$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: tVvuchv84x+fEyXGgNM+IvdQh5wdvETkNabsXoo9veY= Subject key identifier: B0:6D:E4:2F:57:61:9C:CB:62:35:34:D2:5F:04:6B:4B:CA:11:81:A2 Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 735A619FA79F9F342B1C693784DEAFD9D969727C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 23:27:04 +0000 Manifest this update: Sun 01 Nov 2026 23:22:04 +0000 Manifest next update: Tue 03 Nov 2026 01:38:04 +0000 Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: 1O1nE9KNdhB4H3vgsQf1bkYtz9ijyTSlG7elfUNX6z8=) 2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) 3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5a:61:9f:a7:9f:9f:34:2b:1c:69:37:84:de:af:d9:d9:69:72:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Nov 1 23:22:04 2026 GMT Not After : Nov 3 01:38:04 2026 GMT Subject: CN=B06DE42F57619CCB623534D25F046B4BCA1181A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:f0:87:34:f7:01:be:ba:57:d0:70:c4:3c: 83:7b:c3:05:a2:ab:8a:5b:28:d5:12:c1:10:e3:8a: 58:e8:4c:31:51:5d:85:0b:82:17:fd:a4:38:06:1f: 61:a0:6a:8c:fa:0b:f0:c4:92:1d:96:fb:d6:b3:8b: 1e:3c:ed:0c:e0:e8:86:0a:28:72:a6:03:da:fa:2c: 47:6e:3b:54:2b:31:e9:b8:dd:12:ed:d2:9e:dc:fa: 8a:e2:11:45:9f:e8:94:9b:98:4e:06:18:a1:55:65: bc:d8:eb:59:cc:14:43:b1:d7:d2:e3:e1:c4:ef:9b: b3:5c:0e:c4:30:87:3e:6d:f2:db:3a:94:19:62:e4: f4:ee:7f:3c:69:b3:cb:65:c8:f2:63:08:5e:37:14: 82:40:2b:12:66:d4:f6:d8:17:0a:36:05:39:70:cb: 31:3e:f5:ea:81:22:4c:d7:cf:c8:fd:6c:c7:db:0c: 01:2e:73:c4:c4:4c:30:87:dc:fd:26:c1:0b:69:c4: ef:90:7f:12:ad:8c:0b:af:0f:06:53:d4:ff:4b:92: ad:f8:7f:60:45:84:f7:03:2e:2b:57:7b:c2:8a:2c: f0:6e:f2:70:4c:87:21:9a:16:6c:22:04:eb:91:3a: 1f:f7:51:22:8f:58:c2:dc:53:fc:c1:f9:ff:df:65: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6D:E4:2F:57:61:9C:CB:62:35:34:D2:5F:04:6B:4B:CA:11:81:A2 X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f4:02:bb:27:0e:c9:29:62:32:4f:25:45:ae:e8:15:db:00: c2:7c:b8:81:0e:82:b8:dc:cb:25:21:b8:6d:ba:f5:4d:d5:54: 6c:15:4b:60:09:a8:1c:c5:e4:78:98:5a:57:b7:b3:6b:d0:04: 37:48:d6:52:56:1e:41:0f:75:0d:3d:8c:d8:06:17:f9:6b:5a: d6:b7:47:46:ee:6f:0f:e7:34:cd:ad:7a:82:12:ab:36:02:ea: 0e:ad:cc:b7:da:8a:c8:85:c0:1a:8a:c9:b7:01:c2:a1:91:fe: 37:1f:4e:a1:53:7f:aa:67:51:c9:1f:68:ad:62:f3:0a:ea:2f: 5a:f3:aa:c2:05:2d:53:6f:6b:84:b4:e3:f1:9e:47:cd:28:cb: 3e:aa:ce:a3:b6:c0:75:44:ba:bb:ea:0f:19:3d:ca:e7:d6:0c: 89:ed:95:fe:2c:73:94:b8:4a:dd:5c:c8:9e:50:f0:57:18:dd: 2f:f6:26:38:a6:96:36:7a:45:18:0b:1e:10:fa:70:a8:ba:ab: f4:25:5c:71:c5:a6:cd:1b:57:3d:a6:de:57:10:6b:97:8e:da: 2a:e0:07:ae:28:4f:07:3d:ac:8a:8c:35:b2:0d:bb:89:a5:66: 3b:16:4e:5b:1c:c4:af:af:01:1a:26:c7:cc:2b:54:99:50:79: 7b:1c:aa:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1phn6efnzQrHGk3hN6v2dlpcnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjExMDEyMzIyMDRaFw0yNjExMDMwMTM4MDRaMDMxMTAvBgNV BAMTKEIwNkRFNDJGNTc2MTlDQ0I2MjM1MzREMjVGMDQ2QjRCQ0ExMTgxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnffCHNPcBvrpX0HDEPIN7wwWi q4pbKNUSwRDjiljoTDFRXYULghf9pDgGH2Ggaoz6C/DEkh2W+9azix487Qzg6IYK KHKmA9r6LEduO1QrMem43RLt0p7c+oriEUWf6JSbmE4GGKFVZbzY61nMFEOx19Lj 4cTvm7NcDsQwhz5t8ts6lBli5PTufzxps8tlyPJjCF43FIJAKxJm1PbYFwo2BTlw yzE+9eqBIkzXz8j9bMfbDAEuc8TETDCH3P0mwQtpxO+QfxKtjAuvDwZT1P9Lkq34 f2BFhPcDLitXe8KKLPBu8nBMhyGaFmwiBOuROh/3USKPWMLcU/zB+f/fZTwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsG3kL1dhnMtiNTTSXwRrS8oRgaIwHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD0ArsnDskpYjJPJUWu6BXbAMJ8uIEOgrjc yyUhuG269U3VVGwVS2AJqBzF5HiYWle3s2vQBDdI1lJWHkEPdQ09jNgGF/lrWta3 R0bubw/nNM2teoISqzYC6g6tzLfaisiFwBqKybcBwqGR/jcfTqFTf6pnUckfaK1i 8wrqL1rzqsIFLVNva4S04/GeR80oyz6qzqO2wHVEurvqDxk9yufWDIntlf4sc5S4 St1cyJ5Q8FcY3S/2JjimljZ6RRgLHhD6cKi6q/QlXHHFps0bVz2m3lcQa5eO2irg B64oTwc9rIqMNbINu4mlZjsWTlscxK+vARomx8wrVJlQeXscqio= -----END CERTIFICATE-----Generated at Mon Nov 2 14:32:41 2026 by rpki-client