$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json) Hash identifier: tEXkGyxWVmqb8may+k4Wvj36rY0+WIHh5q2/sJLLQpo= Subject key identifier: 63:E9:1F:83:2F:5A:3F:CF:2E:95:D0:27:B9:98:F3:17:89:73:AD:70 Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B Certificate serial: 690C69E372DE12184DD961CB92DD33E9883DBEA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft Manifest number: D2 Signing time: Tue 06 Oct 2026 05:04:32 +0000 Manifest this update: Tue 06 Oct 2026 04:59:32 +0000 Manifest next update: Wed 07 Oct 2026 07:06:32 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=) 3: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: WR3Sl3d3VRdY2LLDXoMVUNxR/gAbJ0Wetkf+826HOlU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 07:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0c:69:e3:72:de:12:18:4d:d9:61:cb:92:dd:33:e9:88:3d:be:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B Validity Not Before: Oct 6 04:59:32 2026 GMT Not After : Oct 7 07:06:32 2026 GMT Subject: CN=63E91F832F5A3FCF2E95D027B998F3178973AD70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:dd:7e:35:c9:75:59:b9:a9:b3:bb:3c:ad: 5b:83:58:07:e4:f0:22:91:8b:e1:00:b4:bc:b0:2b: 5f:90:fb:4e:89:db:d3:dd:5c:9b:44:25:e7:b4:f1: 49:bf:43:c9:d4:6c:03:6c:57:63:07:49:18:c1:29: cf:d2:8f:3d:69:ca:2d:8f:fb:fa:ef:18:f0:a6:07: cb:16:e2:7f:b6:8c:2b:48:6b:eb:91:4c:94:1a:df: 43:67:30:7a:89:bb:b1:73:8a:02:46:a8:3c:a9:af: 97:ca:88:96:4f:b4:bc:e2:48:bb:7d:f6:97:39:c7: a7:d2:31:e3:c7:6b:bb:a8:c8:87:8e:3b:ae:88:70: eb:7d:76:89:70:76:72:32:dc:eb:13:0d:be:23:2c: 04:fe:89:64:18:09:9b:5a:c3:f8:13:6c:01:8d:c8: ad:fe:b1:48:ec:36:87:6d:03:5b:78:9c:0e:52:af: df:50:0e:12:b3:a9:c0:92:f5:de:64:59:c6:e2:ea: 02:30:e1:0a:c1:c0:0e:52:22:45:65:fd:03:f7:3b: 1c:0a:49:e7:22:02:22:17:18:be:a2:14:ec:35:00: cf:70:a9:da:1f:14:93:62:33:d5:c2:67:46:f6:2e: 9d:16:e6:a2:71:36:85:8b:c1:90:e0:46:5c:4e:b0: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:1F:83:2F:5A:3F:CF:2E:95:D0:27:B9:98:F3:17:89:73:AD:70 X509v3 Authority Key Identifier: keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:75:8d:5e:57:97:f7:51:9c:a0:d2:68:42:76:00:b3:a6:69: 07:40:e5:d1:01:34:75:76:da:dc:fd:56:97:40:49:f0:6a:4d: 7e:2e:73:72:83:e9:84:2d:19:2f:cf:3b:b4:b1:5a:09:4f:3b: 66:8d:0c:84:74:ac:40:87:f6:7d:11:28:12:86:31:0c:ec:08: 57:bb:b5:92:bd:a5:e3:60:90:04:2d:2f:c8:cf:b5:8c:5c:18: 48:14:f8:97:61:b0:f4:bc:6c:c6:63:82:8e:52:49:0a:d3:ae: 40:52:c6:82:0f:53:2d:a0:96:ac:3b:46:b6:3b:a5:a4:d6:26: f5:f8:d2:51:12:c5:47:cb:92:d0:64:2a:b4:7d:78:88:49:13: 70:88:5b:72:49:d4:da:83:3c:fc:f2:80:77:92:1c:d8:96:a7: 86:e8:1d:27:c4:58:84:d0:ae:05:ce:91:f9:2f:d0:75:56:8c: 60:28:92:66:e3:59:22:31:7b:65:3b:d3:62:81:cf:b9:d4:8d: 80:66:0f:30:12:2c:e6:4f:6a:6b:6a:0d:af:a5:e3:15:fe:d9: 10:20:11:c0:b9:39:3d:ae:36:46:c9:f9:54:36:d7:85:bb:46: 2c:0f:8d:c8:2d:94:e7:0f:7c:6e:8c:3e:b3:e7:7e:af:2d:5d: cb:39:d8:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQxp43LeEhhN2WHLkt0z6Yg9vqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx NDlCNjIyQjAeFw0yNjEwMDYwNDU5MzJaFw0yNjEwMDcwNzA2MzJaMDMxMTAvBgNV BAMTKDYzRTkxRjgzMkY1QTNGQ0YyRTk1RDAyN0I5OThGMzE3ODk3M0FENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0t1+Ncl1Wbmps7s8rVuDWAfk 8CKRi+EAtLywK1+Q+06J29PdXJtEJee08Um/Q8nUbANsV2MHSRjBKc/Sjz1pyi2P +/rvGPCmB8sW4n+2jCtIa+uRTJQa30NnMHqJu7FzigJGqDypr5fKiJZPtLziSLt9 9pc5x6fSMePHa7uoyIeOO66IcOt9dolwdnIy3OsTDb4jLAT+iWQYCZtaw/gTbAGN yK3+sUjsNodtA1t4nA5Sr99QDhKzqcCS9d5kWcbi6gIw4QrBwA5SIkVl/QP3OxwK SeciAiIXGL6iFOw1AM9wqdofFJNiM9XCZ0b2Lp0W5qJxNoWLwZDgRlxOsItdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+kfgy9aP88uldAnuZjzF4lzrXAwHwYDVR0j BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4 OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2 MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4 OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl1jV5Xl/dRnKDSaEJ2ALOmaQdA5dEBNHV2 2tz9VpdASfBqTX4uc3KD6YQtGS/PO7SxWglPO2aNDIR0rECH9n0RKBKGMQzsCFe7 tZK9peNgkAQtL8jPtYxcGEgU+JdhsPS8bMZjgo5SSQrTrkBSxoIPUy2glqw7RrY7 paTWJvX40lESxUfLktBkKrR9eIhJE3CIW3JJ1NqDPPzygHeSHNiWp4boHSfEWITQ rgXOkfkv0HVWjGAokmbjWSIxe2U702KBz7nUjYBmDzASLOZPamtqDa+l4xX+2RAg EcC5OT2uNkbJ+VQ214W7RiwPjcgtlOcPfG6MPrPnfq8tXcs52JI= -----END CERTIFICATE-----Generated at Tue Oct 6 20:35:10 2026 by rpki-client