$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: IGr0XU1081fFBok9fK0TauRsWKpsv76gUNPIk96ElZ4= Subject key identifier: 4A:77:66:3E:91:11:E5:E1:1E:F8:B8:FE:E8:41:C1:72:58:32:46:D7 Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 4BF3101B98379617C52FA1F5B2AF7616DF138AC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 11:11:52 +0000 Manifest this update: Mon 02 Nov 2026 11:06:52 +0000 Manifest next update: Tue 03 Nov 2026 13:00:52 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 3: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) 4: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: zIhyVUPxiRNZv89cSZkRYIFbNgS6E5yy/SgVf+NvjGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f3:10:1b:98:37:96:17:c5:2f:a1:f5:b2:af:76:16:df:13:8a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Nov 2 11:06:52 2026 GMT Not After : Nov 3 13:00:52 2026 GMT Subject: CN=4A77663E9111E5E11EF8B8FEE841C172583246D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:9f:49:78:33:7c:f2:b2:99:ee:f4:11:25: 72:22:fd:eb:f3:d2:a2:8c:21:0a:84:3e:95:0b:a7: cc:16:37:84:72:ff:9d:c6:1e:0e:46:83:65:87:5c: 80:df:a1:37:c4:57:89:00:60:98:9b:59:20:78:0d: b1:ea:8f:1c:15:00:39:ae:f5:93:28:1a:3b:2d:f6: 22:d3:15:fd:e5:6c:64:01:c0:be:9d:ea:de:6a:71: 0f:6e:3c:c2:2e:e6:78:08:24:aa:9e:d2:7b:54:72: e2:38:01:13:fd:40:02:44:7c:a8:58:20:ee:e9:cf: 63:7c:ea:23:dc:6e:ed:52:f2:8e:19:c1:04:1f:8e: cc:32:18:a2:35:3f:73:0a:17:6b:39:a1:5d:56:eb: 3d:de:3c:8b:50:ab:52:f4:1e:6f:4f:31:0e:8c:40: 4f:f3:3d:3b:15:db:73:0d:12:73:f6:99:bb:99:92: 72:c6:76:80:cd:2f:f2:81:e6:4d:af:2e:cc:ae:38: b4:f5:7d:2d:f4:81:ad:12:be:d6:6a:0a:3a:5e:d2: c0:36:cb:61:99:12:7a:65:bc:04:18:4b:da:74:27: 19:9e:50:53:62:2e:0c:9a:40:8e:93:1d:63:71:b0: 7a:8b:1c:9e:2f:54:37:ab:d8:73:27:59:46:94:eb: fa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:77:66:3E:91:11:E5:E1:1E:F8:B8:FE:E8:41:C1:72:58:32:46:D7 X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2c:b3:ab:fd:67:2b:9e:27:6f:db:c5:8f:f6:1a:83:e8:d3: c2:3a:a4:ba:45:9a:0a:12:54:23:73:46:bf:35:a2:e6:00:0a: 58:c7:4f:f3:8c:cd:7e:b8:6e:13:28:f5:6b:20:38:8c:76:b2: 1e:18:56:82:f2:80:70:0a:f1:51:c8:49:8d:f2:20:a7:24:c7: f6:a3:a2:7c:ee:ba:d1:bc:86:0f:1a:56:ae:73:15:3e:d2:89: 47:58:b2:2e:d7:5e:e1:6a:bd:62:d8:50:f8:14:47:ca:8c:3d: 2d:9a:ec:4f:54:0c:0c:24:f4:a5:92:4c:1f:3e:86:55:1f:8c: f5:25:22:d7:8c:ee:31:af:80:dd:eb:de:9b:f3:70:36:7f:4f: 93:87:80:79:8d:cc:01:a0:c8:7f:24:99:17:98:0e:20:1d:bc: ef:f3:b2:a0:99:dd:65:d0:3e:a2:05:e8:28:46:80:bc:e1:16: 0e:f6:e3:e7:4e:03:81:d8:96:63:9b:e7:67:25:c8:6b:f3:4b: 33:b9:d6:fe:b9:36:14:27:4c:a8:89:73:cc:23:b6:d3:4e:df: d5:d9:68:7b:6d:82:03:98:9d:88:35:f0:c5:1f:43:4c:5f:97: 0f:74:43:24:1b:0a:fe:25:35:ee:ac:2e:95:14:3d:1b:1f:05: 0a:7e:c3:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/MQG5g3lhfFL6H1sq92Ft8TisgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjExMDIxMTA2NTJaFw0yNjExMDMxMzAwNTJaMDMxMTAvBgNV BAMTKDRBNzc2NjNFOTExMUU1RTExRUY4QjhGRUU4NDFDMTcyNTgzMjQ2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllJ9JeDN88rKZ7vQRJXIi/evz 0qKMIQqEPpULp8wWN4Ry/53GHg5Gg2WHXIDfoTfEV4kAYJibWSB4DbHqjxwVADmu 9ZMoGjst9iLTFf3lbGQBwL6d6t5qcQ9uPMIu5ngIJKqe0ntUcuI4ARP9QAJEfKhY IO7pz2N86iPcbu1S8o4ZwQQfjswyGKI1P3MKF2s5oV1W6z3ePItQq1L0Hm9PMQ6M QE/zPTsV23MNEnP2mbuZknLGdoDNL/KB5k2vLsyuOLT1fS30ga0SvtZqCjpe0sA2 y2GZEnplvAQYS9p0JxmeUFNiLgyaQI6THWNxsHqLHJ4vVDer2HMnWUaU6/pZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSndmPpER5eEe+Lj+6EHBclgyRtcwHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEss6v9ZyueJ2/bxY/2GoPo08I6pLpFmgoS VCNzRr81ouYACljHT/OMzX64bhMo9WsgOIx2sh4YVoLygHAK8VHISY3yIKckx/aj onzuutG8hg8aVq5zFT7SiUdYsi7XXuFqvWLYUPgUR8qMPS2a7E9UDAwk9KWSTB8+ hlUfjPUlIteM7jGvgN3r3pvzcDZ/T5OHgHmNzAGgyH8kmReYDiAdvO/zsqCZ3WXQ PqIF6ChGgLzhFg724+dOA4HYlmOb52clyGvzSzO51v65NhQnTKiJc8wjttNO39XZ aHttggOYnYg18MUfQ0xflw90QyQbCv4lNe6sLpUUPRsfBQp+w7w= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:40 2026 by rpki-client