$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft File: 5675AA245CEF919DAFAE165474D97FEABD97EF27.mft (raw, json) Hash identifier: hRjPHZ8p/622MVephX0Vb9Y4+J2H8CHe1zUa2WHCMIU= Subject key identifier: B6:C3:7E:DA:A1:E8:B7:7F:CC:55:46:39:F6:10:15:BE:31:61:38:0C Authority key identifier: 56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27 Certificate issuer: /CN=5675AA245CEF919DAFAE165474D97FEABD97EF27 Certificate serial: 26585BA3E2A734F6590E61D867243EF7CE6CC06E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 12:43:08 +0000 Manifest this update: Sun 01 Nov 2026 12:38:08 +0000 Manifest next update: Mon 02 Nov 2026 12:47:08 +0000 Files and hashes: 1: 5675AA245CEF919DAFAE165474D97FEABD97EF27.crl (hash: rlNQT2rHasA2QNc5xIeo3/+UPYzqU10xfquSD+k4TGA=) 2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: HxzvTIopg+934/St0RtxMZkBEPYX29d8UkuRMlyo12U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 12:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:58:5b:a3:e2:a7:34:f6:59:0e:61:d8:67:24:3e:f7:ce:6c:c0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5675AA245CEF919DAFAE165474D97FEABD97EF27 Validity Not Before: Nov 1 12:38:08 2026 GMT Not After : Nov 2 12:47:08 2026 GMT Subject: CN=B6C37EDAA1E8B77FCC554639F61015BE3161380C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:0c:86:96:33:34:87:11:47:e8:0f:ab:53: 1f:a3:13:b4:bd:34:80:bb:b4:6a:a6:91:38:f1:63: 5e:3d:2d:1e:5b:23:be:cf:3a:15:8e:ed:6d:2d:b1: db:bf:63:66:b9:59:4e:6e:f7:0b:5f:74:c0:6b:c4: d7:77:19:42:ba:56:3c:d1:ab:d6:0e:a6:73:50:5f: 7e:89:08:e7:a6:90:7f:b1:2f:50:e4:b0:bf:ae:be: 45:be:7a:ad:b3:27:93:d0:ef:f9:a1:07:a2:24:32: f8:3b:52:9b:06:35:f4:fe:95:12:75:1d:68:b6:9d: 68:d1:98:3e:86:e0:a5:6d:82:1c:d8:bb:76:9c:6b: 5e:af:ec:fb:1d:c5:6a:d5:c1:6d:7a:27:65:09:0d: 66:fd:18:ad:f7:dd:1f:94:0f:6d:32:08:32:bd:d4: 3b:ee:36:27:b7:5b:d4:58:74:70:5a:23:22:c9:e5: 7c:0d:96:12:ef:de:09:c0:6d:62:56:4a:da:94:0e: 07:e3:f7:5a:17:c8:cd:6b:a2:78:36:56:c0:5b:65: 33:40:cf:c4:95:a6:1b:01:9b:51:78:ac:fb:d5:52: c9:1d:87:3c:cd:f1:47:87:e0:06:fc:51:f9:d6:09: c0:b7:c0:2e:fc:ac:31:06:02:97:41:a0:bc:aa:7d: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C3:7E:DA:A1:E8:B7:7F:CC:55:46:39:F6:10:15:BE:31:61:38:0C X509v3 Authority Key Identifier: keyid:56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:43:52:64:56:bf:9b:21:3e:90:8a:8b:98:3f:54:80:12:1d: e1:8d:9f:6f:59:8e:7d:d3:7f:db:b1:c0:f4:0a:7d:5a:61:6f: b3:cd:82:5e:91:67:1c:bf:52:ea:ce:09:49:be:6f:46:3b:f0: 58:91:a3:e4:6f:52:52:c8:5f:21:f1:6e:bf:76:5e:a5:65:0a: 78:ba:1e:d1:7c:18:6f:70:48:24:4c:38:f8:6e:6c:f3:0c:17: 75:0f:37:64:55:1c:f3:a7:4a:ce:96:32:94:7a:88:34:fe:a8: a9:f4:c2:53:c7:03:57:cb:ff:45:7b:1e:54:0a:72:a5:f0:66: 7b:bd:aa:76:78:4d:87:21:6b:4e:37:11:13:73:bb:18:72:dd: 5c:07:3a:9d:a5:7d:20:9b:6b:93:05:48:9f:08:d8:9f:60:96: ed:2c:62:e6:c1:90:36:db:a0:75:e0:e6:ca:61:33:a6:c2:9c: 3e:3b:73:2c:90:11:18:09:04:9a:63:ad:38:7a:ee:d6:4e:30: 45:2b:6f:12:d8:31:5c:c6:05:e7:15:6f:d5:aa:07:1c:74:e9: 6d:53:4c:54:c8:9a:18:56:08:53:51:81:0c:2c:92:dc:e1:31: 7d:90:e7:80:85:66:62:4f:71:3a:dd:b6:98:44:da:f6:b1:65: f2:34:50:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJlhbo+KnNPZZDmHYZyQ+985swG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3NUFBMjQ1Q0VGOTE5REFGQUUxNjU0NzREOTdGRUFC RDk3RUYyNzAeFw0yNjExMDExMjM4MDhaFw0yNjExMDIxMjQ3MDhaMDMxMTAvBgNV BAMTKEI2QzM3RURBQTFFOEI3N0ZDQzU1NDYzOUY2MTAxNUJFMzE2MTM4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAQyGljM0hxFH6A+rUx+jE7S9 NIC7tGqmkTjxY149LR5bI77POhWO7W0tsdu/Y2a5WU5u9wtfdMBrxNd3GUK6VjzR q9YOpnNQX36JCOemkH+xL1DksL+uvkW+eq2zJ5PQ7/mhB6IkMvg7UpsGNfT+lRJ1 HWi2nWjRmD6G4KVtghzYu3aca16v7PsdxWrVwW16J2UJDWb9GK333R+UD20yCDK9 1DvuNie3W9RYdHBaIyLJ5XwNlhLv3gnAbWJWStqUDgfj91oXyM1rong2VsBbZTNA z8SVphsBm1F4rPvVUskdhzzN8UeH4Ab8UfnWCcC3wC78rDEGApdBoLyqfY+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtsN+2qHot3/MVUY59hAVvjFhOAwwHwYDVR0j BBgwFoAUVnWqJFzvkZ2vrhZUdNl/6r2X7ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMjQxOTEtYmZmMC00ODE1LWJlMGUtYTJhYThkMzhkNWEwLzAvNTY3NUFBMjQ1 Q0VGOTE5REFGQUUxNjU0NzREOTdGRUFCRDk3RUYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Njc1QUEyNDVDRUY5MTlEQUZBRTE2NTQ3NEQ5N0ZFQUJEOTdF RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvNTY3NUFBMjQ1Q0VGOTE5REFGQUUxNjU0NzREOTdG RUFCRDk3RUYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABDUmRWv5shPpCKi5g/VIASHeGNn29Zjn3T f9uxwPQKfVphb7PNgl6RZxy/UurOCUm+b0Y78FiRo+RvUlLIXyHxbr92XqVlCni6 HtF8GG9wSCRMOPhubPMMF3UPN2RVHPOnSs6WMpR6iDT+qKn0wlPHA1fL/0V7HlQK cqXwZnu9qnZ4TYcha043ERNzuxhy3VwHOp2lfSCba5MFSJ8I2J9glu0sYubBkDbb oHXg5sphM6bCnD47cyyQERgJBJpjrTh67tZOMEUrbxLYMVzGBecVb9WqBxx06W1T TFTImhhWCFNRgQwsktzhMX2Q54CFZmJPcTrdtphE2vaxZfI0UC0= -----END CERTIFICATE-----Generated at Mon Nov 2 04:45:25 2026 by rpki-client