$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json) Hash identifier: IFQ42J5NFneMzZStcPhJfPduZWzBU89FgAwZdZ5Ep6I= Subject key identifier: 5E:FE:D3:3B:AF:AA:0E:C3:8A:DF:F6:0B:77:29:99:90:3C:C6:F3:5B Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Certificate serial: 78EAD6A3038F2E637AE7057AC82C140746163F40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 01:19:39 +0000 Manifest this update: Wed 04 Nov 2026 01:14:39 +0000 Manifest next update: Thu 05 Nov 2026 03:25:39 +0000 Files and hashes: 1: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: wWlFeM5+0m/7M8LYdldFi6AQLc/k1HkGWGJxlw9/elQ=) 2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ea:d6:a3:03:8f:2e:63:7a:e7:05:7a:c8:2c:14:07:46:16:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Validity Not Before: Nov 4 01:14:39 2026 GMT Not After : Nov 5 03:25:39 2026 GMT Subject: CN=5EFED33BAFAA0EC38ADFF60B772999903CC6F35B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:4a:a2:f2:37:b9:6a:35:a4:8c:c3:b3:45: 5d:a0:a2:6b:d8:a9:d8:89:94:b9:51:df:24:b8:cc: 9f:bf:45:01:63:97:8f:e9:34:5f:f1:30:42:7c:02: f0:5c:ba:aa:93:5b:19:68:60:df:7b:af:7d:9e:fc: a7:ce:9d:35:fa:b3:73:fd:59:89:3b:29:f6:09:2f: db:66:98:23:1e:d2:76:75:b4:21:47:00:a1:11:6e: 0c:a3:f8:15:28:eb:07:0d:1b:10:37:ae:bc:fc:10: 18:f0:68:cf:f2:c1:c7:97:33:94:ab:8c:3d:c9:66: 4f:b0:66:c8:10:94:62:a0:01:97:46:9f:de:ed:52: 89:c4:e0:f7:98:f8:06:41:71:97:80:cd:ef:aa:24: a2:59:91:5f:9a:e5:41:fe:43:01:8a:7d:0e:fc:b6: d7:8b:72:86:18:1d:9c:c0:96:58:58:35:ea:5f:1b: bd:a1:b4:8b:c8:11:2f:5c:81:b8:4f:00:ef:42:6d: 63:7f:7f:3a:6e:58:7b:0d:84:a0:41:0b:bf:b1:e9: 8c:e3:b2:c6:27:49:a9:df:55:92:c3:3e:1b:26:3f: 1f:35:a8:cb:f6:4f:07:b2:ad:d3:b1:4e:38:f2:f9: ac:97:0f:fe:97:7c:0c:10:53:07:8d:2e:15:9a:86: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FE:D3:3B:AF:AA:0E:C3:8A:DF:F6:0B:77:29:99:90:3C:C6:F3:5B X509v3 Authority Key Identifier: keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c8:af:7d:65:58:28:29:29:cb:e8:a1:f0:07:e5:18:31:79: 31:b9:ba:3e:d2:60:e0:a7:83:84:5a:6d:3c:7e:db:0b:02:ab: 0f:b9:ed:01:ff:a9:68:bb:62:fb:64:d0:29:a3:71:f2:d9:af: ae:07:5c:57:f9:10:29:51:cb:3c:62:e2:bd:21:00:94:39:95: 56:98:b5:99:79:fa:42:15:2d:c5:27:fa:f3:da:36:3f:46:72: 5d:fb:7a:78:c4:76:0e:fe:1b:41:1a:94:ac:e8:4e:31:6e:7d: 46:1e:02:41:e1:97:95:41:0a:fd:99:30:a0:96:7d:bf:c6:f0: f6:23:8d:d6:c5:72:40:54:0d:8b:6b:cb:52:14:ea:6d:8d:11: f2:99:32:1d:2d:2d:24:a5:ef:7f:ca:f2:c7:2e:14:ec:2d:8c: 5f:2b:83:53:79:01:7d:1b:d8:e7:ab:fb:92:63:20:c5:e5:ba: 30:cc:81:92:36:c1:e4:7a:2a:15:4d:a8:2f:bd:91:c9:0e:7e: 1f:19:e9:70:69:42:06:9d:6c:5d:89:a6:66:e5:86:81:44:9b: da:2b:d8:81:2f:29:5b:fd:aa:49:01:4e:ef:c5:ba:17:fe:76: 3c:5e:79:2d:47:8e:b6:5f:bd:13:7d:9f:a4:66:c9:97:db:26: bd:72:fe:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOrWowOPLmN65wV6yCwUB0YWP0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIw RDJEQzc0QzAeFw0yNjExMDQwMTE0MzlaFw0yNjExMDUwMzI1MzlaMDMxMTAvBgNV BAMTKDVFRkVEMzNCQUZBQTBFQzM4QURGRjYwQjc3Mjk5OTkwM0NDNkYzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrUqi8je5ajWkjMOzRV2gomvY qdiJlLlR3yS4zJ+/RQFjl4/pNF/xMEJ8AvBcuqqTWxloYN97r32e/KfOnTX6s3P9 WYk7KfYJL9tmmCMe0nZ1tCFHAKERbgyj+BUo6wcNGxA3rrz8EBjwaM/ywceXM5Sr jD3JZk+wZsgQlGKgAZdGn97tUonE4PeY+AZBcZeAze+qJKJZkV+a5UH+QwGKfQ78 tteLcoYYHZzAllhYNepfG72htIvIES9cgbhPAO9CbWN/fzpuWHsNhKBBC7+x6Yzj ssYnSanfVZLDPhsmPx81qMv2TweyrdOxTjjy+ayXD/6XfAwQUweNLhWahhZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXv7TO6+qDsOK3/YLdymZkDzG81swHwYDVR0j BBgwFoAU1UhMxzQP04/RUrlRqBKnuw0tx0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlM2U5ODEtYmYzOS00MmUwLWEyZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzcz NDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIwRDJEQzc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTQ4NENDNzM0MEZEMzhGRDE1MkI5NTFBODEyQTdCQjBEMkRD NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3 QkIwRDJEQzc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLIr31lWCgpKcvoofAH5RgxeTG5uj7SYOCn g4RabTx+2wsCqw+57QH/qWi7Yvtk0CmjcfLZr64HXFf5EClRyzxi4r0hAJQ5lVaY tZl5+kIVLcUn+vPaNj9Gcl37enjEdg7+G0EalKzoTjFufUYeAkHhl5VBCv2ZMKCW fb/G8PYjjdbFckBUDYtry1IU6m2NEfKZMh0tLSSl73/K8scuFOwtjF8rg1N5AX0b 2Oer+5JjIMXlujDMgZI2weR6KhVNqC+9kckOfh8Z6XBpQgadbF2JpmblhoFEm9or 2IEvKVv9qkkBTu/Fuhf+djxeeS1HjrZfvRN9n6RmyZfbJr1y/i8= -----END CERTIFICATE-----Generated at Wed Nov 4 19:07:10 2026 by rpki-client