$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft File: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft (raw, json) Hash identifier: 6hBoeR4p+NXqYHpTlY+wM7mYxt7MIE+9zBabdRnoXvk= Subject key identifier: 3E:7F:C5:55:D1:D2:4F:10:12:26:FA:AE:9E:18:E1:7C:AF:8B:A5:18 Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73 Certificate issuer: /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473 Certificate serial: 7A3232C32D95E42BDABEE04C2308F4FE96B4918F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 19:21:55 +0000 Manifest this update: Sun 01 Nov 2026 19:16:55 +0000 Manifest next update: Mon 02 Nov 2026 21:09:55 +0000 Files and hashes: 1: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=) 2: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: KKf4Jl2OsQd3MJnMUlr/HfdddutYB5E1WPKkn8EgV+Y=) 3: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=) 4: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl (hash: /he381j3pcXAwxT0pHAhSu8b5fTZRkErFdUE7eBpnNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:32:32:c3:2d:95:e4:2b:da:be:e0:4c:23:08:f4:fe:96:b4:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473 Validity Not Before: Nov 1 19:16:55 2026 GMT Not After : Nov 2 21:09:55 2026 GMT Subject: CN=3E7FC555D1D24F101226FAAE9E18E17CAF8BA518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:16:af:f8:91:63:9e:d1:5d:a6:ce:0a:53: e7:62:56:79:61:7a:c8:da:02:4f:6b:91:d6:45:09: be:96:cc:84:c1:36:d2:98:d7:cb:cf:03:36:51:b5: 98:13:d0:52:c8:51:72:3a:39:ba:35:b5:e6:50:70: fd:28:2d:70:6d:9a:99:fe:07:57:78:50:66:50:96: 73:c4:e0:83:25:77:15:f4:43:1b:f5:df:7c:7e:4e: 3b:9f:57:81:e2:d1:e1:45:2a:e0:0c:b6:45:35:03: f8:ba:99:be:b4:57:1d:17:49:fe:1d:d1:7f:fa:d1: 3c:c8:42:a6:b0:fa:a4:19:4d:03:4a:0b:0f:fb:57: c0:3c:3a:f8:a2:d2:c7:ae:e7:0b:9c:ac:8e:6c:6d: 17:bd:6a:20:18:c7:38:eb:26:a3:e7:71:72:3a:92: 9e:e8:5d:8d:ef:d9:5d:ed:a3:bb:18:bb:f6:ab:d0: ca:95:96:ca:f4:83:ae:67:44:ff:87:9c:b0:f3:c9: 30:38:12:43:b2:63:04:a0:fd:87:6d:5a:02:2b:6b: 49:b2:df:2b:73:cd:16:f3:bd:5d:09:19:3f:9c:4e: 14:f3:e5:21:d1:25:35:6d:cd:f4:7b:29:55:fa:c7: ec:e1:f4:e7:9f:f7:12:6b:cd:d2:8d:32:84:4c:ee: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:C5:55:D1:D2:4F:10:12:26:FA:AE:9E:18:E1:7C:AF:8B:A5:18 X509v3 Authority Key Identifier: keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bf:fe:02:1b:09:a4:22:3a:68:ad:7b:79:6e:55:bd:c7:2d: 66:5c:7f:5e:82:6e:37:28:6b:42:8f:b7:22:48:d9:9f:ca:50: 46:16:f3:56:1d:d8:56:88:9d:12:f5:44:39:3d:a6:fe:52:65: a4:29:b6:b4:55:0d:0a:45:8c:bf:31:5c:7d:8a:94:86:40:db: 54:2c:10:70:c7:3e:dc:2b:32:52:c2:2d:99:d3:61:bb:a2:2f: 5e:36:b8:8b:21:53:36:43:f4:e2:99:ad:74:72:56:80:12:b0: 5e:68:99:d3:33:e7:08:82:2b:45:f2:7e:11:44:3a:5f:73:bb: a2:e7:6a:e1:8b:05:d8:d3:88:19:47:44:68:85:6e:d0:c3:40: d1:ef:72:f0:06:26:2a:69:58:37:9e:25:34:5d:f1:6c:83:d2: b7:d9:6b:22:57:17:41:5e:1d:93:cf:9e:9c:e1:7b:42:a9:5b: f5:14:8d:eb:86:59:75:6f:93:57:98:be:6a:4b:ab:95:28:c2: 9a:b8:47:51:39:b8:d4:a1:a5:1a:0f:73:e7:3a:da:c1:4e:1d: 5d:e2:2e:82:cc:cd:d3:da:aa:b9:26:ec:86:23:b8:90:1e:d7: 55:b9:33:a9:a2:ba:d2:7c:62:a3:36:15:75:f9:66:81:88:92: 61:2b:fd:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejIywy2V5CvavuBMIwj0/pa0kY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxM0Q2NDg1QjA1OEMwQzFEMzFENzBFNjdDNUMyQzVC Mjc2NzQ3MzAeFw0yNjExMDExOTE2NTVaFw0yNjExMDIyMTA5NTVaMDMxMTAvBgNV BAMTKDNFN0ZDNTU1RDFEMjRGMTAxMjI2RkFBRTlFMThFMTdDQUY4QkE1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGhav+JFjntFdps4KU+diVnlh esjaAk9rkdZFCb6WzITBNtKY18vPAzZRtZgT0FLIUXI6Obo1teZQcP0oLXBtmpn+ B1d4UGZQlnPE4IMldxX0Qxv133x+TjufV4Hi0eFFKuAMtkU1A/i6mb60Vx0XSf4d 0X/60TzIQqaw+qQZTQNKCw/7V8A8Ovii0seu5wucrI5sbRe9aiAYxzjrJqPncXI6 kp7oXY3v2V3to7sYu/ar0MqVlsr0g65nRP+HnLDzyTA4EkOyYwSg/YdtWgIra0my 3ytzzRbzvV0JGT+cThTz5SHRJTVtzfR7KVX6x+zh9Oef9xJrzdKNMoRM7rdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPn/FVdHSTxASJvqunhjhfK+LpRgwHwYDVR0j BBgwFoAUXxPWSFsFjAwdMdcOZ8XCxbJ2dHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E3NWI3NDEtODQ2YS00MzMwLTk2NTktMDVmZmU4MjY5OGVlLzAvNUYxM0Q2NDg1 QjA1OEMwQzFEMzFENzBFNjdDNUMyQzVCMjc2NzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjEzRDY0ODVCMDU4QzBDMUQzMUQ3MEU2N0M1QzJDNUIyNzY3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E3NWI3NDEtODQ2YS00MzMwLTk2 NTktMDVmZmU4MjY5OGVlLzAvNUYxM0Q2NDg1QjA1OEMwQzFEMzFENzBFNjdDNUMy QzVCMjc2NzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+//gIbCaQiOmite3luVb3HLWZcf16Cbjco a0KPtyJI2Z/KUEYW81Yd2FaInRL1RDk9pv5SZaQptrRVDQpFjL8xXH2KlIZA21Qs EHDHPtwrMlLCLZnTYbuiL142uIshUzZD9OKZrXRyVoASsF5omdMz5wiCK0XyfhFE Ol9zu6LnauGLBdjTiBlHRGiFbtDDQNHvcvAGJippWDeeJTRd8WyD0rfZayJXF0Fe HZPPnpzhe0KpW/UUjeuGWXVvk1eYvmpLq5Uowpq4R1E5uNShpRoPc+c62sFOHV3i LoLMzdPaqrkm7IYjuJAe11W5M6miutJ8YqM2FXX5ZoGIkmEr/es= -----END CERTIFICATE-----Generated at Sun Nov 1 21:33:09 2026 by rpki-client