9e: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:51:A5:A0:2E:CA:F6:33:7A:99:F9:43:EB:D3:A1:0C:DE:EA:CD:5C X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f9:40:50:50:0d:d6:2f:7a:1d:07:f4:0e:bb:41:59:cf:e7: 63:a1:e5:4a:64:94:ed:4c:a9:03:7f:86:62:e9:e8:41:4f:6f: f2:ea:e5:29:99:eb:14:26:ca:ea:74:21:5e:64:57:11:81:ad: 75:ac:48:ca:7e:22:08:d9:37:a4:cb:24:5e:e7:39:6f:37:c7: bb:8c:7f:38:08:a1:ab:4f:bd:5b:ef:2f:21:e5:34:06:91:bd: 62:b9:e8:fd:7a:fa:2b:7f:fb:68:d6:0e:50:86:b7:99:64:6d: 73:8d:e5:b4:c8:dc:f2:77:59:7e:a6:b4:ae:6f:83:e1:d1:a7: 62:cb:90:d8:25:cb:1c:a3:cc:40:94:a1:4d:3e:87:9e:ed:83: f5:5f:ec:58:12:2f:94:6a:54:be:50:f4:04:f3:d9:e0:bc:70: db:35:b6:0d:1e:b2:c7:22:c3:4b:4a:7e:42:c3:35:86:8e:38: cd:1c:7c:21:8b:86:b5:64:7a:47:7f:33:0b:6c:57:81:7d:0e: cb:52:50:1f:3e:fd:0c:7e:4c:96:86:4c:ba:63:1e:db:8f:51: a3:0a:86:29:94:da:83:25:a3:2b:14:57:16:ef:6c:74:b1:0e: 77:ec:e0:d9:e0:f1:3e:57:48:c0:e9:d7:84:27:23:12:65:c7: 82:28:d8:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWu/hgz2PfavEHvbsAaS1cxi3AUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjEwMDkwODE4MDFaFw0yNjEwMTAxMDEwMDFaMDMxMTAvBgNV BAMTKDA3NTFBNUEwMkVDQUY2MzM3QTk5Rjk0M0VCRDNBMTBDREVFQUNENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItSPqFa5wTndYFCyYVEdGcWHG WTAxop9pr2BVW03pf7cZI8RTecD7AfqfpJyNggEyXB484tiVZ78pfPmaDLR0jVaN Rckho7kFn9CsmOme02iTPMOpG/pWn4Q3rbwPzcUr499QQyYg23tza7bGtIDEoDhY XBnAWAmJhmMN0/Hk5oLOQ5YGWRo49RUwTeldh2O+Pgac6EBrS1gVdBkExYl8y8T8 5qN9nGpskt20H/3gu2kVu5Zq7BrqAC5QAhTKYfT1ygeyi/ZE/ikhjMYjHMfZxMFF ukfGMFW6WaTK+QSyL0SId+P5y10wE8oElh3brBtvSWSPsVwTim15gwtTnm6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1GloC7K9jN6mflD69OhDN7qzVwwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX5QFBQDdYveh0H9A67QVnP52Oh5UpklO1M qQN/hmLp6EFPb/Lq5SmZ6xQmyup0IV5kVxGBrXWsSMp+IgjZN6TLJF7nOW83x7uM fzgIoatPvVvvLyHlNAaRvWK56P16+it/+2jWDlCGt5lkbXON5bTI3PJ3WX6mtK5v g+HRp2LLkNglyxyjzECUoU0+h57tg/Vf7FgSL5RqVL5Q9ATz2eC8cNs1tg0essci w0tKfkLDNYaOOM0cfCGLhrVkekd/MwtsV4F9DstSUB8+/Qx+TJaGTLpjHtuPUaMK himU2oMloysUVxbvbHSxDnfs4Nng8T5XSMDp14QnIxJlx4Io2CY= -----END CERTIFICATE-----Generated at Fri Oct 9 20:07:24 2026 by rpki-client