$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json) Hash identifier: ZZPmxk33EzZNlYCxPRGnEpS4q5xvcKlLRvpjr4ekB24= Subject key identifier: 15:92:D2:A0:F2:99:41:BB:09:20:3E:60:62:E6:06:93:1F:EF:69:F3 Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Certificate serial: 2A21F2E4EB880DCF66919827B86CC7F793953052 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft Manifest number: FB Signing time: Sat 07 Nov 2026 01:32:07 +0000 Manifest this update: Sat 07 Nov 2026 01:27:07 +0000 Manifest next update: Sun 08 Nov 2026 01:54:07 +0000 Files and hashes: 1: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: Bv8bzgFpPVWvoayAxziI2P4QxOYBLMbYKbZpiecx0KU=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 01:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:21:f2:e4:eb:88:0d:cf:66:91:98:27:b8:6c:c7:f7:93:95:30:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Validity Not Before: Nov 7 01:27:07 2026 GMT Not After : Nov 8 01:54:07 2026 GMT Subject: CN=1592D2A0F29941BB09203E6062E606931FEF69F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:d7:93:11:05:fc:a2:9d:f8:ef:f1:8a:3e: 59:91:d3:d2:e2:8d:7a:13:03:2b:e3:f7:3b:39:ce: b8:90:6c:40:35:1a:65:7c:2e:eb:e3:4c:66:9a:70: ec:36:8a:0b:bf:35:94:96:c3:bc:1e:68:dd:0b:48: f2:5b:23:af:7a:8b:db:16:38:6d:ea:5f:fd:81:c2: ed:81:6c:de:c0:69:58:e9:32:93:cf:99:35:cc:9d: 1f:08:29:db:10:22:d4:07:1a:a5:59:b8:6f:58:cd: 68:45:f3:b1:5f:6b:18:93:58:d6:b1:8f:5d:97:10: df:5f:77:2a:33:b1:eb:4a:9c:30:ab:9d:ee:87:a2: 4e:dc:8d:8b:29:20:86:5b:3f:49:e3:89:66:61:84: e0:df:ce:42:c8:bb:82:90:71:9d:80:92:09:4b:d7: dc:a5:23:6c:26:ed:f3:08:52:91:0c:40:ef:c3:82: 63:0a:25:18:3c:cd:6c:28:bb:74:0b:a6:d7:dc:c2: 13:aa:4d:14:1c:51:82:ca:15:c8:92:1d:1e:44:04: aa:b3:9e:89:0b:e9:24:e1:b8:be:3c:a5:e2:78:d1: df:93:c9:76:1a:2f:a7:c6:75:ac:32:19:1f:cf:31: cb:f4:c6:b0:4f:6a:6f:aa:2c:85:34:5f:c3:d7:6f: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:92:D2:A0:F2:99:41:BB:09:20:3E:60:62:E6:06:93:1F:EF:69:F3 X509v3 Authority Key Identifier: keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:41:18:29:ab:09:e3:1e:2d:45:d2:9c:8a:9c:f8:bf:79:3c: 4d:88:ea:ac:e3:4e:f3:18:7a:02:1a:9b:6e:a9:16:b2:1c:77: 7f:68:ca:cd:09:c0:51:62:f1:db:dc:2b:22:f8:25:28:39:bb: fd:15:e7:41:9a:a3:e2:e9:c2:8c:21:06:b0:9f:66:9a:97:8d: 62:f4:3a:8e:c7:58:c6:83:4c:e0:2d:4b:8f:74:ca:11:f4:d2: 29:3d:ab:e0:a9:4f:66:4d:b3:f8:64:99:f6:89:ef:df:6e:9e: 16:8d:a2:c7:b8:d4:21:46:8e:9b:a9:0a:c8:71:99:b1:28:08: 6a:a6:14:5e:2d:6b:81:20:71:5d:50:76:2e:2e:b0:4c:3d:01: 04:0d:95:df:34:9c:aa:50:4c:c1:a4:ba:0a:0b:4f:a7:c0:59: 44:ef:32:34:cb:1e:dc:91:7d:8a:58:cc:7d:ec:e7:4b:ca:74: 93:44:13:c3:8a:05:11:04:f9:57:a8:6a:f3:93:8c:6f:1e:ac: 1c:73:59:6b:f2:d9:37:32:54:d0:1c:a8:45:30:28:7d:4f:f8: 1d:ab:d4:c7:53:e1:8a:cf:e0:05:8d:e8:e0:37:64:99:11:2b: 30:75:00:b3:a0:d5:b6:67:22:1d:a4:69:88:a2:70:12:e6:c4: 6d:d7:42:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiHy5OuIDc9mkZgnuGzH95OVMFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERCRjlE MjIxRjk2RjAeFw0yNjExMDcwMTI3MDdaFw0yNjExMDgwMTU0MDdaMDMxMTAvBgNV BAMTKDE1OTJEMkEwRjI5OTQxQkIwOTIwM0U2MDYyRTYwNjkzMUZFRjY5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjteTEQX8op347/GKPlmR09Li jXoTAyvj9zs5zriQbEA1GmV8LuvjTGaacOw2igu/NZSWw7weaN0LSPJbI696i9sW OG3qX/2Bwu2BbN7AaVjpMpPPmTXMnR8IKdsQItQHGqVZuG9YzWhF87FfaxiTWNax j12XEN9fdyozsetKnDCrne6Hok7cjYspIIZbP0njiWZhhODfzkLIu4KQcZ2AkglL 19ylI2wm7fMIUpEMQO/DgmMKJRg8zWwou3QLptfcwhOqTRQcUYLKFciSHR5EBKqz nokL6SThuL48peJ40d+TyXYaL6fGdawyGR/PMcv0xrBPam+qLIU0X8PXb5CHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFZLSoPKZQbsJID5gYuYGkx/vafMwHwYDVR0j BBgwFoAU9rhv4g5zoi2aNTzJLtjb+dIh+W8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EzNzZhNmUtM2VjYS00ZjczLThkMTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIw RTczQTIyRDlBMzUzQ0M5MkVEOERCRjlEMjIxRjk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNkI4NkZFMjBFNzNBMjJEOUEzNTNDQzkyRUQ4REJGOUQyMjFG OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvRjZCODZGRTIwRTczQTIyRDlBMzUzQ0M5MkVEOERC RjlEMjIxRjk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhBGCmrCeMeLUXSnIqc+L95PE2I6qzjTvMY egIam26pFrIcd39oys0JwFFi8dvcKyL4JSg5u/0V50Gao+LpwowhBrCfZpqXjWL0 Oo7HWMaDTOAtS490yhH00ik9q+CpT2ZNs/hkmfaJ799unhaNose41CFGjpupCshx mbEoCGqmFF4ta4EgcV1Qdi4usEw9AQQNld80nKpQTMGkugoLT6fAWUTvMjTLHtyR fYpYzH3s50vKdJNEE8OKBREE+VeoavOTjG8erBxzWWvy2TcyVNAcqEUwKH1P+B2r 1MdT4YrP4AWN6OA3ZJkRKzB1ALOg1bZnIh2kaYiicBLmxG3XQg4= -----END CERTIFICATE-----Generated at Sat Nov 7 16:57:34 2026 by rpki-client