$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft (raw, json) Hash identifier: q21lmzBFO48awa68JDOy9DbouWzYCXOczwGEA/mDGag= Subject key identifier: EA:61:E7:36:B4:98:1C:8C:EE:9A:46:B1:9F:65:CE:93:2C:64:67:51 Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A Certificate issuer: /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Certificate serial: 731DF6A493C249211CADDF7A5D386219645D1247 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 23:42:35 +0000 Manifest this update: Tue 03 Nov 2026 23:37:35 +0000 Manifest next update: Thu 05 Nov 2026 01:46:35 +0000 Files and hashes: 1: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl (hash: 4Zta4GOIH+rWcWrXCca6q6VjMkcz0Ci1MBBjiCd6JM8=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: CZzWnarJZGz+1ihXkwXcLlHMFIQJITOjnmvNdl7iuE0=) 3: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: FPQ2j3eI8yNWuffWW/KivobaVVZM8ZwQRSH4Q+fMF+8=) 4: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1d:f6:a4:93:c2:49:21:1c:ad:df:7a:5d:38:62:19:64:5d:12:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Validity Not Before: Nov 3 23:37:35 2026 GMT Not After : Nov 5 01:46:35 2026 GMT Subject: CN=EA61E736B4981C8CEE9A46B19F65CE932C646751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:47:4e:90:9d:7b:d5:65:8b:1e:d7:8d:7b: 7a:9d:fa:a0:8a:30:38:76:48:ab:5e:1a:c4:1b:72: 20:a8:54:18:07:7b:75:0a:54:fd:82:25:d1:8f:ff: 36:db:6a:cc:b2:f2:6b:76:83:e2:c8:b6:52:41:fa: de:e7:1a:b1:a6:3d:97:3b:59:6f:41:3a:6f:77:e4: bb:17:57:a2:e9:87:f2:28:ea:66:96:be:07:bc:90: a9:37:a1:7c:31:5e:ee:05:24:82:7b:c4:da:bf:14: f6:bb:68:d3:b5:4c:93:71:ff:79:ff:07:b9:f5:8a: e9:35:93:5d:bf:a4:c3:e2:44:07:82:0b:ae:d8:7a: 4f:68:fe:49:54:0b:e1:12:89:71:8a:e6:50:52:d9: f9:f7:bd:56:3d:fc:75:ca:68:51:23:0f:5d:80:b5: 84:f5:56:cb:55:31:9e:00:28:dd:4d:b7:92:fe:a5: 14:64:39:e9:f0:1e:95:21:63:48:17:d2:ef:6c:6b: 06:07:05:59:98:f4:78:2f:3b:ca:84:c8:21:7a:7f: db:46:dd:76:59:46:ff:bd:9e:55:d3:15:c0:01:59: dc:fa:17:fe:df:5f:c4:79:cb:4f:d1:5d:05:b2:7f: 5e:66:bd:72:c6:f4:df:d8:94:d4:da:b6:7e:fd:37: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:E7:36:B4:98:1C:8C:EE:9A:46:B1:9F:65:CE:93:2C:64:67:51 X509v3 Authority Key Identifier: keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:65:17:40:b1:57:1f:2c:e4:a4:64:16:9b:db:9b:d2:75:85: 10:f4:2d:87:ff:62:2d:17:99:78:a9:96:6c:ee:97:88:52:04: 14:87:12:86:76:34:98:23:4e:1b:59:03:cc:11:8e:ad:30:1c: 94:54:e0:7a:9c:9b:7f:c6:a7:73:f3:c3:3a:1e:3a:c8:01:ba: 1b:de:07:79:e9:5d:14:53:90:bf:eb:f5:e0:ab:84:45:81:a4: d1:5b:ff:e6:95:51:dc:4b:d0:22:a6:3b:f2:25:3f:1c:d9:e1: 37:13:95:66:cd:4b:28:fb:da:ee:46:fe:6d:07:0d:d1:97:19: ba:36:8c:ef:ce:8c:8a:59:87:c1:20:5b:e0:88:64:74:b1:09: b4:98:29:73:d2:91:24:49:13:87:44:9f:99:d3:e6:1d:7b:8c: 0b:52:a0:15:6f:ad:5a:39:1d:3e:9d:b8:f7:a7:b0:88:30:71: 34:60:97:99:9c:af:46:cb:f2:98:72:c9:c0:62:3a:f8:eb:d5: bb:e3:fd:77:e9:66:4b:95:aa:71:76:51:1b:b9:32:6a:89:54: 72:f6:03:c2:76:55:bc:f1:39:08:67:9e:68:6a:89:9a:1c:44: f9:50:44:7d:1c:79:39:c1:35:89:42:d7:4c:9d:da:21:27:bc: a2:d5:e3:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcx32pJPCSSEcrd96XThiGWRdEkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJBQjhC Q0Q5REE2QTAeFw0yNjExMDMyMzM3MzVaFw0yNjExMDUwMTQ2MzVaMDMxMTAvBgNV BAMTKEVBNjFFNzM2QjQ5ODFDOENFRTlBNDZCMTlGNjVDRTkzMkM2NDY3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFkdOkJ171WWLHteNe3qd+qCK MDh2SKteGsQbciCoVBgHe3UKVP2CJdGP/zbbasyy8mt2g+LItlJB+t7nGrGmPZc7 WW9BOm935LsXV6Lph/Io6maWvge8kKk3oXwxXu4FJIJ7xNq/FPa7aNO1TJNx/3n/ B7n1iuk1k12/pMPiRAeCC67Yek9o/klUC+ESiXGK5lBS2fn3vVY9/HXKaFEjD12A tYT1VstVMZ4AKN1Nt5L+pRRkOenwHpUhY0gX0u9sawYHBVmY9HgvO8qEyCF6f9tG 3XZZRv+9nlXTFcABWdz6F/7fX8R5y0/RXQWyf15mvXLG9N/YlNTatn79N4vLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6mHnNrSYHIzumkaxn2XOkyxkZ1EwHwYDVR0j BBgwFoAUW+TCnuo92TuhwnHcuoi6uLzZ2mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEwNzE1MTQtZTRkZS00YWNlLWEwZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVF QTNERDkzQkExQzI3MURDQkE4OEJBQjhCQ0Q5REE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkU0QzI5RUVBM0REOTNCQTFDMjcxRENCQTg4QkFCOEJDRDlE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJB QjhCQ0Q5REE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhlF0CxVx8s5KRkFpvbm9J1hRD0LYf/Yi0X mXiplmzul4hSBBSHEoZ2NJgjThtZA8wRjq0wHJRU4Hqcm3/Gp3PzwzoeOsgBuhve B3npXRRTkL/r9eCrhEWBpNFb/+aVUdxL0CKmO/IlPxzZ4TcTlWbNSyj72u5G/m0H DdGXGbo2jO/OjIpZh8EgW+CIZHSxCbSYKXPSkSRJE4dEn5nT5h17jAtSoBVvrVo5 HT6duPensIgwcTRgl5mcr0bL8phyycBiOvjr1bvj/XfpZkuVqnF2URu5MmqJVHL2 A8J2VbzxOQhnnmhqiZocRPlQRH0ceTnBNYlC10yd2iEnvKLV410= -----END CERTIFICATE-----Generated at Wed Nov 4 12:11:53 2026 by rpki-client