$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: 12L5OnDNoxJefet4uxTzn8SlwM+F+y/gYdZO4GT9Gcc= Subject key identifier: 95:C5:66:FA:BA:5A:71:41:09:6D:C1:A0:C2:02:C2:AD:FE:46:FE:AA Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 0642496E6BA9147E64BD993085CA6152A9A417BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 03:59:02 +0000 Manifest this update: Sun 15 Nov 2026 03:54:02 +0000 Manifest next update: Mon 16 Nov 2026 06:06:02 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) 3: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: QyW2Tqy90RYHNMCZZOSNRlXJYKP2dt2M8yt6XuCTb2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:42:49:6e:6b:a9:14:7e:64:bd:99:30:85:ca:61:52:a9:a4:17:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Nov 15 03:54:02 2026 GMT Not After : Nov 16 06:06:02 2026 GMT Subject: CN=95C566FABA5A7141096DC1A0C202C2ADFE46FEAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:0d:82:06:1d:e1:0b:d9:2c:d7:b0:ef:01: 4e:59:5b:86:a6:a5:20:3a:e0:c3:ce:9d:5d:c9:1b: 63:d3:74:10:18:6c:a7:3f:b3:1a:07:bd:ed:2f:4d: e9:a4:4d:43:b4:45:5c:6f:82:da:7c:c7:d4:f8:e4: f6:e6:f8:79:f9:8c:5b:1d:41:49:22:f7:62:38:a8: 23:e2:e4:fd:0f:b5:57:c7:ea:92:13:cb:82:36:8f: 5e:08:49:f2:10:9c:9a:67:5c:55:91:0d:9f:eb:20: 30:ad:c2:72:bb:63:fa:f2:c9:82:09:89:ab:3e:58: 8b:f3:45:87:37:88:87:31:9c:fd:00:ee:08:b3:5a: 6b:4c:b1:1b:05:b1:bb:47:94:6c:4d:5f:ad:fa:15: 07:df:46:9d:0e:63:e8:8c:61:02:b2:d4:d2:c3:8c: aa:92:1e:d1:c1:23:14:ba:ea:d3:aa:af:a5:8d:d4: 59:11:5d:84:dd:fe:07:a8:20:6b:19:f5:27:e8:c6: 6f:cd:e2:cc:f8:69:1b:01:bc:fb:77:db:f6:3f:d1: 8c:3f:ea:9d:6d:fe:01:13:8c:4d:2b:48:02:08:40: 1f:a9:e3:60:1a:78:73:70:cb:52:3a:34:5f:43:9f: c0:d1:fc:91:62:81:2e:6a:be:6d:f3:79:4f:42:27: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:66:FA:BA:5A:71:41:09:6D:C1:A0:C2:02:C2:AD:FE:46:FE:AA X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d9:37:e1:6f:e8:7f:6d:e2:2e:1f:1d:b1:69:6d:28:a1:71: b5:19:45:e8:da:9d:f3:53:b4:50:a7:ab:64:e3:b2:89:dd:ba: 25:ab:92:97:19:bf:81:d2:bb:6c:85:8b:aa:40:0a:38:4c:05: 17:14:a9:2e:fd:33:82:d2:98:ac:1a:67:63:09:79:81:e8:d6: 49:29:3f:7c:ee:a9:e6:1e:44:25:e4:ed:9b:9a:25:4b:08:14: da:98:1f:4c:4a:35:eb:a6:dc:fe:e8:29:3e:e7:7c:d7:7c:0c: fc:dd:88:b9:ff:6b:4f:87:24:be:16:2c:b7:e9:67:60:75:c7: 32:cd:9e:ee:b4:3f:b5:cd:a2:3f:64:14:f3:e2:7c:a5:27:f0: b4:b6:0a:26:8e:5c:8e:df:fc:cc:18:db:24:70:92:7a:80:3c: f4:3b:58:39:59:00:ff:74:44:c0:fb:d2:83:b3:2d:73:29:71: a6:54:bb:38:77:72:07:a2:b3:86:bf:61:8a:32:dd:4e:a9:35: 2f:3c:74:40:93:71:f7:9a:49:75:1b:f9:f4:ab:a3:2f:f7:59: 67:1d:34:34:cd:98:12:5f:41:2a:27:fd:8a:71:52:91:6b:87: 81:cf:ca:4a:3b:63:15:3d:34:ec:30:82:51:72:76:98:4e:11: d7:ed:5c:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBkJJbmupFH5kvZkwhcphUqmkF74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjExMTUwMzU0MDJaFw0yNjExMTYwNjA2MDJaMDMxMTAvBgNV BAMTKDk1QzU2NkZBQkE1QTcxNDEwOTZEQzFBMEMyMDJDMkFERkU0NkZFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVw2CBh3hC9ks17DvAU5ZW4am pSA64MPOnV3JG2PTdBAYbKc/sxoHve0vTemkTUO0RVxvgtp8x9T45Pbm+Hn5jFsd QUki92I4qCPi5P0PtVfH6pITy4I2j14ISfIQnJpnXFWRDZ/rIDCtwnK7Y/ryyYIJ ias+WIvzRYc3iIcxnP0A7gizWmtMsRsFsbtHlGxNX636FQffRp0OY+iMYQKy1NLD jKqSHtHBIxS66tOqr6WN1FkRXYTd/geoIGsZ9Sfoxm/N4sz4aRsBvPt32/Y/0Yw/ 6p1t/gETjE0rSAIIQB+p42AaeHNwy1I6NF9Dn8DR/JFigS5qvm3zeU9CJ1WHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcVm+rpacUEJbcGgwgLCrf5G/qowHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDZN+Fv6H9t4i4fHbFpbSihcbUZRejanfNT tFCnq2TjsonduiWrkpcZv4HSu2yFi6pACjhMBRcUqS79M4LSmKwaZ2MJeYHo1kkp P3zuqeYeRCXk7ZuaJUsIFNqYH0xKNeum3P7oKT7nfNd8DPzdiLn/a0+HJL4WLLfp Z2B1xzLNnu60P7XNoj9kFPPifKUn8LS2CiaOXI7f/MwY2yRwknqAPPQ7WDlZAP90 RMD70oOzLXMpcaZUuzh3cgeis4a/YYoy3U6pNS88dECTcfeaSXUb+fSroy/3WWcd NDTNmBJfQSon/YpxUpFrh4HPyko7YxU9NOwwglFydphOEdftXLs= -----END CERTIFICATE-----Generated at Sun Nov 15 11:13:54 2026 by rpki-client