$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft File: 566E09CA4830024428EFAB32BD4C5C0588342F87.mft (raw, json) Hash identifier: MOFzT2B7ILFKTEtJevnp6PTTLxbSdkNrgjoZ1fVoaBg= Subject key identifier: 0E:8C:B9:7C:1E:26:87:5C:33:E8:5E:D8:CB:24:2B:8D:7E:2C:D2:49 Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87 Certificate issuer: /CN=566E09CA4830024428EFAB32BD4C5C0588342F87 Certificate serial: 192111345CD13C92AF12413635886E5093120EB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft Manifest number: E6 Signing time: Wed 14 Oct 2026 08:56:33 +0000 Manifest this update: Wed 14 Oct 2026 08:51:33 +0000 Manifest next update: Thu 15 Oct 2026 10:49:33 +0000 Files and hashes: 1: 566E09CA4830024428EFAB32BD4C5C0588342F87.crl (hash: nZpK69HD/dWOhXJJfFPUSh4qLVWHDqsQcGFbTQByy+I=) 2: 3130332e3130352e3235352e302f32342d3234203d3e20313336383835.roa (hash: /1rF0PKS/fc9zIsV+HmvJCLuPMTuSv+M8S12SwS/eEY=) 3: 3130332e3130352e3235332e302f32342d3234203d3e20313336383835.roa (hash: SaD8e6GIVRQQpU4CT4qZc563tb2DJTmlzJS/OsFb3w8=) 4: 3130332e3130352e3235342e302f32342d3234203d3e20313336383835.roa (hash: kjns1P/9YtFZsQtwjo+slrRL21VSAsBZN0FYYz0ZfBc=) 5: 3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa (hash: p/qfzxOQMmbYGhqYZQGSuk/datM54DD5JFlhBHKoqoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:21:11:34:5c:d1:3c:92:af:12:41:36:35:88:6e:50:93:12:0e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87 Validity Not Before: Oct 14 08:51:33 2026 GMT Not After : Oct 15 10:49:33 2026 GMT Subject: CN=0E8CB97C1E26875C33E85ED8CB242B8D7E2CD249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6d:e4:ba:52:34:de:65:93:71:81:8d:d5:3d: 96:8f:e1:00:d6:ef:0b:a5:07:10:f9:bb:7a:84:2a: 8a:2e:aa:51:90:dc:9d:d5:a6:9e:70:dd:61:8f:92: 81:51:ca:ea:fa:b7:f1:96:1b:46:96:86:e3:3e:e8: 5b:c2:30:6a:00:76:2b:e0:4f:b3:43:46:54:c5:ea: bc:0f:78:1b:a7:5f:1e:76:d1:38:4a:2a:26:6f:3c: 4c:89:a5:d0:d4:32:60:96:19:ec:94:02:4e:8e:6b: 85:5e:4f:b8:dd:a4:2a:f0:67:57:7c:de:d3:b7:7c: 40:1a:e3:f5:12:37:7a:24:38:d7:7e:e9:91:ac:49: 3d:bc:fa:ef:c8:36:5a:9a:96:18:70:77:f5:55:8a: 70:4d:3b:68:b1:29:17:c4:f4:1d:99:49:5d:cc:e3: 2e:f7:98:9b:ce:16:7c:11:68:76:e7:ac:f5:09:32: 03:4b:5c:ef:59:a8:70:f9:33:ea:cb:ab:4b:8a:c6: 3b:7d:4f:20:b9:24:bf:d3:c5:78:c3:08:00:9a:f6: 8c:f4:3f:fe:62:de:5d:bb:24:3c:91:5b:a3:b2:46: 6c:1a:2c:5e:60:33:14:bc:e8:73:2e:d3:6a:db:20: ce:84:15:29:60:a7:d8:5d:66:7d:b0:e1:bd:e4:4f: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:B9:7C:1E:26:87:5C:33:E8:5E:D8:CB:24:2B:8D:7E:2C:D2:49 X509v3 Authority Key Identifier: keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:35:09:d3:98:36:fc:c5:c6:45:49:4d:01:06:60:bc:80:8d: 4c:ee:e0:93:97:24:b2:1e:89:c5:ac:3b:f9:1e:a8:b6:f9:75: b3:e2:96:a9:0f:ea:35:a6:d7:8b:40:57:21:d9:ba:4d:bc:f1: 93:b5:68:8b:0f:27:fc:10:6f:3d:45:d3:67:59:ea:30:ba:7b: 75:db:c6:fd:49:2a:d8:16:9b:ee:aa:8a:29:a6:76:61:b7:a5: c0:12:84:ac:03:9a:f2:9f:73:f3:b3:e0:7c:38:33:8b:74:3b: 7b:88:9a:22:c4:d6:98:e2:94:e1:d0:e5:17:00:2e:72:13:95: 76:58:dd:4f:97:d0:3b:fe:f0:67:1f:9e:e4:46:4d:db:f4:2c: 77:a5:77:6a:f5:48:8e:2e:6d:37:d8:f0:b1:f4:45:f1:d7:aa: 78:b0:97:bd:99:b3:54:9b:e4:29:35:d7:20:97:55:4a:6e:6e: c6:46:90:60:83:eb:6e:4a:4f:55:81:6d:31:db:d8:b1:d6:0f: b6:a0:5b:2a:bf:89:64:68:b2:65:2d:d9:65:20:8c:37:64:8f: 1a:b5:ed:aa:6e:41:a7:c7:ef:e7:08:b8:36:3b:ed:9b:13:a1: b3:c0:09:c3:ec:99:2e:90:1e:aa:6b:f3:30:51:1b:d3:66:3b: 23:1e:da:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSERNFzRPJKvEkE2NYhuUJMSDrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4 ODM0MkY4NzAeFw0yNjEwMTQwODUxMzNaFw0yNjEwMTUxMDQ5MzNaMDMxMTAvBgNV BAMTKDBFOENCOTdDMUUyNjg3NUMzM0U4NUVEOENCMjQyQjhEN0UyQ0QyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxbeS6UjTeZZNxgY3VPZaP4QDW 7wulBxD5u3qEKoouqlGQ3J3Vpp5w3WGPkoFRyur6t/GWG0aWhuM+6FvCMGoAdivg T7NDRlTF6rwPeBunXx520ThKKiZvPEyJpdDUMmCWGeyUAk6Oa4VeT7jdpCrwZ1d8 3tO3fEAa4/USN3okONd+6ZGsST28+u/INlqalhhwd/VVinBNO2ixKRfE9B2ZSV3M 4y73mJvOFnwRaHbnrPUJMgNLXO9ZqHD5M+rLq0uKxjt9TyC5JL/TxXjDCACa9oz0 P/5i3l27JDyRW6OyRmwaLF5gMxS86HMu02rbIM6EFSlgp9hdZn2w4b3kT2ejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDoy5fB4mh1wz6F7YyyQrjX4s0kkwHwYDVR0j BBgwFoAUVm4JykgwAkQo76syvUxcBYg0L4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE2YWE1NGYtNzE1OC00M2FmLWIzMzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0 ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4ODM0MkY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjZFMDlDQTQ4MzAwMjQ0MjhFRkFCMzJCRDRDNUMwNTg4MzQy Rjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVD MDU4ODM0MkY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA41CdOYNvzFxkVJTQEGYLyAjUzu4JOXJLIe icWsO/keqLb5dbPilqkP6jWm14tAVyHZuk288ZO1aIsPJ/wQbz1F02dZ6jC6e3Xb xv1JKtgWm+6qiimmdmG3pcAShKwDmvKfc/Oz4Hw4M4t0O3uImiLE1pjilOHQ5RcA LnITlXZY3U+X0Dv+8GcfnuRGTdv0LHeld2r1SI4ubTfY8LH0RfHXqniwl72Zs1Sb 5Ck11yCXVUpubsZGkGCD625KT1WBbTHb2LHWD7agWyq/iWRosmUt2WUgjDdkjxq1 7apuQafH7+cIuDY77ZsTobPACcPsmS6QHqpr8zBRG9NmOyMe2ik= -----END CERTIFICATE-----Generated at Wed Oct 14 16:13:47 2026 by rpki-client