$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft File: E66029B9A162C470EEC1DFA42227448C5628C7C0.mft (raw, json) Hash identifier: XG/caYv9aFPqEzeM+7DOZs4/aoR/kmkOkXRtCceOsFs= Subject key identifier: C6:44:01:98:32:21:04:B9:95:17:CB:C5:17:17:7A:79:BD:19:38:6D Authority key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 Certificate issuer: /CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Certificate serial: 4E6063C414F3F151D1C3B1A187CF6A65B051ADC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 06:21:04 +0000 Manifest this update: Thu 08 Oct 2026 06:16:04 +0000 Manifest next update: Fri 09 Oct 2026 08:22:04 +0000 Files and hashes: 1: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: 1O/1u/y7bw8tPk+iQAFMKxGZw0TRRYTTjU36vawpg/M=) 2: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: hA+ZmrATAmvRq+AW4JB/hKKoTjrXINAaVyYkBOTFDh0=) 3: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: JZURZX2DPzG8sUm6gWajmDbIZlI3PcawCAcX3o9QYgk=) 4: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: /DI2LBlO0iN+GBCylD6NdAgnYz8xW3+cA1gyspDRqj4=) 5: E66029B9A162C470EEC1DFA42227448C5628C7C0.crl (hash: HzKU7LBeonVkqzmsv6XUitti2XqJqRuMhpk+R/wTR+o=) 6: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: j2kFk/YVfgNkgWhXwbYb7FWRSsZvQgR1cjJdN6Wj8Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 08:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:60:63:c4:14:f3:f1:51:d1:c3:b1:a1:87:cf:6a:65:b0:51:ad:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Validity Not Before: Oct 8 06:16:04 2026 GMT Not After : Oct 9 08:22:04 2026 GMT Subject: CN=C6440198322104B99517CBC517177A79BD19386D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:71:48:8a:45:56:b9:b4:d8:31:04:7c:b1: fd:22:57:af:6d:3d:77:f0:7b:ee:58:4f:28:ed:e3: 9f:54:bb:c0:66:1a:53:f1:5d:5b:fc:a3:bb:43:e8: 11:a7:44:1b:05:de:39:b1:2b:d6:ef:d1:7b:c3:31: 8d:8f:ae:cc:49:00:4d:66:eb:80:e0:28:4f:b2:23: 11:7e:18:28:68:d6:4b:0c:f7:5b:0f:ce:ab:3e:2c: 96:e4:1b:8e:a0:6b:29:3d:81:ee:56:39:52:d4:31: 76:54:ca:3b:d6:a8:b3:7f:1b:d1:47:8a:96:8d:e5: 91:05:ac:04:5c:07:f8:eb:9d:ae:e0:c4:c4:88:44: 68:51:03:11:fc:37:ae:18:37:a9:90:0e:b6:ad:9b: cf:ba:5a:85:9d:85:bc:33:c5:0f:91:7c:15:08:cb: 38:5d:16:6a:9c:9a:c6:23:7b:15:48:49:fb:7b:ea: 19:07:56:a3:61:f1:ff:fe:65:08:4a:ee:f1:a7:ca: 64:a4:a4:12:6e:98:63:56:f8:36:ac:8d:2e:d4:ce: 53:90:1f:23:82:f2:3d:22:09:23:b2:65:33:09:58: ac:9a:e1:04:e0:cb:ea:e7:b9:09:04:79:8a:ef:e2: 45:54:e7:1b:98:09:80:12:6d:af:28:39:95:6c:58: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:44:01:98:32:21:04:B9:95:17:CB:C5:17:17:7A:79:BD:19:38:6D X509v3 Authority Key Identifier: keyid:E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e4:97:a8:20:09:aa:a0:72:2f:50:b1:29:c8:5a:31:5a:bd: fc:f7:e9:5a:54:07:4e:b6:7f:23:af:37:d7:70:45:1a:1e:73: 4f:32:6e:08:6c:75:92:e3:af:41:f3:b2:1e:26:78:6d:e2:20: 72:c1:41:d4:0a:dd:0e:00:91:07:ff:18:1f:87:16:aa:73:bd: 62:8e:d0:42:7b:45:aa:ce:06:ec:b3:cd:b8:ed:36:3f:91:a4: ed:4e:bf:b4:67:ff:f4:77:da:f4:20:73:84:46:de:c0:70:89: aa:e4:69:77:a5:41:10:a0:0c:e8:e6:2f:d6:df:23:94:26:e6: 88:1f:ad:66:dd:cf:59:1e:a0:60:c5:ef:1c:8b:12:d7:fc:f1: 38:54:3d:c1:72:69:27:db:4f:17:f0:fd:1f:74:9b:f4:6c:0f: 43:4e:1e:9f:4b:44:61:38:11:3e:f8:ff:4d:b1:d0:65:79:36: b0:59:aa:ee:be:af:80:46:4e:cb:5b:04:f2:74:32:ed:05:6e: c1:1a:e5:b4:8d:f3:ff:9b:04:48:25:bc:b0:51:13:af:44:61: c3:19:4e:b8:ab:c4:47:24:55:13:14:f4:52:19:9b:60:55:24: ab:1b:a5:52:2d:89:2f:70:5b:2e:b9:1c:ac:35:67:bb:b0:b9: 70:9f:80:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmBjxBTz8VHRw7Ghh89qZbBRrckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1 NjI4QzdDMDAeFw0yNjEwMDgwNjE2MDRaFw0yNjEwMDkwODIyMDRaMDMxMTAvBgNV BAMTKEM2NDQwMTk4MzIyMTA0Qjk5NTE3Q0JDNTE3MTc3QTc5QkQxOTM4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpd3FIikVWubTYMQR8sf0iV69t PXfwe+5YTyjt459Uu8BmGlPxXVv8o7tD6BGnRBsF3jmxK9bv0XvDMY2PrsxJAE1m 64DgKE+yIxF+GCho1ksM91sPzqs+LJbkG46gayk9ge5WOVLUMXZUyjvWqLN/G9FH ipaN5ZEFrARcB/jrna7gxMSIRGhRAxH8N64YN6mQDratm8+6WoWdhbwzxQ+RfBUI yzhdFmqcmsYjexVISft76hkHVqNh8f/+ZQhK7vGnymSkpBJumGNW+DasjS7UzlOQ HyOC8j0iCSOyZTMJWKya4QTgy+rnuQkEeYrv4kVU5xuYCYASba8oOZVsWNxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxkQBmDIhBLmVF8vFFxd6eb0ZOG0wHwYDVR0j BBgwFoAU5mApuaFixHDuwd+kIidEjFYox8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQwZjFhNmUtODNiNi00NTM0LTk2N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlB MTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1NjI4QzdDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNjYwMjlCOUExNjJDNDcwRUVDMURGQTQyMjI3NDQ4QzU2MjhD N0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0 OEM1NjI4QzdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXkl6ggCaqgci9QsSnIWjFavfz36VpUB062 fyOvN9dwRRoec08ybghsdZLjr0Hzsh4meG3iIHLBQdQK3Q4AkQf/GB+HFqpzvWKO 0EJ7RarOBuyzzbjtNj+RpO1Ov7Rn//R32vQgc4RG3sBwiarkaXelQRCgDOjmL9bf I5Qm5ogfrWbdz1keoGDF7xyLEtf88ThUPcFyaSfbTxfw/R90m/RsD0NOHp9LRGE4 ET74/02x0GV5NrBZqu6+r4BGTstbBPJ0Mu0FbsEa5bSN8/+bBEglvLBRE69EYcMZ TrirxEckVRMU9FIZm2BVJKsbpVItiS9wWy65HKw1Z7uwuXCfgGk= -----END CERTIFICATE-----Generated at Thu Oct 8 20:50:15 2026 by rpki-client