$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: h2yYjlHjRYau18mj/hbU0LBcV8OjZP77yvbVvXEJA6s= Subject key identifier: 70:B0:14:CB:29:92:0E:5B:01:C1:D9:5B:DE:7F:BE:70:3B:0B:C1:0F Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 518DB02382317BE1880C0A57D3FB5F2B4FB8DA14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 08:04:15 +0000 Manifest this update: Sun 15 Nov 2026 07:59:15 +0000 Manifest next update: Mon 16 Nov 2026 12:01:15 +0000 Files and hashes: 1: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: 53z7HnzxjioYfe1pNejQq5KVLW1KAnHiEOchixc+3qI=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8d:b0:23:82:31:7b:e1:88:0c:0a:57:d3:fb:5f:2b:4f:b8:da:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: Nov 15 07:59:15 2026 GMT Not After : Nov 16 12:01:15 2026 GMT Subject: CN=70B014CB29920E5B01C1D95BDE7FBE703B0BC10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:fe:11:c1:e4:e0:c1:23:b7:14:cb:3d:a0: 01:49:54:04:8d:8d:45:54:5e:d7:8a:8b:83:5a:c5: 60:0d:1b:6c:89:4b:17:9f:0c:58:41:55:bb:aa:71: 55:e7:da:e8:62:ef:e5:1f:02:8c:83:84:2e:e2:2e: 7c:19:cf:4f:90:94:b1:6c:9b:af:f8:74:52:fb:69: 60:e2:7e:0d:93:64:a8:20:32:c4:c1:26:38:04:4e: ee:89:4b:e7:76:13:ca:a1:4e:0b:c9:90:d4:04:01: ee:bf:6d:39:78:de:45:e0:cb:38:07:48:d9:5e:cf: 0a:32:cc:91:fb:89:98:37:3e:b9:81:df:22:07:2c: 72:26:99:10:06:56:ab:cc:43:6b:04:04:d4:7b:7d: df:7a:b8:cc:18:bd:42:38:76:9b:11:5d:a6:b5:a1: 13:87:9e:09:5b:62:64:1f:c6:5f:3c:fc:6a:b5:f6: fb:d3:60:e4:00:c3:67:45:be:95:66:99:a4:22:c5: 36:ab:b2:c8:b7:4a:28:3e:c9:ce:ee:ef:09:d5:60: 9b:3e:34:9c:93:9f:af:aa:11:bb:e4:7c:25:07:27: a1:39:cf:aa:c7:9e:be:ba:e7:5d:ef:17:40:fa:35: 18:85:92:48:04:d0:e3:6c:31:aa:65:ee:2e:8e:3d: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:14:CB:29:92:0E:5B:01:C1:D9:5B:DE:7F:BE:70:3B:0B:C1:0F X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f8:93:e8:fb:0d:1b:e8:d3:ed:cc:ab:33:63:51:69:5f:33: b7:b0:69:9e:62:47:c3:a4:d7:82:46:5d:4c:7d:2f:fc:b4:9b: 63:77:f6:9b:c5:65:7a:e9:46:de:f3:82:cf:52:b1:a7:ca:3d: 38:0a:94:d8:0a:2f:9f:6e:a1:2b:b2:8a:e9:bf:7b:c4:6c:95: d5:11:a4:84:17:6f:34:64:db:79:d5:0e:f2:12:d8:19:df:c4: a5:0e:90:55:c5:54:3e:62:6c:69:1c:8a:cc:04:89:09:c6:43: ef:af:80:cf:34:82:c2:9c:48:51:20:54:fd:91:c0:ae:e4:5b: fd:b1:7c:e4:ec:c5:09:7e:b5:38:f6:62:44:3b:21:95:5e:f7: 6d:e0:f3:2f:e6:42:48:7d:94:97:70:04:58:05:0f:9c:02:7b: 35:82:d2:c3:8d:33:24:0e:2c:39:cd:dd:a7:79:4c:b6:2a:fc: 54:f8:f2:0b:b5:b6:87:dc:d6:6e:a1:f4:8a:cf:e5:c6:f7:8a: 9a:4a:05:28:f0:df:a2:6f:e7:81:93:4f:27:8c:10:16:a1:61: 07:f0:2a:08:be:7c:52:40:e5:51:0c:72:6a:b9:e3:81:45:21: 9f:51:f8:ed:5d:d4:3d:ef:13:e5:85:9b:45:c6:ed:0c:7a:3a: 6a:c3:d6:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUY2wI4Ixe+GIDApX0/tfK0+42hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjExMTUwNzU5MTVaFw0yNjExMTYxMjAxMTVaMDMxMTAvBgNV BAMTKDcwQjAxNENCMjk5MjBFNUIwMUMxRDk1QkRFN0ZCRTcwM0IwQkMxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqf4RweTgwSO3FMs9oAFJVASN jUVUXteKi4NaxWANG2yJSxefDFhBVbuqcVXn2uhi7+UfAoyDhC7iLnwZz0+QlLFs m6/4dFL7aWDifg2TZKggMsTBJjgETu6JS+d2E8qhTgvJkNQEAe6/bTl43kXgyzgH SNlezwoyzJH7iZg3PrmB3yIHLHImmRAGVqvMQ2sEBNR7fd96uMwYvUI4dpsRXaa1 oROHnglbYmQfxl88/Gq19vvTYOQAw2dFvpVmmaQixTarssi3Sig+yc7u7wnVYJs+ NJyTn6+qEbvkfCUHJ6E5z6rHnr66513vF0D6NRiFkkgE0ONsMapl7i6OPdm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLAUyymSDlsBwdlb3n++cDsLwQ8wHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL4k+j7DRvo0+3MqzNjUWlfM7ewaZ5iR8Ok 14JGXUx9L/y0m2N39pvFZXrpRt7zgs9SsafKPTgKlNgKL59uoSuyium/e8RsldUR pIQXbzRk23nVDvIS2BnfxKUOkFXFVD5ibGkciswEiQnGQ++vgM80gsKcSFEgVP2R wK7kW/2xfOTsxQl+tTj2YkQ7IZVe923g8y/mQkh9lJdwBFgFD5wCezWC0sONMyQO LDnN3ad5TLYq/FT48gu1tofc1m6h9IrP5cb3ippKBSjw36Jv54GTTyeMEBahYQfw Kgi+fFJA5VEMcmq544FFIZ9R+O1d1D3vE+WFm0XG7Qx6OmrD1t4= -----END CERTIFICATE-----Generated at Sun Nov 15 11:52:09 2026 by rpki-client