$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json) Hash identifier: 8mJulGYDIGfRBFxSJFp4SZu06JIithUC21gIipM0V+I= Subject key identifier: B4:10:1B:62:F3:28:EE:EE:8E:F0:85:56:C0:BD:82:A2:8F:7C:6D:57 Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Certificate serial: 3BF4045778DE20006339A6C042DE2799BF9BAA80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft Manifest number: FF Signing time: Mon 09 Nov 2026 05:12:05 +0000 Manifest this update: Mon 09 Nov 2026 05:07:05 +0000 Manifest next update: Tue 10 Nov 2026 08:12:05 +0000 Files and hashes: 1: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=) 2: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=) 3: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: 2rFOoTD4LGPCByyx32cVjHvs2bxitxnJZjClqlH78W8=) 4: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=) 5: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=) 6: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f4:04:57:78:de:20:00:63:39:a6:c0:42:de:27:99:bf:9b:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Validity Not Before: Nov 9 05:07:05 2026 GMT Not After : Nov 10 08:12:05 2026 GMT Subject: CN=B4101B62F328EEEE8EF08556C0BD82A28F7C6D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:4e:31:13:52:d9:e9:0d:86:de:3b:47:54: d8:5e:26:09:f7:28:e5:77:28:d1:1f:7b:dc:12:5a: f5:2f:e0:db:86:eb:e0:1b:4a:f2:5c:3c:fc:78:ba: 22:d2:77:26:e8:25:d0:90:75:c4:95:c3:4e:2f:3c: 29:7d:47:92:89:ac:50:a4:7b:1a:a2:a2:c8:f1:88: 90:27:42:91:a4:c3:1e:fc:8e:fe:f1:c0:89:a1:7c: 93:87:9b:e8:00:a2:72:7b:c0:8a:54:76:48:d8:2a: d1:ec:44:d7:d4:39:4e:94:36:23:3f:29:bb:fe:cc: 77:0b:61:a5:3f:36:a3:21:59:03:25:93:37:27:8b: 40:e6:a8:36:cb:e9:d2:df:f0:60:af:c3:6a:30:b9: 2d:13:48:e8:1c:cf:74:bd:4a:0c:91:64:3a:28:45: db:8f:36:69:76:3e:f2:9a:a5:d7:37:69:91:1a:1c: 13:67:23:df:e2:95:5f:c1:c4:e0:29:96:3f:9a:a0: 11:02:ea:59:42:fc:ff:4f:a3:a8:c2:49:bf:07:1f: ea:9c:e7:1f:e7:80:bc:f6:71:82:47:5f:3b:0f:1b: 89:3e:ef:cc:3e:6d:ca:4b:a5:b3:ff:6e:dc:20:26: 5c:b9:3c:8c:bf:8e:67:29:00:a8:89:33:06:f0:73: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:10:1B:62:F3:28:EE:EE:8E:F0:85:56:C0:BD:82:A2:8F:7C:6D:57 X509v3 Authority Key Identifier: keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f5:ed:09:7f:78:a2:c4:6a:c4:3c:bd:d6:b8:b7:9e:07:ec: 70:4e:3f:85:e5:48:dd:1e:bb:9c:cc:76:e6:22:38:c9:ec:1a: 14:00:33:22:10:f6:66:c2:b7:ec:10:df:bd:9b:70:ee:a8:e3: a0:9a:8b:b8:76:6b:ad:e7:51:52:ae:b7:39:62:98:28:ef:b8: 9d:76:a6:cd:41:09:75:4e:73:b0:c7:75:13:22:27:49:83:0e: 57:5d:7f:55:c2:bb:62:5c:04:5e:ca:41:db:bb:bc:32:5b:00: 6a:20:04:e1:e7:d7:c6:20:b6:4c:0a:18:ff:7a:17:20:b4:bd: a7:5d:36:48:13:ad:c7:cf:0d:a8:3f:58:f5:22:0b:8c:9b:f6: 54:d1:97:f1:f2:10:89:16:86:f7:b4:8e:a6:c5:4a:24:77:2d: 0d:fc:d1:94:88:4c:9f:dc:71:05:63:b1:9e:c5:96:1f:23:53: 41:c5:a2:b9:e2:93:1b:53:5c:44:70:c2:f1:b2:45:e3:86:81: d5:66:02:d0:2c:41:f2:a6:39:12:39:5c:57:3a:b0:b3:1b:5e: a9:04:a8:37:e1:1c:85:b5:a3:89:dd:e9:e6:8a:f2:26:5e:2f: 26:10:ee:d0:3c:dd:3a:ad:c2:19:34:bc:bc:22:4e:3d:00:e7: 0f:15:08:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/QEV3jeIABjOabAQt4nmb+bqoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQxQUQw NEFERjE3OTAeFw0yNjExMDkwNTA3MDVaFw0yNjExMTAwODEyMDVaMDMxMTAvBgNV BAMTKEI0MTAxQjYyRjMyOEVFRUU4RUYwODU1NkMwQkQ4MkEyOEY3QzZENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7k4xE1LZ6Q2G3jtHVNheJgn3 KOV3KNEfe9wSWvUv4NuG6+AbSvJcPPx4uiLSdyboJdCQdcSVw04vPCl9R5KJrFCk exqiosjxiJAnQpGkwx78jv7xwImhfJOHm+gAonJ7wIpUdkjYKtHsRNfUOU6UNiM/ Kbv+zHcLYaU/NqMhWQMlkzcni0DmqDbL6dLf8GCvw2owuS0TSOgcz3S9SgyRZDoo RduPNml2PvKapdc3aZEaHBNnI9/ilV/BxOAplj+aoBEC6llC/P9Po6jCSb8HH+qc 5x/ngLz2cYJHXzsPG4k+78w+bcpLpbP/btwgJly5PIy/jmcpAKiJMwbwc6cDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtBAbYvMo7u6O8IVWwL2Coo98bVcwHwYDVR0j BBgwFoAU2226NGqPgj6mI/1RYE3RrQSt8XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwY2U3MzMtNzdmNC00ZTFkLWI1ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2 QThGODIzRUE2MjNGRDUxNjA0REQxQUQwNEFERjE3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjZEQkEzNDZBOEY4MjNFQTYyM0ZENTE2MDRERDFBRDA0QURG MTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQx QUQwNEFERjE3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE317Ql/eKLEasQ8vda4t54H7HBOP4XlSN0e u5zMduYiOMnsGhQAMyIQ9mbCt+wQ372bcO6o46Cai7h2a63nUVKutzlimCjvuJ12 ps1BCXVOc7DHdRMiJ0mDDlddf1XCu2JcBF7KQdu7vDJbAGogBOHn18YgtkwKGP96 FyC0vaddNkgTrcfPDag/WPUiC4yb9lTRl/HyEIkWhve0jqbFSiR3LQ380ZSITJ/c cQVjsZ7Flh8jU0HFornikxtTXERwwvGyReOGgdVmAtAsQfKmORI5XFc6sLMbXqkE qDfhHIW1o4nd6eaK8iZeLyYQ7tA83Tqtwhk0vLwiTj0A5w8VCG8= -----END CERTIFICATE-----Generated at Mon Nov 9 17:23:01 2026 by rpki-client