$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json) Hash identifier: K8WfbLBwykwy8bVPxJjejpcveHLVUNsXCGebnOvtcls= Subject key identifier: 76:C0:36:AA:B0:16:42:1B:0E:6C:36:9C:B6:26:40:FA:74:D9:FF:B5 Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Certificate serial: 11AABA08C8B8136A0C57973F73ADBA176779FC4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 13:29:03 +0000 Manifest this update: Sat 10 Oct 2026 13:24:03 +0000 Manifest next update: Sun 11 Oct 2026 14:46:03 +0000 Files and hashes: 1: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: vMnefDkFuCCV+Ax6gDJP1ZryPhkNtzNJNvJ21n9x9Dk=) 2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:aa:ba:08:c8:b8:13:6a:0c:57:97:3f:73:ad:ba:17:67:79:fc:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Validity Not Before: Oct 10 13:24:03 2026 GMT Not After : Oct 11 14:46:03 2026 GMT Subject: CN=76C036AAB016421B0E6C369CB62640FA74D9FFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:1e:47:06:b5:03:a8:60:34:72:87:61:2b: c7:6b:d8:e4:dd:e7:e6:16:29:ee:55:f4:28:f4:5a: 16:38:55:b0:df:d9:9d:a9:c2:49:7a:7a:7b:26:a3: ae:2a:35:96:bc:34:a2:a4:54:94:63:cc:55:47:4f: 6f:f4:ea:0c:58:71:9f:5f:44:55:14:f8:30:75:4f: 43:80:16:fe:c0:7e:1f:2d:cc:d2:17:6a:3f:66:fe: a2:1c:2b:96:ab:30:c6:8d:1d:30:14:de:3a:f4:f6: 2f:39:b4:82:4e:a9:f0:2a:02:c3:60:60:ff:e6:a0: 15:4b:a3:51:c1:1b:80:d6:39:77:b5:c3:f8:33:dd: 67:5a:e9:d0:03:c3:99:05:1f:d5:c0:62:53:21:38: ec:88:75:89:04:76:6a:d2:08:16:73:fe:40:53:f2: ea:f4:0a:83:7a:5c:85:e0:dc:f8:26:29:fa:75:89: 46:10:c1:74:17:61:d8:4d:d8:b9:63:c1:3f:75:13: ac:af:64:f7:b3:fd:dd:6b:df:90:fa:95:be:af:a1: 0b:ad:bc:a6:5f:2b:b5:6b:45:c7:2c:47:a3:74:35: a5:37:bb:f8:b8:ac:c7:3f:60:7a:68:c1:3e:68:b7: 3a:1d:b4:5b:72:b6:38:e8:85:cf:e3:f8:0b:e9:a5: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C0:36:AA:B0:16:42:1B:0E:6C:36:9C:B6:26:40:FA:74:D9:FF:B5 X509v3 Authority Key Identifier: keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:16:f3:27:37:28:4c:35:ac:07:1d:d7:ab:ca:04:5b:9d:f8: ae:ae:9b:af:2b:71:d9:f4:23:09:ec:33:f3:75:ae:66:09:85: 21:4b:d5:70:7d:bd:7d:7a:12:2d:af:6a:5a:71:58:5d:f5:b3: 51:6b:b4:85:52:eb:c9:ae:b7:0a:2a:25:21:d8:8d:c6:32:7e: e6:a0:21:43:d0:8a:83:45:c9:3a:07:68:d8:98:a2:93:cf:06: 11:9f:05:af:5b:9c:9d:ff:f4:fb:30:37:5b:fc:17:80:d8:fc: 9e:d5:d7:d6:da:6b:55:ae:39:96:36:b6:ca:02:8c:7b:d0:8c: 46:21:4f:fd:90:e0:0b:42:56:99:b6:b3:d5:4b:de:a7:e8:73: 98:8e:a4:4b:00:51:0b:80:f0:7a:87:71:69:22:20:44:1e:99: 24:ca:b6:83:79:7a:4a:6d:b6:be:5d:ed:f8:a6:5a:6f:ba:42: 82:79:b8:6c:6c:aa:d8:72:1b:48:92:d5:bc:5a:27:b7:d6:e5: 8f:b7:3a:b6:c1:a7:84:da:54:ec:a0:3b:65:a4:4e:e7:57:05: 24:13:28:4a:7b:4f:ca:50:d3:22:70:42:e6:9d:2a:1d:a9:7e: db:23:02:10:3f:63:7a:00:aa:20:ad:42:ee:59:43:f2:35:71: 5b:e7:3b:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaq6CMi4E2oMV5c/c626F2d5/EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBC OURCOUJGMTAeFw0yNjEwMTAxMzI0MDNaFw0yNjEwMTExNDQ2MDNaMDMxMTAvBgNV BAMTKDc2QzAzNkFBQjAxNjQyMUIwRTZDMzY5Q0I2MjY0MEZBNzREOUZGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQR5HBrUDqGA0codhK8dr2OTd 5+YWKe5V9Cj0WhY4VbDf2Z2pwkl6ensmo64qNZa8NKKkVJRjzFVHT2/06gxYcZ9f RFUU+DB1T0OAFv7Afh8tzNIXaj9m/qIcK5arMMaNHTAU3jr09i85tIJOqfAqAsNg YP/moBVLo1HBG4DWOXe1w/gz3Wda6dADw5kFH9XAYlMhOOyIdYkEdmrSCBZz/kBT 8ur0CoN6XIXg3PgmKfp1iUYQwXQXYdhN2LljwT91E6yvZPez/d1r35D6lb6voQut vKZfK7VrRccsR6N0NaU3u/i4rMc/YHpowT5otzodtFtytjjohc/j+Avppb0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsA2qrAWQhsObDactiZA+nTZ/7UwHwYDVR0j BBgwFoAUW7EsMdNuVc/Wr5RMpOdn4Lnbm/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTliOTNlMWMtNWYyYS00M2E5LTk5ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFE MzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBCOURCOUJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkIxMkMzMUQzNkU1NUNGRDZBRjk0NENBNEU3NjdFMEI5REI5 QkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3 RTBCOURCOUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQW8yc3KEw1rAcd16vKBFud+K6um68rcdn0 IwnsM/N1rmYJhSFL1XB9vX16Ei2valpxWF31s1FrtIVS68mutwoqJSHYjcYyfuag IUPQioNFyToHaNiYopPPBhGfBa9bnJ3/9PswN1v8F4DY/J7V19baa1WuOZY2tsoC jHvQjEYhT/2Q4AtCVpm2s9VL3qfoc5iOpEsAUQuA8HqHcWkiIEQemSTKtoN5ekpt tr5d7fimWm+6QoJ5uGxsqthyG0iS1bxaJ7fW5Y+3OrbBp4TaVOygO2WkTudXBSQT KEp7T8pQ0yJwQuadKh2pftsjAhA/Y3oAqiCtQu5ZQ/I1cVvnOxw= -----END CERTIFICATE-----Generated at Sat Oct 10 19:38:17 2026 by rpki-client