$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft File: 5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json) Hash identifier: YuMQZPEgaB79Qgl4A6xjuyGizzw42gtu+qBG6DEpFK0= Subject key identifier: 15:DB:71:88:B4:DC:9C:4D:31:84:DB:D0:B3:43:8C:E7:21:11:2F:C9 Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004 Certificate serial: 1B3ACE625A95691BCFBDFCC43F6E254215F9688A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 05:46:27 +0000 Manifest this update: Sat 14 Nov 2026 05:41:27 +0000 Manifest next update: Sun 15 Nov 2026 06:20:27 +0000 Files and hashes: 1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=) 2: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: KvFDpMWn1DmfD0XzPn6O1ip2OwoANX9JwTWRYKYCNGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 06:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3a:ce:62:5a:95:69:1b:cf:bd:fc:c4:3f:6e:25:42:15:f9:68:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004 Validity Not Before: Nov 14 05:41:27 2026 GMT Not After : Nov 15 06:20:27 2026 GMT Subject: CN=15DB7188B4DC9C4D3184DBD0B3438CE721112FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:e8:99:b5:8f:8d:19:8e:0a:01:c8:4f:33: e3:33:54:5c:f7:58:2d:ea:76:a2:f5:ff:bd:be:24: ce:a2:ee:d2:59:c3:4b:1e:e0:d3:90:6d:bb:c4:e7: 07:4d:00:78:61:10:44:96:c8:6b:91:ef:da:ae:6f: 94:09:c5:79:68:bf:7c:78:07:aa:12:3f:7a:21:63: 5c:20:f3:36:86:11:9a:b4:7d:d5:ec:fb:48:56:5f: 14:67:e6:34:1e:f5:a7:a2:d1:31:46:1f:9c:14:8a: 47:9d:2c:f5:ca:ab:68:1d:d3:da:f4:1c:4c:42:5e: 9c:3f:2f:28:b3:cb:81:f2:a0:b2:9a:f1:56:42:ff: ea:2a:f9:67:06:f8:2a:6c:47:3a:5a:6f:87:12:20: bf:8d:ab:e7:1f:03:74:ab:ca:7b:2e:f3:ce:c4:f3: 0a:e4:a6:1d:68:9c:df:02:f4:3d:aa:e1:38:05:7f: 1d:ee:17:07:06:a5:99:c6:d6:b6:fe:22:a1:e2:09: f8:54:ed:d7:00:d2:7c:8c:47:0e:16:35:c5:0c:e9: 2a:bd:f5:5b:ac:f8:da:d9:4f:4e:a3:05:ab:20:05: 97:15:df:36:4c:45:38:1c:09:12:f2:4c:55:ee:ca: 5d:8d:9d:be:f3:d2:a0:66:82:e5:47:a9:3d:fb:03: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:71:88:B4:DC:9C:4D:31:84:DB:D0:B3:43:8C:E7:21:11:2F:C9 X509v3 Authority Key Identifier: keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5b:89:0c:92:f5:9c:07:ae:12:7c:58:b7:12:95:aa:d6:33: 9b:c3:45:bd:96:2f:bf:4b:76:cf:af:a0:e6:ba:4a:19:13:3e: e4:57:fd:76:b4:1b:b2:de:e7:8b:56:39:ec:19:92:4f:2d:19: 40:bb:c4:b3:b5:48:2e:39:69:ed:51:aa:a2:04:4f:33:f5:ef: 9e:39:d2:4a:87:40:f7:40:5e:af:bc:d6:4e:b6:87:b2:01:a1: 09:46:5d:30:f5:98:30:8f:2d:4e:ae:ad:d4:db:82:a9:0d:46: 4e:d4:2f:13:9e:48:64:3e:7b:02:eb:a0:0a:c7:9c:1b:d2:4d: c1:24:39:d5:11:ae:15:f1:ce:fe:f7:ba:db:6d:08:db:d2:e4: a5:2d:0d:d4:67:ab:39:be:54:32:20:d0:7a:1b:57:5a:db:71: e3:ed:fe:d4:bd:de:24:95:a6:75:e4:7d:38:4f:0e:68:da:a4: 4f:88:f7:73:93:de:24:20:58:26:f2:76:bd:e6:f0:59:75:d4: 1d:57:8c:fc:a1:e6:5e:be:17:fa:2d:94:11:42:da:cd:4d:7a: 21:16:6d:81:71:4a:c8:f0:62:50:38:80:a3:99:e7:43:01:b0: ae:81:f7:5e:af:da:fc:bf:68:50:bf:66:ac:e5:4e:bc:64:11: 1b:46:33:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzrOYlqVaRvPvfzEP24lQhX5aIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4 NTQ2NzAwNDAeFw0yNjExMTQwNTQxMjdaFw0yNjExMTUwNjIwMjdaMDMxMTAvBgNV BAMTKDE1REI3MTg4QjREQzlDNEQzMTg0REJEMEIzNDM4Q0U3MjExMTJGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SeiZtY+NGY4KAchPM+MzVFz3 WC3qdqL1/72+JM6i7tJZw0se4NOQbbvE5wdNAHhhEESWyGuR79qub5QJxXlov3x4 B6oSP3ohY1wg8zaGEZq0fdXs+0hWXxRn5jQe9aei0TFGH5wUikedLPXKq2gd09r0 HExCXpw/Lyizy4HyoLKa8VZC/+oq+WcG+CpsRzpab4cSIL+Nq+cfA3Srynsu887E 8wrkph1onN8C9D2q4TgFfx3uFwcGpZnG1rb+IqHiCfhU7dcA0nyMRw4WNcUM6Sq9 9Vus+NrZT06jBasgBZcV3zZMRTgcCRLyTFXuyl2Nnb7z0qBmguVHqT37A8mdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdtxiLTcnE0xhNvQs0OM5yERL8kwHwYDVR0j BBgwFoAUXAwBZcIgIza637kkfjjQyYVGcAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1MTZlNmUtYzY3OS00ZTUwLWI3YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVD MjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4NTQ2NzAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzBDMDE2NUMyMjAyMzM2QkFERkI5MjQ3RTM4RDBDOTg1NDY3 MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQw Qzk4NTQ2NzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpbiQyS9ZwHrhJ8WLcSlarWM5vDRb2WL79L ds+voOa6ShkTPuRX/Xa0G7Le54tWOewZkk8tGUC7xLO1SC45ae1RqqIETzP17545 0kqHQPdAXq+81k62h7IBoQlGXTD1mDCPLU6urdTbgqkNRk7ULxOeSGQ+ewLroArH nBvSTcEkOdURrhXxzv73utttCNvS5KUtDdRnqzm+VDIg0HobV1rbcePt/tS93iSV pnXkfThPDmjapE+I93OT3iQgWCbydr3m8Fl11B1XjPyh5l6+F/otlBFC2s1NeiEW bYFxSsjwYlA4gKOZ50MBsK6B916v2vy/aFC/ZqzlTrxkERtGM/g= -----END CERTIFICATE-----Generated at Sun Nov 15 00:08:14 2026 by rpki-client