$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft (raw, json) Hash identifier: 7ixLtfns0sW1egAzeZGop7wqRLCQUgGSNh+YzsqOduo= Subject key identifier: DF:E6:4D:67:00:FB:75:0A:85:D5:ED:2C:CE:C9:9E:DF:D3:8F:7A:F8 Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 3B7CABE88F09296FA7B18E3F7B6AA9C7C2FC3AB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft Manifest number: E9 Signing time: Thu 22 Oct 2026 22:11:17 +0000 Manifest this update: Thu 22 Oct 2026 22:06:17 +0000 Manifest next update: Sat 24 Oct 2026 01:43:17 +0000 Files and hashes: 1: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=) 2: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY=) 3: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl (hash: eqx9zu6d90FmV7NPC0Ssp0ojZOJQYr+k1MzBIhKeMpk=) 4: 3130332e3132352e31322e302f32342d3234203d3e20313533373435.roa (hash: Uj+9XNe6xEO+HPjQd/AjmVCUPxHpMHz4SrblToe4lBw=) 5: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 13:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7c:ab:e8:8f:09:29:6f:a7:b1:8e:3f:7b:6a:a9:c7:c2:fc:3a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Oct 22 22:06:17 2026 GMT Not After : Oct 24 01:43:17 2026 GMT Subject: CN=DFE64D6700FB750A85D5ED2CCEC99EDFD38F7AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:a7:2c:6c:16:10:62:3a:0e:cc:86:e7:7b: 5c:06:72:ae:bc:b6:c0:af:a9:83:a6:2a:ab:03:81: d7:1f:9e:28:72:b1:79:0e:b6:a8:ff:a4:51:d0:30: a7:8c:b8:ed:f2:77:6a:cb:3d:c6:fc:05:b7:ae:4e: 18:31:fe:17:1d:00:bd:22:de:d3:82:47:d0:14:9a: f6:5d:d4:d0:53:3e:8e:53:c2:48:b6:d9:39:dc:9d: dc:26:6a:95:aa:2a:e5:bb:67:dc:7b:23:46:ff:cb: 1b:3c:0a:ca:b5:55:65:fb:cb:fb:8f:e3:97:72:0a: 40:0d:d1:5d:23:19:8a:5e:b7:ba:1a:f6:3d:fa:52: dc:c5:47:f1:4e:59:8e:d7:2a:fa:31:68:6e:55:69: 27:17:64:6b:ca:d0:ac:f7:0b:0e:d6:f1:4c:ea:dc: 39:d9:18:af:f7:35:5c:7f:8d:5f:f1:dd:bd:95:76: f8:c3:f5:b4:99:88:7d:3a:4f:b0:1a:8e:f7:c1:42: 45:7b:51:be:39:83:01:c3:94:14:c5:3b:b6:90:f7: 93:7f:3f:fd:36:ee:3d:10:6e:76:14:26:d2:1d:7c: 18:88:09:a4:1a:27:96:56:7f:d7:4a:1a:c0:69:3f: 86:39:31:eb:1b:5c:2e:98:85:07:5a:a2:54:b4:4c: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E6:4D:67:00:FB:75:0A:85:D5:ED:2C:CE:C9:9E:DF:D3:8F:7A:F8 X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:23:34:1e:ca:39:60:09:53:74:d8:2c:d5:ab:21:7e:c7:ca: a8:12:7f:36:31:b0:ce:da:92:99:13:8a:a5:c9:8c:20:d8:56: 1b:33:ca:72:df:31:5e:e0:dd:63:a9:00:fa:ff:9b:ec:e6:0d: 5f:f1:0d:54:a1:1c:b4:e6:a7:3e:df:10:14:11:76:e0:2f:d4: a1:06:01:12:d9:b3:0a:6c:6c:fe:65:a6:9e:3d:1c:c2:52:d0: a3:56:2f:f0:6c:0e:b2:7e:8a:f1:e9:7e:a8:6f:ee:02:b1:04: e6:31:9c:c7:c4:73:b7:9b:1f:3e:22:f7:62:ea:d4:f0:ce:b9: 8e:ca:a7:5f:e6:b5:b7:1f:ec:e5:cd:38:cc:61:70:d3:02:43: 6a:01:bd:f9:18:ad:36:26:90:f4:54:02:75:5e:0a:32:fd:fc: a2:2e:be:55:e5:1d:f0:4a:c5:8b:2f:3c:e7:f4:aa:c3:de:2d: 4e:7a:cf:d6:31:da:46:fe:1a:44:74:7b:a5:04:aa:d9:35:2e: 21:6c:0e:2d:cb:75:5b:57:fe:13:e9:bd:8b:a3:fd:c2:cf:a1: 6b:39:ee:43:ea:3f:01:f3:b3:fc:97:72:c9:15:1f:a9:5d:4c: 8d:9a:f9:e8:72:c6:5a:ef:48:d1:ec:ef:6d:0e:0c:bd:27:5e: 21:b5:43:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3yr6I8JKW+nsY4/e2qpx8L8OrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjEwMjIyMjA2MTdaFw0yNjEwMjQwMTQzMTdaMDMxMTAvBgNV BAMTKERGRTY0RDY3MDBGQjc1MEE4NUQ1RUQyQ0NFQzk5RURGRDM4RjdBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0acsbBYQYjoOzIbne1wGcq68 tsCvqYOmKqsDgdcfnihysXkOtqj/pFHQMKeMuO3yd2rLPcb8BbeuThgx/hcdAL0i 3tOCR9AUmvZd1NBTPo5Twki22TncndwmapWqKuW7Z9x7I0b/yxs8Csq1VWX7y/uP 45dyCkAN0V0jGYpet7oa9j36UtzFR/FOWY7XKvoxaG5VaScXZGvK0Kz3Cw7W8Uzq 3DnZGK/3NVx/jV/x3b2VdvjD9bSZiH06T7AajvfBQkV7Ub45gwHDlBTFO7aQ95N/ P/027j0QbnYUJtIdfBiICaQaJ5ZWf9dKGsBpP4Y5MesbXC6YhQdaolS0TL+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3+ZNZwD7dQqF1e0szsme39OPevgwHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5 QzVFMjJBQjgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsjNB7KOWAJU3TYLNWrIX7HyqgSfzYxsM7a kpkTiqXJjCDYVhszynLfMV7g3WOpAPr/m+zmDV/xDVShHLTmpz7fEBQRduAv1KEG ARLZswpsbP5lpp49HMJS0KNWL/BsDrJ+ivHpfqhv7gKxBOYxnMfEc7ebHz4i92Lq 1PDOuY7Kp1/mtbcf7OXNOMxhcNMCQ2oBvfkYrTYmkPRUAnVeCjL9/KIuvlXlHfBK xYsvPOf0qsPeLU56z9Yx2kb+GkR0e6UEqtk1LiFsDi3LdVtX/hPpvYuj/cLPoWs5 7kPqPwHzs/yXcskVH6ldTI2a+ehyxlrvSNHs720ODL0nXiG1Q10= -----END CERTIFICATE-----Generated at Fri Oct 23 02:25:29 2026 by rpki-client