$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: bXRYXqfHjFSZPCOrKu6sHX7fgKt5VE27AZD4HvnpHl8= Subject key identifier: 86:8F:80:F6:0E:4B:DB:33:C2:84:64:49:EE:95:0F:FD:4C:65:2B:1A Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 302A793C58C0404EFF02AB4F15F3918EDB97FA7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 07:27:23 +0000 Manifest this update: Tue 03 Nov 2026 07:22:23 +0000 Manifest next update: Wed 04 Nov 2026 10:59:23 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) 2: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: cZgSc+5kHsIxbPflGaXCHuCvYRkN0vtI2ZCE+148Sss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2a:79:3c:58:c0:40:4e:ff:02:ab:4f:15:f3:91:8e:db:97:fa:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Nov 3 07:22:23 2026 GMT Not After : Nov 4 10:59:23 2026 GMT Subject: CN=868F80F60E4BDB33C2846449EE950FFD4C652B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4f:1f:ea:f6:ee:d0:44:0a:71:d1:6e:2a:16: b0:84:8f:9a:1f:61:8c:ac:e2:32:8b:08:f2:2b:49: bc:06:2c:4d:3b:02:f5:62:3e:e7:87:38:24:b7:7a: 14:8f:0f:8f:c2:4e:48:ed:22:98:29:52:0b:29:16: fb:fb:73:dc:ad:45:0d:17:09:bf:16:fe:f7:c4:b0: b6:8f:20:04:aa:dd:eb:16:47:31:7c:99:88:7b:03: e6:5b:78:91:30:a4:8c:ba:d0:92:ca:be:48:d6:8c: dc:fa:dd:cb:f2:a8:ec:2f:5c:c3:c2:6a:4e:07:86: 15:a5:48:b1:f0:0c:d9:a5:fb:f4:49:73:93:57:cc: bf:59:17:26:99:7c:7c:02:d8:36:81:28:b7:8c:e3: f4:03:bc:1d:58:8a:2d:35:7e:f0:a7:1c:9c:b3:a5: 5d:04:cb:c8:74:e7:ff:e8:c2:5d:13:7f:74:17:76: 67:78:d5:ce:71:f1:63:87:05:24:09:55:5d:71:85: 7d:7c:dd:d4:5d:96:7b:ff:0e:ff:c2:e3:ec:ce:9b: 6f:74:18:d0:79:33:c2:4a:6e:55:da:31:c0:a2:ca: 87:46:00:48:10:27:29:6d:b0:31:89:c9:1e:67:ec: af:6a:b9:37:28:c6:6e:8f:06:e3:90:1b:ae:88:09: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8F:80:F6:0E:4B:DB:33:C2:84:64:49:EE:95:0F:FD:4C:65:2B:1A X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d1:b5:27:df:b4:24:c1:4d:32:16:94:55:22:76:42:e6:46: 45:47:7a:3f:09:40:70:c0:96:a5:f8:10:27:a2:17:aa:dc:fa: a2:9f:67:9a:97:19:d3:26:47:27:04:9c:5c:2b:fc:2e:b6:1b: df:1e:02:6d:7c:46:0e:76:0b:06:36:0c:b5:4f:66:99:02:5d: df:b8:c4:78:c4:17:5f:f8:fd:73:f7:e3:ff:12:ae:51:53:c8: eb:d9:87:58:82:f7:90:45:bc:63:b4:80:fc:b1:c5:62:44:37: 60:f5:a4:a4:23:13:1a:82:6b:7f:d3:4a:24:2e:d8:26:3d:09: 17:87:8d:f2:d4:fa:5d:60:0e:0a:7d:24:2c:bd:38:80:7d:23: ed:35:89:ad:75:e2:5c:83:3e:a1:8e:83:e2:57:06:55:06:31: 29:b4:35:d6:7f:a8:77:8c:f5:73:36:b3:39:a2:47:ae:be:55: e6:19:7e:2f:09:c8:2a:9f:8a:73:0b:d0:b6:25:60:6c:3d:81: dc:5a:18:f2:56:ff:77:91:54:e3:17:ce:08:64:04:a3:a8:e5: 08:91:69:81:2b:b4:c8:82:57:2e:4a:02:82:18:81:6a:30:0f: c5:c4:ca:95:e4:a0:d5:82:da:90:d6:3d:00:85:0b:4d:a5:1b: 74:f6:69:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCp5PFjAQE7/AqtPFfORjtuX+n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjExMDMwNzIyMjNaFw0yNjExMDQxMDU5MjNaMDMxMTAvBgNV BAMTKDg2OEY4MEY2MEU0QkRCMzNDMjg0NjQ0OUVFOTUwRkZENEM2NTJCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPTx/q9u7QRApx0W4qFrCEj5of YYys4jKLCPIrSbwGLE07AvViPueHOCS3ehSPD4/CTkjtIpgpUgspFvv7c9ytRQ0X Cb8W/vfEsLaPIASq3esWRzF8mYh7A+ZbeJEwpIy60JLKvkjWjNz63cvyqOwvXMPC ak4HhhWlSLHwDNml+/RJc5NXzL9ZFyaZfHwC2DaBKLeM4/QDvB1Yii01fvCnHJyz pV0Ey8h05//owl0Tf3QXdmd41c5x8WOHBSQJVV1xhX183dRdlnv/Dv/C4+zOm290 GNB5M8JKblXaMcCiyodGAEgQJyltsDGJyR5n7K9quTcoxm6PBuOQG66ICZx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUho+A9g5L2zPChGRJ7pUP/UxlKxowHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/RtSfftCTBTTIWlFUidkLmRkVHej8JQHDA lqX4ECeiF6rc+qKfZ5qXGdMmRycEnFwr/C62G98eAm18Rg52CwY2DLVPZpkCXd+4 xHjEF1/4/XP34/8SrlFTyOvZh1iC95BFvGO0gPyxxWJEN2D1pKQjExqCa3/TSiQu 2CY9CReHjfLU+l1gDgp9JCy9OIB9I+01ia114lyDPqGOg+JXBlUGMSm0NdZ/qHeM 9XM2szmiR66+VeYZfi8JyCqfinML0LYlYGw9gdxaGPJW/3eRVOMXzghkBKOo5QiR aYErtMiCVy5KAoIYgWowD8XEypXkoNWC2pDWPQCFC02lG3T2aes= -----END CERTIFICATE-----Generated at Tue Nov 3 12:57:13 2026 by rpki-client