$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json) Hash identifier: 1IFS7pqBCmVtQmkj+dMGODaC8T9xoFGmrRAFJkiYmnQ= Subject key identifier: 8D:EE:6D:12:91:6D:7B:8A:0E:E2:E3:28:EB:45:58:EB:93:4D:C4:31 Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B Certificate serial: 18CD2D8C58C5BB9042B3ABBCD244FD8E0C4AA523 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 17:36:37 +0000 Manifest this update: Sat 14 Nov 2026 17:31:37 +0000 Manifest next update: Sun 15 Nov 2026 20:34:37 +0000 Files and hashes: 1: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=) 2: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: oJI73qtn+ZPNIebWfkTkXFZKQxV1K1m2d2CXUCmVssA=) 3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cd:2d:8c:58:c5:bb:90:42:b3:ab:bc:d2:44:fd:8e:0c:4a:a5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B Validity Not Before: Nov 14 17:31:37 2026 GMT Not After : Nov 15 20:34:37 2026 GMT Subject: CN=8DEE6D12916D7B8A0EE2E328EB4558EB934DC431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:ff:b7:39:fc:e5:4e:38:15:27:a9:c4:b9: 0d:68:90:ec:55:70:33:f0:f2:25:d3:e2:f9:75:a5: f9:f4:b2:cd:19:78:50:42:71:b0:4f:42:d8:49:bd: 83:7d:94:66:29:b1:b3:a4:3b:ad:de:66:53:b2:b7: b4:a9:fa:44:f0:68:a3:6e:a7:8e:43:c6:b6:6c:97: c8:e2:03:2a:91:c8:b3:1c:fa:5e:08:f1:83:7f:16: 34:f8:f9:f3:e0:e2:00:cc:2d:1e:c0:0e:e3:70:39: 35:a7:2a:4f:ed:1b:9e:5f:34:f5:7a:3b:96:1f:88: f4:26:d2:33:45:b2:13:5b:40:08:e1:5c:24:5c:1b: 8d:16:f2:6d:9d:2d:bd:42:4c:6f:e2:e4:89:e9:8e: 9b:54:11:60:81:19:2e:93:cf:85:83:bd:18:0c:7e: 4f:db:a0:df:d6:12:c0:68:3f:9e:b2:57:e9:69:51: f3:a1:06:8a:b4:c5:08:97:86:16:07:73:ae:83:b6: 67:2a:c9:81:d1:74:10:6d:6b:2f:c6:e1:a9:f3:ae: 62:cf:59:f8:40:ea:8c:00:8d:41:8b:ad:fd:e9:65: ba:6d:c9:b6:68:4b:33:74:a0:d8:12:33:9b:58:03: 2d:0f:54:79:5b:62:bd:7c:53:80:2f:94:64:dc:58: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:6D:12:91:6D:7B:8A:0E:E2:E3:28:EB:45:58:EB:93:4D:C4:31 X509v3 Authority Key Identifier: keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:74:0e:ef:f9:d4:54:61:c3:b3:f3:10:ca:e3:a3:06:c5:ef: e5:73:bf:6a:5f:df:69:36:fe:9a:27:8b:55:36:b7:9c:4d:3c: 9f:3b:92:ad:a0:37:85:dc:25:78:96:07:26:01:30:e2:c4:bc: 13:f1:d2:da:24:c1:bd:ae:57:f6:71:1c:5e:ba:f0:6e:a4:d4: 2a:a4:e7:8f:0d:4a:01:c9:09:49:7f:aa:5b:64:13:8a:87:8b: a0:9a:3b:d7:f3:ce:d0:4c:2d:e6:03:fb:f0:9d:13:8e:da:e4: d0:1e:87:55:c5:08:4d:76:f0:51:7a:fb:f9:b9:0b:59:45:1b: 0b:6e:52:54:38:a9:e4:8d:9d:ad:2f:77:41:17:53:c5:e3:78: d3:d2:5a:4d:2b:44:cd:e7:be:40:4a:70:26:9d:b8:09:8f:a0: 19:08:58:65:92:80:bf:3e:ff:80:f4:47:b1:45:2a:e9:c2:e1: 4d:b9:92:ff:73:1b:7d:fd:59:e5:5d:bf:7e:4c:a7:ac:e3:ce: ec:70:a8:11:04:c6:87:a0:67:8a:58:22:76:79:2c:4a:ab:7a: 78:aa:5a:fb:9c:f3:a7:15:81:6e:10:5d:51:3b:5e:b4:19:be: b7:4a:7b:18:61:b0:38:1f:8b:bd:40:18:1f:89:cb:18:6e:d5: 27:5d:b2:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM0tjFjFu5BCs6u80kT9jgxKpSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx NDlCNjIyQjAeFw0yNjExMTQxNzMxMzdaFw0yNjExMTUyMDM0MzdaMDMxMTAvBgNV BAMTKDhERUU2RDEyOTE2RDdCOEEwRUUyRTMyOEVCNDU1OEVCOTM0REM0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjf+3OfzlTjgVJ6nEuQ1okOxV cDPw8iXT4vl1pfn0ss0ZeFBCcbBPQthJvYN9lGYpsbOkO63eZlOyt7Sp+kTwaKNu p45DxrZsl8jiAyqRyLMc+l4I8YN/FjT4+fPg4gDMLR7ADuNwOTWnKk/tG55fNPV6 O5YfiPQm0jNFshNbQAjhXCRcG40W8m2dLb1CTG/i5InpjptUEWCBGS6Tz4WDvRgM fk/boN/WEsBoP56yV+lpUfOhBoq0xQiXhhYHc66DtmcqyYHRdBBtay/G4anzrmLP WfhA6owAjUGLrf3pZbptybZoSzN0oNgSM5tYAy0PVHlbYr18U4AvlGTcWIb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUje5tEpFte4oO4uMo60VY65NNxDEwHwYDVR0j BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4 OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2 MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4 OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ0Du/51FRhw7PzEMrjowbF7+Vzv2pf32k2 /poni1U2t5xNPJ87kq2gN4XcJXiWByYBMOLEvBPx0tokwb2uV/ZxHF668G6k1Cqk 548NSgHJCUl/qltkE4qHi6CaO9fzztBMLeYD+/CdE47a5NAeh1XFCE128FF6+/m5 C1lFGwtuUlQ4qeSNna0vd0EXU8XjeNPSWk0rRM3nvkBKcCaduAmPoBkIWGWSgL8+ /4D0R7FFKunC4U25kv9zG339WeVdv35Mp6zjzuxwqBEExoegZ4pYInZ5LEqreniq Wvuc86cVgW4QXVE7XrQZvrdKexhhsDgfi71AGB+Jyxhu1Sddsn4= -----END CERTIFICATE-----Generated at Sun Nov 15 02:41:13 2026 by rpki-client