$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft File: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft (raw, json) Hash identifier: EzhCl22CwTaUl8+OJzHqnoCEqK2rV+QE3VKXYW3bLrM= Subject key identifier: CF:D6:64:3B:42:F8:EC:7D:49:12:26:24:F1:C2:C6:6B:5A:51:31:9D Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B Certificate issuer: /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B Certificate serial: 60E71DC76865FBC8EDFDA85F642856720656AF40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 02:06:38 +0000 Manifest this update: Sat 24 Oct 2026 02:01:38 +0000 Manifest next update: Sun 25 Oct 2026 04:55:38 +0000 Files and hashes: 1: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl (hash: WYPDZpfoRUNhDo3j8lHnQr8Le+Ty7u9rQoQwitlVVLo=) 2: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: ILoy/+ibUDKAFOxVMLinSZB9MoToaiC2+Ky+vT/tKdU=) 3: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: X6m+xeJ0gpaLFRDzspoO6SIub/jpD7DBy+UlBcZmfKs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e7:1d:c7:68:65:fb:c8:ed:fd:a8:5f:64:28:56:72:06:56:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B Validity Not Before: Oct 24 02:01:38 2026 GMT Not After : Oct 25 04:55:38 2026 GMT Subject: CN=CFD6643B42F8EC7D49122624F1C2C66B5A51319D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:0e:6d:8f:a6:35:04:10:5f:fa:4a:5d:8e: 00:a8:5f:fd:6c:51:fb:45:b0:41:2c:05:7a:5d:80: b2:64:86:d8:de:cc:a8:20:9c:84:33:84:4f:7c:ad: 42:cc:a9:d6:1d:64:27:1b:f3:0e:db:13:c6:0a:a1: 7d:81:df:9d:6b:21:ba:51:ec:9f:b2:25:e1:a9:cd: 75:96:7d:ab:e0:01:bf:4e:65:12:e5:32:4d:48:ce: 45:ce:8c:83:14:c5:6e:d1:02:56:f0:1d:ab:bd:0f: 1b:fe:9f:d9:a4:fb:77:2f:91:91:76:36:a8:61:6b: b6:89:a3:04:10:e1:7b:08:ec:18:09:19:66:50:3b: 86:57:42:e5:d4:a8:86:dc:93:24:07:41:20:8b:99: 1c:43:f8:af:97:da:1a:cb:49:c4:95:c2:f8:47:f6: 0d:fe:29:c1:73:8a:ee:b5:3b:3a:fe:6c:ee:a1:b9: 7d:8f:b7:26:32:16:ae:a0:bf:70:26:88:8d:a8:93: b3:dc:46:ff:63:24:1d:90:25:a1:24:30:88:53:c4: b2:5d:18:e1:c3:d6:9b:c2:fb:c0:9a:90:a4:f8:5a: 69:a2:7f:fd:eb:bf:34:fc:c5:61:c8:d7:2e:21:91: c5:a7:d0:44:12:e1:2a:37:0b:dc:84:ec:1f:fc:ca: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:64:3B:42:F8:EC:7D:49:12:26:24:F1:C2:C6:6B:5A:51:31:9D X509v3 Authority Key Identifier: keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:69:fc:36:1a:58:02:38:2a:3f:bc:41:e5:0e:de:da:ef:9b: cb:89:c1:83:70:e8:16:38:14:40:b2:97:9d:92:fd:3a:74:a5: 3f:57:82:2c:72:53:f8:92:22:11:a0:bc:09:90:72:83:8d:db: 49:66:ae:f6:6b:19:ff:42:41:49:6d:63:51:c8:f2:88:dc:30: 9c:6c:5f:a7:04:f2:2d:8d:01:76:ca:08:4e:aa:09:12:3e:3a: e7:06:a6:bf:30:8b:63:ef:0b:8b:44:d7:be:82:33:4c:38:3b: b4:a8:1f:72:e9:24:ea:9c:df:49:d2:a2:dc:9e:49:4a:76:11: 42:36:95:b7:00:e3:84:db:4b:b7:28:4c:2d:7b:bd:d5:a6:ec: 89:5f:ad:b6:cb:89:d5:15:7f:8e:92:be:7a:c2:7c:94:06:7a: 44:b5:f3:fd:f5:26:e6:4e:2e:f5:ec:03:d5:ff:4d:50:df:8a: da:9b:fb:92:fe:5c:4f:92:21:90:31:0d:26:50:dd:b0:ae:98: ed:60:e7:15:14:af:07:44:c3:2e:cf:61:f2:41:6c:bb:83:a0: 97:e0:66:b9:aa:2e:60:5a:8d:62:fd:8b:78:59:df:3e:e3:eb: 8c:93:78:3e:3c:39:bd:d6:45:47:ed:da:22:7e:cb:f8:b7:a0: 62:05:75:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOcdx2hl+8jt/ahfZChWcgZWr0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0UxQzky Q0U3NDc2QjAeFw0yNjEwMjQwMjAxMzhaFw0yNjEwMjUwNDU1MzhaMDMxMTAvBgNV BAMTKENGRDY2NDNCNDJGOEVDN0Q0OTEyMjYyNEYxQzJDNjZCNUE1MTMxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwQ5tj6Y1BBBf+kpdjgCoX/1s UftFsEEsBXpdgLJkhtjezKggnIQzhE98rULMqdYdZCcb8w7bE8YKoX2B351rIbpR 7J+yJeGpzXWWfavgAb9OZRLlMk1IzkXOjIMUxW7RAlbwHau9Dxv+n9mk+3cvkZF2 Nqhha7aJowQQ4XsI7BgJGWZQO4ZXQuXUqIbckyQHQSCLmRxD+K+X2hrLScSVwvhH 9g3+KcFziu61Ozr+bO6huX2PtyYyFq6gv3AmiI2ok7PcRv9jJB2QJaEkMIhTxLJd GOHD1pvC+8CakKT4Wmmif/3rvzT8xWHI1y4hkcWn0EQS4So3C9yE7B/8ymLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9ZkO0L47H1JEiYk8cLGa1pRMZ0wHwYDVR0j BBgwFoAUMwphbypj6/C7MuJewxPhySznR2swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlZDA1ODQtYWMyZC00NjY0LWJjMTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYy QTYzRUJGMEJCMzJFMjVFQzMxM0UxQzkyQ0U3NDc2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzBBNjE2RjJBNjNFQkYwQkIzMkUyNUVDMzEzRTFDOTJDRTc0 NzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0Ux QzkyQ0U3NDc2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARp/DYaWAI4Kj+8QeUO3trvm8uJwYNw6BY4 FECyl52S/Tp0pT9XgixyU/iSIhGgvAmQcoON20lmrvZrGf9CQUltY1HI8ojcMJxs X6cE8i2NAXbKCE6qCRI+OucGpr8wi2PvC4tE176CM0w4O7SoH3LpJOqc30nSotye SUp2EUI2lbcA44TbS7coTC17vdWm7IlfrbbLidUVf46SvnrCfJQGekS18/31JuZO LvXsA9X/TVDfitqb+5L+XE+SIZAxDSZQ3bCumO1g5xUUrwdEwy7PYfJBbLuDoJfg ZrmqLmBajWL9i3hZ3z7j64yTeD48Ob3WRUft2iJ+y/i3oGIFdcI= -----END CERTIFICATE-----Generated at Sat Oct 24 17:37:18 2026 by rpki-client