$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json) Hash identifier: e6TRBq9Hdke7NuGHUIoucdmdXZUFvq7yZFcor71rUIQ= Subject key identifier: 5D:D9:FA:35:9A:6D:B1:EA:48:DF:1D:3A:71:8E:3D:5D:DC:5E:90:17 Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Certificate serial: 19F0A5438AA1935A23484CBAEC4CE264DC0F7DBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 16:19:13 +0000 Manifest this update: Fri 23 Oct 2026 16:14:13 +0000 Manifest next update: Sat 24 Oct 2026 19:30:13 +0000 Files and hashes: 1: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=) 2: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=) 3: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: IQ9Z7h8/yGBfnj2PnmmPq9UN3W1gSBygvO+asQMm++U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 19:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f0:a5:43:8a:a1:93:5a:23:48:4c:ba:ec:4c:e2:64:dc:0f:7d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Validity Not Before: Oct 23 16:14:13 2026 GMT Not After : Oct 24 19:30:13 2026 GMT Subject: CN=5DD9FA359A6DB1EA48DF1D3A718E3D5DDC5E9017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:5e:62:dc:5b:17:0f:e0:c5:95:dd:f2:b1: 4d:d5:a7:e9:33:a9:20:45:11:46:ff:c1:b2:ee:98: 79:1f:62:f4:4e:b8:69:20:c7:76:9c:ef:e0:32:a8: 0e:2e:6e:d0:8b:8d:a3:b0:6c:2b:02:e7:41:2d:2a: 7f:aa:94:df:84:e3:f6:00:f9:48:6b:73:4f:11:93: 10:c3:2c:6b:84:da:16:73:09:25:8b:52:9d:80:6b: d9:e4:7f:49:ee:80:cb:3c:68:4e:1d:a7:2a:9f:7f: 52:1c:22:56:51:55:a6:ef:c3:29:44:cf:b2:6f:b2: e5:bc:4f:8c:66:3a:00:9b:2c:81:ab:08:54:fb:10: 71:8c:5c:03:bb:21:ce:93:c7:3d:b6:03:87:64:92: a2:4a:52:65:41:06:1f:4b:d6:5a:00:e5:ad:08:1a: 05:84:53:da:dd:33:9e:7f:aa:cb:ba:fb:88:ca:bb: 99:30:8a:2d:77:96:33:f7:dd:91:41:65:00:eb:a9: f8:39:ea:71:d3:1f:91:07:c5:8c:2a:5f:5c:78:9b: f2:ca:fe:cf:9b:83:c6:7c:36:a7:18:04:7a:30:20: ab:c4:a1:65:ee:12:07:74:d9:de:4a:3c:3b:ec:f0: db:51:5f:9f:4e:b7:da:ab:7c:3e:de:e0:29:ea:00: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D9:FA:35:9A:6D:B1:EA:48:DF:1D:3A:71:8E:3D:5D:DC:5E:90:17 X509v3 Authority Key Identifier: keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cf:4b:39:3c:4b:be:b6:41:bc:f7:58:97:2a:d3:cb:0d:4b: 87:23:92:39:95:7b:48:80:d6:2d:ec:11:c5:5b:3c:ae:2b:75: 68:3e:14:72:2b:ed:18:95:73:09:49:c5:fe:05:af:1a:0c:af: 39:52:28:2f:90:89:21:b2:bc:1a:25:1c:07:8d:21:13:42:88: c5:81:3b:98:e1:ea:27:db:ea:05:85:f4:b6:16:03:04:d0:44: d5:14:98:ea:19:07:48:54:fb:fd:fb:46:c0:20:7f:1c:cb:bb: 30:c7:a7:e2:10:1d:5d:4a:1a:62:bc:47:e1:ed:9b:22:97:6a: cf:1f:d7:c3:2c:52:ea:58:7e:ee:91:89:db:d7:58:72:89:35: d3:3a:ad:21:9d:7f:c3:b3:1f:b9:69:19:d9:7c:75:16:6f:59: 0f:e7:38:51:39:95:f2:6c:3d:9a:22:e9:fd:d8:df:13:7f:c4: 42:be:4b:3e:7a:1d:cd:9f:08:58:d1:89:7d:74:cb:0a:da:b9: f1:c2:ca:27:5c:bb:62:74:f8:20:75:65:b4:82:1f:d0:0a:43: 68:51:ea:72:e2:65:6c:9f:4c:7d:c1:1a:fe:94:87:f9:d5:5e: 6b:04:21:21:3d:d2:b5:00:e4:e8:61:83:15:cd:62:3e:d6:0f: 42:51:9e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGfClQ4qhk1ojSEy67EziZNwPfbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYw REJGNDcyOTAeFw0yNjEwMjMxNjE0MTNaFw0yNjEwMjQxOTMwMTNaMDMxMTAvBgNV BAMTKDVERDlGQTM1OUE2REIxRUE0OERGMUQzQTcxOEUzRDVEREM1RTkwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHF5i3FsXD+DFld3ysU3Vp+kz qSBFEUb/wbLumHkfYvROuGkgx3ac7+AyqA4ubtCLjaOwbCsC50EtKn+qlN+E4/YA +Uhrc08RkxDDLGuE2hZzCSWLUp2Aa9nkf0nugMs8aE4dpyqff1IcIlZRVabvwylE z7JvsuW8T4xmOgCbLIGrCFT7EHGMXAO7Ic6Txz22A4dkkqJKUmVBBh9L1loA5a0I GgWEU9rdM55/qsu6+4jKu5kwii13ljP33ZFBZQDrqfg56nHTH5EHxYwqX1x4m/LK /s+bg8Z8NqcYBHowIKvEoWXuEgd02d5KPDvs8NtRX59Ot9qrfD7e4CnqAHHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXdn6NZptsepI3x06cY49XdxekBcwHwYDVR0j BBgwFoAUX3wMv1u4xGYcMqDgQ+UAVg2/RykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU5YWJiMWEtZDZjMC00NTRmLTg3MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1 QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYwREJGNDcyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjdDMENCRjVCQjhDNDY2MUMzMkEwRTA0M0U1MDA1NjBEQkY0 NzI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAw NTYwREJGNDcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbPSzk8S762Qbz3WJcq08sNS4cjkjmVe0iA 1i3sEcVbPK4rdWg+FHIr7RiVcwlJxf4FrxoMrzlSKC+QiSGyvBolHAeNIRNCiMWB O5jh6ifb6gWF9LYWAwTQRNUUmOoZB0hU+/37RsAgfxzLuzDHp+IQHV1KGmK8R+Ht myKXas8f18MsUupYfu6RidvXWHKJNdM6rSGdf8OzH7lpGdl8dRZvWQ/nOFE5lfJs PZoi6f3Y3xN/xEK+Sz56Hc2fCFjRiX10ywraufHCyidcu2J0+CB1ZbSCH9AKQ2hR 6nLiZWyfTH3BGv6Uh/nVXmsEISE90rUA5OhhgxXNYj7WD0JRnno= -----END CERTIFICATE-----Generated at Sat Oct 24 10:12:52 2026 by rpki-client