$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft File: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft (raw, json) Hash identifier: JYHHhcxL6TBl7993BP16lFol5SA9gNGH54oj0ro4S50= Subject key identifier: D9:E5:4B:5E:D3:9F:8F:E2:81:6A:9A:27:AC:8A:71:85:B5:EF:7D:A6 Authority key identifier: 5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 Certificate issuer: /CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Certificate serial: 7E749A3C193979DA527B2163B8A8C9718665BE18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 15:16:35 +0000 Manifest this update: Sun 01 Nov 2026 15:11:35 +0000 Manifest next update: Mon 02 Nov 2026 17:43:35 +0000 Files and hashes: 1: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl (hash: XLhGyICSHEk/wDXZZKgRnSchIxufN/vunjfXEW7YP0E=) 2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: oCDO+C8a0RrEJ6lxOXaK0sUnJXysyt3W9yTdznU1D4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:74:9a:3c:19:39:79:da:52:7b:21:63:b8:a8:c9:71:86:65:be:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Validity Not Before: Nov 1 15:11:35 2026 GMT Not After : Nov 2 17:43:35 2026 GMT Subject: CN=D9E54B5ED39F8FE2816A9A27AC8A7185B5EF7DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:8b:31:8e:bd:97:e0:c5:bc:02:59:62:f4: b0:e0:7a:d6:b4:32:e2:38:73:fd:a9:70:55:67:28: e7:42:33:55:12:78:41:08:7d:7d:77:e0:fd:a9:3e: 1a:44:01:56:f0:04:19:4b:b6:71:be:66:ef:a5:3f: b6:1c:ea:63:a9:2a:4e:20:fe:87:4a:f8:d4:11:e1: 03:18:48:87:8a:e8:db:82:20:b9:ec:3e:14:d9:19: fb:94:71:45:ee:ec:42:bb:13:22:4a:bf:56:a9:45: b1:64:cb:67:f7:b3:76:5c:4f:61:8f:f9:b8:2e:ba: f7:35:8b:98:90:29:dd:bf:c6:e6:3b:41:ea:86:f7: 7e:0c:a8:f5:ad:fa:60:32:40:1b:ae:be:76:8a:9f: 0a:73:85:eb:2b:7b:78:31:cf:85:0d:e8:7d:8d:a8: 5d:90:53:03:36:0a:fb:87:31:75:19:86:9a:b4:1b: de:87:28:79:f1:9e:f1:93:0b:65:27:29:86:18:34: 00:e1:45:26:30:b3:7a:4a:e0:3b:d0:ae:9d:1e:6b: f7:b8:20:4c:db:91:1b:b5:c8:07:50:d1:1e:49:f3: 07:de:68:2e:e5:50:00:dd:11:13:db:ab:69:a5:3e: 51:90:54:46:d0:73:46:17:e0:28:a5:5e:fe:d4:3f: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:4B:5E:D3:9F:8F:E2:81:6A:9A:27:AC:8A:71:85:B5:EF:7D:A6 X509v3 Authority Key Identifier: keyid:5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:9c:7b:d2:f7:5c:53:6e:cb:27:8a:de:05:6d:25:82:76:ec: fa:47:a8:eb:62:48:c7:ad:e9:ae:0f:d4:3f:ed:0c:ba:fc:13: ad:b5:dd:ee:74:9b:9e:ec:df:ff:74:ab:56:12:e5:bb:8e:f8: aa:be:72:27:08:9f:97:58:f0:20:08:2e:33:85:b4:90:1e:a2: d8:56:b2:e0:59:a8:18:67:c2:12:33:10:59:af:71:dd:bf:3b: f1:5d:b1:5f:ee:6d:dc:b2:d1:09:50:32:ee:e9:61:84:e1:b6: fa:f9:ec:19:ae:72:98:03:4a:cd:6f:7c:d5:9c:78:7b:db:9e: 92:b0:1e:c1:01:fa:e0:fc:21:76:d1:fd:4c:b9:b4:96:f6:85: 2d:98:5f:36:c2:9a:4c:e0:82:eb:a8:80:c6:2d:6f:3a:fb:3f: fc:12:40:e8:14:17:6f:5e:76:5c:ef:d2:ea:1e:df:87:88:ff: 98:42:67:bc:f0:4a:ce:d4:a3:5c:84:7f:04:93:f1:15:88:f0: 2e:65:c5:b7:9d:03:b3:ec:0d:73:a2:52:95:fb:20:8f:18:83: 0c:e2:cf:66:ac:b4:20:9b:2a:8d:cd:5e:43:f7:30:dc:09:f5: 8b:59:97:a4:5e:7e:82:e8:11:da:ab:a2:50:1d:da:00:00:80: 05:b8:fd:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnSaPBk5edpSeyFjuKjJcYZlvhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4 QjkwMTQ5NjAeFw0yNjExMDExNTExMzVaFw0yNjExMDIxNzQzMzVaMDMxMTAvBgNV BAMTKEQ5RTU0QjVFRDM5RjhGRTI4MTZBOUEyN0FDOEE3MTg1QjVFRjdEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQ4sxjr2X4MW8Alli9LDgeta0 MuI4c/2pcFVnKOdCM1USeEEIfX134P2pPhpEAVbwBBlLtnG+Zu+lP7Yc6mOpKk4g /odK+NQR4QMYSIeK6NuCILnsPhTZGfuUcUXu7EK7EyJKv1apRbFky2f3s3ZcT2GP +bguuvc1i5iQKd2/xuY7QeqG934MqPWt+mAyQBuuvnaKnwpzhesre3gxz4UN6H2N qF2QUwM2CvuHMXUZhpq0G96HKHnxnvGTC2UnKYYYNADhRSYws3pK4DvQrp0ea/e4 IEzbkRu1yAdQ0R5J8wfeaC7lUADdERPbq2mlPlGQVEbQc0YX4CilXv7UP4FJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2eVLXtOfj+KBaponrIpxhbXvfaYwHwYDVR0j BBgwFoAUXBnvK5msbznq/TyQpRz/LYuQFJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZWNjZmYtY2U5Yi00MWRhLWI5OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5 OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4QjkwMTQ5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzE5RUYyQjk5QUM2RjM5RUFGRDNDOTBBNTFDRkYyRDhCOTAx NDk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZG MkQ4QjkwMTQ5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKce9L3XFNuyyeK3gVtJYJ27PpHqOtiSMet 6a4P1D/tDLr8E6213e50m57s3/90q1YS5buO+Kq+cicIn5dY8CAILjOFtJAeothW suBZqBhnwhIzEFmvcd2/O/FdsV/ubdyy0QlQMu7pYYThtvr57BmucpgDSs1vfNWc eHvbnpKwHsEB+uD8IXbR/Uy5tJb2hS2YXzbCmkzgguuogMYtbzr7P/wSQOgUF29e dlzv0uoe34eI/5hCZ7zwSs7Uo1yEfwST8RWI8C5lxbedA7PsDXOiUpX7II8Ygwzi z2astCCbKo3NXkP3MNwJ9YtZl6RefoLoEdqrolAd2gAAgAW4/ew= -----END CERTIFICATE-----Generated at Mon Nov 2 05:52:41 2026 by rpki-client