$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft File: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft (raw, json) Hash identifier: jWYzH3Gfb7tFKutqVUBKYj3SPcv+7ECkUaXoaC8yTwY= Subject key identifier: 3C:0A:36:C0:24:D3:07:0F:19:CD:E2:7A:34:11:BA:79:D9:4C:EA:88 Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Certificate serial: 3BC3005491176D458BBBC95AF839C48D41B184F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft Manifest number: ED Signing time: Sun 25 Oct 2026 10:14:20 +0000 Manifest this update: Sun 25 Oct 2026 10:09:20 +0000 Manifest next update: Mon 26 Oct 2026 11:04:20 +0000 Files and hashes: 1: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl (hash: qUCMQKjD/KMLu080HyTtaU/Mt2N+SGEJujmMCCZDZP4=) 2: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: bIsAPyP9rDpPX3/Ob3Qv6l0T0cqP2nXkNSsYJzMdy0g=) 3: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=) 4: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: 2cV6nPzmY4kD2CJExVdWuMSGfjJCPD1xihnYeBD8ieA=) 5: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c3:00:54:91:17:6d:45:8b:bb:c9:5a:f8:39:c4:8d:41:b1:84:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Validity Not Before: Oct 25 10:09:20 2026 GMT Not After : Oct 26 11:04:20 2026 GMT Subject: CN=3C0A36C024D3070F19CDE27A3411BA79D94CEA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:34:2b:c4:d6:49:fd:47:88:16:c6:53:e6:be: 71:89:79:34:d9:ec:59:c2:f1:27:f6:a8:4e:c9:6b: 48:cf:30:a9:b8:fb:7e:63:75:34:61:4e:0f:e2:67: 20:e0:8c:2e:3a:84:eb:e1:ed:72:be:18:83:e0:01: 15:00:ed:f1:73:cf:c1:5b:97:b6:83:51:9e:3f:ff: 36:c4:9c:75:ba:94:32:4c:db:b6:d0:48:50:7f:a4: 9c:f0:50:3c:77:52:31:f7:79:e1:3f:bb:9e:38:cd: c2:2d:38:f8:c1:8d:ac:16:4e:01:8a:5b:ee:99:85: dc:31:b6:ee:f1:1e:b2:05:95:3a:fc:99:d4:c3:f6: 63:24:11:8c:e9:50:ac:cd:ae:43:81:48:fc:fc:e7: ee:e0:1d:11:0a:fa:90:0b:b4:ce:ea:1a:a3:18:e2: 68:31:e1:c6:2c:0c:28:4a:53:fe:2e:f0:d6:e0:44: 0a:64:01:18:a3:4e:e0:be:6f:ee:21:58:27:0a:0c: e1:45:bc:5d:f3:f0:45:63:b3:69:39:b8:d3:5e:71: 0e:89:7a:11:2a:6c:9b:07:bf:17:c8:20:3d:ad:a0: 27:df:75:44:6d:de:4f:1a:27:07:c5:b2:8f:17:f0: ab:c7:0c:af:44:0a:54:e4:68:37:7d:de:b2:44:7b: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0A:36:C0:24:D3:07:0F:19:CD:E2:7A:34:11:BA:79:D9:4C:EA:88 X509v3 Authority Key Identifier: keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:cf:0c:bd:93:17:9f:c0:3a:74:53:d8:bd:b0:dd:e0:d7:02: 06:da:79:2e:64:78:5f:8d:89:e9:7c:0f:fb:78:9b:63:43:69: 9a:8a:e2:ac:47:60:85:27:9a:df:cc:0b:f1:63:84:2a:66:1c: d6:02:82:cc:fc:2e:3f:74:1e:cc:d2:01:e2:a7:4d:9b:fb:88: aa:aa:25:f0:34:6c:5c:26:70:6f:13:83:be:9b:72:6a:b6:01: b2:d0:c8:e9:8f:f8:17:b6:12:46:c0:59:1a:2c:b6:59:af:66: 67:8f:88:cc:70:2c:44:83:32:c3:5f:cf:a5:55:8d:3a:50:2c: e3:fe:41:49:9b:86:30:32:90:fd:92:55:0b:8a:27:b5:06:05: 7c:66:08:28:af:9f:df:2e:f8:e9:64:d4:27:df:dd:0c:ed:f0: 1b:08:3c:16:7b:45:d5:d3:86:92:70:1a:82:4b:9b:d9:4c:9d: 42:d8:fe:55:7b:57:17:a7:32:81:e9:f5:6e:83:ec:1d:7c:fe: 67:99:3e:31:d4:7f:34:d7:3b:5d:73:94:fe:f7:4d:10:8f:75: 37:36:d4:88:5e:07:ef:b1:3c:ad:12:ec:94:91:3b:63:38:74: b7:75:06:78:57:0f:ba:a5:20:c9:7e:b2:73:68:7e:51:ed:61: 40:53:b1:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8MAVJEXbUWLu8la+DnEjUGxhPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD NjA2M0ZCNTAeFw0yNjEwMjUxMDA5MjBaFw0yNjEwMjYxMTA0MjBaMDMxMTAvBgNV BAMTKDNDMEEzNkMwMjREMzA3MEYxOUNERTI3QTM0MTFCQTc5RDk0Q0VBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNCvE1kn9R4gWxlPmvnGJeTTZ 7FnC8Sf2qE7Ja0jPMKm4+35jdTRhTg/iZyDgjC46hOvh7XK+GIPgARUA7fFzz8Fb l7aDUZ4//zbEnHW6lDJM27bQSFB/pJzwUDx3UjH3eeE/u544zcItOPjBjawWTgGK W+6Zhdwxtu7xHrIFlTr8mdTD9mMkEYzpUKzNrkOBSPz85+7gHREK+pALtM7qGqMY 4mgx4cYsDChKU/4u8NbgRApkARijTuC+b+4hWCcKDOFFvF3z8EVjs2k5uNNecQ6J ehEqbJsHvxfIID2toCffdURt3k8aJwfFso8X8KvHDK9EClTkaDd93rJEe+jfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPAo2wCTTBw8ZzeJ6NBG6edlM6ogwHwYDVR0j BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz RkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2 QTdDNjA2M0ZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPPDL2TF5/AOnRT2L2w3eDXAgbaeS5keF+N iel8D/t4m2NDaZqK4qxHYIUnmt/MC/FjhCpmHNYCgsz8Lj90HszSAeKnTZv7iKqq JfA0bFwmcG8Tg76bcmq2AbLQyOmP+Be2EkbAWRostlmvZmePiMxwLESDMsNfz6VV jTpQLOP+QUmbhjAykP2SVQuKJ7UGBXxmCCivn98u+Olk1Cff3Qzt8BsIPBZ7RdXT hpJwGoJLm9lMnULY/lV7VxenMoHp9W6D7B18/meZPjHUfzTXO11zlP73TRCPdTc2 1IheB++xPK0S7JSRO2M4dLd1BnhXD7qlIMl+snNoflHtYUBTsRg= -----END CERTIFICATE-----Generated at Sun Oct 25 19:02:47 2026 by rpki-client