$ rpki-client -vvvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: UJ3d+7iHUW7JhuXyTtlqpZc9mEGOjtbqq+Ce0C3qBA8= Subject key identifier: E1:DB:A4:8A:A2:94:1E:0D:C3:61:E3:EB:64:09:B1:29:F6:15:0D:D4 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 1C07BAEE2E983F3DC651B9216D9087C30814C368 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: EC Signing time: Mon 26 Oct 2026 10:09:50 +0000 Manifest this update: Mon 26 Oct 2026 10:04:50 +0000 Manifest next update: Tue 27 Oct 2026 10:19:50 +0000 Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) 2: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: igsjTaOwnAF2Ogn7gqrtZlsdD7JkzSmhCtDZFI3KX3o=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 10:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:07:ba:ee:2e:98:3f:3d:c6:51:b9:21:6d:90:87:c3:08:14:c3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: Oct 26 10:04:50 2026 GMT Not After : Oct 27 10:19:50 2026 GMT Subject: CN=E1DBA48AA2941E0DC361E3EB6409B129F6150DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:3f:85:5c:d9:cb:ba:2f:e7:a3:a7:d0:25: ab:23:16:7f:7a:88:68:01:5d:ca:b1:bc:c1:70:94: cb:a0:3f:b7:a4:c1:f7:8e:73:af:ec:61:33:77:71: 6f:37:3e:a3:0f:3d:ac:6f:bd:a4:d8:37:d9:30:40: 05:60:f8:26:86:57:92:05:65:67:09:4c:2e:e8:49: d5:f9:b0:d7:34:50:85:fd:cd:89:77:d0:d2:e3:ff: af:4a:0b:32:77:ec:8a:26:47:cf:b7:65:57:d4:e2: 17:19:65:b4:bb:34:92:0d:cb:57:9c:27:c2:49:d1: dc:8b:14:f9:4c:4d:71:44:48:dc:5e:06:fd:ff:c8: 10:8b:29:24:3f:a4:85:c2:42:9a:a9:dd:df:8d:64: 53:fc:cb:48:9d:98:6d:7a:69:2c:0e:32:6a:bd:f8: 45:b1:dd:de:0e:21:a7:a2:37:cb:c4:cd:96:2b:1d: 1d:1e:29:0c:6b:b8:d1:9e:59:ad:7b:ec:e2:48:7a: 6c:e7:58:71:fc:75:63:54:68:72:f6:00:d5:ec:db: c6:70:6f:0b:10:27:df:43:41:35:8f:48:33:b3:0f: d0:c3:f8:4a:eb:20:b9:a8:e6:16:70:a4:ce:7b:bf: 8d:cb:f1:ff:c0:ae:1f:69:df:a1:01:e6:31:45:e6: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:A4:8A:A2:94:1E:0D:C3:61:E3:EB:64:09:B1:29:F6:15:0D:D4 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e6:37:0b:32:84:d5:64:19:60:cd:ca:96:b9:29:02:fe:e7: e7:10:a7:c6:68:1b:82:19:8f:f8:6e:89:9a:3d:3d:af:c2:9c: 36:26:fd:2a:b2:ea:88:af:19:5e:6e:36:fa:3b:72:ec:da:a8: f2:67:16:d2:b5:d5:9a:be:c2:2e:92:0f:96:12:03:1d:63:19: 19:b8:0e:f8:63:87:a7:c1:89:d2:fd:5c:07:79:ea:db:a3:e6: b4:5e:3e:d9:ed:2e:a6:18:7a:d6:5b:e9:5d:13:9e:be:f2:d7: 93:76:ad:4f:9c:09:cf:60:2b:5f:f5:01:02:4f:8d:bd:95:2a: 75:1e:e9:ad:e5:bc:d5:ce:22:c4:10:aa:69:9b:0d:fe:38:4a: 62:a1:fc:af:c4:de:7c:fc:4d:28:ab:1d:e2:2e:da:38:42:c8: a4:70:85:75:d9:1e:2a:6c:2a:47:82:a8:80:b3:05:48:5b:b4: 88:70:e9:f6:b3:a5:fc:08:75:93:67:2c:b2:ea:a3:95:bb:a7: 8f:f4:7a:b9:c4:22:77:30:e8:4f:a7:af:93:53:bd:b8:8c:19: 27:88:90:50:07:8e:93:22:8c:e9:47:f0:47:08:08:5c:fc:cf: ff:61:16:89:4e:c4:88:57:11:23:d3:2d:1e:ee:41:78:8a:39: 81:9d:89:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHAe67i6YPz3GUbkhbZCHwwgUw2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjEwMjYxMDA0NTBaFw0yNjEwMjcxMDE5NTBaMDMxMTAvBgNV BAMTKEUxREJBNDhBQTI5NDFFMERDMzYxRTNFQjY0MDlCMTI5RjYxNTBERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfD+FXNnLui/no6fQJasjFn96 iGgBXcqxvMFwlMugP7ekwfeOc6/sYTN3cW83PqMPPaxvvaTYN9kwQAVg+CaGV5IF ZWcJTC7oSdX5sNc0UIX9zYl30NLj/69KCzJ37IomR8+3ZVfU4hcZZbS7NJINy1ec J8JJ0dyLFPlMTXFESNxeBv3/yBCLKSQ/pIXCQpqp3d+NZFP8y0idmG16aSwOMmq9 +EWx3d4OIaeiN8vEzZYrHR0eKQxruNGeWa177OJIemznWHH8dWNUaHL2ANXs28Zw bwsQJ99DQTWPSDOzD9DD+ErrILmo5hZwpM57v43L8f/Arh9p36EB5jFF5kzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4dukiqKUHg3DYePrZAmxKfYVDdQwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXmNwsyhNVkGWDNypa5KQL+5+cQp8ZoG4IZ j/huiZo9Pa/CnDYm/Sqy6oivGV5uNvo7cuzaqPJnFtK11Zq+wi6SD5YSAx1jGRm4 Dvhjh6fBidL9XAd56tuj5rRePtntLqYYetZb6V0Tnr7y15N2rU+cCc9gK1/1AQJP jb2VKnUe6a3lvNXOIsQQqmmbDf44SmKh/K/E3nz8TSirHeIu2jhCyKRwhXXZHips KkeCqICzBUhbtIhw6fazpfwIdZNnLLLqo5W7p4/0ernEIncw6E+nr5NTvbiMGSeI kFAHjpMijOlH8EcICFz8z/9hFolOxIhXESPTLR7uQXiKOYGdifo= -----END CERTIFICATE-----Generated at Mon Oct 26 21:10:53 2026 by rpki-client