$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: zKAyybyFPBAUE4Z3J0wlL1PedE9SELVDuz/FD2B/Ql0= Subject key identifier: 7E:38:46:EF:88:FD:37:00:AF:52:07:6A:20:10:DA:BC:37:0E:BB:FF Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 02E51EBF1210541E43B4DCFF8C0C899EEC217DF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 02:05:33 +0000 Manifest this update: Wed 04 Nov 2026 02:00:33 +0000 Manifest next update: Thu 05 Nov 2026 04:10:33 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) 4: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: nI+EFdaKNXiQgJO+0u69WBXGJxc2ldA0QI48ShTLdd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 04:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e5:1e:bf:12:10:54:1e:43:b4:dc:ff:8c:0c:89:9e:ec:21:7d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Nov 4 02:00:33 2026 GMT Not After : Nov 5 04:10:33 2026 GMT Subject: CN=7E3846EF88FD3700AF52076A2010DABC370EBBFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:8a:a0:8d:e1:85:41:55:c1:ac:28:12:61: a4:f9:f5:32:59:ec:2a:13:d8:2d:51:60:a4:64:6b: 9c:f4:3b:80:e6:34:32:d9:d1:7a:4c:ed:4c:cc:4a: 89:09:48:f5:72:4d:14:b7:84:da:e6:6f:ac:a6:24: 54:54:c3:10:0a:fc:c7:b9:71:5b:b6:b9:e1:be:54: 41:2b:c9:79:38:26:b4:9c:19:4a:3f:51:3f:e1:0e: 69:bb:d3:ee:ae:2d:db:f5:f1:99:c8:08:df:65:91: b5:d4:c4:f7:f3:77:bd:61:1e:09:3f:58:9a:a8:f2: 86:62:cf:36:28:6a:5c:23:67:45:20:06:b6:2e:0f: c4:95:e9:9d:d2:26:35:9b:3f:8c:f8:3e:4f:c1:a3: 28:de:38:09:62:53:b6:26:d4:14:42:3b:92:f3:ad: 17:09:b7:56:54:fe:1f:40:f7:a3:eb:e9:d6:d1:96: a4:73:3f:1e:80:5b:a4:a8:cf:21:16:43:47:a8:e4: 17:1c:48:0b:9a:32:78:0b:0d:17:c4:b9:3a:ac:25: 7f:a2:91:84:e8:28:b6:f1:63:86:4e:bb:d6:0f:79: c0:90:93:e5:25:a6:7c:24:b5:dd:0d:f5:96:6f:6f: 5a:e4:72:bf:79:4a:2c:99:97:2a:7a:6a:e4:63:4a: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:38:46:EF:88:FD:37:00:AF:52:07:6A:20:10:DA:BC:37:0E:BB:FF X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2b:e0:0d:f0:9d:1d:df:45:05:e4:44:24:61:ca:a7:09:95: ef:ff:83:64:15:81:48:81:d9:9b:c4:a8:5b:3e:08:5d:6c:d5: 75:bd:57:81:1e:fb:47:72:76:a6:05:ec:9a:39:ce:3b:bb:10: 2a:c1:ce:27:3e:5a:49:37:e0:25:64:85:b7:8e:0e:ad:8a:b8: f2:53:ac:6c:d7:9e:f7:38:aa:6a:89:74:54:a9:de:26:68:3a: dd:07:ba:3b:e7:03:54:1e:f6:e7:d9:2b:6c:6a:a7:0f:42:dd: 55:b6:6c:0e:0b:f2:b6:ff:41:4a:c6:6c:ff:bd:3c:12:ad:e2: 09:ff:20:d6:03:ed:17:94:e0:0c:87:04:2b:13:a0:00:30:87: d3:a7:87:e5:64:fd:bf:cd:1d:3d:b0:7a:fa:fe:b0:38:0c:8c: 66:bc:e0:5f:e0:fd:9d:e8:07:8d:88:d9:65:fb:9f:77:62:ef: 04:11:e5:9c:45:6c:ce:c7:8a:69:a7:10:49:e5:0f:6a:5c:31: c2:ad:3b:e4:0e:b8:9e:64:89:61:cd:da:7d:c2:c1:2e:ca:8c: fd:d4:43:4d:11:42:32:8b:01:88:68:0c:c8:0c:59:94:71:81: 3f:7b:49:21:1a:d4:3a:86:69:d0:17:95:f5:71:62:25:58:ad: 33:57:58:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuUevxIQVB5DtNz/jAyJnuwhffcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjExMDQwMjAwMzNaFw0yNjExMDUwNDEwMzNaMDMxMTAvBgNV BAMTKDdFMzg0NkVGODhGRDM3MDBBRjUyMDc2QTIwMTBEQUJDMzcwRUJCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNYqgjeGFQVXBrCgSYaT59TJZ 7CoT2C1RYKRka5z0O4DmNDLZ0XpM7UzMSokJSPVyTRS3hNrmb6ymJFRUwxAK/Me5 cVu2ueG+VEEryXk4JrScGUo/UT/hDmm70+6uLdv18ZnICN9lkbXUxPfzd71hHgk/ WJqo8oZizzYoalwjZ0UgBrYuD8SV6Z3SJjWbP4z4Pk/BoyjeOAliU7Ym1BRCO5Lz rRcJt1ZU/h9A96Pr6dbRlqRzPx6AW6SozyEWQ0eo5BccSAuaMngLDRfEuTqsJX+i kYToKLbxY4ZOu9YPecCQk+Ulpnwktd0N9ZZvb1rkcr95SiyZlyp6auRjSuvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjhG74j9NwCvUgdqIBDavDcOu/8wHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQr4A3wnR3fRQXkRCRhyqcJle//g2QVgUiB 2ZvEqFs+CF1s1XW9V4Ee+0dydqYF7Jo5zju7ECrBzic+Wkk34CVkhbeODq2KuPJT rGzXnvc4qmqJdFSp3iZoOt0HujvnA1Qe9ufZK2xqpw9C3VW2bA4L8rb/QUrGbP+9 PBKt4gn/INYD7ReU4AyHBCsToAAwh9Onh+Vk/b/NHT2wevr+sDgMjGa84F/g/Z3o B42I2WX7n3di7wQR5ZxFbM7HimmnEEnlD2pcMcKtO+QOuJ5kiWHN2n3CwS7KjP3U Q00RQjKLAYhoDMgMWZRxgT97SSEa1DqGadAXlfVxYiVYrTNXWJg= -----END CERTIFICATE-----Generated at Wed Nov 4 12:41:08 2026 by rpki-client