$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: 5bG4FiorDwVYHJZQ7XBUrgb8bhmowRZCPCSjWywPaz0= Subject key identifier: 62:F3:A7:04:90:BA:85:40:E0:9A:3D:1D:28:8A:3A:B0:9B:CC:22:FC Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 5AA29E394433BC5EB943ED0D4A5D192D6F6B3F9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 10:56:47 +0000 Manifest this update: Wed 04 Nov 2026 10:51:47 +0000 Manifest next update: Thu 05 Nov 2026 14:41:47 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 2: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: CJ2QSpap3++3bebiLmISSOitFGV/QcT0deWkENO0zL8=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a2:9e:39:44:33:bc:5e:b9:43:ed:0d:4a:5d:19:2d:6f:6b:3f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Nov 4 10:51:47 2026 GMT Not After : Nov 5 14:41:47 2026 GMT Subject: CN=62F3A70490BA8540E09A3D1D288A3AB09BCC22FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:0b:1a:c0:e9:ca:5a:89:04:32:2d:38:6c: 48:bb:db:0c:24:75:34:a7:47:c1:1f:43:ed:ae:e7: ff:ea:00:a4:ea:02:ee:25:29:61:48:b2:d6:99:32: 8f:a2:3d:69:fe:71:9d:46:55:71:dd:81:5b:0e:3b: 0d:e0:5d:3e:b9:2c:d8:32:9d:1c:59:fb:f1:60:4f: a8:c8:6c:3a:cd:a0:a1:6f:98:9b:6e:c6:b1:8f:31: 27:dc:43:bb:16:d1:eb:21:03:7e:7f:fb:a1:09:71: 0b:75:59:c9:f0:5d:ed:39:70:6c:9e:a9:fc:ab:6b: 09:c1:38:9b:31:a9:69:6f:e8:77:f9:23:e5:5f:ce: 3e:4f:c6:1c:93:b4:38:40:84:98:4b:b0:5f:92:b3: b5:6d:e3:dd:6b:8b:b9:33:0b:03:10:ce:42:09:30: 36:8e:ed:91:bf:d4:51:4c:00:6b:84:eb:3e:0f:b1: 56:2e:69:6a:f8:c1:f6:d3:b0:bf:bf:f8:d9:48:79: 91:51:1e:3a:9a:bc:a7:c2:e9:a2:85:0a:9e:6c:97: 79:9e:49:b0:ec:8a:9b:70:45:04:be:6b:cb:52:b0: f5:1a:20:40:4a:7e:cd:b9:87:7e:7b:fc:67:e8:d2: f6:54:6a:76:1c:f6:e4:e3:63:49:47:cf:d8:5c:0d: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:A7:04:90:BA:85:40:E0:9A:3D:1D:28:8A:3A:B0:9B:CC:22:FC X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:61:4f:e8:96:73:5e:eb:19:b5:17:1f:a5:78:44:90:19:7f: a0:a5:7e:1d:d4:9d:e9:2c:c2:ac:b7:cd:7f:56:7c:14:03:6f: 73:cc:0b:39:19:55:68:a9:f1:76:ff:b3:9d:1e:ca:0e:32:19: ba:a3:b6:3d:92:9f:3f:50:13:39:95:6e:a4:e5:a3:cb:b4:12: d2:36:9d:a4:3c:b2:12:d8:40:d7:c7:c6:36:35:72:95:0d:70: e3:9a:6a:fa:03:e1:47:1a:86:08:8a:47:19:67:7d:f6:8c:7e: af:37:5c:5f:a0:d4:61:80:bf:dc:c6:2c:c7:c5:53:4a:de:dc: 19:ee:4a:16:c7:24:1c:74:61:7b:fa:eb:d7:6d:df:53:bb:74: 78:e6:50:12:b6:df:95:19:fb:9a:4e:a2:f0:76:c3:03:c6:84: e3:f7:54:b3:2f:f0:55:7f:24:7d:5a:5c:f7:8b:8b:a8:4d:21: 8b:13:4d:50:37:6a:01:91:fe:a8:c9:65:3e:2f:ae:3b:7c:19: 4a:fb:6e:cb:d5:6f:d2:e6:89:b6:98:ad:83:06:6a:47:fd:02: 1a:bc:a8:ad:c9:84:d0:c5:d5:63:27:b8:af:2e:3b:a1:af:4a: 90:19:ec:44:ee:e6:c4:c1:f8:31:d2:ca:82:28:b6:a1:35:18: a0:ed:2e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqKeOUQzvF65Q+0NSl0ZLW9rP5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjExMDQxMDUxNDdaFw0yNjExMDUxNDQxNDdaMDMxMTAvBgNV BAMTKDYyRjNBNzA0OTBCQTg1NDBFMDlBM0QxRDI4OEEzQUIwOUJDQzIyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHQsawOnKWokEMi04bEi72wwk dTSnR8EfQ+2u5//qAKTqAu4lKWFIstaZMo+iPWn+cZ1GVXHdgVsOOw3gXT65LNgy nRxZ+/FgT6jIbDrNoKFvmJtuxrGPMSfcQ7sW0eshA35/+6EJcQt1WcnwXe05cGye qfyrawnBOJsxqWlv6Hf5I+Vfzj5PxhyTtDhAhJhLsF+Ss7Vt491ri7kzCwMQzkIJ MDaO7ZG/1FFMAGuE6z4PsVYuaWr4wfbTsL+/+NlIeZFRHjqavKfC6aKFCp5sl3me SbDsiptwRQS+a8tSsPUaIEBKfs25h357/Gfo0vZUanYc9uTjY0lHz9hcDcYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYvOnBJC6hUDgmj0dKIo6sJvMIvwwHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxhT+iWc17rGbUXH6V4RJAZf6Clfh3Uneks wqy3zX9WfBQDb3PMCzkZVWip8Xb/s50eyg4yGbqjtj2Snz9QEzmVbqTlo8u0EtI2 naQ8shLYQNfHxjY1cpUNcOOaavoD4UcahgiKRxlnffaMfq83XF+g1GGAv9zGLMfF U0re3BnuShbHJBx0YXv669dt31O7dHjmUBK235UZ+5pOovB2wwPGhOP3VLMv8FV/ JH1aXPeLi6hNIYsTTVA3agGR/qjJZT4vrjt8GUr7bsvVb9LmibaYrYMGakf9Ahq8 qK3JhNDF1WMnuK8uO6GvSpAZ7ETu5sTB+DHSyoIotqE1GKDtLtQ= -----END CERTIFICATE-----Generated at Wed Nov 4 20:17:29 2026 by rpki-client