$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft File: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json) Hash identifier: UgCb6XHVE5MQg1+gP95MY1dhmVMmNb0scsfDaHJxZnU= Subject key identifier: CE:E2:41:3A:63:99:5F:86:4E:0C:54:0C:C7:9D:6A:68:8B:81:7C:F1 Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Certificate serial: 6E15994E746F072663B64F291D92FE981A3DED37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft Manifest number: E8 Signing time: Tue 20 Oct 2026 22:57:48 +0000 Manifest this update: Tue 20 Oct 2026 22:52:48 +0000 Manifest next update: Thu 22 Oct 2026 01:21:48 +0000 Files and hashes: 1: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: rwldFfOh/ZzDVEM3+PVZQ5sjxQIbyA9v6OrXdsRSSNE=) 2: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=) 3: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=) 4: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=) 5: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=) 6: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=) 7: 3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa (hash: ml3XOM3oooTz4pOGiWF5IYQEjwqeju+NuHaVYP3/oGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:15:99:4e:74:6f:07:26:63:b6:4f:29:1d:92:fe:98:1a:3d:ed:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Validity Not Before: Oct 20 22:52:48 2026 GMT Not After : Oct 22 01:21:48 2026 GMT Subject: CN=CEE2413A63995F864E0C540CC79D6A688B817CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:7b:28:8a:ea:1e:4d:1f:17:a0:53:a4:8c: f3:41:52:c5:66:85:45:27:60:99:fc:3c:05:32:9e: ff:76:73:8e:9e:19:e5:17:00:5e:29:e7:61:2a:f3: 25:e7:88:48:18:20:2b:a5:66:4f:6a:e8:53:42:9a: 3d:37:65:91:00:66:44:14:0d:d6:fa:bb:79:f5:1e: 41:d8:bc:80:34:31:b7:ab:61:15:18:55:af:32:c4: dd:b5:54:26:b9:ca:f4:03:10:90:f0:a6:f2:b7:86: 55:3c:b8:a7:b1:4f:ba:12:d6:62:bb:45:1b:31:51: 4f:90:97:a3:ba:43:dd:a1:ed:3c:95:4a:12:28:5c: f4:e4:48:11:43:8d:c5:3f:00:78:6c:c9:f3:7f:73: 54:ac:5f:5c:8a:e3:33:65:c9:19:ef:4f:a7:82:fb: c9:91:cb:7a:04:16:76:74:8a:a6:a0:c9:96:8f:2b: bf:3a:d8:a4:e2:13:89:86:1e:bf:d9:2b:98:b6:f6: d3:a9:2c:98:18:1d:f5:50:dd:a9:b4:83:5a:9c:e1: 85:5a:80:94:74:76:ed:cb:b1:52:1b:38:b8:f1:3f: 7e:59:75:7f:15:fb:02:53:5b:7f:ed:97:96:8c:17: ef:6f:6c:c3:8f:da:d2:e7:40:b2:97:b3:03:60:67: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E2:41:3A:63:99:5F:86:4E:0C:54:0C:C7:9D:6A:68:8B:81:7C:F1 X509v3 Authority Key Identifier: keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2a:64:d8:db:34:79:ed:c4:df:8f:65:04:92:f6:45:1a:dc: 08:f8:03:c4:10:b7:29:d9:34:96:2f:fc:ab:06:ee:50:65:9b: 8f:6a:01:13:4b:14:c3:f3:e6:15:be:6d:3a:50:39:89:e6:f4: 71:0a:10:4d:aa:56:c0:36:37:05:99:da:b2:dc:da:1f:da:e9: a6:93:7a:b5:f9:6a:e7:5c:13:8c:1c:b9:2c:5d:7c:e9:a8:cd: 68:63:b6:e8:a9:52:22:c4:83:4a:59:e3:1b:eb:87:09:a9:72: 8b:96:f6:58:0c:9f:88:77:06:65:fc:f7:03:ef:89:41:fe:36: 1b:1b:c7:9c:34:d7:56:f0:12:96:59:32:87:c0:3b:3e:cc:3e: 9c:88:7f:b4:5e:79:2e:4c:0a:c5:7a:ea:0f:26:dc:5c:6a:7d: 52:91:b9:91:6a:e8:c2:71:91:cf:fa:42:e4:18:61:36:97:cf: 35:91:c5:99:c5:19:03:7d:a1:81:21:e9:56:62:08:37:42:84: cc:8a:fb:17:22:86:9a:ca:ef:4c:9c:d8:77:34:0a:fd:49:2e: 2e:27:23:4d:1c:11:b9:ca:ca:8e:a5:db:ba:cd:78:91:62:c2: 68:62:d8:2d:dc:5a:21:a6:27:90:71:e9:7d:75:8a:b0:b7:cc: e0:6d:55:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhWZTnRvByZjtk8pHZL+mBo97TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD MUVBM0YxMDAeFw0yNjEwMjAyMjUyNDhaFw0yNjEwMjIwMTIxNDhaMDMxMTAvBgNV BAMTKENFRTI0MTNBNjM5OTVGODY0RTBDNTQwQ0M3OUQ2QTY4OEI4MTdDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMXsoiuoeTR8XoFOkjPNBUsVm hUUnYJn8PAUynv92c46eGeUXAF4p52Eq8yXniEgYICulZk9q6FNCmj03ZZEAZkQU Ddb6u3n1HkHYvIA0MberYRUYVa8yxN21VCa5yvQDEJDwpvK3hlU8uKexT7oS1mK7 RRsxUU+Ql6O6Q92h7TyVShIoXPTkSBFDjcU/AHhsyfN/c1SsX1yK4zNlyRnvT6eC +8mRy3oEFnZ0iqagyZaPK7862KTiE4mGHr/ZK5i29tOpLJgYHfVQ3am0g1qc4YVa gJR0du3LsVIbOLjxP35ZdX8V+wJTW3/tl5aMF+9vbMOP2tLnQLKXswNgZ+FtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzuJBOmOZX4ZODFQMx51qaIuBfPEwHwYDVR0j BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz RjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlG MURDMUVBM0YxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYqZNjbNHntxN+PZQSS9kUa3Aj4A8QQtynZ NJYv/KsG7lBlm49qARNLFMPz5hW+bTpQOYnm9HEKEE2qVsA2NwWZ2rLc2h/a6aaT erX5audcE4wcuSxdfOmozWhjtuipUiLEg0pZ4xvrhwmpcouW9lgMn4h3BmX89wPv iUH+Nhsbx5w011bwEpZZMofAOz7MPpyIf7ReeS5MCsV66g8m3FxqfVKRuZFq6MJx kc/6QuQYYTaXzzWRxZnFGQN9oYEh6VZiCDdChMyK+xcihprK70yc2Hc0Cv1JLi4n I00cEbnKyo6l27rNeJFiwmhi2C3cWiGmJ5Bx6X11irC3zOBtVbk= -----END CERTIFICATE-----Generated at Wed Oct 21 15:21:51 2026 by rpki-client