$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft (raw, json) Hash identifier: tsTLEK/ojo7H0F32/6EWDqBkNxO+2hgyxr9mUo7g+ww= Subject key identifier: 15:17:50:0B:CF:48:A0:EE:42:04:D7:EE:B5:DF:28:38:88:43:DD:FA Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 3B32ACA2DA1630108E477977A46DDBCBE752B26E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft Manifest number: FA Signing time: Wed 04 Nov 2026 20:03:56 +0000 Manifest this update: Wed 04 Nov 2026 19:58:56 +0000 Manifest next update: Thu 05 Nov 2026 21:33:56 +0000 Files and hashes: 1: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag=) 2: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl (hash: txV8OGI8oQF0KcnnNadt4bfgDeDVqwh856ePvY9HgX0=) 3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 21:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:32:ac:a2:da:16:30:10:8e:47:79:77:a4:6d:db:cb:e7:52:b2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: Nov 4 19:58:56 2026 GMT Not After : Nov 5 21:33:56 2026 GMT Subject: CN=1517500BCF48A0EE4204D7EEB5DF28388843DDFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:31:06:c2:fa:3c:cd:d0:e5:a8:72:d9:75: 8d:cb:95:88:12:10:b8:39:da:a9:6e:02:4b:19:fd: dd:c2:7d:93:91:d3:4c:14:15:7d:41:9d:f3:e3:69: 05:ef:58:ad:82:3a:3d:b9:70:5c:93:95:1f:8e:87: 0e:ad:9b:fd:7d:e5:b8:6f:2e:a0:1e:90:9d:26:e4: 76:48:ef:a4:d1:4b:c0:01:03:ae:22:8a:86:94:72: 84:5f:06:7b:cb:01:c1:44:9d:6a:46:97:26:b0:3e: 2d:6d:fe:4c:18:28:cf:03:a8:13:62:87:e2:b1:8f: c4:74:b2:36:c9:98:63:a9:3e:46:89:b4:0e:62:2d: 72:d0:88:04:e7:ed:bc:aa:b4:aa:45:4f:34:23:1a: 10:d1:46:0d:af:aa:4c:12:1c:36:88:3e:5e:7c:d7: 03:02:d8:67:72:92:48:8e:e0:6e:bd:be:85:c7:38: 13:7f:8f:56:30:4e:47:37:98:03:a7:bd:3a:50:36: 51:b3:33:e5:76:9a:46:6a:89:4e:4d:49:3f:1a:ca: 88:38:86:62:f7:98:dd:5c:97:33:3d:e6:47:63:76: a5:e7:8e:a5:02:cc:f4:93:62:db:68:d1:9e:31:a9: 2a:be:3e:24:90:11:a5:b0:80:d9:72:58:86:75:b5: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:50:0B:CF:48:A0:EE:42:04:D7:EE:B5:DF:28:38:88:43:DD:FA X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f3:9d:f3:b3:57:a4:ed:f6:0b:31:d9:8f:a9:b8:6a:22:23: 32:11:e5:af:c7:3b:a4:c7:59:c0:e1:3b:4d:e4:71:6f:d8:70: fc:7e:da:bb:ff:aa:46:17:99:05:cd:35:34:06:52:65:ca:05: 61:bf:da:4a:6f:88:30:8b:ca:cb:fb:f6:8b:5d:2e:9d:7c:fa: 0f:4d:6f:31:c6:6d:ec:95:90:35:66:94:ba:06:b0:fe:78:ee: 83:8c:5d:38:11:c1:41:82:7c:4d:a3:87:08:49:85:1e:9a:17: 1b:f9:18:65:9e:2f:e6:04:7b:fa:74:e2:79:a0:51:cb:bb:67: 50:20:f7:2d:76:5a:dd:e6:67:da:43:8c:10:53:c8:1d:81:1c: 7e:23:37:0d:3a:d8:62:c7:e5:f4:3c:94:c9:d6:0c:c0:9f:2c: cb:e6:f7:24:ab:8d:fc:34:70:4e:9a:90:b0:ef:0f:3a:eb:a7: b2:9e:15:ff:c4:7f:89:db:f5:3b:98:7f:88:8c:44:ad:5b:26: a5:8c:f6:5e:bd:86:94:0a:59:11:8c:61:98:7d:e3:c8:0e:26: f4:53:2e:54:03:fc:a6:39:17:a1:c3:d0:05:63:59:dd:6a:c7: 67:1f:06:ec:35:52:90:e9:ac:2b:24:cf:aa:3a:d4:a4:d4:8d: 13:37:0d:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzKsotoWMBCOR3l3pG3by+dSsm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjExMDQxOTU4NTZaFw0yNjExMDUyMTMzNTZaMDMxMTAvBgNV BAMTKDE1MTc1MDBCQ0Y0OEEwRUU0MjA0RDdFRUI1REYyODM4ODg0M0RERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfDEGwvo8zdDlqHLZdY3LlYgS ELg52qluAksZ/d3CfZOR00wUFX1BnfPjaQXvWK2COj25cFyTlR+Ohw6tm/195bhv LqAekJ0m5HZI76TRS8ABA64iioaUcoRfBnvLAcFEnWpGlyawPi1t/kwYKM8DqBNi h+Kxj8R0sjbJmGOpPkaJtA5iLXLQiATn7byqtKpFTzQjGhDRRg2vqkwSHDaIPl58 1wMC2GdykkiO4G69voXHOBN/j1YwTkc3mAOnvTpQNlGzM+V2mkZqiU5NST8ayog4 hmL3mN1clzM95kdjdqXnjqUCzPSTYtto0Z4xqSq+PiSQEaWwgNlyWIZ1tYGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFRdQC89IoO5CBNfutd8oOIhD3fowHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUz M0FENUE2QzVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/znfOzV6Tt9gsx2Y+puGoiIzIR5a/HO6TH WcDhO03kcW/YcPx+2rv/qkYXmQXNNTQGUmXKBWG/2kpviDCLysv79otdLp18+g9N bzHGbeyVkDVmlLoGsP547oOMXTgRwUGCfE2jhwhJhR6aFxv5GGWeL+YEe/p04nmg Ucu7Z1Ag9y12Wt3mZ9pDjBBTyB2BHH4jNw062GLH5fQ8lMnWDMCfLMvm9ySrjfw0 cE6akLDvDzrrp7KeFf/Ef4nb9TuYf4iMRK1bJqWM9l69hpQKWRGMYZh948gOJvRT LlQD/KY5F6HD0AVjWd1qx2cfBuw1UpDprCskz6o61KTUjRM3DW4= -----END CERTIFICATE-----Generated at Thu Nov 5 09:37:44 2026 by rpki-client