$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft File: 5137BC6C642818ED44761CE24BD59136B86E9502.mft (raw, json) Hash identifier: olP1bsfx1aThYbJb30QSWJmLy7bLszaNfOf0wm5WSTI= Subject key identifier: 61:B5:F0:25:4F:F2:29:06:C4:94:06:A9:BB:F2:D0:FF:92:80:10:E0 Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 45E6F5B1E1608A16AAA600047ECDD57DB2C88D32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft Manifest number: EB Signing time: Sat 24 Oct 2026 16:24:38 +0000 Manifest this update: Sat 24 Oct 2026 16:19:38 +0000 Manifest next update: Sun 25 Oct 2026 17:00:38 +0000 Files and hashes: 1: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: Bjupm6rpCAaMTeTPZ2eGuF40Rt3f9ZMn/qqAW7B+FsQ=) 2: 5137BC6C642818ED44761CE24BD59136B86E9502.crl (hash: PA8s5oaumD32Vx6skckwv503Gy+XmfkDdxkMalbB6SM=) 3: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e6:f5:b1:e1:60:8a:16:aa:a6:00:04:7e:cd:d5:7d:b2:c8:8d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: Oct 24 16:19:38 2026 GMT Not After : Oct 25 17:00:38 2026 GMT Subject: CN=61B5F0254FF22906C49406A9BBF2D0FF928010E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:df:d7:19:97:b5:f7:bb:38:ee:a7:47:b2: 86:19:d0:e2:c4:4c:11:35:2b:a1:05:2b:67:f0:4c: 5f:76:c8:a0:08:8d:e2:f6:4a:4a:14:b6:1e:2b:f8: 1b:22:38:c1:2b:65:b3:2e:c4:db:a8:34:dc:c4:84: d6:b8:27:5c:5c:d1:67:02:45:93:88:5d:99:bf:80: ed:f7:b2:76:d6:17:10:f4:b3:07:97:3d:29:85:fb: fc:79:32:d9:c1:e7:b1:2c:67:20:78:08:fa:47:a1: b4:83:2c:7e:ef:b1:02:04:e6:0b:f1:76:6a:d8:cc: 68:ed:02:25:1c:2a:9b:61:ed:9b:12:63:c4:8a:0f: 95:c8:d8:54:d5:4f:f6:76:60:b8:09:0c:94:0b:0f: c1:66:73:2e:0f:96:13:6e:7f:32:f4:94:bf:82:a2: 8a:e1:b6:c5:7d:b1:d1:c1:43:1f:84:e3:70:31:48: dd:4c:0c:92:47:0a:7c:4a:18:88:b8:7f:d5:50:a7: 05:58:9e:27:ff:44:b1:66:fa:16:01:44:3a:2f:aa: fc:6c:62:f0:45:8e:3c:22:2e:28:f1:56:4c:20:bf: 54:c2:6c:b3:42:c3:94:1b:f9:9d:35:58:b9:4e:05: f6:e9:b4:34:66:bc:c3:2e:68:6a:a1:32:2e:4d:f3: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B5:F0:25:4F:F2:29:06:C4:94:06:A9:BB:F2:D0:FF:92:80:10:E0 X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cf:b8:37:45:50:1d:14:a2:21:41:71:db:4c:22:5b:84:06: 8c:2e:73:05:7b:2d:79:a4:f5:48:0e:25:ed:99:3a:ba:0e:3b: 15:4c:33:ac:a4:4d:b6:76:bd:0e:46:56:e0:94:1d:c0:a4:ff: 33:8b:78:43:1d:7e:07:11:4e:ab:29:f2:e8:49:f3:ea:8f:84: 8f:5c:30:6f:f2:ad:9d:c5:ee:c5:09:6c:6a:3c:c0:64:e3:5a: 9d:5f:9e:f5:d8:75:95:4e:0e:bb:91:65:cd:90:8a:40:b8:07: cc:70:da:ac:fc:f3:77:72:0c:0d:e4:3c:75:0f:b4:d4:16:7c: 4d:d1:9f:3f:0f:a0:dd:a0:1c:80:db:07:b1:1e:0f:1e:11:61: 47:70:5e:77:39:39:c1:7a:73:5a:5b:f6:40:ca:2b:78:5f:7f: 7b:84:c5:e7:6c:6e:ad:62:b5:1e:17:71:e2:58:ac:09:0b:8e: b3:21:be:4f:7d:b2:d5:e8:58:dc:a4:4b:01:61:52:5c:ac:0c: cc:16:e5:4e:9c:0f:95:ae:4f:89:91:b3:49:6c:1f:f8:2c:92: eb:da:d6:22:eb:14:62:d0:54:7c:ff:1b:6d:46:7f:84:1c:34: 8b:a6:8c:e6:6a:6c:f0:33:7e:10:be:af:b9:4e:48:4b:58:85: f6:a2:53:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReb1seFgihaqpgAEfs3VfbLIjTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjEwMjQxNjE5MzhaFw0yNjEwMjUxNzAwMzhaMDMxMTAvBgNV BAMTKDYxQjVGMDI1NEZGMjI5MDZDNDk0MDZBOUJCRjJEMEZGOTI4MDEwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAL9/XGZe197s47qdHsoYZ0OLE TBE1K6EFK2fwTF92yKAIjeL2SkoUth4r+BsiOMErZbMuxNuoNNzEhNa4J1xc0WcC RZOIXZm/gO33snbWFxD0sweXPSmF+/x5MtnB57EsZyB4CPpHobSDLH7vsQIE5gvx dmrYzGjtAiUcKpth7ZsSY8SKD5XI2FTVT/Z2YLgJDJQLD8Fmcy4PlhNufzL0lL+C oorhtsV9sdHBQx+E43AxSN1MDJJHCnxKGIi4f9VQpwVYnif/RLFm+hYBRDovqvxs YvBFjjwiLijxVkwgv1TCbLNCw5Qb+Z01WLlOBfbptDRmvMMuaGqhMi5N8zrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYbXwJU/yKQbElAapu/LQ/5KAEOAwHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkx MzZCODZFOTUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrPuDdFUB0UoiFBcdtMIluEBowucwV7LXmk 9UgOJe2ZOroOOxVMM6ykTbZ2vQ5GVuCUHcCk/zOLeEMdfgcRTqsp8uhJ8+qPhI9c MG/yrZ3F7sUJbGo8wGTjWp1fnvXYdZVODruRZc2QikC4B8xw2qz883dyDA3kPHUP tNQWfE3Rnz8PoN2gHIDbB7EeDx4RYUdwXnc5OcF6c1pb9kDKK3hff3uExedsbq1i tR4XceJYrAkLjrMhvk99stXoWNykSwFhUlysDMwW5U6cD5WuT4mRs0lsH/gskuva 1iLrFGLQVHz/G21Gf4QcNIumjOZqbPAzfhC+r7lOSEtYhfaiU8w= -----END CERTIFICATE-----Generated at Sun Oct 25 01:27:28 2026 by rpki-client