$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: d61X6tqh/ZsXzWqIHEcPi1wfDny3cSDwxr8p6lZyUw4= Subject key identifier: 5B:D5:57:EE:0A:00:18:12:72:E6:18:71:B2:D8:D0:D3:26:56:E9:8F Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 74C148C85C472C4C1F5E1051E0EB8261E305B6A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: EB Signing time: Sat 24 Oct 2026 18:01:34 +0000 Manifest this update: Sat 24 Oct 2026 17:56:34 +0000 Manifest next update: Sun 25 Oct 2026 19:48:34 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 2: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: 6bMaq7ekAmek0DCv5iho23ma6ItQVmVEagaIA4jcZek=) 3: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 4: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 5: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c1:48:c8:5c:47:2c:4c:1f:5e:10:51:e0:eb:82:61:e3:05:b6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Oct 24 17:56:34 2026 GMT Not After : Oct 25 19:48:34 2026 GMT Subject: CN=5BD557EE0A00181272E61871B2D8D0D32656E98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:90:27:8a:7f:0c:84:db:05:4e:9a:51:2b: 7e:6c:47:8d:f6:1f:59:46:66:23:08:5a:32:c4:d8: fc:02:63:f1:26:c6:e4:41:2a:5f:c0:e0:36:1e:b7: 8d:1b:9b:40:09:07:c8:91:6c:93:83:ab:7d:d4:c8: cb:cf:67:43:98:07:10:e3:4c:7c:51:cb:fb:5f:36: 11:56:36:64:60:39:bc:ae:ea:78:ac:c2:d0:0d:1a: 9d:a0:ac:20:48:5d:8f:46:90:69:fc:9d:8e:92:bd: 90:32:ae:bf:4a:a7:d3:ba:51:4a:f4:a6:fe:ab:42: f8:67:48:b7:eb:82:e0:cc:58:dd:de:de:30:99:7b: 15:c1:e6:82:55:ea:72:55:66:4f:1a:b6:f6:5c:cb: 30:dd:41:65:30:72:77:2d:1f:b0:80:1b:a5:34:5c: e1:1b:ed:d3:62:ba:d4:47:75:49:a3:52:76:be:b2: 7e:91:80:c0:ad:61:09:20:27:85:12:07:46:5e:e9: dd:92:91:84:39:30:8a:29:55:7b:90:5c:b1:b3:d7: 6f:8a:b9:76:ad:43:05:3c:1c:33:84:e3:05:f4:6e: 83:86:6a:d9:4e:c1:79:32:1e:93:72:2f:d2:68:b7: a8:46:5b:be:33:29:a3:40:dd:6d:c6:5a:df:53:a4: 98:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D5:57:EE:0A:00:18:12:72:E6:18:71:B2:D8:D0:D3:26:56:E9:8F X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:62:3f:14:35:98:56:d8:fc:2f:88:fc:5b:ac:62:d1:b8:78: 21:5f:95:a5:c2:54:13:93:c8:cc:c3:ea:db:13:55:bc:35:44: c1:23:7d:f3:ae:a2:90:73:66:f0:cf:ef:77:0e:d2:06:31:ad: 3e:ee:46:1a:78:ab:86:78:34:c1:06:63:63:4b:56:89:c8:3c: 99:6f:54:39:79:88:f4:db:3f:c4:97:85:a4:8b:0a:cd:d4:ee: 65:4a:44:21:0c:ac:e7:24:c8:61:16:5d:09:be:cb:26:f7:8a: 55:87:37:e9:08:c1:fc:97:73:fb:16:78:e6:5f:ca:07:08:6f: cd:e4:dc:81:c4:10:37:c4:4e:71:54:89:2a:23:62:7c:f6:02: 09:e8:98:dc:44:f3:ca:aa:f3:4e:74:b8:78:09:e3:a0:ef:84: b6:d2:b8:ee:a5:a6:07:1c:7a:0c:3f:7c:c3:a0:e0:25:c3:48: 89:dc:bc:ca:46:c6:f2:46:53:1a:26:75:7a:a5:5f:30:0e:53: 70:51:dc:4e:22:77:7f:7a:44:67:9b:b9:6d:05:7f:c8:01:d9: 9d:c4:9e:f0:b7:34:0f:a8:81:73:3b:e2:29:3d:c4:96:81:64: 89:5a:02:19:63:29:50:d4:fb:89:a7:2a:b3:4b:c8:5d:1f:eb: 53:6f:38:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMFIyFxHLEwfXhBR4OuCYeMFtqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjEwMjQxNzU2MzRaFw0yNjEwMjUxOTQ4MzRaMDMxMTAvBgNV BAMTKDVCRDU1N0VFMEEwMDE4MTI3MkU2MTg3MUIyRDhEMEQzMjY1NkU5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoZAnin8MhNsFTppRK35sR432 H1lGZiMIWjLE2PwCY/EmxuRBKl/A4DYet40bm0AJB8iRbJODq33UyMvPZ0OYBxDj THxRy/tfNhFWNmRgObyu6niswtANGp2grCBIXY9GkGn8nY6SvZAyrr9Kp9O6UUr0 pv6rQvhnSLfrguDMWN3e3jCZexXB5oJV6nJVZk8atvZcyzDdQWUwcnctH7CAG6U0 XOEb7dNiutRHdUmjUna+sn6RgMCtYQkgJ4USB0Ze6d2SkYQ5MIopVXuQXLGz12+K uXatQwU8HDOE4wX0boOGatlOwXkyHpNyL9Jot6hGW74zKaNA3W3GWt9TpJjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9VX7goAGBJy5hhxstjQ0yZW6Y8wHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFiPxQ1mFbY/C+I/FusYtG4eCFflaXCVBOT yMzD6tsTVbw1RMEjffOuopBzZvDP73cO0gYxrT7uRhp4q4Z4NMEGY2NLVonIPJlv VDl5iPTbP8SXhaSLCs3U7mVKRCEMrOckyGEWXQm+yyb3ilWHN+kIwfyXc/sWeOZf ygcIb83k3IHEEDfETnFUiSojYnz2AgnomNxE88qq8050uHgJ46DvhLbSuO6lpgcc egw/fMOg4CXDSIncvMpGxvJGUxomdXqlXzAOU3BR3E4id396RGebuW0Ff8gB2Z3E nvC3NA+ogXM74ik9xJaBZIlaAhljKVDU+4mnKrNLyF0f61NvOCU= -----END CERTIFICATE-----Generated at Sun Oct 25 04:54:39 2026 by rpki-client