$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft (raw, json) Hash identifier: g9r4sKL/xeF2AE1JDux68HnSh4KyLn6Zi9fxlXfFedw= Subject key identifier: 7F:F7:46:A0:DE:93:C6:D3:2A:A5:88:4F:4A:98:C4:EE:07:29:4C:B9 Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA Certificate issuer: /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Certificate serial: 674AC84FC87DFD8162E87616FA7D726787F8419C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft Manifest number: EA Signing time: Sat 24 Oct 2026 10:47:28 +0000 Manifest this update: Sat 24 Oct 2026 10:42:28 +0000 Manifest next update: Sun 25 Oct 2026 13:24:28 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=) 2: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: 1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=) 3: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl (hash: l+iVBiZKgRjuoizH6yZq2RhO2l9eYKlaYKpAOUTUpDc=) 4: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: 59pE6Ft4WIHTXAP3g5lUlDtYPeQDKcESjhCmblAbyfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 13:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4a:c8:4f:c8:7d:fd:81:62:e8:76:16:fa:7d:72:67:87:f8:41:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Validity Not Before: Oct 24 10:42:28 2026 GMT Not After : Oct 25 13:24:28 2026 GMT Subject: CN=7FF746A0DE93C6D32AA5884F4A98C4EE07294CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:bb:0b:95:62:75:79:3e:37:8c:26:78:3f: d0:e3:bb:ce:0c:f0:5d:e0:0d:f6:6c:49:02:d7:c7: a0:65:14:09:ac:ec:c6:ff:51:79:f9:53:c1:d1:c2: d0:e6:3a:6d:b1:21:94:8b:c1:07:8f:bd:10:ee:88: a2:13:db:a3:46:2f:6e:3d:10:14:f2:cf:df:fc:1b: d4:a9:81:71:a0:68:12:f4:af:a9:dd:20:cb:f7:12: 61:e8:0c:b5:d3:b1:07:83:d2:48:d6:37:f8:86:07: 96:91:10:fc:f6:8d:b4:5e:b3:a9:6f:2a:74:34:cf: 47:f0:73:fc:9c:c6:29:5b:b7:a6:80:27:fa:f5:f6: d5:33:13:cf:72:59:47:b9:e0:58:86:5b:96:de:15: 38:14:aa:85:10:6c:cf:b4:17:25:b9:f4:ff:55:ab: dd:96:78:da:2f:94:e0:0d:c5:f9:a2:da:dd:ef:3a: b5:25:f8:8d:8b:38:c8:f5:d3:3c:32:13:ff:e6:eb: d2:7e:d2:d8:1e:e7:89:2d:9d:75:c7:96:46:c7:9a: fd:59:ba:b2:85:66:87:fc:9e:68:a1:57:b7:73:08: 26:e3:1c:f7:b0:89:96:f3:a7:a3:49:3a:b1:e1:60: 37:04:ca:15:c6:20:b4:cf:72:bf:64:b3:6c:4c:7f: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:46:A0:DE:93:C6:D3:2A:A5:88:4F:4A:98:C4:EE:07:29:4C:B9 X509v3 Authority Key Identifier: keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:31:23:60:3a:46:13:a7:ec:40:08:0c:db:0d:2c:11:70:0a: c6:a3:1d:22:d2:af:c3:c8:12:03:c2:d2:eb:02:aa:3e:6a:ae: 2d:c2:46:32:e3:87:42:cd:ef:a9:5f:61:e1:e2:67:d3:5d:7f: 99:8e:54:3b:3b:87:43:1e:ca:b8:e1:f2:c9:b5:b6:f7:58:6f: ee:d3:ea:84:41:79:9a:30:35:be:8d:51:91:12:0b:57:1d:81: 3d:f9:74:e8:52:25:43:c9:d9:ac:d9:f3:25:11:01:a1:b8:c5: 61:82:b3:a8:80:85:ba:63:2d:3e:26:ef:0d:be:02:d0:d7:39: b0:37:84:d2:66:1d:be:4a:6b:fa:5c:b8:61:12:d0:f9:41:cb: 59:11:38:4c:69:91:35:0f:d2:56:4d:8c:c8:5a:90:30:e4:01: 69:31:8c:d7:59:ef:83:e3:b9:44:c0:53:c4:2c:1d:74:f1:8f: a0:a7:0f:76:27:d0:60:51:fc:cf:b9:03:1a:c0:aa:52:d7:09: b2:fd:3e:38:3f:b3:9e:81:46:b3:7c:e5:0e:3b:58:99:88:c4: 8e:e4:54:3a:07:7a:23:c6:ce:ed:32:38:40:30:41:0f:c0:79: 45:9b:93:90:62:fe:b8:62:e4:3d:36:14:d0:53:b8:7e:fd:53: 05:92:fc:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0rIT8h9/YFi6HYW+n1yZ4f4QZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5 MjA5N0VGQTAeFw0yNjEwMjQxMDQyMjhaFw0yNjEwMjUxMzI0MjhaMDMxMTAvBgNV BAMTKDdGRjc0NkEwREU5M0M2RDMyQUE1ODg0RjRBOThDNEVFMDcyOTRDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tLsLlWJ1eT43jCZ4P9Dju84M 8F3gDfZsSQLXx6BlFAms7Mb/UXn5U8HRwtDmOm2xIZSLwQePvRDuiKIT26NGL249 EBTyz9/8G9SpgXGgaBL0r6ndIMv3EmHoDLXTsQeD0kjWN/iGB5aREPz2jbRes6lv KnQ0z0fwc/ycxilbt6aAJ/r19tUzE89yWUe54FiGW5beFTgUqoUQbM+0FyW59P9V q92WeNovlOANxfmi2t3vOrUl+I2LOMj10zwyE//m69J+0tge54ktnXXHlkbHmv1Z urKFZof8nmihV7dzCCbjHPewiZbzp6NJOrHhYDcEyhXGILTPcr9ks2xMf1+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/dGoN6TxtMqpYhPSpjE7gcpTLkwHwYDVR0j BBgwFoAUXB+LgbqVhI+lGJbgldt6QpIJfvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlMWFjN2MtOTA0ZC00OTNmLWJhNWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFC QTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5MjA5N0VGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzFGOEI4MUJBOTU4NDhGQTUxODk2RTA5NURCN0E0MjkyMDk3 RUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdB NDI5MjA5N0VGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwxI2A6RhOn7EAIDNsNLBFwCsajHSLSr8PI EgPC0usCqj5qri3CRjLjh0LN76lfYeHiZ9Ndf5mOVDs7h0Meyrjh8sm1tvdYb+7T 6oRBeZowNb6NUZESC1cdgT35dOhSJUPJ2azZ8yURAaG4xWGCs6iAhbpjLT4m7w2+ AtDXObA3hNJmHb5Ka/pcuGES0PlBy1kROExpkTUP0lZNjMhakDDkAWkxjNdZ74Pj uUTAU8QsHXTxj6CnD3Yn0GBR/M+5AxrAqlLXCbL9Pjg/s56BRrN85Q47WJmIxI7k VDoHeiPGzu0yOEAwQQ/AeUWbk5Bi/rhi5D02FNBTuH79UwWS/FY= -----END CERTIFICATE-----Generated at Sat Oct 24 20:41:36 2026 by rpki-client