$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: lVGs5ElQaBNB8vBAvQ7LFWxpscY8TXjadcgjf5EOWvA= Subject key identifier: 49:E4:C4:9A:A9:E1:BB:2E:03:4D:7D:EB:60:3E:7C:D2:61:C4:14:EB Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 0C407CCD98A3282271BD3E20804D6DE418971A8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 11:18:41 +0000 Manifest this update: Sat 14 Nov 2026 11:13:41 +0000 Manifest next update: Sun 15 Nov 2026 11:24:41 +0000 Files and hashes: 1: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) 2: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 3: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 4: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 5: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: In0qO85FASthP1cYNVFWW1mI3W7u3/wWw1hjDTAPeXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 11:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:40:7c:cd:98:a3:28:22:71:bd:3e:20:80:4d:6d:e4:18:97:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Nov 14 11:13:41 2026 GMT Not After : Nov 15 11:24:41 2026 GMT Subject: CN=49E4C49AA9E1BB2E034D7DEB603E7CD261C414EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:5a:62:58:60:ef:fd:bd:cc:cb:58:6f:ff: ad:62:7d:92:2d:df:f8:af:23:e4:c5:2a:ba:27:d2: 5f:31:b2:fa:5c:06:04:eb:86:7a:ea:c6:03:87:c3: c6:f2:cc:df:a8:a6:b4:ea:b5:b0:5d:49:74:c1:ef: 61:8c:0e:e4:ee:44:63:dc:ca:72:97:94:5d:af:6f: 27:11:50:14:48:4d:4f:54:b8:f8:e1:42:a5:62:da: e4:9e:6f:fd:b5:12:28:9f:ba:1e:30:d7:ae:ba:12: f7:14:18:02:dd:3c:01:6f:10:a1:1a:94:2c:d1:a9: 2b:02:17:ac:eb:27:06:bc:d1:77:9e:33:c5:a9:1a: ff:ce:dc:0c:c9:fe:1d:87:b0:73:f1:b7:78:97:ef: 93:9f:23:6f:87:88:8f:6d:57:30:c1:16:69:65:0c: 81:3a:53:1b:a1:17:a1:b0:3e:56:2d:bd:53:56:8c: bc:38:1b:0d:d8:9a:bd:4a:2d:14:15:4c:da:3d:21: 98:4c:3f:ab:1f:d3:8d:4a:ca:d5:74:69:91:8f:a2: 00:a4:fb:ca:dd:c3:71:a0:b3:c5:4d:ad:fc:10:1e: e3:e9:d4:e0:b3:36:3a:53:c8:71:47:e7:17:59:45: 4c:56:15:6a:9e:f2:52:09:16:da:6d:e0:84:4e:b9: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:C4:9A:A9:E1:BB:2E:03:4D:7D:EB:60:3E:7C:D2:61:C4:14:EB X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ee:dc:b6:55:b8:98:f9:1a:4b:6c:6f:0c:d0:5e:fd:a1:64: 23:14:17:85:5b:14:6f:84:d8:50:f2:cf:f5:82:fc:05:54:15: a7:ff:9f:8f:2f:7c:9e:bf:34:43:2c:e3:47:23:5d:ba:6b:48: dc:d2:ea:31:86:b9:52:e8:84:58:8d:db:b5:fc:0e:60:e7:d2: 67:cd:4a:a2:3f:cc:e3:a2:cd:ed:fa:19:ad:9b:3d:e1:7c:c2: 32:d1:e5:df:7f:fb:fb:16:49:1e:af:78:ee:b5:74:36:77:cb: 4a:ab:9d:6a:c9:ad:fa:e5:fb:b0:8f:64:f7:03:09:54:34:17: e5:e7:c4:38:35:e3:07:8d:1e:11:4f:fb:95:55:a4:47:cf:23: 08:6a:0c:fd:08:9f:b0:dc:bf:f6:3c:ef:4e:bf:24:25:b2:d1: fc:5b:58:ba:cf:31:ec:87:7c:b4:c9:8c:fd:da:d0:0d:ef:9f: e4:02:d2:56:4a:29:d5:97:d2:c6:f0:35:42:3e:0e:dd:0b:b8: ba:69:e0:9b:67:1f:61:f8:59:a8:12:61:7e:0f:5f:b5:42:bd: 32:12:66:a4:b1:cc:b6:8f:08:c2:9a:ef:39:07:2a:42:74:5c: 55:a1:b0:af:df:0f:64:11:6c:a8:f2:21:a6:51:ee:60:62:6f: 55:79:1b:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEB8zZijKCJxvT4ggE1t5BiXGoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjExMTQxMTEzNDFaFw0yNjExMTUxMTI0NDFaMDMxMTAvBgNV BAMTKDQ5RTRDNDlBQTlFMUJCMkUwMzREN0RFQjYwM0U3Q0QyNjFDNDE0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYG1piWGDv/b3My1hv/61ifZIt 3/ivI+TFKron0l8xsvpcBgTrhnrqxgOHw8byzN+oprTqtbBdSXTB72GMDuTuRGPc ynKXlF2vbycRUBRITU9UuPjhQqVi2uSeb/21Eiifuh4w1666EvcUGALdPAFvEKEa lCzRqSsCF6zrJwa80XeeM8WpGv/O3AzJ/h2HsHPxt3iX75OfI2+HiI9tVzDBFmll DIE6UxuhF6GwPlYtvVNWjLw4Gw3Ymr1KLRQVTNo9IZhMP6sf041KytV0aZGPogCk +8rdw3Ggs8VNrfwQHuPp1OCzNjpTyHFH5xdZRUxWFWqe8lIJFtpt4IROudqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSeTEmqnhuy4DTX3rYD580mHEFOswHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABru3LZVuJj5GktsbwzQXv2hZCMUF4VbFG+E 2FDyz/WC/AVUFaf/n48vfJ6/NEMs40cjXbprSNzS6jGGuVLohFiN27X8DmDn0mfN SqI/zOOize36Ga2bPeF8wjLR5d9/+/sWSR6veO61dDZ3y0qrnWrJrfrl+7CPZPcD CVQ0F+XnxDg14weNHhFP+5VVpEfPIwhqDP0In7Dcv/Y8706/JCWy0fxbWLrPMeyH fLTJjP3a0A3vn+QC0lZKKdWX0sbwNUI+Dt0LuLpp4JtnH2H4WagSYX4PX7VCvTIS ZqSxzLaPCMKa7zkHKkJ0XFWhsK/fD2QRbKjyIaZR7mBib1V5G7s= -----END CERTIFICATE-----Generated at Sat Nov 14 23:41:17 2026 by rpki-client