$ rpki-client -vvvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft File: 5B4C702133C87BA4BC2E55E712270969ABE45A51.mft (raw, json) Hash identifier: HX4Sa6QJJQlEDrSzZ6cUwZBWPBvkrKhJoFRZsTYBh5c= Subject key identifier: F6:50:3E:CE:88:00:37:65:7F:13:90:00:0F:69:E2:F1:FD:2F:8A:D7 Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Certificate serial: 60833477D10E257EF91595739E73BAC413C1BF57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft Manifest number: EB Signing time: Sun 25 Oct 2026 03:13:00 +0000 Manifest this update: Sun 25 Oct 2026 03:08:00 +0000 Manifest next update: Mon 26 Oct 2026 06:38:00 +0000 Files and hashes: 1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: sLHnpPIHUxO29WSb75hs0N2E96R8Wj78zUMN4pLDvZ4=) 2: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=) 3: 5B4C702133C87BA4BC2E55E712270969ABE45A51.crl (hash: eTZbTdpPRQssG8ElejrEWsL7amElyfIv4t3ZAS7t01o=) 4: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: Vkq3URZ932rcZk4u78E4tOq6/4bheSUZYPRHTmwP30Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:83:34:77:d1:0e:25:7e:f9:15:95:73:9e:73:ba:c4:13:c1:bf:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Validity Not Before: Oct 25 03:08:00 2026 GMT Not After : Oct 26 06:38:00 2026 GMT Subject: CN=F6503ECE880037657F1390000F69E2F1FD2F8AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:d5:9b:88:db:e1:f7:0f:4a:60:9d:f7:26: 01:25:5c:a2:8c:db:bd:4f:37:dd:01:85:47:a3:4b: cb:da:96:01:14:08:e5:ca:f9:02:34:91:65:61:9a: 7b:1b:50:78:7a:5d:8c:d8:ff:86:be:35:7c:fd:94: 87:a0:b6:21:21:7b:c6:92:1f:88:10:8c:b8:86:a1: 57:4a:29:e1:6b:0b:11:d6:fa:0f:aa:6c:ec:ea:5c: b1:a0:e9:b8:15:70:59:0c:19:d8:e1:d3:0a:01:93: ac:ea:b3:ac:58:88:81:da:e2:5b:07:25:41:dd:dc: 3c:63:34:2c:03:4a:da:50:2a:12:7c:da:65:9f:bf: 26:3b:74:a1:76:cc:62:5f:69:b4:ba:61:e9:7b:d1: 47:c4:56:73:9e:d0:c4:ae:02:03:58:c8:92:ea:cd: ce:b6:13:ad:39:2d:4e:6f:5f:f1:bf:3d:fe:a1:c0: 32:6a:a3:41:61:ae:a1:08:f8:0f:c9:6b:b9:65:fc: 27:8b:07:c3:a2:6a:29:02:cd:1e:d7:dd:36:cc:b9: 33:0f:93:4e:b0:23:f6:28:4f:80:58:80:ce:b0:02: 5e:23:fa:86:aa:fb:75:f5:95:c9:5a:20:13:2d:a6: d8:7b:b9:bb:48:c3:35:e3:45:6b:45:c5:e5:c7:f6: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:50:3E:CE:88:00:37:65:7F:13:90:00:0F:69:E2:F1:FD:2F:8A:D7 X509v3 Authority Key Identifier: keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d6:66:f6:01:4f:1e:09:6c:b2:1d:db:77:2b:ca:2f:52:4a: b3:b8:6e:36:0d:12:b5:f4:00:01:40:c8:dc:30:da:9a:e7:4d: f0:de:5c:e5:54:ee:46:ef:71:a8:29:25:c0:ee:2d:e3:b3:ef: 2b:02:23:f1:27:f7:a3:16:a7:08:65:c3:6b:8c:9f:cc:ee:6a: 19:70:e8:9b:5d:19:31:2c:4d:9c:9c:66:ef:83:d2:a3:56:30: 18:97:34:29:20:50:28:87:6f:23:b9:ae:6a:4f:95:e4:c9:50: 0b:c2:db:9e:1c:25:79:d4:26:38:88:40:f9:87:51:be:29:fb: 80:7f:a4:32:a4:44:57:08:df:f2:d4:ab:5e:67:e4:5f:85:65: ff:4d:8b:fd:1e:af:9f:24:cf:5d:5e:0f:25:e4:b7:e6:03:82: d8:48:8e:66:8f:cb:77:1f:d6:40:99:4c:a8:60:a8:17:ab:2c: 67:80:c2:d2:e2:24:3d:46:01:88:d6:b8:18:0a:e4:57:c7:74: c0:bf:20:c9:9c:ab:af:5e:7e:6b:2c:35:e2:9e:db:a4:73:81: 23:88:db:87:33:37:a1:ee:1c:36:ab:ec:a5:19:12:24:59:09: e6:7b:6b:f4:45:f7:15:d5:84:01:59:03:0b:e2:df:d1:8e:85: e2:76:a6:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIM0d9EOJX75FZVznnO6xBPBv1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlB QkU0NUE1MTAeFw0yNjEwMjUwMzA4MDBaFw0yNjEwMjYwNjM4MDBaMDMxMTAvBgNV BAMTKEY2NTAzRUNFODgwMDM3NjU3RjEzOTAwMDBGNjlFMkYxRkQyRjhBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWNWbiNvh9w9KYJ33JgElXKKM 271PN90BhUejS8valgEUCOXK+QI0kWVhmnsbUHh6XYzY/4a+NXz9lIegtiEhe8aS H4gQjLiGoVdKKeFrCxHW+g+qbOzqXLGg6bgVcFkMGdjh0woBk6zqs6xYiIHa4lsH JUHd3DxjNCwDStpQKhJ82mWfvyY7dKF2zGJfabS6Yel70UfEVnOe0MSuAgNYyJLq zc62E605LU5vX/G/Pf6hwDJqo0FhrqEI+A/Ja7ll/CeLB8OiaikCzR7X3TbMuTMP k06wI/YoT4BYgM6wAl4j+oaq+3X1lclaIBMtpth7ubtIwzXjRWtFxeXH9scNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9lA+zogAN2V/E5AAD2ni8f0vitcwHwYDVR0j BBgwFoAUW0xwITPIe6S8LlXnEicJaavkWlEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0ZTA0ZmEtNzE4OC00ZjRmLTgxYmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEz M0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlBQkU0NUE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QjRDNzAyMTMzQzg3QkE0QkMyRTU1RTcxMjI3MDk2OUFCRTQ1 QTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5 NjlBQkU0NUE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXWZvYBTx4JbLId23cryi9SSrO4bjYNErX0 AAFAyNww2prnTfDeXOVU7kbvcagpJcDuLeOz7ysCI/En96MWpwhlw2uMn8zuahlw 6JtdGTEsTZycZu+D0qNWMBiXNCkgUCiHbyO5rmpPleTJUAvC254cJXnUJjiIQPmH Ub4p+4B/pDKkRFcI3/LUq15n5F+FZf9Ni/0er58kz11eDyXkt+YDgthIjmaPy3cf 1kCZTKhgqBerLGeAwtLiJD1GAYjWuBgK5FfHdMC/IMmcq69efmssNeKe26RzgSOI 24czN6HuHDar7KUZEiRZCeZ7a/RF9xXVhAFZAwvi39GOheJ2pkc= -----END CERTIFICATE-----Generated at Sun Oct 25 23:15:25 2026 by rpki-client