$ rpki-client -vvvf rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft File: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft (raw, json) Hash identifier: gesr27wyKZe8QjxgCyKphTTBT0mtGrAEFPYhx+cYmmQ= Subject key identifier: CA:75:ED:47:BC:A5:5D:66:36:50:09:A3:86:F2:9E:3A:8D:EE:15:81 Authority key identifier: E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A Certificate issuer: /CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Certificate serial: 327CF872727D61AFD94F4CB4980F1A47CD9E2005 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 07:40:11 +0000 Manifest this update: Mon 09 Nov 2026 07:35:11 +0000 Manifest next update: Tue 10 Nov 2026 10:01:11 +0000 Files and hashes: 1: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl (hash: 7PuniSbdOq8YW7vQKhUPlENgZW3Pgc0itSp0PIMD9hg=) 2: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: fEQ2RGA7SMjU1u5ivR067WU+IPRjxPNEFjBrW6SRr/A=) 3: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: VDHJo/qx9d4J355p/1MBoyGSP1OFutt76fTDKsTeD4I=) 4: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: xBjUpSUSZ8eUWIhz+cYXnDPEanv04sn2bLKLMW/gQsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7c:f8:72:72:7d:61:af:d9:4f:4c:b4:98:0f:1a:47:cd:9e:20:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Validity Not Before: Nov 9 07:35:11 2026 GMT Not After : Nov 10 10:01:11 2026 GMT Subject: CN=CA75ED47BCA55D66365009A386F29E3A8DEE1581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:91:c3:9f:54:0d:7f:c1:0a:4a:d4:d6:99: eb:93:10:3a:8b:ae:fb:92:83:6d:b2:87:8a:2e:19: ac:51:e4:3e:77:81:0f:40:77:fb:5c:e3:a3:96:3f: 41:e5:4b:e3:bc:e3:88:01:0a:15:fe:66:33:93:e8: 9b:4b:a4:9c:76:b2:fd:88:1c:6a:15:a5:9e:e2:0b: 92:0e:db:6c:29:51:6b:bc:e0:f5:1c:59:39:f5:03: 0a:0a:6c:c4:99:18:bc:83:0d:a8:67:ed:3a:43:e0: e0:2c:5f:16:ec:3a:b8:8b:d6:50:8a:44:e7:75:4a: cf:d4:f2:f4:43:0b:3a:6f:83:59:19:95:45:3b:55: a6:90:24:61:6c:47:13:f6:47:45:58:44:d6:69:52: aa:2c:21:16:7f:1f:34:4c:d9:20:eb:f4:66:1d:3c: 2a:89:99:34:ac:56:3d:a9:15:56:d5:fb:65:e0:5b: 19:50:e5:65:ed:63:8c:09:a2:bf:7d:f3:b2:af:ed: 47:74:02:02:f5:0a:b8:3c:dc:f2:ac:1a:54:69:1f: 5b:71:38:b7:8f:67:03:a2:64:9c:12:b5:2a:90:a7: 18:7d:b2:18:59:8f:14:59:09:20:47:15:e4:c9:6d: 2a:55:7c:90:b3:40:7e:45:8e:72:33:e5:2f:e3:4b: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:75:ED:47:BC:A5:5D:66:36:50:09:A3:86:F2:9E:3A:8D:EE:15:81 X509v3 Authority Key Identifier: keyid:E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:32:fd:bc:35:72:b6:dc:45:fa:aa:87:a3:ec:6c:a8:eb:b3: cc:98:77:92:e7:6c:96:9e:c9:5f:7e:6a:0e:fc:5b:ea:33:a6: f6:64:03:2f:ae:71:88:51:78:f3:0a:8e:0e:d3:3c:b2:df:c9: c5:7c:cb:26:2d:ff:5f:ca:3e:59:c4:02:d0:fa:af:ee:58:ff: 97:60:45:04:a8:f9:94:1e:c2:db:25:c9:b1:fe:37:5a:01:c2: 1c:a6:c5:e3:55:61:b6:4f:6f:62:22:52:1a:c3:fb:d7:42:5f: 2b:63:8e:14:08:93:d4:0a:5f:e6:cf:39:94:9b:d2:9d:0d:b1: 9b:47:00:3b:e4:8d:e9:84:8e:96:fd:2c:0f:7e:bf:69:4c:5f: 6f:d7:b5:27:1a:94:9c:88:c6:26:72:94:ae:11:0f:7d:9f:45: 57:03:1e:52:1c:e0:75:36:f2:a4:13:27:2c:d0:e5:10:e7:69: 65:33:37:19:87:aa:3a:21:5a:86:c3:04:76:8e:78:ed:64:62: 07:8e:ff:bf:5f:68:ca:e5:67:2b:75:85:77:72:1c:d6:7c:b2: 16:d0:79:bf:be:04:13:eb:06:f7:d1:07:b3:6d:17:c9:08:54: 56:10:af:61:e0:1e:62:fa:aa:40:e6:85:08:f2:e0:b5:2e:5c: 6a:19:3a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnz4cnJ9Ya/ZT0y0mA8aR82eIAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFRkEwQzk4N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZG N0JGRDQ3QTAeFw0yNjExMDkwNzM1MTFaFw0yNjExMTAxMDAxMTFaMDMxMTAvBgNV BAMTKENBNzVFRDQ3QkNBNTVENjYzNjUwMDlBMzg2RjI5RTNBOERFRTE1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bJHDn1QNf8EKStTWmeuTEDqL rvuSg22yh4ouGaxR5D53gQ9Ad/tc46OWP0HlS+O844gBChX+ZjOT6JtLpJx2sv2I HGoVpZ7iC5IO22wpUWu84PUcWTn1AwoKbMSZGLyDDahn7TpD4OAsXxbsOriL1lCK ROd1Ss/U8vRDCzpvg1kZlUU7VaaQJGFsRxP2R0VYRNZpUqosIRZ/HzRM2SDr9GYd PCqJmTSsVj2pFVbV+2XgWxlQ5WXtY4wJor9987Kv7Ud0AgL1Crg83PKsGlRpH1tx OLePZwOiZJwStSqQpxh9shhZjxRZCSBHFeTJbSpVfJCzQH5FjnIz5S/jS4GDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynXtR7ylXWY2UAmjhvKeOo3uFYEwHwYDVR0j BBgwFoAU5u+gyYfre97c1lIPz+qmxve/1HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyYmVhZTEtMzQ4MC00ZTkyLWEzYTktNWE1NGZiYmFjZDJkLzAvRTZFRkEwQzk4 N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZGN0JGRDQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkVGQTBDOTg3RUI3QkRFRENENjUyMEZDRkVBQTZDNkY3QkZE NDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvRTZFRkEwQzk4N0VCN0JERURDRDY1MjBGQ0ZFQUE2 QzZGN0JGRDQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACky/bw1crbcRfqqh6PsbKjrs8yYd5LnbJae yV9+ag78W+ozpvZkAy+ucYhRePMKjg7TPLLfycV8yyYt/1/KPlnEAtD6r+5Y/5dg RQSo+ZQewtslybH+N1oBwhymxeNVYbZPb2IiUhrD+9dCXytjjhQIk9QKX+bPOZSb 0p0NsZtHADvkjemEjpb9LA9+v2lMX2/XtScalJyIxiZylK4RD32fRVcDHlIc4HU2 8qQTJyzQ5RDnaWUzNxmHqjohWobDBHaOeO1kYgeO/79faMrlZyt1hXdyHNZ8shbQ eb++BBPrBvfRB7NtF8kIVFYQr2HgHmL6qkDmhQjy4LUuXGoZOik= -----END CERTIFICATE-----Generated at Mon Nov 9 22:36:40 2026 by rpki-client