$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json) Hash identifier: +LXtdy2LcPhPUZINaxuM8NamNr8pJAd8shZyVeGqEK0= Subject key identifier: 6D:40:92:0F:D1:B7:1A:73:F4:28:BC:16:7F:D2:F3:06:5F:DC:87:A0 Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Certificate serial: 4B9D92661E60747B78176BDECE8319B464092BE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft Manifest number: EA Signing time: Sun 25 Oct 2026 11:05:19 +0000 Manifest this update: Sun 25 Oct 2026 11:00:19 +0000 Manifest next update: Mon 26 Oct 2026 14:58:19 +0000 Files and hashes: 1: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: LNjwvd1qly0oh7dwunFN6y9nNYdkXGnYxKlkqox5YPU=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 14:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9d:92:66:1e:60:74:7b:78:17:6b:de:ce:83:19:b4:64:09:2b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Validity Not Before: Oct 25 11:00:19 2026 GMT Not After : Oct 26 14:58:19 2026 GMT Subject: CN=6D40920FD1B71A73F428BC167FD2F3065FDC87A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:24:84:0b:ac:a1:ad:f8:d6:da:8e:bc:43:f8: ed:42:2a:9a:dd:ec:11:8d:b8:bb:fd:4d:54:18:24: a7:04:67:c2:a4:e4:4b:a6:01:58:ad:3d:10:cd:c8: 37:f9:21:27:23:50:4a:a1:f7:d3:b3:b2:f6:75:cd: ee:f5:d6:b9:a8:b8:d1:34:fb:11:32:55:1f:59:1a: 5a:f6:39:00:a9:86:7c:e5:84:0f:e6:2b:47:80:9a: 2d:33:e7:d4:d0:5d:54:72:2d:aa:22:11:35:64:25: 12:0d:1e:67:d5:b9:8e:3c:29:0c:67:4c:26:de:d2: 4e:76:86:72:d9:a8:82:ee:7e:1c:55:c2:f6:0b:50: c6:76:61:8f:c9:2f:f2:bd:18:79:db:ed:32:fa:ef: 9d:cf:0d:69:79:c5:bf:76:5b:19:14:ed:38:95:bc: 6a:40:5f:15:5b:ae:ac:04:39:39:b4:d0:60:aa:04: ee:fa:8f:50:5a:65:ef:e3:4a:69:39:b1:17:4e:bb: 07:b0:fe:2a:3d:e3:34:83:f4:49:57:d5:2d:6f:09: c6:c1:8a:3d:4c:a6:4f:cd:3e:c3:5c:2c:68:31:7e: 22:a1:a9:ea:7a:d0:2f:f3:7d:27:52:bf:3f:f2:69: 52:38:5d:c6:36:90:fb:41:01:25:84:68:cb:3f:0d: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:40:92:0F:D1:B7:1A:73:F4:28:BC:16:7F:D2:F3:06:5F:DC:87:A0 X509v3 Authority Key Identifier: keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1f:75:4c:71:69:da:3b:c8:0f:0c:9b:25:64:37:9a:58:a4: 57:a1:72:79:e0:63:03:f3:04:09:ac:d0:d1:5d:a7:19:e6:af: 3b:21:16:f1:d3:e4:37:54:d3:40:98:41:fd:e6:fe:e9:8a:11: 06:c7:ae:1b:38:15:a0:5a:4b:9f:75:f1:7c:4f:04:c1:7b:25: 1d:29:82:75:73:08:27:9a:fc:1e:d9:6f:04:c1:fc:f9:4c:01: 46:79:f1:44:ce:81:d1:8e:bf:16:2d:8c:d8:86:41:3e:7d:d6: 73:32:f1:53:7c:88:35:bd:a9:12:69:ec:db:ba:e6:c8:03:e1: 7e:37:8f:46:3c:95:47:bb:96:53:e3:b8:99:ed:59:fb:82:a5: 54:b6:a2:71:22:8b:fb:fb:fb:11:fb:74:da:09:fa:65:12:35: 07:14:d7:7a:4a:0d:58:bb:d7:c8:c9:97:04:11:75:24:ff:c2: 30:e0:b5:66:70:4d:b0:38:1d:84:66:29:7c:f2:e3:ff:cc:6c: 82:7e:38:e2:3f:8a:56:f0:b5:cd:06:54:2b:19:8b:06:48:4a: 0a:50:73:31:06:f7:a4:db:4b:54:a5:e4:53:bb:c8:e4:01:6d: 41:54:ad:fc:62:7f:09:ba:ad:5e:49:8d:38:86:22:28:cc:1b: d2:2c:1a:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS52SZh5gdHt4F2vezoMZtGQJK+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERCRjlE MjIxRjk2RjAeFw0yNjEwMjUxMTAwMTlaFw0yNjEwMjYxNDU4MTlaMDMxMTAvBgNV BAMTKDZENDA5MjBGRDFCNzFBNzNGNDI4QkMxNjdGRDJGMzA2NUZEQzg3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJIQLrKGt+NbajrxD+O1CKprd 7BGNuLv9TVQYJKcEZ8Kk5EumAVitPRDNyDf5IScjUEqh99OzsvZ1ze711rmouNE0 +xEyVR9ZGlr2OQCphnzlhA/mK0eAmi0z59TQXVRyLaoiETVkJRINHmfVuY48KQxn TCbe0k52hnLZqILufhxVwvYLUMZ2YY/JL/K9GHnb7TL6753PDWl5xb92WxkU7TiV vGpAXxVbrqwEOTm00GCqBO76j1BaZe/jSmk5sRdOuwew/io94zSD9ElX1S1vCcbB ij1Mpk/NPsNcLGgxfiKhqep60C/zfSdSvz/yaVI4XcY2kPtBASWEaMs/DWwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUCSD9G3GnP0KLwWf9LzBl/ch6AwHwYDVR0j BBgwFoAU9rhv4g5zoi2aNTzJLtjb+dIh+W8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EzNzZhNmUtM2VjYS00ZjczLThkMTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIw RTczQTIyRDlBMzUzQ0M5MkVEOERCRjlEMjIxRjk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNkI4NkZFMjBFNzNBMjJEOUEzNTNDQzkyRUQ4REJGOUQyMjFG OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERC RjlEMjIxRjk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAfdUxxado7yA8MmyVkN5pYpFehcnngYwPz BAms0NFdpxnmrzshFvHT5DdU00CYQf3m/umKEQbHrhs4FaBaS5918XxPBMF7JR0p gnVzCCea/B7ZbwTB/PlMAUZ58UTOgdGOvxYtjNiGQT591nMy8VN8iDW9qRJp7Nu6 5sgD4X43j0Y8lUe7llPjuJntWfuCpVS2onEii/v7+xH7dNoJ+mUSNQcU13pKDVi7 18jJlwQRdST/wjDgtWZwTbA4HYRmKXzy4//MbIJ+OOI/ilbwtc0GVCsZiwZISgpQ czEG96TbS1Sl5FO7yOQBbUFUrfxifwm6rV5JjTiGIijMG9IsGsc= -----END CERTIFICATE-----Generated at Sun Oct 25 18:47:59 2026 by rpki-client