$ rpki-client -vvvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: z5YhscMdJpUOf22SYt/hL5ERjyQoH29N4maHrLI0pdE= Subject key identifier: 80:E3:3D:89:7D:D8:B8:C1:CA:04:74:F7:CB:3A:54:25:5E:3A:D7:34 Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 666AFAFABF4BEB52255DE7A5959A3D6052015336 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 15:23:35 +0000 Manifest this update: Sat 14 Nov 2026 15:18:35 +0000 Manifest next update: Sun 15 Nov 2026 15:34:35 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) 2: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: z7XjbUeOGt2TowWjomYjQZVbEFIUeGfRrPfCMv09Oxw=) 3: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) 4: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6a:fa:fa:bf:4b:eb:52:25:5d:e7:a5:95:9a:3d:60:52:01:53:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Nov 14 15:18:35 2026 GMT Not After : Nov 15 15:34:35 2026 GMT Subject: CN=80E33D897DD8B8C1CA0474F7CB3A54255E3AD734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:5a:a4:28:a4:58:dc:98:7c:8a:ea:d3:d5: 0f:27:b3:2c:ee:ac:78:0d:bd:03:f3:4e:e0:35:d0: d7:e4:87:68:74:6c:ab:28:63:48:7b:15:09:77:e7: 7c:9d:24:5b:01:00:44:83:87:bf:1d:8f:4d:eb:f4: fd:33:f2:1c:41:ea:47:fb:18:72:f2:d1:7d:63:f7: ea:ba:c1:2b:12:4e:9c:2a:4e:53:95:3c:67:94:f9: 04:5c:d4:38:6f:40:85:c6:ad:56:cc:58:22:79:fe: 40:04:f7:d6:14:f5:d8:95:01:55:a5:5d:2d:35:4c: d6:60:d5:ca:3b:45:62:76:19:68:dc:0b:e7:80:f1: 88:1e:52:2a:f3:e4:02:f7:07:f2:1c:44:4f:35:80: 6d:14:88:4b:24:f2:1d:33:6c:b1:90:fe:e2:5e:4a: 06:a5:a9:6f:0f:88:68:d6:6b:30:a0:92:d5:17:6f: 95:ec:33:b5:e3:ae:fd:3d:95:0a:a6:02:53:de:df: 98:2e:94:07:2b:42:5b:16:af:71:9e:7f:80:ab:be: 02:b6:ac:45:e6:12:dd:19:09:1d:5a:a0:7a:66:52: 6a:83:c4:73:49:de:48:65:4e:26:23:dc:0b:73:55: 1c:41:96:5d:27:b2:e5:a5:21:2c:2a:b8:8e:e8:3e: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E3:3D:89:7D:D8:B8:C1:CA:04:74:F7:CB:3A:54:25:5E:3A:D7:34 X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:24:68:04:20:b9:e8:8f:b7:0d:73:c7:5c:f5:bb:34:b6:4b: 03:d1:bc:b3:81:2b:ae:bb:f3:35:eb:8a:28:d1:8f:49:bf:2f: d8:0c:1d:7c:d8:24:50:ef:ca:95:93:f7:bc:d2:b6:07:e5:e3: f8:48:0b:50:fe:9d:97:e1:e5:b7:68:88:e5:4b:24:30:05:89: 1a:6b:4e:55:aa:28:d5:aa:07:86:c1:12:0c:b2:5d:23:51:b3: 00:72:04:eb:22:4f:c6:f3:e7:cd:02:92:df:42:61:d1:db:3c: 17:5e:4e:f4:a5:3c:7f:d9:ed:84:8a:64:06:b2:b2:00:0d:e5: 37:e3:96:bb:05:25:c4:21:52:32:b8:17:30:f1:83:25:fc:f7: 64:db:d5:8e:23:a0:80:df:03:21:af:f7:93:e9:a4:09:c2:1f: c9:cf:8a:c1:1f:7b:01:bf:f9:70:c8:af:f7:a7:7c:df:37:70: d5:8e:a1:e7:77:aa:f9:86:63:f6:53:98:92:df:25:27:29:42: 7a:3b:77:c4:af:e8:8b:84:60:a8:c8:d8:50:e6:99:af:6d:60: 0d:4b:c6:0a:b6:d3:49:37:85:d4:ea:f7:96:98:34:d0:02:a3: 00:e0:f5:6c:37:2c:38:3e:c8:5c:4c:6f:ab:1b:fc:4a:22:06: 2b:91:ce:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmr6+r9L61IlXeellZo9YFIBUzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjExMTQxNTE4MzVaFw0yNjExMTUxNTM0MzVaMDMxMTAvBgNV BAMTKDgwRTMzRDg5N0REOEI4QzFDQTA0NzRGN0NCM0E1NDI1NUUzQUQ3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSN1qkKKRY3Jh8iurT1Q8nsyzu rHgNvQPzTuA10Nfkh2h0bKsoY0h7FQl353ydJFsBAESDh78dj03r9P0z8hxB6kf7 GHLy0X1j9+q6wSsSTpwqTlOVPGeU+QRc1DhvQIXGrVbMWCJ5/kAE99YU9diVAVWl XS01TNZg1co7RWJ2GWjcC+eA8YgeUirz5AL3B/IcRE81gG0UiEsk8h0zbLGQ/uJe SgalqW8PiGjWazCgktUXb5XsM7Xjrv09lQqmAlPe35gulAcrQlsWr3Gef4CrvgK2 rEXmEt0ZCR1aoHpmUmqDxHNJ3khlTiYj3AtzVRxBll0nsuWlISwquI7oPnwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgOM9iX3YuMHKBHT3yzpUJV461zQwHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMkaAQgueiPtw1zx1z1uzS2SwPRvLOBK667 8zXriijRj0m/L9gMHXzYJFDvypWT97zStgfl4/hIC1D+nZfh5bdoiOVLJDAFiRpr TlWqKNWqB4bBEgyyXSNRswByBOsiT8bz580Ckt9CYdHbPBdeTvSlPH/Z7YSKZAay sgAN5TfjlrsFJcQhUjK4FzDxgyX892Tb1Y4joIDfAyGv95PppAnCH8nPisEfewG/ +XDIr/enfN83cNWOoed3qvmGY/ZTmJLfJScpQno7d8Sv6IuEYKjI2FDmma9tYA1L xgq200k3hdTq95aYNNACowDg9Ww3LDg+yFxMb6sb/EoiBiuRzkk= -----END CERTIFICATE-----Generated at Sat Nov 14 22:24:37 2026 by rpki-client