$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: LUkXI8Z/DcnaQz9vcVPILUFKbJRTyM19dUfr5OHnwIg= Subject key identifier: 03:49:0E:AA:3B:31:1D:22:CE:9F:97:B7:57:BD:7D:CF:64:4F:02:85 Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 0DF4215C625C19AF8CBE78446C4330485DE1630D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: EC Signing time: Sun 25 Oct 2026 11:51:14 +0000 Manifest this update: Sun 25 Oct 2026 11:46:14 +0000 Manifest next update: Mon 26 Oct 2026 13:39:14 +0000 Files and hashes: 1: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: wXp7PtG333donevH6RM3Rh+oUV684huMXk6RRZNWwF0=) 2: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 3: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 4: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 5: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f4:21:5c:62:5c:19:af:8c:be:78:44:6c:43:30:48:5d:e1:63:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Oct 25 11:46:14 2026 GMT Not After : Oct 26 13:39:14 2026 GMT Subject: CN=03490EAA3B311D22CE9F97B757BD7DCF644F0285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:71:3b:4d:91:ec:37:bc:fc:98:07:b5:9b: 19:00:74:81:ee:67:c2:67:84:6c:f5:6e:4b:da:ad: c3:07:63:5a:4a:2e:5e:c3:9f:82:70:f9:a4:6d:ba: 24:ce:1a:9a:9d:01:bb:e6:9a:83:df:23:3d:78:cc: ec:48:3d:30:08:02:b6:a4:fb:b2:ce:83:36:a3:a7: a9:f0:ba:7d:4d:fe:02:44:2d:bc:e0:13:be:cd:ba: 2e:ed:eb:56:0d:04:36:40:f0:cb:12:15:f1:0e:a1: 7e:b6:dd:e1:23:6d:7e:a6:bd:7a:68:77:9b:be:60: 5e:12:f2:46:18:5a:26:00:89:6b:82:fe:59:8a:7f: a0:70:43:8e:ef:d9:c9:02:d4:8d:25:e7:0b:e6:8f: b8:17:39:8d:c4:80:72:d5:85:e0:fc:5c:07:2f:79: dc:36:69:f5:07:cf:4c:80:2e:4c:43:01:f9:0e:52: 26:2e:b8:36:fd:26:d5:95:fc:bd:13:e9:75:4d:aa: c8:c7:2e:15:23:3f:7a:16:4a:0e:57:1c:ff:d1:39: 15:f5:18:99:6d:78:0e:1e:28:af:3e:65:2f:e2:0a: a6:4d:5e:57:56:ef:db:48:5d:21:4c:12:58:59:25: cc:65:fb:57:92:84:db:51:d6:0e:72:88:7c:d2:a1: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:0E:AA:3B:31:1D:22:CE:9F:97:B7:57:BD:7D:CF:64:4F:02:85 X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c0:b0:67:92:0a:57:3f:e4:0c:2d:ab:d0:2c:ab:70:d4:7f: df:ec:2a:59:25:5d:34:f9:7d:ab:bd:b9:b1:41:e4:24:12:6e: 3b:19:c6:d8:10:1e:0b:52:90:28:0d:ef:1c:ad:1f:51:d9:64: 09:ce:8c:e3:6a:88:b5:26:36:63:cc:8a:18:7d:c2:08:37:68: 6f:44:e6:f4:8b:ed:96:1b:c3:2b:47:ba:74:ab:14:be:db:f3: 88:c5:12:29:4a:8d:12:ed:27:75:20:4c:e5:fc:36:a8:c6:6c: 5b:ef:35:dc:12:a4:52:68:1c:7a:ca:01:52:e0:0f:1f:88:ec: f8:c2:ed:04:ce:7e:c1:8a:a7:19:73:9c:66:1f:31:e1:ad:40: 19:7d:bd:8d:e1:96:bc:9f:34:e2:56:df:09:52:0f:d0:54:ff: 1a:39:df:cf:12:56:2a:76:30:25:0c:15:ef:d8:4c:52:d7:93: 73:94:a2:e4:e0:ef:3c:1d:3e:a1:c6:d8:ae:e3:f1:ad:e4:e0: 24:47:40:dd:87:5b:63:8d:5c:e1:60:77:45:78:78:69:74:b9: 22:1e:84:10:1b:cb:1b:e9:48:5e:1a:e2:94:3a:cc:b1:6c:ff: 09:7b:81:00:eb:41:84:1d:1a:4c:1b:31:f2:93:46:5c:36:70: 87:08:07:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfQhXGJcGa+MvnhEbEMwSF3hYw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjEwMjUxMTQ2MTRaFw0yNjEwMjYxMzM5MTRaMDMxMTAvBgNV BAMTKDAzNDkwRUFBM0IzMTFEMjJDRTlGOTdCNzU3QkQ3RENGNjQ0RjAyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxXE7TZHsN7z8mAe1mxkAdIHu Z8JnhGz1bkvarcMHY1pKLl7Dn4Jw+aRtuiTOGpqdAbvmmoPfIz14zOxIPTAIArak +7LOgzajp6nwun1N/gJELbzgE77Nui7t61YNBDZA8MsSFfEOoX623eEjbX6mvXpo d5u+YF4S8kYYWiYAiWuC/lmKf6BwQ47v2ckC1I0l5wvmj7gXOY3EgHLVheD8XAcv edw2afUHz0yALkxDAfkOUiYuuDb9JtWV/L0T6XVNqsjHLhUjP3oWSg5XHP/RORX1 GJlteA4eKK8+ZS/iCqZNXldW79tIXSFMElhZJcxl+1eShNtR1g5yiHzSoXCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0kOqjsxHSLOn5e3V719z2RPAoUwHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzAsGeSClc/5Awtq9Asq3DUf9/sKlklXTT5 fau9ubFB5CQSbjsZxtgQHgtSkCgN7xytH1HZZAnOjONqiLUmNmPMihh9wgg3aG9E 5vSL7ZYbwytHunSrFL7b84jFEilKjRLtJ3UgTOX8NqjGbFvvNdwSpFJoHHrKAVLg Dx+I7PjC7QTOfsGKpxlznGYfMeGtQBl9vY3hlryfNOJW3wlSD9BU/xo5388SVip2 MCUMFe/YTFLXk3OUouTg7zwdPqHG2K7j8a3k4CRHQN2HW2ONXOFgd0V4eGl0uSIe hBAbyxvpSF4a4pQ6zLFs/wl7gQDrQYQdGkwbMfKTRlw2cIcIB/I= -----END CERTIFICATE-----Generated at Mon Oct 26 00:42:21 2026 by rpki-client