$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: r0U6y9vEbxw7hH+OZ0GNsQBcsxLcal5PE8f3QpUNNuw= Subject key identifier: 52:96:01:A1:51:5F:EF:BB:30:52:C0:2B:A2:7A:69:E6:2C:88:72:FE Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 5AB0E6F98C5E96419456DFB59D94A3F197EA0457 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 19:52:23 +0000 Manifest this update: Tue 03 Nov 2026 19:47:23 +0000 Manifest next update: Wed 04 Nov 2026 21:02:23 +0000 Files and hashes: 1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) 2: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: +Km9yI4do2sPI8DtIZE87ytTgqWqvCY1Y3LefMBaFY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b0:e6:f9:8c:5e:96:41:94:56:df:b5:9d:94:a3:f1:97:ea:04:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: Nov 3 19:47:23 2026 GMT Not After : Nov 4 21:02:23 2026 GMT Subject: CN=529601A1515FEFBB3052C02BA27A69E62C8872FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:a5:40:9f:17:f7:c9:8f:f3:4b:c0:fb:19: 08:de:4b:41:92:86:c9:e7:52:5a:41:78:95:56:77: f8:08:49:24:68:bb:d0:56:0f:40:fc:81:dd:20:cb: 2a:5e:91:76:46:33:3d:4d:62:15:8a:0f:ff:ee:d4: e3:6f:fa:37:72:d8:f4:1a:ce:92:51:e0:7d:05:21: 44:66:03:4e:53:45:53:21:aa:12:33:ea:0b:c4:87: 44:02:09:b4:dc:9b:41:0d:06:2d:b3:d4:ef:04:73: 1e:70:2f:e3:cd:51:ba:2c:6a:2c:e3:89:02:de:c5: 6c:76:03:56:b8:7a:8c:12:4d:6f:66:67:25:5b:12: e8:f4:35:56:46:c3:b1:84:8d:4a:b3:d7:23:6c:39: 5f:ec:69:14:2f:4e:e4:1b:20:23:4d:d6:69:e3:da: b3:03:87:06:3a:7f:49:93:73:5c:54:71:44:33:f0: e4:4d:ac:3c:3e:81:b1:fd:98:d9:01:70:83:5a:1d: d5:76:bd:eb:dd:3b:5e:ca:ab:73:ff:83:7b:21:cc: 9b:82:e6:c8:9b:91:1b:a8:93:27:38:be:88:a3:f1: 70:f8:98:1c:b4:01:99:37:b3:5e:a0:d0:03:16:85: 2e:60:a5:8e:3b:0f:dc:ee:73:74:ac:9b:c4:25:2a: ec:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:01:A1:51:5F:EF:BB:30:52:C0:2B:A2:7A:69:E6:2C:88:72:FE X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8a:29:23:06:c7:e1:45:ec:40:94:7d:a1:d4:2c:92:f6:85: f9:32:df:e9:eb:9c:dd:68:5e:c9:fe:b9:b2:d1:dd:74:ab:02: cf:2e:68:2b:55:60:c0:dc:f1:64:2f:bc:9f:50:51:ae:86:1a: a5:cd:23:b0:1a:b4:a5:23:af:d4:12:17:1d:46:c9:0b:92:1b: 87:a5:e1:f3:58:49:e8:e0:f4:09:96:29:02:8d:a9:c4:14:d8: a8:a2:0a:dd:af:22:a1:27:d9:b6:86:ab:79:91:62:bc:d4:53: 52:d1:35:6a:d8:b0:d8:1a:1c:24:2c:90:61:e7:ca:e2:9f:37: 1e:0d:fe:83:ca:50:0b:3d:0a:0c:de:18:ba:2b:e2:6d:56:9f: 3a:2b:76:dc:e1:0c:7d:94:00:43:7c:6e:8e:6c:c1:4f:e0:be: 2f:1e:d0:a2:f9:a4:3e:38:5d:97:09:bb:8c:9d:8a:62:13:a4: c4:49:db:4f:17:60:d3:15:a4:a9:bc:02:66:69:8c:4a:63:06: 7d:38:96:fe:95:3e:79:28:c8:26:28:88:ee:70:96:09:17:24: 68:dd:47:16:c9:f9:dc:be:c5:37:e9:12:b7:3d:c2:01:ba:67: 3a:26:06:8e:86:8e:c0:d8:35:78:77:61:c1:c7:b9:ed:c9:7e: 26:7d:bf:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrDm+YxelkGUVt+1nZSj8ZfqBFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjExMDMxOTQ3MjNaFw0yNjExMDQyMTAyMjNaMDMxMTAvBgNV BAMTKDUyOTYwMUExNTE1RkVGQkIzMDUyQzAyQkEyN0E2OUU2MkM4ODcyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xaVAnxf3yY/zS8D7GQjeS0GS hsnnUlpBeJVWd/gISSRou9BWD0D8gd0gyypekXZGMz1NYhWKD//u1ONv+jdy2PQa zpJR4H0FIURmA05TRVMhqhIz6gvEh0QCCbTcm0ENBi2z1O8Ecx5wL+PNUbosaizj iQLexWx2A1a4eowSTW9mZyVbEuj0NVZGw7GEjUqz1yNsOV/saRQvTuQbICNN1mnj 2rMDhwY6f0mTc1xUcUQz8ORNrDw+gbH9mNkBcINaHdV2vevdO17Kq3P/g3shzJuC 5sibkRuokyc4voij8XD4mBy0AZk3s16g0AMWhS5gpY47D9zuc3Ssm8QlKux7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpYBoVFf77swUsAronpp5iyIcv4wHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuKKSMGx+FF7ECUfaHULJL2hfky3+nrnN1o Xsn+ubLR3XSrAs8uaCtVYMDc8WQvvJ9QUa6GGqXNI7AatKUjr9QSFx1GyQuSG4el 4fNYSejg9AmWKQKNqcQU2KiiCt2vIqEn2baGq3mRYrzUU1LRNWrYsNgaHCQskGHn yuKfNx4N/oPKUAs9CgzeGLor4m1WnzordtzhDH2UAEN8bo5swU/gvi8e0KL5pD44 XZcJu4ydimITpMRJ208XYNMVpKm8AmZpjEpjBn04lv6VPnkoyCYoiO5wlgkXJGjd RxbJ+dy+xTfpErc9wgG6ZzomBo6GjsDYNXh3YcHHue3JfiZ9v6M= -----END CERTIFICATE-----Generated at Wed Nov 4 14:37:28 2026 by rpki-client