$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: 4YpMbFHLWlJhoMqlPMpH78Yus0g/fNBnUcOyLk1v9II= Subject key identifier: 54:56:87:4E:CB:62:CF:59:1A:2A:A4:51:33:75:14:71:45:66:B1:F1 Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 6996B66A127491B390B8E38675A76C83A1661A02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 03:28:24 +0000 Manifest this update: Sun 15 Nov 2026 03:23:24 +0000 Manifest next update: Mon 16 Nov 2026 05:44:24 +0000 Files and hashes: 1: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 2: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: rU6mgoJPCnOHANqa0z7WIVWxPwTgtFk7/qkO7NYHnNQ=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 4: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) 5: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:96:b6:6a:12:74:91:b3:90:b8:e3:86:75:a7:6c:83:a1:66:1a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Nov 15 03:23:24 2026 GMT Not After : Nov 16 05:44:24 2026 GMT Subject: CN=5456874ECB62CF591A2AA451337514714566B1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:36:0a:56:7c:fa:9e:98:ec:2f:80:8a:5b: ec:aa:02:a4:7a:35:cd:ec:09:8d:67:dc:81:30:59: d9:88:24:38:02:e7:98:1c:a9:7d:13:35:a0:b8:f2: eb:1b:e1:84:90:e7:11:af:01:cf:ba:fb:6d:6b:e3: 56:f3:86:d9:a7:73:2e:ae:b4:6e:91:94:3b:20:a1: 96:a5:7f:1a:ca:1e:93:8d:0b:59:0f:a2:aa:99:4f: 78:4c:5d:2d:e9:1b:bf:1f:e8:eb:b1:eb:a1:73:80: 6f:14:a3:c3:48:ea:37:02:bb:7e:b7:be:5d:b2:8b: 7e:e2:ce:74:05:05:a8:3b:a8:ce:a9:de:bf:e7:5f: f6:b8:49:b0:69:ca:4e:27:53:29:64:60:ae:4c:eb: b6:03:20:31:13:a9:3d:44:9e:21:65:49:e8:03:1c: b7:42:f2:47:b2:70:d4:cb:d7:17:f2:cb:7d:eb:d3: 1c:31:e1:17:63:4a:94:fa:2a:ce:a1:17:19:68:d9: db:38:79:f3:4d:60:40:72:43:32:99:5a:6e:77:5a: e6:86:f4:b6:31:dc:73:79:ed:48:a5:8e:a4:ee:ba: 79:40:f0:cd:c4:83:4a:67:04:20:9b:34:bb:b5:e9: 91:74:46:9b:94:3c:39:e3:80:8a:13:ba:47:b6:2b: c2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:56:87:4E:CB:62:CF:59:1A:2A:A4:51:33:75:14:71:45:66:B1:F1 X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:30:1e:4b:88:89:7e:38:fa:4d:24:92:b6:c5:29:df:37:57: 03:4d:b2:b1:df:6a:a7:b1:33:a8:64:75:58:23:23:e9:72:4b: a1:6a:0f:d7:f9:cf:94:e8:3b:f0:cf:0f:cf:c0:47:9f:8b:f0: f5:9c:46:ea:75:cc:4f:84:64:1d:ec:09:86:7a:35:e9:35:d4: 39:60:28:74:1b:d6:70:f3:7e:3a:aa:af:f1:37:f6:22:5c:8a: 41:0e:b1:bf:14:6d:88:5b:70:ff:aa:76:46:09:88:de:e8:a4: 97:31:2a:af:cc:cd:23:a4:0d:03:4b:69:28:85:71:8a:e1:cf: 0e:3b:d7:b1:80:b7:2e:95:4c:0e:16:83:53:34:c8:28:4b:d6: 20:e5:c4:9b:bb:8d:e5:94:88:71:b9:b4:ca:b4:02:87:61:9c: 38:a8:ca:5c:e9:57:4f:de:a6:43:1f:08:66:e2:95:2e:0f:f9: cf:8e:a8:dd:cb:8f:8b:5e:0c:75:5e:d7:d7:8f:7f:25:fa:ec: 8a:ca:76:fe:47:a5:12:2c:99:38:26:28:6b:ff:eb:0c:24:76: 5f:71:b7:35:1a:20:0b:da:93:df:ae:15:69:f5:1a:4f:5a:69: 56:9f:6c:33:aa:94:2b:52:f4:9b:23:81:d2:ad:74:8d:37:df: 8d:8a:89:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZa2ahJ0kbOQuOOGdadsg6FmGgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjExMTUwMzIzMjRaFw0yNjExMTYwNTQ0MjRaMDMxMTAvBgNV BAMTKDU0NTY4NzRFQ0I2MkNGNTkxQTJBQTQ1MTMzNzUxNDcxNDU2NkIxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDjYKVnz6npjsL4CKW+yqAqR6 Nc3sCY1n3IEwWdmIJDgC55gcqX0TNaC48usb4YSQ5xGvAc+6+21r41bzhtmncy6u tG6RlDsgoZalfxrKHpONC1kPoqqZT3hMXS3pG78f6Oux66FzgG8Uo8NI6jcCu363 vl2yi37iznQFBag7qM6p3r/nX/a4SbBpyk4nUylkYK5M67YDIDETqT1EniFlSegD HLdC8keycNTL1xfyy33r0xwx4RdjSpT6Ks6hFxlo2ds4efNNYEByQzKZWm53WuaG 9LYx3HN57UiljqTuunlA8M3Eg0pnBCCbNLu16ZF0RpuUPDnjgIoTuke2K8IJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVFaHTstiz1kaKqRRM3UUcUVmsfEwHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgwHkuIiX44+k0kkrbFKd83VwNNsrHfaqex M6hkdVgjI+lyS6FqD9f5z5ToO/DPD8/AR5+L8PWcRup1zE+EZB3sCYZ6Nek11Dlg KHQb1nDzfjqqr/E39iJcikEOsb8UbYhbcP+qdkYJiN7opJcxKq/MzSOkDQNLaSiF cYrhzw4717GAty6VTA4Wg1M0yChL1iDlxJu7jeWUiHG5tMq0AodhnDioylzpV0/e pkMfCGbilS4P+c+OqN3Lj4teDHVe19ePfyX67IrKdv5HpRIsmTgmKGv/6wwkdl9x tzUaIAvak9+uFWn1Gk9aaVafbDOqlCtS9JsjgdKtdI03342KiQk= -----END CERTIFICATE-----Generated at Sun Nov 15 08:40:51 2026 by rpki-client