$ rpki-client -vvvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: +W9kqbmCtw5EEDwbw5GihvFtMJ+0/rlZ6isqIzfXqgM= Subject key identifier: EA:BB:BB:2C:CE:85:CD:DE:A9:42:91:B2:1A:5E:4E:55:D7:C4:ED:DA Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 6099B13767116E8F7545AB085ED7610BE2B6B811 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: DD Signing time: Thu 15 Oct 2026 13:31:23 +0000 Manifest this update: Thu 15 Oct 2026 13:26:23 +0000 Manifest next update: Fri 16 Oct 2026 17:13:23 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) 2: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: 5AyhzuGQp4YDhdQLyj9tl/mknn+I/VzQDIaPdLJLy6Q=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:99:b1:37:67:11:6e:8f:75:45:ab:08:5e:d7:61:0b:e2:b6:b8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: Oct 15 13:26:23 2026 GMT Not After : Oct 16 17:13:23 2026 GMT Subject: CN=EABBBB2CCE85CDDEA94291B21A5E4E55D7C4EDDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:eb:b3:4a:23:6c:1d:03:ae:0d:90:91:49: 9f:ee:74:52:a5:27:78:7d:2c:cf:a7:50:dc:24:26: 1a:30:51:35:d8:f5:10:61:80:14:a7:69:45:42:d3: 29:c9:2c:db:fc:12:b5:33:ce:3b:41:b0:cf:bd:92: 97:ba:54:4d:9b:39:f1:99:d8:51:2a:7c:b0:1a:99: 79:60:c7:eb:d8:13:15:13:b1:eb:7f:62:74:c0:e9: f2:b3:8e:46:0f:17:2e:b2:28:64:59:39:53:f1:90: cd:8a:e3:e8:55:19:f4:0e:8e:27:5b:b8:e7:8b:6c: e3:ce:ca:8a:8f:67:cf:0c:66:6d:81:2d:dd:ec:2d: fb:4a:30:d5:20:99:57:83:16:41:93:80:6f:ee:20: 70:a1:32:a0:cb:06:29:5d:d9:e9:c9:fa:64:8e:b5: 19:05:54:41:84:6d:73:a1:20:65:4e:a2:f4:77:b1: 59:e7:2f:1c:d5:60:ef:f7:c6:ab:0d:cc:11:60:54: 37:b4:62:0d:b1:94:75:e4:7f:39:43:99:04:bc:31: 91:04:91:5c:f5:a2:0d:32:13:b3:70:02:89:3b:ea: 9c:1e:11:32:4d:ae:5d:d3:f8:19:a9:27:f9:7c:e1: 36:f5:78:d3:97:e6:32:14:1e:94:b0:47:c3:02:9c: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BB:BB:2C:CE:85:CD:DE:A9:42:91:B2:1A:5E:4E:55:D7:C4:ED:DA X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:75:8f:7c:39:62:b7:1f:c5:39:3e:bb:f7:56:0b:12:68:08: 8d:fb:ed:e5:bf:0f:49:d3:36:17:5d:96:40:b0:b9:f6:85:49: 5f:50:fc:9e:f6:15:d2:5f:cc:38:bf:c3:aa:85:cf:fd:66:4b: a2:09:3e:9a:e4:2e:43:f2:42:b9:ee:b1:7a:c9:bc:9e:d1:9c: e2:32:d6:8a:b1:d2:78:fa:0c:2e:de:a6:1f:86:3e:9f:f9:4f: 08:e1:53:87:ef:06:e6:a9:10:53:5f:72:d1:c0:0a:6b:cd:0b: c5:7c:0e:69:5b:5b:b6:e7:d7:30:75:bd:ed:83:68:da:a4:a7: 19:ea:ed:05:04:80:40:df:46:a8:7d:9e:4b:61:0a:51:a2:d8: 0c:02:0b:e1:e0:c3:1d:37:13:7b:cd:e3:9d:a0:88:8a:fd:17: 0f:5f:ba:73:14:bf:b1:a2:f5:d1:4a:c7:b7:4b:45:bf:b2:e2: 9d:fd:e1:f4:3a:79:d9:0d:9d:bb:b2:84:18:ff:7d:58:b6:06: 9b:48:67:2b:72:ac:6c:c4:40:8e:0e:61:e1:85:92:c3:84:9a: 25:11:39:ca:00:7f:84:e2:ee:ca:61:de:dc:ab:66:4f:9e:49: ed:4b:67:17:85:b8:e4:2c:11:b7:7a:fd:3e:8f:e6:72:93:48: 97:21:8b:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJmxN2cRbo91RasIXtdhC+K2uBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjEwMTUxMzI2MjNaFw0yNjEwMTYxNzEzMjNaMDMxMTAvBgNV BAMTKEVBQkJCQjJDQ0U4NUNEREVBOTQyOTFCMjFBNUU0RTU1RDdDNEVEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJzOuzSiNsHQOuDZCRSZ/udFKl J3h9LM+nUNwkJhowUTXY9RBhgBSnaUVC0ynJLNv8ErUzzjtBsM+9kpe6VE2bOfGZ 2FEqfLAamXlgx+vYExUTset/YnTA6fKzjkYPFy6yKGRZOVPxkM2K4+hVGfQOjidb uOeLbOPOyoqPZ88MZm2BLd3sLftKMNUgmVeDFkGTgG/uIHChMqDLBild2enJ+mSO tRkFVEGEbXOhIGVOovR3sVnnLxzVYO/3xqsNzBFgVDe0Yg2xlHXkfzlDmQS8MZEE kVz1og0yE7NwAok76pweETJNrl3T+BmpJ/l84Tb1eNOX5jIUHpSwR8MCnEANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ru7LM6Fzd6pQpGyGl5OVdfE7dowHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANl1j3w5YrcfxTk+u/dWCxJoCI377eW/D0nT NhddlkCwufaFSV9Q/J72FdJfzDi/w6qFz/1mS6IJPprkLkPyQrnusXrJvJ7RnOIy 1oqx0nj6DC7eph+GPp/5TwjhU4fvBuapEFNfctHACmvNC8V8DmlbW7bn1zB1ve2D aNqkpxnq7QUEgEDfRqh9nkthClGi2AwCC+Hgwx03E3vN452giIr9Fw9funMUv7Gi 9dFKx7dLRb+y4p394fQ6edkNnbuyhBj/fVi2BptIZytyrGzEQI4OYeGFksOEmiUR OcoAf4Ti7sph3tyrZk+eSe1LZxeFuOQsEbd6/T6P5nKTSJchixw= -----END CERTIFICATE-----Generated at Thu Oct 15 17:50:53 2026 by rpki-client