$ rpki-client -vvvf rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft File: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft (raw, json) Hash identifier: qjQwgXCYqqtsP6Z2XeAzyKD0trHh2NMdKde8hhZ2byo= Subject key identifier: 9E:36:4A:6F:98:77:FB:08:BE:D0:5A:ED:3B:C5:31:C8:0B:D5:42:82 Authority key identifier: 5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 Certificate issuer: /CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Certificate serial: 509BE11392D128F47A41D2F5CBBF851D09098654 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 06:25:38 +0000 Manifest this update: Mon 02 Nov 2026 06:20:38 +0000 Manifest next update: Tue 03 Nov 2026 10:03:38 +0000 Files and hashes: 1: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl (hash: xlyYG+4GCjVAOcMKFTWKjyEaDxeN8DqUxp4sVhTu8R4=) 2: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: j3/lM2rV4nx+Cn6dsqDo2ERknLnpkGf86BWvcy+vYVs=) 3: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: lTUq2TXc5o2FAnT0cBjbniSYESMJX3Ig96J0JouvM0I=) 4: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: Fy9HvcnOOuartl2MyrCM5SQFmtu1CV6p6EtA15KIkk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9b:e1:13:92:d1:28:f4:7a:41:d2:f5:cb:bf:85:1d:09:09:86:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Validity Not Before: Nov 2 06:20:38 2026 GMT Not After : Nov 3 10:03:38 2026 GMT Subject: CN=9E364A6F9877FB08BED05AED3BC531C80BD54282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:f6:6c:c7:39:70:32:39:ea:14:20:bd:7a: 1e:35:11:be:31:bf:38:58:9a:bc:01:50:c6:92:43: ef:f2:eb:4e:90:65:7e:0f:24:1f:7c:54:db:f0:3c: 02:42:a0:d8:c3:ec:99:fd:4c:e5:8b:72:d0:39:74: 06:80:4f:5c:a5:8f:43:db:38:bc:42:64:67:4e:d3: 09:cc:97:86:bb:41:62:6d:d1:4a:ae:a6:b2:45:da: c3:f7:b6:e2:34:ef:13:c9:80:e0:84:98:e3:e2:01: 77:b2:52:bd:73:4e:1e:a4:ba:a1:03:0c:65:6c:9c: a5:a2:a2:e9:e5:11:c4:32:0f:f0:94:3d:52:96:b7: 82:b1:43:b8:15:aa:a8:b1:9a:44:7f:f8:ac:8f:3d: f4:4c:08:43:bf:b7:53:03:67:1f:e4:7f:f4:a3:95: 2f:e5:06:dd:34:47:c4:6c:82:c2:30:24:7e:70:a7: c7:87:83:48:3b:d7:72:03:61:07:36:9b:f4:a6:76: f9:8c:aa:06:e8:0f:91:87:cd:e4:a3:8e:21:17:e8: 58:69:e8:b3:b2:02:32:95:e9:e9:06:a8:1d:a7:5d: 00:ea:7a:94:b9:60:9d:92:2a:84:f5:2d:e0:b7:3e: 19:99:a2:df:b0:80:20:3f:47:ed:cc:f7:66:4b:f5: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:36:4A:6F:98:77:FB:08:BE:D0:5A:ED:3B:C5:31:C8:0B:D5:42:82 X509v3 Authority Key Identifier: keyid:5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:a0:32:ab:97:13:6a:5a:e9:dc:0d:d1:ad:f5:26:df:b5: 23:ff:c1:99:f2:4b:a1:07:c6:e3:44:95:5e:0f:0b:19:ca:f3: 09:37:47:23:08:f7:88:aa:bd:52:85:2c:aa:23:46:00:bf:26: f0:37:6c:f0:82:86:67:33:5a:b7:05:0d:73:05:c3:8e:f1:42: 7e:7a:0c:2c:4c:83:84:61:86:a4:dd:b5:63:3d:56:02:69:b9: b1:b7:ac:5c:09:5c:6f:75:6c:cf:c2:0b:95:cd:06:fc:17:93: ff:0a:b7:e0:5f:46:f1:c0:8e:45:14:dc:1d:97:94:77:ae:f1: 6a:71:ad:25:58:a7:8a:98:36:da:a2:28:fc:33:58:43:81:ab: e2:2a:cf:9f:ff:2d:22:33:27:2f:79:e2:06:0e:bd:23:26:6a: cc:ac:50:09:8f:24:98:93:24:c5:50:50:5f:da:d1:aa:27:a4: ad:3f:74:a3:9c:09:ae:c2:8f:a7:0e:fa:6b:7d:66:a3:b3:44: f1:8e:64:1d:04:71:ac:57:62:45:ea:9a:7f:e0:0f:01:d3:d7: 83:26:c7:3f:15:d5:02:34:7a:56:e2:6a:38:49:bb:e5:de:20: 4d:b8:08:03:38:6d:2c:71:68:c8:19:41:1f:12:61:f4:3f:ee: a9:00:9e:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJvhE5LRKPR6QdL1y7+FHQkJhlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5 QzBFRUVBMjAeFw0yNjExMDIwNjIwMzhaFw0yNjExMDMxMDAzMzhaMDMxMTAvBgNV BAMTKDlFMzY0QTZGOTg3N0ZCMDhCRUQwNUFFRDNCQzUzMUM4MEJENTQyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6/ZsxzlwMjnqFCC9eh41Eb4x vzhYmrwBUMaSQ+/y606QZX4PJB98VNvwPAJCoNjD7Jn9TOWLctA5dAaAT1ylj0Pb OLxCZGdO0wnMl4a7QWJt0UquprJF2sP3tuI07xPJgOCEmOPiAXeyUr1zTh6kuqED DGVsnKWiounlEcQyD/CUPVKWt4KxQ7gVqqixmkR/+KyPPfRMCEO/t1MDZx/kf/Sj lS/lBt00R8RsgsIwJH5wp8eHg0g713IDYQc2m/SmdvmMqgboD5GHzeSjjiEX6Fhp 6LOyAjKV6ekGqB2nXQDqepS5YJ2SKoT1LeC3PhmZot+wgCA/R+3M92ZL9WMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnjZKb5h3+wi+0FrtO8UxyAvVQoIwHwYDVR0j BBgwFoAUWv4k0j42JUhNfZs+ugAlqpwO7qIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThkMWM0NDktOTc4Yy00ODQ1LWI4MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIz RTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5QzBFRUVBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QUZFMjREMjNFMzYyNTQ4NEQ3RDlCM0VCQTAwMjVBQTlDMEVF RUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1 QUE5QzBFRUVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGooDKrlxNqWuncDdGt9SbftSP/wZnyS6EH xuNElV4PCxnK8wk3RyMI94iqvVKFLKojRgC/JvA3bPCChmczWrcFDXMFw47xQn56 DCxMg4RhhqTdtWM9VgJpubG3rFwJXG91bM/CC5XNBvwXk/8Kt+BfRvHAjkUU3B2X lHeu8WpxrSVYp4qYNtqiKPwzWEOBq+Iqz5//LSIzJy954gYOvSMmasysUAmPJJiT JMVQUF/a0aonpK0/dKOcCa7Cj6cO+mt9ZqOzRPGOZB0EcaxXYkXqmn/gDwHT14Mm xz8V1QI0elbiajhJu+XeIE24CAM4bSxxaMgZQR8SYfQ/7qkAnps= -----END CERTIFICATE-----Generated at Mon Nov 2 23:28:20 2026 by rpki-client