$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json) Hash identifier: bOoaEl4AGAY3wKC2DUmKRz4WSriGNtwXH9DjJpmhQTI= Subject key identifier: 6F:29:44:8A:D1:1B:D8:0F:C5:89:BD:40:EE:91:BD:2A:AA:31:F1:96 Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Certificate serial: 543E9F7C7555AE8A7E15B9DD55D770D53C4E4EBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 05:35:04 +0000 Manifest this update: Wed 04 Nov 2026 05:30:04 +0000 Manifest next update: Thu 05 Nov 2026 08:43:04 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=) 2: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: D0bzFB2Owwjqeth23SY6tSHohPABv+0PZHcC+bZC/gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3e:9f:7c:75:55:ae:8a:7e:15:b9:dd:55:d7:70:d5:3c:4e:4e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Validity Not Before: Nov 4 05:30:04 2026 GMT Not After : Nov 5 08:43:04 2026 GMT Subject: CN=6F29448AD11BD80FC589BD40EE91BD2AAA31F196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:0e:be:ae:16:cd:a1:bc:c1:31:e0:b5:bc: 3c:a1:68:b1:9f:b4:77:ae:34:1d:84:a6:3c:68:04: df:bb:bb:4d:ce:26:cc:e6:3e:7b:53:7e:55:6f:20: bb:24:59:ee:73:5c:ce:f0:19:04:21:f2:c5:2b:0b: 70:ef:87:4b:c3:33:12:58:5f:d5:7d:51:2e:11:4e: 4e:e9:c4:3c:84:f1:23:2f:2a:d5:66:cc:05:13:40: 12:ff:61:86:9f:4c:42:1b:cb:23:24:18:2f:1d:62: e2:6f:4d:f4:04:0c:8b:c4:26:39:4c:8b:4f:3e:43: c2:2d:3c:9f:b7:b5:47:03:af:98:fd:9e:47:b1:de: f7:e6:52:b4:01:bf:c4:59:ac:74:6d:6e:75:eb:49: 43:54:74:22:9a:ca:d7:31:59:5b:3b:8f:09:d0:56: 8b:6c:06:6c:28:22:4e:7f:4b:b3:36:0c:f0:b9:a0: c4:ad:99:96:3f:08:49:b3:d1:8e:9a:cd:32:72:8d: 49:3c:89:51:1d:0b:f0:46:2f:44:67:25:a9:c0:43: 96:d4:27:80:51:ee:64:93:93:53:2b:4c:55:5e:de: aa:9f:07:bc:b2:75:b5:e8:44:96:e5:e6:ee:7e:61: d6:68:4a:71:b5:e3:69:58:c8:46:e1:d6:da:b1:6c: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:29:44:8A:D1:1B:D8:0F:C5:89:BD:40:EE:91:BD:2A:AA:31:F1:96 X509v3 Authority Key Identifier: keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:72:59:b2:c4:db:4e:ab:be:c8:1a:53:c9:3f:91:9d:fe:ac: 9d:24:69:a5:e6:d0:52:dc:cc:39:ec:d6:ca:a2:49:25:9a:0a: 7d:68:ff:8b:b9:8f:ba:d0:4c:f9:df:78:2d:d0:f8:f1:41:80: c9:47:80:5e:a4:c3:42:0e:d3:ef:75:5a:fb:9d:89:35:da:45: a4:28:37:78:00:0d:79:d2:27:16:a5:7e:85:94:20:d3:a7:73: f8:66:d2:5a:08:35:c1:a0:fa:cb:7b:3e:67:a8:3d:8d:84:48: bb:d8:71:90:26:98:7e:01:fb:40:10:77:6b:05:c8:8c:0e:e7: 29:8f:8c:2d:f6:05:b2:83:bd:37:9b:0a:e2:9d:38:04:6c:4e: 35:ad:0a:2c:55:9a:79:3d:f9:a2:bf:6d:a0:67:c3:da:9c:5c: 5b:fe:64:aa:2f:db:9c:da:d0:2c:6d:69:2a:a5:14:c5:0b:cb: 24:0e:41:84:e4:ce:ad:c4:74:69:a1:ae:2a:24:58:d7:76:58: f9:d6:a3:a5:d4:7b:6a:aa:a9:18:07:a4:4e:52:91:81:a3:d5: 24:e7:ed:aa:c3:24:3e:fb:81:19:89:2b:80:e8:03:aa:e1:53: 30:4d:0a:11:8f:09:dd:66:b3:5a:a9:56:98:f7:5e:54:b0:0d: 4a:36:c5:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVD6ffHVVrop+FbndVddw1TxOTrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4 NTYxMzIxNDAeFw0yNjExMDQwNTMwMDRaFw0yNjExMDUwODQzMDRaMDMxMTAvBgNV BAMTKDZGMjk0NDhBRDExQkQ4MEZDNTg5QkQ0MEVFOTFCRDJBQUEzMUYxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpw6+rhbNobzBMeC1vDyhaLGf tHeuNB2EpjxoBN+7u03OJszmPntTflVvILskWe5zXM7wGQQh8sUrC3Dvh0vDMxJY X9V9US4RTk7pxDyE8SMvKtVmzAUTQBL/YYafTEIbyyMkGC8dYuJvTfQEDIvEJjlM i08+Q8ItPJ+3tUcDr5j9nkex3vfmUrQBv8RZrHRtbnXrSUNUdCKaytcxWVs7jwnQ VotsBmwoIk5/S7M2DPC5oMStmZY/CEmz0Y6azTJyjUk8iVEdC/BGL0RnJanAQ5bU J4BR7mSTk1MrTFVe3qqfB7yydbXoRJbl5u5+YdZoSnG142lYyEbh1tqxbM+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbylEitEb2A/Fib1A7pG9Kqox8ZYwHwYDVR0j BBgwFoAUWGPvz4znBhzf8brO6vz9sYVhMhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4 Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4NTYxMzIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81ODYzRUZDRjhDRTcwNjFDREZGMUJBQ0VFQUZDRkRCMTg1NjEz MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZE QjE4NTYxMzIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClyWbLE206rvsgaU8k/kZ3+rJ0kaaXm0FLc zDns1sqiSSWaCn1o/4u5j7rQTPnfeC3Q+PFBgMlHgF6kw0IO0+91WvudiTXaRaQo N3gADXnSJxalfoWUINOnc/hm0loINcGg+st7PmeoPY2ESLvYcZAmmH4B+0AQd2sF yIwO5ymPjC32BbKDvTebCuKdOARsTjWtCixVmnk9+aK/baBnw9qcXFv+ZKov25za 0CxtaSqlFMULyyQOQYTkzq3EdGmhriokWNd2WPnWo6XUe2qqqRgHpE5SkYGj1STn 7arDJD77gRmJK4DoA6rhUzBNChGPCd1ms1qpVpj3XlSwDUo2xdI= -----END CERTIFICATE-----Generated at Wed Nov 4 14:32:47 2026 by rpki-client