$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: 2RNUEFII9j28J1uPpKX7X23IlOpeN5SyBZIRTSbYVvA= Subject key identifier: 08:66:64:56:4D:31:2E:15:BF:9E:87:E9:3F:68:68:BA:62:65:4B:69 Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 5A0F288300CEE11BFCC56CF5A1EE6F545324C82B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: FD Signing time: Wed 04 Nov 2026 12:03:12 +0000 Manifest this update: Wed 04 Nov 2026 11:58:12 +0000 Manifest next update: Thu 05 Nov 2026 13:42:12 +0000 Files and hashes: 1: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: Zs/DYWbVjOBRcAAs5rPEei96x235u50xJ2qtaf72HjY=) 2: 3130332e3138352e38322e302f32332d3233203d3e203538383230.roa (hash: 5tF4qp3pthDfpaMIBTWAt6J465qcSCrI9I/iywJOOfs=) 3: 3130332e3138352e38322e302f32342d3234203d3e20313533363538.roa (hash: 3D6eYWuVv+VfyxKvhmmt+NlubugsC5IamNBQUUTxDDk=) 4: 3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa (hash: gbvsVbre/1qZHWsiXoi/b+h75ZvQI1fjsMMqGabJRM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0f:28:83:00:ce:e1:1b:fc:c5:6c:f5:a1:ee:6f:54:53:24:c8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: Nov 4 11:58:12 2026 GMT Not After : Nov 5 13:42:12 2026 GMT Subject: CN=086664564D312E15BF9E87E93F6868BA62654B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:44:5c:78:fa:bc:a9:9d:ab:31:3b:bc:3e: 37:c7:c9:30:2d:db:df:26:08:13:a7:ee:b9:01:90: bd:8c:cb:1c:8d:98:9e:92:63:3e:08:f1:19:ff:5f: 96:22:b7:5d:99:ec:03:cb:a3:c8:16:51:eb:83:6a: c8:eb:cb:39:6a:4f:60:87:79:74:6f:1c:09:04:f0: b3:be:08:5b:3a:ba:0c:4a:77:96:cb:79:b1:86:85: c5:c1:12:0b:e3:82:15:9c:df:8d:d2:51:3b:29:35: 04:5e:6e:8f:ec:51:de:b7:32:4e:ec:40:7d:91:06: 2b:09:e9:03:cf:d6:cb:cc:54:32:71:ea:27:41:ab: 01:85:de:ea:9a:9d:52:a8:46:d5:aa:d0:b4:41:39: bc:7d:4d:fb:34:16:7a:cf:16:11:6a:8b:95:c5:81: 41:12:bc:dc:bf:2a:3b:22:13:b4:85:09:b1:95:cc: 0d:96:a8:f1:01:92:81:18:e7:c3:51:c1:ec:d0:f4: fb:5b:8e:0a:99:ef:30:df:81:70:68:2b:83:6c:4a: dd:f9:a5:18:3f:97:65:a6:de:f9:01:0c:57:84:ab: 77:7d:71:57:43:43:da:b3:2e:1b:f8:21:88:5c:49: 77:8d:6c:1a:02:2d:07:99:dc:88:50:84:71:2b:1c: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:66:64:56:4D:31:2E:15:BF:9E:87:E9:3F:68:68:BA:62:65:4B:69 X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:47:c2:15:4f:61:f2:de:9b:ca:7c:c9:f9:a5:92:c7:ff:a7: f7:11:b5:ef:ca:43:38:a1:67:23:55:c7:37:97:9c:5d:dd:64: f8:8f:18:06:6d:64:e0:be:27:5c:e9:3e:67:a2:e8:be:a1:a1: 50:31:01:b8:f6:92:df:5f:f1:16:87:65:a9:0a:d0:58:8e:db: 8b:03:00:0d:d9:a1:c5:a6:9c:44:c3:7e:64:f8:5b:16:56:58: f6:7e:c2:68:2c:4d:61:85:6d:c3:07:18:ba:69:b7:4a:a4:cf: 53:d7:fa:94:38:2f:c6:39:df:70:34:90:7d:4e:44:d2:a1:6e: 41:9e:b1:1f:41:37:bb:85:69:f3:5e:e6:b0:42:fe:6f:1b:a9: 7e:58:e5:09:44:bb:d7:96:f1:04:9d:3a:7f:0a:a4:ed:34:4d: e5:78:c3:f2:7e:c6:ce:57:fb:bf:62:0a:2a:45:5a:51:80:84: 8d:48:fe:2c:2b:67:69:42:9f:eb:4e:e4:a2:7e:ff:60:3b:02: 84:f9:91:8d:4e:c4:1a:ce:e4:ec:8a:2f:c8:55:01:14:00:88: 01:a4:76:74:a3:30:2b:b5:9c:37:b3:f2:d0:e8:ae:82:d7:87: c1:fa:33:ee:dc:af:5e:0d:ae:88:c0:e0:4f:b5:56:4d:a0:b0: 66:a5:16:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWg8ogwDO4Rv8xWz1oe5vVFMkyCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjExMDQxMTU4MTJaFw0yNjExMDUxMzQyMTJaMDMxMTAvBgNV BAMTKDA4NjY2NDU2NEQzMTJFMTVCRjlFODdFOTNGNjg2OEJBNjI2NTRCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9kRcePq8qZ2rMTu8PjfHyTAt 298mCBOn7rkBkL2MyxyNmJ6SYz4I8Rn/X5Yit12Z7APLo8gWUeuDasjryzlqT2CH eXRvHAkE8LO+CFs6ugxKd5bLebGGhcXBEgvjghWc343SUTspNQRebo/sUd63Mk7s QH2RBisJ6QPP1svMVDJx6idBqwGF3uqanVKoRtWq0LRBObx9Tfs0FnrPFhFqi5XF gUESvNy/KjsiE7SFCbGVzA2WqPEBkoEY58NRwezQ9PtbjgqZ7zDfgXBoK4NsSt35 pRg/l2Wm3vkBDFeEq3d9cVdDQ9qzLhv4IYhcSXeNbBoCLQeZ3IhQhHErHIe1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCGZkVk0xLhW/nofpP2houmJlS2kwHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5HwhVPYfLem8p8yfmlksf/p/cRte/KQzih ZyNVxzeXnF3dZPiPGAZtZOC+J1zpPmei6L6hoVAxAbj2kt9f8RaHZakK0FiO24sD AA3ZocWmnETDfmT4WxZWWPZ+wmgsTWGFbcMHGLppt0qkz1PX+pQ4L8Y533A0kH1O RNKhbkGesR9BN7uFafNe5rBC/m8bqX5Y5QlEu9eW8QSdOn8KpO00TeV4w/J+xs5X +79iCipFWlGAhI1I/iwrZ2lCn+tO5KJ+/2A7AoT5kY1OxBrO5OyKL8hVARQAiAGk dnSjMCu1nDez8tDoroLXh8H6M+7cr14NrojA4E+1Vk2gsGalFk0= -----END CERTIFICATE-----Generated at Wed Nov 4 18:07:10 2026 by rpki-client