$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft File: 5AE2131384B411127BE4CF7467B12F83CBAD9996.mft (raw, json) Hash identifier: lCcRVvrDoRJnSR5/yN4HPhA28XEN0f+W3RkTE74tVFg= Subject key identifier: 3C:4E:FA:0C:B1:1C:A7:A4:21:7D:31:ED:DF:7E:AF:29:75:CB:34:0B Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 Certificate issuer: /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Certificate serial: 5F1D6AC6BED305727778A1798336A0BF4046503D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 05:35:05 +0000 Manifest this update: Wed 04 Nov 2026 05:30:05 +0000 Manifest next update: Thu 05 Nov 2026 05:38:05 +0000 Files and hashes: 1: 5AE2131384B411127BE4CF7467B12F83CBAD9996.crl (hash: zeBlGB+NGlOpVtJqxBM0AqcPHePNc4E/rS+/SD6Vs8k=) 2: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: NmIt0iuskNCmt4uz1oIpjbFNHodPs9Y9zQPXOPslKF0=) 3: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1d:6a:c6:be:d3:05:72:77:78:a1:79:83:36:a0:bf:40:46:50:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Validity Not Before: Nov 4 05:30:05 2026 GMT Not After : Nov 5 05:38:05 2026 GMT Subject: CN=3C4EFA0CB11CA7A4217D31EDDF7EAF2975CB340B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:67:ae:88:3e:e1:e4:bb:9b:0f:0f:70:e3:be: 77:21:49:62:21:2d:2c:2c:a9:ce:87:10:b5:33:e8: 5c:86:b4:83:77:83:7d:b6:26:a7:ac:70:ba:8a:91: e8:aa:ae:79:9e:a2:49:3f:d7:c3:e4:97:3a:96:17: 1e:c3:c4:35:df:6c:89:98:1b:c0:3b:f8:7f:4a:7f: 70:5a:f5:bf:ad:09:33:1a:c5:8a:cf:ca:a1:bb:89: 0e:ee:26:b1:c7:84:f9:ba:0f:02:5a:63:d6:94:7a: 9e:7c:e7:f6:3e:46:27:fa:d1:fb:38:08:75:38:43: 36:b9:9b:5c:eb:9e:b0:50:32:33:96:28:c6:4d:9b: bf:0e:7e:35:db:15:3b:14:eb:27:cb:6b:da:68:1b: 04:0f:46:95:37:41:af:f5:52:79:d7:6e:2c:0b:df: 0e:bc:98:c5:90:f4:2e:5d:40:02:4c:7b:b4:3b:e7: fa:e4:3a:67:58:fb:d0:24:c8:f9:8b:f2:4f:d1:8a: f7:99:ad:42:dc:e8:ca:f3:74:bd:5a:53:49:94:48: 8c:05:85:55:2e:22:b2:5d:0c:e2:f2:06:f2:fa:29: fb:31:f7:8d:26:b4:6f:22:b8:f7:3b:bd:a2:3e:f9: 40:77:d8:d7:91:64:cb:18:15:4a:14:3a:4a:fb:07: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4E:FA:0C:B1:1C:A7:A4:21:7D:31:ED:DF:7E:AF:29:75:CB:34:0B X509v3 Authority Key Identifier: keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:77:14:48:89:29:79:f1:15:eb:ad:15:c9:d5:5a:6a:06:1a: 5d:6d:86:c9:4c:82:40:43:57:b2:fd:c9:33:04:f5:20:a2:87: 83:60:a2:0a:e8:30:41:44:22:c9:77:f7:87:3c:3a:d4:78:88: 83:00:a5:3a:ac:25:55:29:64:71:36:c1:81:e9:51:d4:3e:59: 53:76:67:82:9b:db:76:a5:1f:19:3b:86:d5:5d:f4:82:e2:a7: 60:6e:80:a2:c1:96:aa:a9:30:ff:9b:90:e7:fb:4a:ce:cb:f1: 71:d7:e7:ac:27:eb:35:ab:e0:92:a4:e6:0e:f8:6d:19:cb:9a: 08:e8:bd:5c:38:41:7a:f7:6a:db:d6:2e:0e:11:71:04:bb:16: 73:46:21:49:1f:72:f7:ab:ef:27:63:66:0f:ce:6d:d4:fb:be: 3e:91:9c:bb:14:24:05:fc:d7:e4:90:8b:2c:6e:72:bd:ea:cd: 92:fc:20:8a:2a:ff:17:f1:29:53:46:91:8d:c8:37:f2:b8:db: 40:9f:7a:bb:f0:6b:f2:fa:83:94:30:6c:68:fb:bf:30:14:c3: 2a:22:5b:c0:4e:59:8d:01:6c:99:72:e7:67:a0:b0:eb:e2:41: 51:73:a4:e5:32:b3:99:1c:6b:10:64:e9:d2:60:92:22:5e:7b: cb:48:56:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXx1qxr7TBXJ3eKF5gzagv0BGUD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJGODND QkFEOTk5NjAeFw0yNjExMDQwNTMwMDVaFw0yNjExMDUwNTM4MDVaMDMxMTAvBgNV BAMTKDNDNEVGQTBDQjExQ0E3QTQyMTdEMzFFRERGN0VBRjI5NzVDQjM0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6Z66IPuHku5sPD3DjvnchSWIh LSwsqc6HELUz6FyGtIN3g322JqescLqKkeiqrnmeokk/18PklzqWFx7DxDXfbImY G8A7+H9Kf3Ba9b+tCTMaxYrPyqG7iQ7uJrHHhPm6DwJaY9aUep585/Y+Rif60fs4 CHU4Qza5m1zrnrBQMjOWKMZNm78OfjXbFTsU6yfLa9poGwQPRpU3Qa/1UnnXbiwL 3w68mMWQ9C5dQAJMe7Q75/rkOmdY+9AkyPmL8k/RiveZrULc6MrzdL1aU0mUSIwF hVUuIrJdDOLyBvL6Kfsx940mtG8iuPc7vaI++UB32NeRZMsYFUoUOkr7B4udAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPE76DLEcp6QhfTHt336vKXXLNAswHwYDVR0j BBgwFoAUWuITE4S0ERJ75M90Z7Evg8utmZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxOTZkNjUtMjFhOC00YjA0LWE5ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4 NEI0MTExMjdCRTRDRjc0NjdCMTJGODNDQkFEOTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUUyMTMxMzg0QjQxMTEyN0JFNENGNzQ2N0IxMkY4M0NCQUQ5 OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJG ODNDQkFEOTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG93FEiJKXnxFeutFcnVWmoGGl1thslMgkBD V7L9yTME9SCih4NgogroMEFEIsl394c8OtR4iIMApTqsJVUpZHE2wYHpUdQ+WVN2 Z4Kb23alHxk7htVd9ILip2BugKLBlqqpMP+bkOf7Ss7L8XHX56wn6zWr4JKk5g74 bRnLmgjovVw4QXr3atvWLg4RcQS7FnNGIUkfcver7ydjZg/ObdT7vj6RnLsUJAX8 1+SQiyxucr3qzZL8IIoq/xfxKVNGkY3IN/K420Cfervwa/L6g5QwbGj7vzAUwyoi W8BOWY0BbJly52egsOviQVFzpOUys5kcaxBk6dJgkiJee8tIVlA= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:26 2026 by rpki-client