$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: wp6RaEO7Kcht3DKu7KvpHOmDo80yeR0MqoSHVTBSHe0= Subject key identifier: E3:17:A6:A4:C1:84:01:FE:EE:A3:51:7E:35:5D:29:68:E0:B8:B9:EC Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 2D84B7033FDB93871DD02C1301293E883821C0E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 03:42:45 +0000 Manifest this update: Wed 04 Nov 2026 03:37:45 +0000 Manifest next update: Thu 05 Nov 2026 06:47:45 +0000 Files and hashes: 1: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) 3: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: mFRj+p5HxC1Xe8ChMId/VDT2Q9Bx0GUIDdj1rLzxMBU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 06:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:84:b7:03:3f:db:93:87:1d:d0:2c:13:01:29:3e:88:38:21:c0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Nov 4 03:37:45 2026 GMT Not After : Nov 5 06:47:45 2026 GMT Subject: CN=E317A6A4C18401FEEEA3517E355D2968E0B8B9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:16:5d:ec:67:9d:09:33:b9:8a:7a:15:86: 77:ec:a4:16:ea:8c:36:e3:86:7d:92:fa:c8:d3:ba: 76:ca:de:96:cd:87:56:a5:f5:52:b2:04:f0:17:b3: 0c:a8:e1:14:2b:24:c8:df:fa:d3:9b:d6:67:e0:bf: 67:40:33:56:8c:ed:3d:50:86:06:ab:28:89:e1:a2: 1c:77:67:2c:8f:83:b9:0f:cc:1b:28:b3:90:7a:55: 6c:49:46:f3:42:f4:d9:d9:8e:1d:32:c9:a9:b0:80: 61:47:17:69:6b:08:c1:ea:2f:2e:2d:9b:5e:8d:6a: b8:ab:0e:3c:8d:10:7d:b8:d9:cf:a0:26:b6:d7:91: 7e:4c:8b:ec:8a:23:3b:d3:86:d8:b6:33:a0:47:dc: 7d:42:e2:06:11:88:bf:5e:d8:cd:85:e4:b3:aa:39: bd:c8:55:1c:6b:58:af:35:c2:fd:38:45:7d:8f:b9: 4f:5f:ac:84:cf:3f:bd:95:12:7e:7c:49:f8:e5:0b: 88:e0:99:95:22:63:d5:ec:4a:ef:67:36:a6:0d:d0: 21:a4:a8:8c:fd:da:23:46:3f:84:2f:8a:92:25:27: 39:2e:b8:4c:e2:34:1f:ef:df:8f:5a:70:bd:37:c9: 23:34:b2:26:31:f7:0d:86:89:e9:d5:d4:f6:93:47: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:A6:A4:C1:84:01:FE:EE:A3:51:7E:35:5D:29:68:E0:B8:B9:EC X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6e:cc:66:81:09:d5:9e:f9:52:40:9b:af:da:bc:18:88:6c: ba:bd:00:ef:b0:3d:66:77:f8:aa:09:27:b9:16:91:cf:9e:82: 99:18:de:d7:cb:24:45:f5:a5:b3:64:ff:74:8f:ec:7c:1d:79: c3:1c:4e:93:97:c9:57:50:36:71:c7:75:a1:d4:71:78:e4:67: d3:17:53:48:3d:ed:49:6f:c8:72:dd:38:22:35:30:b1:5d:d3: 82:d6:92:e9:23:22:30:09:6a:36:88:fa:f3:35:2d:52:ad:59: e7:36:95:bd:37:75:19:12:64:92:1c:f1:e2:5e:8f:bd:e5:95: 18:ae:71:4a:33:a2:14:4a:20:17:00:32:5b:b4:3b:ea:08:4c: 16:fc:f5:97:3c:50:7d:5b:21:5d:67:3d:62:0c:75:56:cf:aa: c1:03:3a:b6:a1:b4:07:27:4a:7b:35:41:ac:c3:22:1f:c7:75: 81:f4:e2:e6:05:55:fc:f2:17:b0:18:d1:ff:80:be:f4:6f:01: 23:1e:16:13:ee:bc:b4:30:25:2b:91:e0:e9:89:f3:f5:e2:f9: 75:d2:ff:5d:d4:70:26:d4:59:b5:b6:0c:3a:0d:10:c9:8f:bd: 09:4e:8f:07:11:80:ff:6e:55:f1:15:e8:a4:9a:0b:b9:0c:d4: 12:1b:0f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYS3Az/bk4cd0CwTASk+iDghwOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjExMDQwMzM3NDVaFw0yNjExMDUwNjQ3NDVaMDMxMTAvBgNV BAMTKEUzMTdBNkE0QzE4NDAxRkVFRUEzNTE3RTM1NUQyOTY4RTBCOEI5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVRZd7GedCTO5inoVhnfspBbq jDbjhn2S+sjTunbK3pbNh1al9VKyBPAXswyo4RQrJMjf+tOb1mfgv2dAM1aM7T1Q hgarKInhohx3ZyyPg7kPzBsos5B6VWxJRvNC9NnZjh0yyamwgGFHF2lrCMHqLy4t m16NarirDjyNEH242c+gJrbXkX5Mi+yKIzvThti2M6BH3H1C4gYRiL9e2M2F5LOq Ob3IVRxrWK81wv04RX2PuU9frITPP72VEn58SfjlC4jgmZUiY9XsSu9nNqYN0CGk qIz92iNGP4QvipIlJzkuuEziNB/v349acL03ySM0siYx9w2GienV1PaTR5dfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4xempMGEAf7uo1F+NV0paOC4uewwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADluzGaBCdWe+VJAm6/avBiIbLq9AO+wPWZ3 +KoJJ7kWkc+egpkY3tfLJEX1pbNk/3SP7HwdecMcTpOXyVdQNnHHdaHUcXjkZ9MX U0g97UlvyHLdOCI1MLFd04LWkukjIjAJajaI+vM1LVKtWec2lb03dRkSZJIc8eJe j73llRiucUozohRKIBcAMlu0O+oITBb89Zc8UH1bIV1nPWIMdVbPqsEDOrahtAcn Sns1QazDIh/HdYH04uYFVfzyF7AY0f+AvvRvASMeFhPuvLQwJSuR4OmJ8/Xi+XXS /13UcCbUWbW2DDoNEMmPvQlOjwcRgP9uVfEV6KSaC7kM1BIbD9Q= -----END CERTIFICATE-----Generated at Wed Nov 4 23:32:39 2026 by rpki-client