$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft File: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft (raw, json) Hash identifier: JYTOebKF+gTtxmYjlazW2jfsGvfdb+FA0NkHN6ucSmg= Subject key identifier: 03:33:86:79:61:CB:DE:78:1F:34:C6:0A:6A:ED:0A:9F:26:88:25:96 Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED Certificate issuer: /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Certificate serial: 292C166E332324331D1ACD72E3A9099A9C47BF89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft Manifest number: ED Signing time: Sun 25 Oct 2026 07:10:17 +0000 Manifest this update: Sun 25 Oct 2026 07:05:17 +0000 Manifest next update: Mon 26 Oct 2026 07:10:17 +0000 Files and hashes: 1: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=) 2: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl (hash: oPl4g62CXYqSs++V10aShB9MB+BI4bGeGmGJP91jMAA=) 3: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: 7rg8BQPn02cWQCL5uHjDLR1BDjr+8xgU8r0m19XIL1o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2c:16:6e:33:23:24:33:1d:1a:cd:72:e3:a9:09:9a:9c:47:bf:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Validity Not Before: Oct 25 07:05:17 2026 GMT Not After : Oct 26 07:10:17 2026 GMT Subject: CN=0333867961CBDE781F34C60A6AED0A9F26882596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:88:0c:4b:22:a4:95:7c:cf:d8:ff:f6:ab: a2:5c:4b:bc:50:3d:7f:c7:23:e5:6d:4f:59:eb:f4: 57:40:c1:ef:38:33:6a:b1:80:65:87:8f:c2:b3:e2: 01:04:1d:d2:e3:14:a4:5e:ef:4a:76:15:35:73:39: 81:eb:f9:f1:15:49:35:a7:c5:b4:c5:81:eb:2e:23: f0:5a:03:40:29:68:cc:66:f9:bd:fe:ed:90:2b:fe: b8:11:d5:76:5b:92:0e:e2:78:3f:4f:1d:b3:11:d2: a7:24:ec:a1:71:de:b8:29:77:9e:f3:e7:1d:e4:d8: db:11:53:7d:80:31:9c:87:bc:5a:ff:8f:08:89:1b: 6b:3f:2f:9a:e0:3f:da:5d:53:24:32:21:eb:b2:d1: 6c:ff:13:0c:8e:9f:aa:43:54:dd:47:c7:86:f1:cb: fd:4a:01:a5:fa:f2:81:53:9a:2d:cb:be:7b:29:e3: 3f:47:04:aa:e2:06:ea:16:a2:e1:17:3a:a1:7a:b5: b7:3d:a6:0f:01:35:76:f9:ba:f4:50:92:ae:9e:d3: e5:c7:bb:be:9a:44:1c:ef:94:4a:d5:a8:44:aa:07: b6:a2:66:0a:ba:f8:f2:cd:30:fe:33:ee:81:5f:d4: 55:51:35:c4:a9:46:c9:be:80:03:b1:a7:20:43:87: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:33:86:79:61:CB:DE:78:1F:34:C6:0A:6A:ED:0A:9F:26:88:25:96 X509v3 Authority Key Identifier: keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0d:e7:60:11:75:68:07:43:b8:93:90:91:af:7c:89:00:cf: 87:3e:85:8a:e8:68:ca:60:65:5a:0d:bd:68:5e:3c:b2:91:01: b8:50:df:00:aa:9a:95:8b:83:c1:ab:95:f0:19:7e:dc:86:f7: da:90:32:31:f8:6c:79:cb:0d:30:6f:15:45:3c:fa:99:0d:99: 84:bb:57:f9:50:21:ce:de:9d:80:ed:fa:73:f2:c3:84:3d:15: dc:e0:75:8b:1e:51:92:e5:f4:0c:56:22:89:11:7f:88:e5:f5: d2:01:c3:81:f8:95:31:d1:49:21:c2:60:0b:75:f0:01:90:cc: 2e:91:cf:10:12:cc:b6:bc:7a:88:fc:c8:3f:71:97:b1:6f:fc: e3:93:69:e1:56:ac:97:df:48:41:27:4b:d7:51:03:de:57:46: 26:2f:84:cc:75:4a:ff:39:83:6f:3b:1d:e7:79:6d:74:5b:69: e8:39:5b:e5:15:44:90:d8:3e:34:ce:65:02:a0:9c:9e:6d:d1: 61:a4:a3:67:e0:9b:f1:8c:63:49:c9:13:1b:ea:d8:02:98:46: 8e:25:d8:64:8d:63:9d:ea:6c:b8:f7:53:5a:8b:eb:73:84:92: c6:98:86:3d:e3:db:0c:f5:fd:40:c8:7b:a9:e1:44:cd:4c:8e: 60:43:5d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSwWbjMjJDMdGs1y46kJmpxHv4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0 M0I5NjhFRDAeFw0yNjEwMjUwNzA1MTdaFw0yNjEwMjYwNzEwMTdaMDMxMTAvBgNV BAMTKDAzMzM4Njc5NjFDQkRFNzgxRjM0QzYwQTZBRUQwQTlGMjY4ODI1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNIgMSyKklXzP2P/2q6JcS7xQ PX/HI+VtT1nr9FdAwe84M2qxgGWHj8Kz4gEEHdLjFKRe70p2FTVzOYHr+fEVSTWn xbTFgesuI/BaA0ApaMxm+b3+7ZAr/rgR1XZbkg7ieD9PHbMR0qck7KFx3rgpd57z 5x3k2NsRU32AMZyHvFr/jwiJG2s/L5rgP9pdUyQyIeuy0Wz/EwyOn6pDVN1Hx4bx y/1KAaX68oFTmi3Lvnsp4z9HBKriBuoWouEXOqF6tbc9pg8BNXb5uvRQkq6e0+XH u76aRBzvlErVqESqB7aiZgq6+PLNMP4z7oFf1FVRNcSpRsm+gAOxpyBDhyLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzOGeWHL3ngfNMYKau0KnyaIJZYwHwYDVR0j BBgwFoAUW3g50/ovvDdFIGVrDr23h0O5aO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjljNTMyN2YtMTBmZC00Y2YwLTg1MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNG QTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0M0I5NjhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjc4MzlEM0ZBMkZCQzM3NDUyMDY1NkIwRUJEQjc4NzQzQjk2 OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3 ODc0M0I5NjhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEN52ARdWgHQ7iTkJGvfIkAz4c+hYroaMpg ZVoNvWhePLKRAbhQ3wCqmpWLg8GrlfAZftyG99qQMjH4bHnLDTBvFUU8+pkNmYS7 V/lQIc7enYDt+nPyw4Q9FdzgdYseUZLl9AxWIokRf4jl9dIBw4H4lTHRSSHCYAt1 8AGQzC6RzxASzLa8eoj8yD9xl7Fv/OOTaeFWrJffSEEnS9dRA95XRiYvhMx1Sv85 g287Hed5bXRbaeg5W+UVRJDYPjTOZQKgnJ5t0WGko2fgm/GMY0nJExvq2AKYRo4l 2GSNY53qbLj3U1qL63OEksaYhj3j2wz1/UDIe6nhRM1MjmBDXao= -----END CERTIFICATE-----Generated at Mon Oct 26 00:37:22 2026 by rpki-client