$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft File: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft (raw, json) Hash identifier: aji879QlMqWpessdNVoHVZMZAoBL+j1NiQ5C8cYTdZU= Subject key identifier: 57:64:44:4B:1E:91:9D:4A:91:2C:21:81:3C:50:AC:0D:2C:50:87:E2 Authority key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD Certificate issuer: /CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Certificate serial: 3B5EC1544E173F533BC665B1A04B8764733F926D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 16:35:15 +0000 Manifest this update: Sat 14 Nov 2026 16:30:15 +0000 Manifest next update: Sun 15 Nov 2026 20:04:15 +0000 Files and hashes: 1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: E+hRgGJJ8C/Srz5/ghgOOJ3QwYrgYhMnvxLJoD14unU=) 2: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl (hash: Xbb2NCrcyGTojP8ttPPHhTZghH7Zgduymi+556D9Z64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 20:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5e:c1:54:4e:17:3f:53:3b:c6:65:b1:a0:4b:87:64:73:3f:92:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Validity Not Before: Nov 14 16:30:15 2026 GMT Not After : Nov 15 20:04:15 2026 GMT Subject: CN=5764444B1E919D4A912C21813C50AC0D2C5087E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:93:7c:ac:59:db:a5:b3:9e:5e:c4:43:84: 84:7d:9f:39:9f:11:80:b1:d7:fc:37:53:9a:4e:33: 93:16:b2:71:06:86:61:65:5d:aa:6a:30:f7:7d:29: 39:01:ea:f2:7e:99:f8:6b:b1:5d:15:99:3c:b8:dd: 73:cc:8e:80:16:32:a6:fa:15:18:9f:0c:49:5b:b1: fc:b7:0d:10:cb:28:af:56:38:94:b6:d8:97:42:08: 30:03:67:96:d0:4f:99:6f:3a:f9:e6:5c:db:95:fe: c0:03:e7:fe:8a:8f:ac:e7:de:24:d6:c4:9d:a8:a1: a3:99:4a:f2:d4:0a:33:a9:fb:15:4e:2e:4e:1b:42: ae:ed:1b:9d:44:e1:60:aa:34:30:46:d3:db:71:30: 2d:4c:38:d9:2a:48:7f:49:72:6b:85:4c:12:57:39: 3f:6d:96:77:0b:26:98:35:ee:c9:84:af:e0:bc:58: f9:53:65:e4:c2:ac:a0:d7:41:95:11:f8:84:17:e2: 53:86:8a:4d:24:8a:3b:a2:72:66:d3:43:e0:74:27: 46:e0:96:d2:1d:96:ce:c4:56:ef:97:4d:5f:90:4f: 71:e0:4d:5d:36:09:f3:54:54:5d:45:8f:28:e1:fa: 9b:b5:36:9b:9a:73:b8:41:cc:ca:e7:4e:d3:76:cc: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:64:44:4B:1E:91:9D:4A:91:2C:21:81:3C:50:AC:0D:2C:50:87:E2 X509v3 Authority Key Identifier: keyid:6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3f:e6:25:1d:6e:58:e9:10:db:14:21:c3:d8:ca:95:d8:62: a5:d3:3f:02:88:29:d6:ba:cf:6a:68:7a:5a:2a:c2:7c:90:04: 60:e5:b5:40:d0:26:6f:70:70:0f:41:76:0e:81:f6:a1:86:fe: 90:73:d3:7f:bc:50:fd:dd:77:a3:61:f8:ac:ce:61:14:a9:0b: c5:0d:07:4c:71:cb:38:58:d4:26:36:84:75:60:76:0a:8c:fa: 79:e5:16:a6:2a:a9:1c:f3:53:a0:af:a4:75:33:9c:58:64:54: 8e:ac:a2:0b:34:11:72:4c:77:e3:60:44:d3:2f:e9:d7:75:9e: af:11:82:63:19:f9:fb:b8:2c:f0:bc:ab:85:6b:61:98:86:06: fa:d0:9b:a5:3c:01:c2:b8:17:cb:10:69:58:34:3f:7b:d6:1d: e6:7f:52:a4:21:ac:b4:61:a0:15:68:e9:ba:d9:3a:58:3e:f9: 80:51:05:21:e2:58:c9:77:1a:7c:50:70:e7:04:8c:92:de:92: 42:a3:19:87:71:b9:c1:fb:26:e5:7e:80:96:a1:d6:5b:15:1f: 04:50:32:bb:7c:d8:25:96:69:92:1b:6b:e9:b2:4b:65:24:bc: ec:d3:f5:55:19:54:33:bd:b2:1f:f3:2e:11:06:46:93:e2:50: ed:00:3e:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO17BVE4XP1M7xmWxoEuHZHM/km0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5 RTYzOUFDRDAeFw0yNjExMTQxNjMwMTVaFw0yNjExMTUyMDA0MTVaMDMxMTAvBgNV BAMTKDU3NjQ0NDRCMUU5MTlENEE5MTJDMjE4MTNDNTBBQzBEMkM1MDg3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLJN8rFnbpbOeXsRDhIR9nzmf EYCx1/w3U5pOM5MWsnEGhmFlXapqMPd9KTkB6vJ+mfhrsV0VmTy43XPMjoAWMqb6 FRifDElbsfy3DRDLKK9WOJS22JdCCDADZ5bQT5lvOvnmXNuV/sAD5/6Kj6zn3iTW xJ2ooaOZSvLUCjOp+xVOLk4bQq7tG51E4WCqNDBG09txMC1MONkqSH9JcmuFTBJX OT9tlncLJpg17smEr+C8WPlTZeTCrKDXQZUR+IQX4lOGik0kijuicmbTQ+B0J0bg ltIdls7EVu+XTV+QT3HgTV02CfNUVF1Fjyjh+pu1Npuac7hBzMrnTtN2zAE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2RESx6RnUqRLCGBPFCsDSxQh+IwHwYDVR0j BBgwFoAUbziDE0uux8EAyLKkk31T3p5jms0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVkNzM2ZGMtZTVkYi00MzgxLTk3MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0 QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5RTYzOUFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82RjM4ODMxMzRCQUVDN0MxMDBDOEIyQTQ5MzdENTNERTlFNjM5 QUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVkNzM2ZGMtZTVkYi00MzgxLTk3 MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUz REU5RTYzOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4/5iUdbljpENsUIcPYypXYYqXTPwKIKda6 z2poeloqwnyQBGDltUDQJm9wcA9Bdg6B9qGG/pBz03+8UP3dd6Nh+KzOYRSpC8UN B0xxyzhY1CY2hHVgdgqM+nnlFqYqqRzzU6CvpHUznFhkVI6sogs0EXJMd+NgRNMv 6dd1nq8RgmMZ+fu4LPC8q4VrYZiGBvrQm6U8AcK4F8sQaVg0P3vWHeZ/UqQhrLRh oBVo6brZOlg++YBRBSHiWMl3GnxQcOcEjJLekkKjGYdxucH7JuV+gJah1lsVHwRQ Mrt82CWWaZIba+myS2UkvOzT9VUZVDO9sh/zLhEGRpPiUO0APhQ= -----END CERTIFICATE-----Generated at Sun Nov 15 11:18:05 2026 by rpki-client