$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: DCN09mFQa/52zDNxWL0ZqxrQLhKWQyqUqpqCC7O6BKc= Subject key identifier: BA:D8:52:66:3F:90:E4:39:07:4D:73:94:4D:36:39:C5:2A:92:00:2B Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 61F171AD0651C3C3A383188BF2827A6FCD56F764 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:53:10 +0000 Manifest this update: Sat 14 Nov 2026 18:48:10 +0000 Manifest next update: Sun 15 Nov 2026 22:23:10 +0000 Files and hashes: 1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) 2: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: 4hJwh0J2tDCY+1PNm+nMmte0sxi5J6oPsJsZ0+1bARk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f1:71:ad:06:51:c3:c3:a3:83:18:8b:f2:82:7a:6f:cd:56:f7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: Nov 14 18:48:10 2026 GMT Not After : Nov 15 22:23:10 2026 GMT Subject: CN=BAD852663F90E439074D73944D3639C52A92002B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:09:02:dd:c8:7f:5c:48:08:30:c0:5e:a4: cc:7e:51:54:9b:20:43:42:15:3e:98:5a:04:31:26: 5b:1b:f6:15:0a:4d:d4:60:24:5b:9f:bb:7a:6c:20: d5:f8:25:b1:e3:7e:e2:6d:b8:75:e8:41:5c:6e:55: 4d:d1:3f:88:91:c2:a6:06:f8:0e:ea:3c:7d:51:b9: 5b:6d:92:fd:7e:6f:06:69:15:b2:09:de:b0:92:44: 45:d9:3e:d6:3d:59:75:0b:19:43:7f:28:69:92:9b: d4:da:18:0c:65:37:61:2b:94:0b:78:21:65:bd:3b: a4:67:d4:33:d4:b1:cf:de:72:a3:ef:f5:34:7e:3d: 26:eb:b5:80:76:10:c0:ac:6e:c8:ab:9b:a0:fe:01: 16:fc:e0:ce:de:fd:be:2c:93:5e:df:53:dc:76:02: c9:6e:8f:73:33:5b:c4:a2:51:47:c1:1e:19:1a:aa: d8:ab:73:47:dd:d6:cd:1c:69:4a:a1:b1:98:0a:dc: 43:b7:80:bf:ad:d4:a7:e8:51:bf:60:7d:34:c8:4a: 8e:c8:d4:7f:e6:ba:bd:fb:6a:e3:93:2e:4a:e2:2a: 9b:51:23:43:0b:f9:70:18:41:48:26:38:6b:93:50: 39:7b:08:dd:4b:88:06:ec:a9:c6:b7:72:f4:93:c5: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D8:52:66:3F:90:E4:39:07:4D:73:94:4D:36:39:C5:2A:92:00:2B X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:98:14:a2:10:f2:12:01:91:de:3a:92:fb:43:38:bf:a1:1a: ee:ca:f9:09:30:72:96:3c:36:87:e3:b5:81:b2:21:c9:b8:e7: 73:de:07:50:89:3d:48:89:51:fe:df:a4:6c:e7:ca:38:cc:70: 8f:3a:69:6c:37:9b:ad:8b:0f:72:e9:94:2e:29:7c:d1:8b:5e: 69:eb:23:55:65:f3:bd:15:59:8a:a4:a1:38:6e:95:05:ac:ca: c2:5e:93:58:b3:0e:8c:77:ee:28:fc:ab:7b:2d:e0:f9:59:e8: 9e:06:47:dd:b5:27:0f:a7:e9:03:94:a0:8b:86:d1:d1:6c:ce: 75:47:f0:4d:fc:a8:20:3e:ea:82:1d:d2:b7:00:25:82:3b:c4: b2:45:43:76:04:63:a5:77:c9:b6:5d:15:b3:93:b4:01:4d:cd: 80:0c:bc:f5:45:f4:9f:0d:96:10:b2:22:ef:3d:6f:4f:cc:96: 79:0a:4a:74:5c:d3:ac:bb:8a:ac:3c:39:4f:df:77:c0:7a:0b: 3c:0e:79:25:b6:76:1d:12:ed:54:70:37:17:64:34:74:9f:cb: 7f:c7:ac:94:f9:f5:61:41:16:8e:53:15:92:a7:21:50:8b:92: 49:24:a3:fb:e5:d9:4a:7a:ad:24:6a:76:00:d9:22:9b:64:3a: 8a:9a:f8:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfFxrQZRw8OjgxiL8oJ6b81W92QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjExMTQxODQ4MTBaFw0yNjExMTUyMjIzMTBaMDMxMTAvBgNV BAMTKEJBRDg1MjY2M0Y5MEU0MzkwNzRENzM5NDREMzYzOUM1MkE5MjAwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCQkC3ch/XEgIMMBepMx+UVSb IENCFT6YWgQxJlsb9hUKTdRgJFufu3psINX4JbHjfuJtuHXoQVxuVU3RP4iRwqYG +A7qPH1RuVttkv1+bwZpFbIJ3rCSREXZPtY9WXULGUN/KGmSm9TaGAxlN2ErlAt4 IWW9O6Rn1DPUsc/ecqPv9TR+PSbrtYB2EMCsbsirm6D+ARb84M7e/b4sk17fU9x2 Asluj3MzW8SiUUfBHhkaqtirc0fd1s0caUqhsZgK3EO3gL+t1KfoUb9gfTTISo7I 1H/mur37auOTLkriKptRI0ML+XAYQUgmOGuTUDl7CN1LiAbsqca3cvSTxZbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuthSZj+Q5DkHTXOUTTY5xSqSACswHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeYFKIQ8hIBkd46kvtDOL+hGu7K+QkwcpY8 NofjtYGyIcm453PeB1CJPUiJUf7fpGznyjjMcI86aWw3m62LD3LplC4pfNGLXmnr I1Vl870VWYqkoThulQWsysJek1izDox37ij8q3st4PlZ6J4GR921Jw+n6QOUoIuG 0dFsznVH8E38qCA+6oId0rcAJYI7xLJFQ3YEY6V3ybZdFbOTtAFNzYAMvPVF9J8N lhCyIu89b0/MlnkKSnRc06y7iqw8OU/fd8B6CzwOeSW2dh0S7VRwNxdkNHSfy3/H rJT59WFBFo5TFZKnIVCLkkkko/vl2Up6rSRqdgDZIptkOoqa+EQ= -----END CERTIFICATE-----Generated at Sun Nov 15 06:38:58 2026 by rpki-client