$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft File: 5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft (raw, json) Hash identifier: sLfKktzvPQPHWo9tIfQKsbr8QBIU/dRkFaZLtYiPG5I= Subject key identifier: 99:11:AA:FF:01:1C:D0:8F:AB:53:E8:96:59:48:90:F5:E3:C8:69:FC Authority key identifier: 5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81 Certificate issuer: /CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081 Certificate serial: 43BCD26E8DAA4076A1AA8A2030375BB90DB1A291 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 01:39:48 +0000 Manifest this update: Mon 02 Nov 2026 01:34:48 +0000 Manifest next update: Tue 03 Nov 2026 04:01:48 +0000 Files and hashes: 1: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: 2uGt6NoP0ZyAzJoUujZvq+iw79GkfDtAJpmnwcRnGwY=) 2: 5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl (hash: ALcrSJnQ481rDv4bFuQUX0TeixN+uKvV5orU9iG4pOU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bc:d2:6e:8d:aa:40:76:a1:aa:8a:20:30:37:5b:b9:0d:b1:a2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081 Validity Not Before: Nov 2 01:34:48 2026 GMT Not After : Nov 3 04:01:48 2026 GMT Subject: CN=9911AAFF011CD08FAB53E896594890F5E3C869FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:3f:68:4f:e6:03:83:5a:93:f8:34:c8:ea: 44:c9:7a:a1:71:a4:4b:08:2c:66:2a:50:14:97:63: 0b:c2:4e:76:aa:ef:51:2d:da:94:16:38:9c:64:2e: ee:f2:31:0a:80:d5:97:b8:16:39:b2:d8:16:51:0b: 42:98:a8:f5:ea:ad:4a:c6:79:d6:c7:06:e2:ba:7f: 5b:fe:07:6f:8d:3c:09:ca:60:d5:d2:d9:8d:a7:c3: 62:dd:16:49:b1:b6:df:70:1d:45:14:77:4f:ea:57: 68:d4:c6:47:96:72:3d:0f:41:fe:41:11:a1:ed:85: 50:35:a5:bb:08:0e:0a:de:46:66:b7:8f:2d:6b:3a: d3:fa:b6:d4:23:28:1f:33:41:0b:8b:e0:74:24:8e: 3f:3e:24:af:01:8d:f8:8c:08:54:dc:23:58:97:6a: e4:82:05:3d:f5:20:d1:1f:05:e2:9b:57:fa:f2:ee: e9:eb:9b:09:8f:1b:6c:91:d1:38:64:f1:5c:8c:70: dc:98:70:7d:36:7d:69:5e:f1:d5:eb:0e:ac:91:d6: a7:e8:5a:e2:53:56:aa:c5:18:6b:3b:64:65:60:f0: 27:33:70:96:f9:b3:fa:50:96:4b:92:c2:2c:b3:0e: 79:90:3f:f8:60:1d:46:b1:f2:14:46:77:71:50:90: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:AA:FF:01:1C:D0:8F:AB:53:E8:96:59:48:90:F5:E3:C8:69:FC X509v3 Authority Key Identifier: keyid:5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c5:cd:d4:1b:2e:4b:32:ee:96:c2:f7:f2:32:dc:60:bb:38: af:7a:5b:21:20:bd:eb:ae:d7:34:4b:d0:3a:e2:c3:73:89:92: 96:cf:10:69:91:5a:cd:dd:c7:94:d1:64:32:75:80:50:2d:de: ba:13:66:65:2c:e9:18:cb:2f:b7:06:0b:3b:cc:c5:58:1d:5d: 96:81:fd:3b:aa:86:83:f9:22:65:2a:05:07:41:0d:38:50:ee: ba:ca:2a:fc:74:4a:78:13:e2:51:52:87:f5:a6:1e:de:2a:8c: 16:a5:60:fe:e6:8d:b5:a8:48:26:6a:23:7b:5a:09:ce:35:6f: a0:82:0f:f4:b7:b3:a6:e5:36:d8:12:a5:9d:ae:78:a8:8a:59: 83:76:8c:66:8b:0c:bc:dd:80:04:0d:91:86:d0:18:ac:c0:47: 53:89:29:8c:2b:4f:f4:c7:a1:26:5c:26:c9:3a:6a:9a:fe:ea: 64:53:fa:b1:1c:24:9c:c7:c3:6b:18:b8:12:81:0d:7d:0c:a7: 3f:b6:65:d7:f0:69:e9:79:da:15:5a:8f:af:5b:46:1b:d4:ab: 07:df:3b:c2:2c:79:08:30:a4:c7:30:d2:05:7a:97:0b:36:0f: 99:8a:74:34:e4:87:a6:da:38:53:c7:47:72:a7:92:91:21:e9: 17:40:f6:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7zSbo2qQHahqoogMDdbuQ2xopEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU1REQ4Qzc2MDRBQ0Y2MTNFNjExNUQyNUVGM0MyNTNB QTg1RjA4MTAeFw0yNjExMDIwMTM0NDhaFw0yNjExMDMwNDAxNDhaMDMxMTAvBgNV BAMTKDk5MTFBQUZGMDExQ0QwOEZBQjUzRTg5NjU5NDg5MEY1RTNDODY5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3T9oT+YDg1qT+DTI6kTJeqFx pEsILGYqUBSXYwvCTnaq71Et2pQWOJxkLu7yMQqA1Ze4Fjmy2BZRC0KYqPXqrUrG edbHBuK6f1v+B2+NPAnKYNXS2Y2nw2LdFkmxtt9wHUUUd0/qV2jUxkeWcj0PQf5B EaHthVA1pbsIDgreRma3jy1rOtP6ttQjKB8zQQuL4HQkjj8+JK8BjfiMCFTcI1iX auSCBT31INEfBeKbV/ry7unrmwmPG2yR0Thk8VyMcNyYcH02fWle8dXrDqyR1qfo WuJTVqrFGGs7ZGVg8CczcJb5s/pQlkuSwiyzDnmQP/hgHUax8hRGd3FQkAfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRGq/wEc0I+rU+iWWUiQ9ePIafwwHwYDVR0j BBgwFoAUXl3Yx2BKz2E+YRXSXvPCU6qF8IEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWExNDNhMTktMjE3YS00OWVmLThjYjEtNTkzMDEyZDJiNzU5LzAvNUU1REQ4Qzc2 MDRBQ0Y2MTNFNjExNUQyNUVGM0MyNTNBQTg1RjA4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RTVERDhDNzYwNEFDRjYxM0U2MTE1RDI1RUYzQzI1M0FBODVG MDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWExNDNhMTktMjE3YS00OWVmLThj YjEtNTkzMDEyZDJiNzU5LzAvNUU1REQ4Qzc2MDRBQ0Y2MTNFNjExNUQyNUVGM0My NTNBQTg1RjA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfFzdQbLksy7pbC9/Iy3GC7OK96WyEgveuu 1zRL0Driw3OJkpbPEGmRWs3dx5TRZDJ1gFAt3roTZmUs6RjLL7cGCzvMxVgdXZaB /TuqhoP5ImUqBQdBDThQ7rrKKvx0SngT4lFSh/WmHt4qjBalYP7mjbWoSCZqI3ta Cc41b6CCD/S3s6blNtgSpZ2ueKiKWYN2jGaLDLzdgAQNkYbQGKzAR1OJKYwrT/TH oSZcJsk6apr+6mRT+rEcJJzHw2sYuBKBDX0Mpz+2Zdfwael52hVaj69bRhvUqwff O8IseQgwpMcw0gV6lws2D5mKdDTkh6baOFPHR3KnkpEh6RdA9sA= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:09 2026 by rpki-client