$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json) Hash identifier: pi5z50ST24E1nW+MAgEGaYU+koKvqqSDT3TOiYGsP9s= Subject key identifier: F5:8E:37:6D:4F:76:74:FE:77:C4:3E:EF:CD:AD:C6:3B:43:BF:18:86 Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Certificate serial: 331B68BAA01F6058AA0450DD7221D566AF724662 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 03:03:16 +0000 Manifest this update: Sat 14 Nov 2026 02:58:16 +0000 Manifest next update: Sun 15 Nov 2026 05:25:16 +0000 Files and hashes: 1: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=) 2: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: SIejaU2dI7AANz23Q0u2b5HYu5/w6/Cz+a8bSt4kJCs=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 05:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1b:68:ba:a0:1f:60:58:aa:04:50:dd:72:21:d5:66:af:72:46:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Validity Not Before: Nov 14 02:58:16 2026 GMT Not After : Nov 15 05:25:16 2026 GMT Subject: CN=F58E376D4F7674FE77C43EEFCDADC63B43BF1886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:48:dc:ec:79:9c:50:02:c3:63:bd:29:cf: 5c:f4:bc:ee:fe:26:d3:b1:97:4e:94:a3:a6:a7:d3: b9:a0:54:fc:c3:0b:54:b6:6d:c6:68:71:80:b4:62: 7a:f5:6f:dc:aa:92:ba:c3:d6:aa:32:0c:f4:b4:94: f2:64:a9:39:93:0d:34:cb:be:98:90:64:91:bb:e5: ec:8d:3a:ab:5d:b4:8b:39:76:3c:60:56:9a:79:a2: 2b:b6:4b:1c:da:a4:e8:7c:4c:0f:60:6a:1d:bb:bc: 09:7d:40:54:2b:ac:1a:ac:3e:21:8a:30:f1:26:30: 0d:cf:a7:0a:b8:de:2f:8f:35:26:cf:7e:84:7c:7c: a8:d2:6b:96:63:17:cd:ba:7e:94:a8:2b:0a:d1:09: 8c:bb:e5:7f:65:6b:6e:2d:72:18:69:e8:22:df:12: 60:f7:2d:75:60:04:6c:d9:29:72:44:46:ff:73:6d: 0f:80:ac:b8:ee:b1:68:02:c8:40:8b:ef:1b:70:33: 48:13:f8:e4:eb:70:08:90:a8:49:8a:4c:33:de:a7: 92:7f:54:cd:69:b2:e2:e7:df:df:d1:de:76:ad:8e: 5c:48:3c:39:df:5f:7a:a7:06:b7:70:29:4a:4d:86: 2d:14:fe:71:6c:a0:e9:2f:62:ce:db:da:44:af:9f: 2e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8E:37:6D:4F:76:74:FE:77:C4:3E:EF:CD:AD:C6:3B:43:BF:18:86 X509v3 Authority Key Identifier: keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:80:15:58:20:5d:fa:6d:8c:ba:f4:7e:e9:72:ff:4c:8d:84: 9c:05:f2:38:8a:4a:ad:8d:fb:ab:a9:14:f1:d6:04:e2:0c:a5: e8:41:67:bd:69:32:1f:a0:b1:95:9f:43:c3:a5:f2:20:a7:08: ee:84:9d:19:fd:ac:c4:1c:dd:5f:ad:8d:ff:54:98:b6:16:ef: 9e:23:bb:7e:1b:0e:2d:e6:0a:ce:25:c3:bb:98:b6:e6:da:58: 03:00:13:66:69:1c:49:5f:1d:df:bd:6f:ef:cc:d2:58:2c:42: f9:cf:27:c4:21:6f:ba:d9:28:d4:27:02:c8:6f:2d:fd:86:08: f1:f1:b2:96:1b:40:3b:e4:08:37:5a:fd:a3:8d:80:61:35:b2: c7:b8:ce:36:9d:c8:9d:7d:0e:a4:ce:ab:7b:4b:9b:d8:c2:76: 2e:9e:47:74:e3:92:f4:9e:ba:bb:fe:b3:8d:98:a7:77:bd:7c: 8c:34:9c:ba:03:32:83:6f:b8:f8:1c:1c:45:4b:55:29:3b:b4: 5c:5a:07:0c:46:a2:a2:94:e0:3c:23:cb:16:49:da:62:4c:bb: 6a:46:5a:07:5c:5b:29:ce:eb:76:e1:5d:66:7b:de:38:a0:e6: e7:36:0a:59:44:53:9f:58:81:f7:0f:5b:bf:0c:ad:25:93:4a: ce:bc:0e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxtouqAfYFiqBFDdciHVZq9yRmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlD NEY0MjEwOTAeFw0yNjExMTQwMjU4MTZaFw0yNjExMTUwNTI1MTZaMDMxMTAvBgNV BAMTKEY1OEUzNzZENEY3Njc0RkU3N0M0M0VFRkNEQURDNjNCNDNCRjE4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFkjc7HmcUALDY70pz1z0vO7+ JtOxl06Uo6an07mgVPzDC1S2bcZocYC0Ynr1b9yqkrrD1qoyDPS0lPJkqTmTDTTL vpiQZJG75eyNOqtdtIs5djxgVpp5oiu2SxzapOh8TA9gah27vAl9QFQrrBqsPiGK MPEmMA3Ppwq43i+PNSbPfoR8fKjSa5ZjF826fpSoKwrRCYy75X9la24tchhp6CLf EmD3LXVgBGzZKXJERv9zbQ+ArLjusWgCyECL7xtwM0gT+OTrcAiQqEmKTDPep5J/ VM1psuLn39/R3natjlxIPDnfX3qnBrdwKUpNhi0U/nFsoOkvYs7b2kSvny7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Y43bU92dP53xD7vza3GO0O/GIYwHwYDVR0j BBgwFoAUaoljBsEviMD4P3CvzHxr+cT0IQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZD MTJGODhDMEY4M0Y3MEFGQ0M3QzZCRjlDNEY0MjEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QTg5NjMwNkMxMkY4OEMwRjgzRjcwQUZDQzdDNkJGOUM0RjQy MTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvNkE4OTYzMDZDMTJGODhDMEY4M0Y3MEFGQ0M3QzZC RjlDNEY0MjEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6AFVggXfptjLr0fuly/0yNhJwF8jiKSq2N +6upFPHWBOIMpehBZ71pMh+gsZWfQ8Ol8iCnCO6EnRn9rMQc3V+tjf9UmLYW754j u34bDi3mCs4lw7uYtubaWAMAE2ZpHElfHd+9b+/M0lgsQvnPJ8Qhb7rZKNQnAshv Lf2GCPHxspYbQDvkCDda/aONgGE1sse4zjadyJ19DqTOq3tLm9jCdi6eR3TjkvSe urv+s42Yp3e9fIw0nLoDMoNvuPgcHEVLVSk7tFxaBwxGoqKU4DwjyxZJ2mJMu2pG WgdcWynO63bhXWZ73jig5uc2CllEU59YgfcPW78MrSWTSs68Dv4= -----END CERTIFICATE-----Generated at Sat Nov 14 22:40:46 2026 by rpki-client