$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft (raw, json) Hash identifier: D/xsTki1gk2SKjoOp7y78+OIaxM5EdNU/zKa8jrAGlc= Subject key identifier: 80:01:86:6E:3F:B4:A3:D3:CC:E2:21:79:74:C9:ED:1B:50:8C:B2:6A Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 3E9AF2CC7393C14C5A96730F63E11D6AA51F6CD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft Manifest number: EB Signing time: Sat 24 Oct 2026 13:25:49 +0000 Manifest this update: Sat 24 Oct 2026 13:20:49 +0000 Manifest next update: Sun 25 Oct 2026 17:00:49 +0000 Files and hashes: 1: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=) 2: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY=) 3: 3130332e3132352e31322e302f32342d3234203d3e20313533373435.roa (hash: Uj+9XNe6xEO+HPjQd/AjmVCUPxHpMHz4SrblToe4lBw=) 4: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=) 5: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl (hash: F/LrmCRq4GQEfxvINeMB6c3xP9u7FS2RF1cUvx0tmvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9a:f2:cc:73:93:c1:4c:5a:96:73:0f:63:e1:1d:6a:a5:1f:6c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Oct 24 13:20:49 2026 GMT Not After : Oct 25 17:00:49 2026 GMT Subject: CN=8001866E3FB4A3D3CCE2217974C9ED1B508CB26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:0c:94:39:34:13:80:a0:83:d0:be:b9:df: 5a:71:37:08:84:71:ee:8c:43:7d:d4:ac:b4:64:0f: 1e:cd:ac:9d:54:ca:c7:39:84:4a:01:fa:51:c2:45: fa:f8:ee:71:de:bf:19:59:32:3a:c3:37:f4:71:04: be:e6:f6:b9:70:f8:a7:87:9d:84:cb:9d:84:0f:9c: 97:af:ab:9c:97:5c:57:4b:ff:9d:72:b1:4e:19:ad: 3e:62:78:d5:b8:73:fb:ef:a4:3a:93:e6:ef:da:ea: 9c:b1:6f:6b:b1:5c:9a:a5:1e:3a:5f:63:cd:26:84: a6:14:f7:81:ed:12:f1:a7:8e:63:8d:88:ae:62:db: 24:7c:5e:68:3e:0b:34:1a:58:03:6f:b5:d9:72:ef: 5c:c2:f0:ad:cc:fb:92:fc:97:9d:53:6b:40:4d:f1: ae:55:83:9a:5c:5f:b6:2f:7b:be:82:01:6f:25:be: 0b:c7:2a:68:95:9a:bf:12:27:cb:b8:a8:9f:89:b6: 33:a1:84:6a:f0:40:9f:87:7b:5b:f0:0d:6c:ad:47: e6:ba:ca:bb:20:b0:d7:6f:8c:de:f8:8f:81:b6:89: 80:14:1a:62:19:ab:c0:d3:83:f5:37:e5:65:30:61: 51:04:70:66:34:44:55:18:cf:d1:f7:83:0e:ae:77: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:86:6E:3F:B4:A3:D3:CC:E2:21:79:74:C9:ED:1B:50:8C:B2:6A X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:05:28:da:7d:32:32:87:27:91:4e:7e:3a:03:94:a9:e8:60: 5a:95:99:f2:7f:e0:45:4f:97:a2:89:16:a1:bc:d4:ec:bd:d1: 71:15:23:83:89:e9:f9:01:f3:71:a6:df:a3:07:2a:79:fc:08: f7:be:72:6e:f1:23:d7:94:f4:0a:24:d5:fa:ed:d2:b9:10:34: 4c:7e:79:c6:21:33:51:72:ee:d7:1e:7b:ac:8d:1b:23:38:6b: b7:f4:76:a3:97:25:8f:1f:5d:04:ab:65:b4:86:59:24:2b:87: f9:7d:02:96:c8:02:c6:b5:8d:64:40:89:92:df:76:7b:b3:79: e8:f2:c9:71:9c:27:e4:f8:bd:71:42:9b:68:cc:19:ab:64:af: 5e:6e:b2:47:ff:5d:83:9c:ef:cf:00:04:11:c1:2c:11:47:4c: 5b:e7:69:de:3e:f1:af:15:8b:4a:95:bd:cd:17:7a:66:34:8f: e2:5d:bf:c4:fb:4c:0a:9e:5d:52:82:01:9a:fd:ae:a6:df:33: 56:02:e0:89:a4:ab:25:b7:0b:ef:28:67:3d:31:a1:aa:0f:34: 09:e8:01:83:1f:9c:46:c8:ac:90:55:f0:17:1d:c2:4a:ed:09: 96:1d:6f:fd:e1:1b:89:bc:d7:ef:01:22:da:79:b1:ec:70:69: c9:ba:9a:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpryzHOTwUxalnMPY+EdaqUfbNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjEwMjQxMzIwNDlaFw0yNjEwMjUxNzAwNDlaMDMxMTAvBgNV BAMTKDgwMDE4NjZFM0ZCNEEzRDNDQ0UyMjE3OTc0QzlFRDFCNTA4Q0IyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVAyUOTQTgKCD0L6531pxNwiE ce6MQ33UrLRkDx7NrJ1Uysc5hEoB+lHCRfr47nHevxlZMjrDN/RxBL7m9rlw+KeH nYTLnYQPnJevq5yXXFdL/51ysU4ZrT5ieNW4c/vvpDqT5u/a6pyxb2uxXJqlHjpf Y80mhKYU94HtEvGnjmONiK5i2yR8Xmg+CzQaWANvtdly71zC8K3M+5L8l51Ta0BN 8a5Vg5pcX7Yve76CAW8lvgvHKmiVmr8SJ8u4qJ+JtjOhhGrwQJ+He1vwDWytR+a6 yrsgsNdvjN74j4G2iYAUGmIZq8DTg/U35WUwYVEEcGY0RFUYz9H3gw6ud0lZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgAGGbj+0o9PM4iF5dMntG1CMsmowHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5 QzVFMjJBQjgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEFKNp9MjKHJ5FOfjoDlKnoYFqVmfJ/4EVP l6KJFqG81Oy90XEVI4OJ6fkB83Gm36MHKnn8CPe+cm7xI9eU9Aok1frt0rkQNEx+ ecYhM1Fy7tcee6yNGyM4a7f0dqOXJY8fXQSrZbSGWSQrh/l9ApbIAsa1jWRAiZLf dnuzeejyyXGcJ+T4vXFCm2jMGatkr15uskf/XYOc788ABBHBLBFHTFvnad4+8a8V i0qVvc0XemY0j+Jdv8T7TAqeXVKCAZr9rqbfM1YC4ImkqyW3C+8oZz0xoaoPNAno AYMfnEbIrJBV8BcdwkrtCZYdb/3hG4m81+8BItp5sexwacm6mvg= -----END CERTIFICATE-----Generated at Sat Oct 24 20:40:35 2026 by rpki-client