$ rpki-client -vvvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: SMnqXgL8zu5nA4HFiiyxVQej/Yfobx1dD6uAo7zW1sU= Subject key identifier: 32:5D:26:FC:BB:49:BA:0C:F1:47:17:C9:C3:31:05:34:6A:5C:10:8F Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 7CE35A48851DBDE5F0218B1BB8DD9595A56FF857 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 01:09:23 +0000 Manifest this update: Wed 04 Nov 2026 01:04:23 +0000 Manifest next update: Thu 05 Nov 2026 04:48:23 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) 2: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: lqtw6ORpt8J5cwUXNMboeAS4Pmb4bNtbEGNHxS91yOc=) 3: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) 4: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e3:5a:48:85:1d:bd:e5:f0:21:8b:1b:b8:dd:95:95:a5:6f:f8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Nov 4 01:04:23 2026 GMT Not After : Nov 5 04:48:23 2026 GMT Subject: CN=325D26FCBB49BA0CF14717C9C33105346A5C108F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:89:77:18:f7:e5:1f:80:b8:f2:10:9c:0a: 6c:08:d4:49:47:96:78:c1:b6:00:ef:27:2e:01:fe: f2:86:2b:58:2d:8d:b6:1e:76:35:c1:5f:df:f3:c0: 57:6c:3a:83:e3:d6:a2:08:1e:6c:7e:2e:a6:ab:d5: 8a:39:34:54:f4:bf:65:01:87:d8:e6:d4:23:18:be: 9b:fe:b0:35:40:2d:53:5c:7c:97:3f:48:87:2e:d5: 73:e2:42:f4:0e:ce:3f:3e:eb:bf:d2:1b:a5:27:7b: 03:91:0e:d2:ca:a3:1f:77:65:4e:a0:a1:ab:ea:e6: 9a:bd:d9:99:d4:6c:93:a7:27:8e:12:09:a1:1a:26: eb:b2:1e:eb:99:78:46:25:9d:32:45:fe:db:2a:5c: 90:fe:12:f7:48:7b:e7:18:be:53:aa:e2:b3:28:81: 03:76:44:fa:9f:bc:79:5c:8c:33:70:53:12:51:6a: b8:5d:71:04:f3:62:ac:b2:5a:9c:8f:9d:5d:e5:60: 44:ca:a0:a0:a2:0f:b6:a8:15:bd:d5:84:ec:09:05: 04:56:01:82:0a:ba:e3:b7:e6:fa:43:ce:f7:78:68: a9:9c:c8:f6:7e:11:7a:e3:02:b9:d8:73:fe:c8:04: 91:52:64:39:23:33:8f:d7:f9:ab:0f:0e:87:5d:63: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5D:26:FC:BB:49:BA:0C:F1:47:17:C9:C3:31:05:34:6A:5C:10:8F X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b9:f5:67:24:a9:63:b3:db:8a:b1:86:04:4f:b3:64:5e:dd: 4b:7c:b0:5e:e6:a5:d4:4f:f2:25:55:e4:da:b3:58:b2:7a:e5: a5:07:08:67:50:52:99:53:24:10:0f:7d:f8:2c:a3:bc:8c:13: 80:ba:82:50:cc:d1:bc:af:36:74:ce:0f:af:61:4a:36:62:12: cb:46:ed:e9:b2:06:df:0e:68:13:21:18:f2:37:3c:e7:7c:77: 05:dd:7d:af:52:87:08:0d:5c:c0:df:e6:af:b5:a4:72:73:16: 00:19:66:f5:04:8e:c6:11:5f:d3:fb:72:60:5a:da:22:cc:f5: e3:65:f5:c3:8c:0e:d4:92:ed:9e:64:b7:c1:b1:92:93:4d:e4: 00:b0:eb:af:ef:4a:65:3c:b1:b7:a9:4c:9a:97:18:56:8e:ed: 21:6a:02:dd:ae:72:c5:d3:3f:cf:3d:0a:1b:c0:ca:62:7e:fa: 3f:a7:d0:a1:72:64:a4:18:a1:ad:62:f3:0b:4c:e8:cf:6d:9e: 24:4f:f6:ed:e7:e7:f6:34:9e:b6:62:92:55:9b:7d:d7:0c:9a: 43:f8:39:83:c9:7f:32:18:37:a7:80:cf:e5:97:bf:75:a1:a3: 97:06:98:64:ca:3b:55:dc:b7:b3:86:bb:30:f8:42:f2:37:7c: a4:67:ce:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfONaSIUdveXwIYsbuN2VlaVv+FcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjExMDQwMTA0MjNaFw0yNjExMDUwNDQ4MjNaMDMxMTAvBgNV BAMTKDMyNUQyNkZDQkI0OUJBMENGMTQ3MTdDOUMzMzEwNTM0NkE1QzEwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMIl3GPflH4C48hCcCmwI1ElH lnjBtgDvJy4B/vKGK1gtjbYedjXBX9/zwFdsOoPj1qIIHmx+Lqar1Yo5NFT0v2UB h9jm1CMYvpv+sDVALVNcfJc/SIcu1XPiQvQOzj8+67/SG6UnewORDtLKox93ZU6g oavq5pq92ZnUbJOnJ44SCaEaJuuyHuuZeEYlnTJF/tsqXJD+EvdIe+cYvlOq4rMo gQN2RPqfvHlcjDNwUxJRarhdcQTzYqyyWpyPnV3lYETKoKCiD7aoFb3VhOwJBQRW AYIKuuO35vpDzvd4aKmcyPZ+EXrjArnYc/7IBJFSZDkjM4/X+asPDoddY+YdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMl0m/LtJugzxRxfJwzEFNGpcEI8wHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK59WckqWOz24qxhgRPs2Re3Ut8sF7mpdRP 8iVV5NqzWLJ65aUHCGdQUplTJBAPffgso7yME4C6glDM0byvNnTOD69hSjZiEstG 7emyBt8OaBMhGPI3POd8dwXdfa9ShwgNXMDf5q+1pHJzFgAZZvUEjsYRX9P7cmBa 2iLM9eNl9cOMDtSS7Z5kt8GxkpNN5ACw66/vSmU8sbepTJqXGFaO7SFqAt2ucsXT P889ChvAymJ++j+n0KFyZKQYoa1i8wtM6M9tniRP9u3n5/Y0nrZiklWbfdcMmkP4 OYPJfzIYN6eAz+WXv3Who5cGmGTKO1Xct7OGuzD4QvI3fKRnzl0= -----END CERTIFICATE-----Generated at Wed Nov 4 05:25:06 2026 by rpki-client