$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json) Hash identifier: hXAq4+PmO7SNfi911Ifp3va78sX2vSkHaPYtAejin68= Subject key identifier: BB:D2:E0:88:55:1C:DA:EF:E3:23:C1:2E:C0:D3:91:8E:73:0B:8A:FD Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 Certificate issuer: /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Certificate serial: 7ABABBA953F9313DE6F917778FCD559724809FC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 10:07:17 +0000 Manifest this update: Sat 14 Nov 2026 10:02:17 +0000 Manifest next update: Sun 15 Nov 2026 10:26:17 +0000 Files and hashes: 1: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: yCMlsCT8ugaXsrmwRqHQ9oSjPSz9XW7TLVF2TDVlXN8=) 2: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=) 3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ba:bb:a9:53:f9:31:3d:e6:f9:17:77:8f:cd:55:97:24:80:9f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Validity Not Before: Nov 14 10:02:17 2026 GMT Not After : Nov 15 10:26:17 2026 GMT Subject: CN=BBD2E088551CDAEFE323C12EC0D3918E730B8AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:eb:14:a5:37:86:15:9c:53:b0:30:1a:50: 6f:97:18:e4:10:a5:39:ec:33:3c:55:92:de:1e:74: 41:25:b2:f1:85:4f:70:3f:84:4b:19:43:0b:1d:ce: b1:15:69:ef:13:62:e7:7c:d1:b4:38:ac:65:f0:e1: 8d:59:0a:23:63:61:bb:45:73:df:b3:75:58:cf:67: 3c:05:79:ea:1e:3c:e0:46:2e:27:0c:dd:87:11:0e: 4a:78:1c:8a:63:d4:98:51:b9:fb:5b:67:a8:07:49: d7:e7:b3:d5:0e:0c:d5:4e:ba:da:74:b1:3d:94:3d: cf:b3:01:c1:3d:7f:08:7a:ea:9d:56:60:e1:6a:78: ce:41:e7:77:ca:17:53:d4:86:e9:38:0a:b5:18:49: 66:ec:96:d3:1b:2e:22:6a:83:65:cc:18:14:ec:01: 0b:9a:5a:b5:38:20:54:39:20:6a:17:7d:c7:95:96: 19:7f:87:41:af:3f:4b:2e:42:93:43:37:87:40:29: 16:d1:b4:fd:f6:39:6b:5b:b3:3a:af:82:ee:26:68: 14:8c:20:78:3a:f2:ab:fe:65:01:21:91:20:ae:f7: 9f:36:36:14:5d:56:2c:64:fe:35:7f:e3:0e:8f:e1: 1a:ae:7f:93:5a:4f:d8:98:2d:59:33:e8:cd:2b:d4: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D2:E0:88:55:1C:DA:EF:E3:23:C1:2E:C0:D3:91:8E:73:0B:8A:FD X509v3 Authority Key Identifier: keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ed:45:6d:41:f0:e1:de:9d:47:32:cd:97:84:9d:fa:32:68: b1:40:98:15:36:1e:f7:3e:10:11:92:e4:d9:d3:4b:5f:80:2e: 1f:e4:49:09:42:3c:78:a3:0a:51:e5:c9:6b:c9:fc:e0:59:90: f8:8c:1c:31:3b:2f:46:54:39:31:eb:80:30:8b:c4:3d:31:3e: 6b:ba:eb:c3:9a:13:05:37:db:51:eb:36:2c:b7:92:77:7d:44: 05:49:fc:ec:2b:b5:28:ad:1e:6b:46:14:e7:93:fa:a5:32:95: 9b:c6:67:b8:48:87:40:eb:47:13:f6:00:bc:2c:db:06:11:4d: 72:c0:75:67:75:ef:1c:2d:83:dd:29:6a:27:45:c3:4e:06:a4: fd:1d:bd:ab:02:80:d9:b5:19:91:82:ca:b0:2b:a8:31:70:0e: 53:bc:05:82:2a:8f:83:b8:5b:c5:ff:f2:64:e0:17:6f:83:61: 4c:f6:7e:27:ef:ad:cc:c6:95:04:d3:ad:87:62:15:09:38:24: e7:de:ee:13:88:2d:2e:16:63:ae:45:89:8f:8c:ab:85:f2:57: 1f:78:c1:31:f1:19:df:cf:b4:24:24:74:7d:76:a7:31:49:bd: 7f:7a:64:40:19:a5:be:b1:eb:2c:10:f0:c6:77:f4:10:0c:6c: 53:f2:fa:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUerq7qVP5MT3m+Rd3j81VlySAn8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYy QUY3OUJGNjAeFw0yNjExMTQxMDAyMTdaFw0yNjExMTUxMDI2MTdaMDMxMTAvBgNV BAMTKEJCRDJFMDg4NTUxQ0RBRUZFMzIzQzEyRUMwRDM5MThFNzMwQjhBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/+sUpTeGFZxTsDAaUG+XGOQQ pTnsMzxVkt4edEElsvGFT3A/hEsZQwsdzrEVae8TYud80bQ4rGXw4Y1ZCiNjYbtF c9+zdVjPZzwFeeoePOBGLicM3YcRDkp4HIpj1JhRuftbZ6gHSdfns9UODNVOutp0 sT2UPc+zAcE9fwh66p1WYOFqeM5B53fKF1PUhuk4CrUYSWbsltMbLiJqg2XMGBTs AQuaWrU4IFQ5IGoXfceVlhl/h0GvP0suQpNDN4dAKRbRtP32OWtbszqvgu4maBSM IHg68qv+ZQEhkSCu9582NhRdVixk/jV/4w6P4Rquf5NaT9iYLVkz6M0r1J6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9LgiFUc2u/jI8EuwNORjnMLiv0wHwYDVR0j BBgwFoAUbmXE4EPwSoFfg3flrSwCvyr3m/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0 M0YwNEE4MTVGODM3N0U1QUQyQzAyQkYyQUY3OUJGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RTY1QzRFMDQzRjA0QTgxNUY4Mzc3RTVBRDJDMDJCRjJBRjc5 QkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNkU2NUM0RTA0M0YwNEE4MTVGODM3N0U1QUQyQzAy QkYyQUY3OUJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPtRW1B8OHenUcyzZeEnfoyaLFAmBU2Hvc+ EBGS5NnTS1+ALh/kSQlCPHijClHlyWvJ/OBZkPiMHDE7L0ZUOTHrgDCLxD0xPmu6 68OaEwU321HrNiy3knd9RAVJ/OwrtSitHmtGFOeT+qUylZvGZ7hIh0DrRxP2ALws 2wYRTXLAdWd17xwtg90paidFw04GpP0dvasCgNm1GZGCyrArqDFwDlO8BYIqj4O4 W8X/8mTgF2+DYUz2fifvrczGlQTTrYdiFQk4JOfe7hOILS4WY65FiY+Mq4XyVx94 wTHxGd/PtCQkdH12pzFJvX96ZEAZpb6x6ywQ8MZ39BAMbFPy+t8= -----END CERTIFICATE-----Generated at Sat Nov 14 22:37:38 2026 by rpki-client