$ rpki-client -vvvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: ihs2ZPEEjOz4uCzTM8GxFqbLCd/olNQiWBguuANojv0= Subject key identifier: 15:DD:F8:AB:C5:6A:B4:AF:9A:08:D1:BC:98:63:52:F5:F9:07:3E:C5 Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 3663A3DF68C53DB5313F87EBF57ED8E7DD4F76FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 20:28:15 +0000 Manifest this update: Mon 02 Nov 2026 20:23:15 +0000 Manifest next update: Tue 03 Nov 2026 21:29:15 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: FvQFf88dYbAVpEsjVs3JMhB/Rgu0sCuIe7TFKu7E1Ms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 21:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:63:a3:df:68:c5:3d:b5:31:3f:87:eb:f5:7e:d8:e7:dd:4f:76:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Nov 2 20:23:15 2026 GMT Not After : Nov 3 21:29:15 2026 GMT Subject: CN=15DDF8ABC56AB4AF9A08D1BC986352F5F9073EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:bb:e0:f6:74:0a:a0:f2:e7:fd:1e:12:d5: bb:9c:d5:17:53:56:fb:75:77:1a:37:96:43:08:ea: 18:da:90:a3:1c:fa:bc:6a:48:97:64:be:1f:73:22: 6b:0d:45:a6:f9:4d:3a:da:b2:d2:3f:be:d7:aa:38: b3:b7:cf:e2:c3:65:f4:62:ca:d1:0f:bb:54:81:1b: 3d:c9:31:e1:18:e6:24:62:7a:41:17:5b:fb:81:44: cb:a8:95:6f:82:0a:a5:99:e4:6c:75:13:6e:8d:1e: 8c:5e:9c:7e:ab:0c:ff:7b:a2:8b:0a:e0:c4:15:62: a2:05:60:58:7f:80:cc:2e:f0:c9:e6:8b:a2:6c:4a: 3b:6b:80:db:52:13:64:11:8f:55:98:9b:c3:04:35: 96:b0:fc:7b:82:e1:77:f9:b2:75:ad:e6:e1:dc:70: f6:2d:f7:8f:ce:d9:79:9e:48:43:a9:08:98:ef:3e: 68:2c:7c:64:84:e6:d2:79:69:70:18:5f:de:78:f4: e5:a4:ee:62:5c:2e:c7:f4:9f:fe:94:df:d9:dc:fd: aa:16:2d:f7:ff:b2:a1:52:bc:61:47:fc:e2:a0:05: fc:81:58:13:a8:b9:f1:5b:e9:1e:56:6d:6c:8f:e2: 5f:99:15:a2:45:74:06:39:48:00:ba:be:48:aa:0a: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DD:F8:AB:C5:6A:B4:AF:9A:08:D1:BC:98:63:52:F5:F9:07:3E:C5 X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:2a:e8:d6:2a:6b:28:f3:f3:63:41:78:fd:a5:74:18:a3:c5: f9:1f:10:10:ce:8c:eb:62:46:bc:59:f7:e1:fd:e5:a1:2d:3a: c5:22:a3:16:43:57:8f:27:5e:87:4f:a8:84:da:e2:68:8a:96: bc:a5:1b:92:28:e0:51:dc:fd:0b:51:54:87:08:f0:42:20:20: 98:dd:8c:e5:a2:55:02:88:a6:0f:d6:8f:40:4f:84:50:5c:7f: bd:ee:8a:90:09:05:48:c4:3d:be:92:f6:32:4f:1a:03:d9:3e: 9c:a5:1a:79:f9:c8:0b:a8:0a:b8:0c:06:2b:c0:a6:0b:f3:ba: 65:d5:21:e0:9b:0e:1b:30:dc:dd:04:b2:ec:18:94:1a:01:fc: f6:e5:aa:cc:99:7f:54:2b:a6:0a:ae:53:31:b4:4e:de:0d:65: 7f:c0:d6:80:e7:83:df:0f:2b:f3:72:bb:cf:31:bd:8e:e2:47: 63:57:12:05:fe:4d:cd:f6:a1:8a:50:e1:75:d2:77:39:d3:ce: 11:51:27:61:66:23:80:e6:e3:91:d1:06:3d:28:df:9b:30:22: eb:f6:f5:4a:46:d3:4a:25:9c:47:27:f9:01:44:c6:8d:75:20: f8:18:fc:34:8f:54:1f:f5:8f:c4:8e:1f:7f:17:78:7e:71:09: 1a:76:1f:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmOj32jFPbUxP4fr9X7Y591Pdv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjExMDIyMDIzMTVaFw0yNjExMDMyMTI5MTVaMDMxMTAvBgNV BAMTKDE1RERGOEFCQzU2QUI0QUY5QTA4RDFCQzk4NjM1MkY1RjkwNzNFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hLvg9nQKoPLn/R4S1buc1RdT Vvt1dxo3lkMI6hjakKMc+rxqSJdkvh9zImsNRab5TTrastI/vteqOLO3z+LDZfRi ytEPu1SBGz3JMeEY5iRiekEXW/uBRMuolW+CCqWZ5Gx1E26NHoxenH6rDP97oosK 4MQVYqIFYFh/gMwu8Mnmi6JsSjtrgNtSE2QRj1WYm8MENZaw/HuC4Xf5snWt5uHc cPYt94/O2XmeSEOpCJjvPmgsfGSE5tJ5aXAYX9549OWk7mJcLsf0n/6U39nc/aoW Lff/sqFSvGFH/OKgBfyBWBOoufFb6R5WbWyP4l+ZFaJFdAY5SAC6vkiqCjkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFd34q8VqtK+aCNG8mGNS9fkHPsUwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgq6NYqayjz82NBeP2ldBijxfkfEBDOjOti RrxZ9+H95aEtOsUioxZDV48nXodPqITa4miKlrylG5Io4FHc/QtRVIcI8EIgIJjd jOWiVQKIpg/Wj0BPhFBcf73uipAJBUjEPb6S9jJPGgPZPpylGnn5yAuoCrgMBivA pgvzumXVIeCbDhsw3N0EsuwYlBoB/PblqsyZf1QrpgquUzG0Tt4NZX/A1oDng98P K/Nyu88xvY7iR2NXEgX+Tc32oYpQ4XXSdznTzhFRJ2FmI4Dm45HRBj0o35swIuv2 9UpG00olnEcn+QFExo11IPgY/DSPVB/1j8SOH38XeH5xCRp2H1E= -----END CERTIFICATE-----Generated at Tue Nov 3 13:06:49 2026 by rpki-client