$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft File: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft (raw, json) Hash identifier: fdDWY8zuse9Zq/konHWlzA9ftp5DLvi8sGfsVr144PU= Subject key identifier: 6B:6F:DD:4E:FA:CE:34:78:59:4E:C0:67:24:95:9F:27:C4:F8:7F:1D Authority key identifier: F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 Certificate issuer: /CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Certificate serial: 57F94127DC2576ED2836298D8200ADDE8E3FE3BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 06:21:08 +0000 Manifest this update: Mon 09 Nov 2026 06:16:08 +0000 Manifest next update: Tue 10 Nov 2026 07:06:08 +0000 Files and hashes: 1: 3130332e34312e3230382e302f32322d3234203d3e203633353133.roa (hash: yx7C3pxXInl8NvaaHwxDPRxFwzgTdBZeK1YGAQxBh7Y=) 2: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl (hash: /XorT8aoocuzdDmi2gOaTwzsVWOSlg9I8cMNIbFzBmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f9:41:27:dc:25:76:ed:28:36:29:8d:82:00:ad:de:8e:3f:e3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Validity Not Before: Nov 9 06:16:08 2026 GMT Not After : Nov 10 07:06:08 2026 GMT Subject: CN=6B6FDD4EFACE3478594EC06724959F27C4F87F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:d7:3c:5a:56:e8:f3:5d:7b:28:13:4a:06: 52:18:d1:60:ec:df:79:ea:da:c5:7e:9b:4d:92:b8: 95:c8:80:04:f9:a2:b3:67:9a:2e:92:e6:29:2e:b2: 0d:fe:5d:b2:e0:bc:51:d1:16:8d:51:88:42:e2:51: 02:dc:96:18:2c:91:d6:9f:b6:16:e9:7c:ea:36:c4: 10:6d:e1:65:0b:92:60:42:ba:8a:1a:71:d9:48:08: e8:8d:6d:5f:70:06:5f:a4:f3:20:3f:88:9f:b9:9c: 78:23:37:b3:4a:4a:00:cd:38:40:1c:a2:e6:a7:fc: cb:b5:95:60:4e:98:fe:a1:42:d8:95:16:77:56:a1: 70:69:a2:21:9b:c0:b7:a7:fd:39:15:3d:48:41:64: b0:f0:3a:76:0d:1f:97:a1:c0:5e:f9:94:0b:25:29: 14:24:bd:49:8c:03:25:1e:57:fa:4d:ed:82:4d:2f: 3d:d6:53:91:0b:24:e9:b1:cf:7c:ce:6c:83:3e:88: 2d:64:79:48:0b:09:aa:77:df:54:7a:e0:60:e2:89: b5:e1:6b:a9:c7:af:79:42:1c:b1:a0:fe:84:35:09: d3:e8:ae:cd:79:47:49:50:8c:17:c8:dd:d4:56:e6: da:c6:86:2b:ed:7b:9c:14:c9:e9:49:c0:fb:8e:88: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6F:DD:4E:FA:CE:34:78:59:4E:C0:67:24:95:9F:27:C4:F8:7F:1D X509v3 Authority Key Identifier: keyid:F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:86:c2:00:2c:73:41:b7:6a:f1:25:b5:ba:81:82:fc:17:70: 98:6f:da:2c:6d:f1:be:2a:a3:1d:20:38:6c:a6:ab:27:3a:59: 21:cc:4d:af:47:bf:40:48:14:08:91:15:06:a4:02:73:c9:45: f1:15:01:bd:64:0c:fd:37:33:3d:3c:c3:19:92:69:8c:01:11: 03:11:9a:43:fe:43:19:72:07:de:3f:d9:52:29:5b:c6:34:fd: 24:d8:bc:17:6d:41:38:86:b0:eb:96:49:43:d3:55:d7:4f:b9: ef:0b:31:c1:e5:1b:df:1e:bf:82:16:66:ec:62:a0:95:9b:1d: 2b:e5:3e:ae:6d:54:b5:fc:37:22:e7:50:55:f0:3d:2e:ee:a2: 04:38:43:df:44:70:5e:70:a8:64:07:65:fc:4f:1e:59:64:51: 0d:e4:c7:15:81:33:44:ef:6a:7a:95:66:28:74:51:d7:cf:bb: 37:37:67:8a:07:0e:8a:d9:52:bc:33:17:62:07:d4:34:c2:c2: d4:2b:95:60:6f:6d:83:e7:15:9b:18:27:bc:7e:2c:62:5c:a1: ea:e4:98:82:7d:2a:83:fc:2a:e6:6e:73:51:5c:83:cf:74:3b: 8f:7e:c5:e7:7e:0a:28:be:ec:4f:4b:06:4b:62:3b:3a:8b:28: 7d:eb:00:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/lBJ9wldu0oNimNggCt3o4/474wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVCMjQy OUM5MkY5MjAeFw0yNjExMDkwNjE2MDhaFw0yNjExMTAwNzA2MDhaMDMxMTAvBgNV BAMTKDZCNkZERDRFRkFDRTM0Nzg1OTRFQzA2NzI0OTU5RjI3QzRGODdGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQtc8Wlbo8117KBNKBlIY0WDs 33nq2sV+m02SuJXIgAT5orNnmi6S5ikusg3+XbLgvFHRFo1RiELiUQLclhgskdaf thbpfOo2xBBt4WULkmBCuooacdlICOiNbV9wBl+k8yA/iJ+5nHgjN7NKSgDNOEAc ouan/Mu1lWBOmP6hQtiVFndWoXBpoiGbwLen/TkVPUhBZLDwOnYNH5ehwF75lAsl KRQkvUmMAyUeV/pN7YJNLz3WU5ELJOmxz3zObIM+iC1keUgLCap331R64GDiibXh a6nHr3lCHLGg/oQ1CdPors15R0lQjBfI3dRW5trGhivte5wUyelJwPuOiNS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa2/dTvrONHhZTsBnJJWfJ8T4fx0wHwYDVR0j BBgwFoAU+W5rPyyM3taEY/XyTHnrJCnJL5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGI2YWQyYjQtZWJlNS00Y2MyLTlkMDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0Yy QzhDREVENjg0NjNGNUYyNEM3OUVCMjQyOUM5MkY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTZFNkIzRjJDOENERUQ2ODQ2M0Y1RjI0Qzc5RUIyNDI5Qzky RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVC MjQyOUM5MkY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+GwgAsc0G3avEltbqBgvwXcJhv2ixt8b4q ox0gOGymqyc6WSHMTa9Hv0BIFAiRFQakAnPJRfEVAb1kDP03Mz08wxmSaYwBEQMR mkP+QxlyB94/2VIpW8Y0/STYvBdtQTiGsOuWSUPTVddPue8LMcHlG98ev4IWZuxi oJWbHSvlPq5tVLX8NyLnUFXwPS7uogQ4Q99EcF5wqGQHZfxPHllkUQ3kxxWBM0Tv anqVZih0UdfPuzc3Z4oHDorZUrwzF2IH1DTCwtQrlWBvbYPnFZsYJ7x+LGJcoerk mIJ9KoP8KuZuc1Fcg890O49+xed+Cii+7E9LBktiOzqLKH3rAFE= -----END CERTIFICATE-----Generated at Mon Nov 9 17:20:55 2026 by rpki-client