$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: CnuZTDwfiVdvYzP0GcL04HLUilnLiPc5f/OQkoF4nes= Subject key identifier: FB:F5:EF:2F:9C:14:D5:71:8E:03:11:A5:14:5D:F7:F6:AB:DD:72:92 Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 11F5623DB4350B5382EBB0CAC98E7A0BA82DC774 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 12:44:01 +0000 Manifest this update: Tue 03 Nov 2026 12:39:01 +0000 Manifest next update: Wed 04 Nov 2026 14:00:01 +0000 Files and hashes: 1: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) 2: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) 3: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) 4: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: 79lL7pbwrjJrxBw0vQM6iCydOxQUGddeZ/8TEQ1haek=) 5: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f5:62:3d:b4:35:0b:53:82:eb:b0:ca:c9:8e:7a:0b:a8:2d:c7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: Nov 3 12:39:01 2026 GMT Not After : Nov 4 14:00:01 2026 GMT Subject: CN=FBF5EF2F9C14D5718E0311A5145DF7F6ABDD7292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:0d:b1:57:bd:c5:b2:a8:b5:ae:36:94:50: c0:8a:1a:36:53:ef:e3:87:a8:ef:d5:db:3c:6e:13: 26:b2:83:be:3e:6e:17:01:fa:95:49:27:b2:22:30: d7:a8:d4:06:c9:10:be:84:0d:b6:92:f6:b5:8a:c0: bf:e7:4a:c0:c7:ca:1c:ab:50:c7:1e:9a:52:b0:be: f3:62:1b:fc:0a:1e:1c:4c:20:e7:1f:9a:ad:73:e5: d8:3c:bc:78:75:78:a7:40:c4:98:d7:ab:52:9b:40: 8b:54:43:f7:48:4f:9b:29:29:3f:3f:fa:74:9d:af: 19:f1:30:33:1f:b6:c9:37:5c:c2:e4:71:fd:ed:a1: 8c:d0:3d:5a:21:8f:24:05:72:6b:5e:1c:71:81:ca: ee:ca:d1:7d:57:e0:6e:ab:4c:69:21:4a:21:08:a8: fc:bd:be:ec:ca:5e:b6:56:25:b5:de:f6:d4:bc:df: 3d:3c:e9:95:de:4c:fd:af:12:89:0b:af:66:93:56: 9c:6d:60:a3:aa:1c:58:8e:c2:b3:7a:a0:e2:9a:e7: 0f:a8:16:28:76:23:f2:73:1b:fb:e5:5a:3b:69:3a: fd:59:05:13:eb:79:a2:c4:d8:78:56:55:64:54:cd: dc:e7:0e:67:22:c4:0c:39:ea:84:38:e0:93:e5:a8: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F5:EF:2F:9C:14:D5:71:8E:03:11:A5:14:5D:F7:F6:AB:DD:72:92 X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:65:ef:24:63:34:c5:fc:17:fe:96:e5:47:92:b1:12:49:60: c0:36:ac:28:55:5f:d1:04:49:c0:24:ca:21:32:01:60:1f:39: 84:72:9e:8e:fd:96:d5:c2:ac:0a:08:1f:0c:82:86:7d:8e:e9: 26:02:f1:08:5a:08:50:c9:4c:d8:70:eb:5a:1b:4e:3d:3b:bf: 20:19:93:5f:22:90:e3:c1:bf:a7:54:c8:58:75:d4:7f:b3:b4: fa:a5:90:76:be:e1:93:ac:39:7e:a0:ec:45:55:36:cf:46:cb: f4:ab:8f:15:bc:1d:c9:64:f3:1d:24:c7:d3:21:1e:63:5e:3c: d9:2e:1c:fe:70:ae:89:53:2b:14:eb:b1:f3:59:7d:b9:8c:23: a9:fd:ca:2c:ac:29:52:fe:94:6a:9e:aa:b5:b9:f7:2f:10:39: 59:16:54:d8:70:4c:8c:53:2b:aa:a7:6a:1b:37:07:a2:fd:9c: 2c:09:6f:8a:b1:38:55:82:36:76:4d:2e:8a:b9:4f:7d:6f:85: c1:bf:a6:d9:b6:3e:35:d9:f2:cb:1b:95:f7:8e:4e:70:74:04: 9b:62:dc:eb:8d:f8:3a:1f:3a:c6:2c:c1:85:73:46:ec:67:2e: 7f:5b:18:b1:de:f0:16:16:ed:1a:50:3e:6e:38:1d:cd:49:f7: 2d:3c:4f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfViPbQ1C1OC67DKyY56C6gtx3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjExMDMxMjM5MDFaFw0yNjExMDQxNDAwMDFaMDMxMTAvBgNV BAMTKEZCRjVFRjJGOUMxNEQ1NzE4RTAzMTFBNTE0NURGN0Y2QUJERDcyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGw2xV73Fsqi1rjaUUMCKGjZT 7+OHqO/V2zxuEyayg74+bhcB+pVJJ7IiMNeo1AbJEL6EDbaS9rWKwL/nSsDHyhyr UMcemlKwvvNiG/wKHhxMIOcfmq1z5dg8vHh1eKdAxJjXq1KbQItUQ/dIT5spKT8/ +nSdrxnxMDMftsk3XMLkcf3toYzQPVohjyQFcmteHHGByu7K0X1X4G6rTGkhSiEI qPy9vuzKXrZWJbXe9tS83z086ZXeTP2vEokLr2aTVpxtYKOqHFiOwrN6oOKa5w+o Fih2I/JzG/vlWjtpOv1ZBRPreaLE2HhWVWRUzdznDmcixAw56oQ44JPlqAQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+/XvL5wU1XGOAxGlFF339qvdcpIwHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJl7yRjNMX8F/6W5UeSsRJJYMA2rChVX9EE ScAkyiEyAWAfOYRyno79ltXCrAoIHwyChn2O6SYC8QhaCFDJTNhw61obTj07vyAZ k18ikOPBv6dUyFh11H+ztPqlkHa+4ZOsOX6g7EVVNs9Gy/SrjxW8Hclk8x0kx9Mh HmNePNkuHP5wrolTKxTrsfNZfbmMI6n9yiysKVL+lGqeqrW59y8QOVkWVNhwTIxT K6qnahs3B6L9nCwJb4qxOFWCNnZNLoq5T31vhcG/ptm2PjXZ8ssblfeOTnB0BJti 3OuN+DofOsYswYVzRuxnLn9bGLHe8BYW7RpQPm44Hc1J9y08T2Y= -----END CERTIFICATE-----Generated at Wed Nov 4 05:30:59 2026 by rpki-client