$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json) Hash identifier: ryS/ZWmecaxXBM2qjatFjqupmuGGM8IOD2c0wlbwPSU= Subject key identifier: EC:B6:70:5D:01:86:69:D2:03:A8:07:37:E2:77:73:37:F5:27:71:7B Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Certificate serial: 0A55D37920BD9BED491613CB4B9AB35D1FCE2E14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 07:13:15 +0000 Manifest this update: Sat 14 Nov 2026 07:08:15 +0000 Manifest next update: Sun 15 Nov 2026 10:39:15 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=) 2: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: KWyO6b45Fun8ApD4txGQlJPkoYBSQgwxOHZ+PAf+jos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:55:d3:79:20:bd:9b:ed:49:16:13:cb:4b:9a:b3:5d:1f:ce:2e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Validity Not Before: Nov 14 07:08:15 2026 GMT Not After : Nov 15 10:39:15 2026 GMT Subject: CN=ECB6705D018669D203A80737E2777337F527717B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:75:27:96:30:92:17:8a:5d:9c:f0:a9:9a: 38:31:ec:00:84:8f:31:19:90:f0:d3:15:29:c8:21: fb:ee:9d:2d:ab:96:93:d5:27:29:97:4d:88:7a:dc: 28:75:11:40:be:9c:96:1d:bb:ac:f3:3d:f7:b0:a8: 78:92:de:5e:e6:28:0b:b9:1b:5a:8a:e0:76:4c:84: ff:20:13:0f:4d:8f:ae:32:6e:ce:2a:59:f6:cf:e5: f5:71:26:26:27:24:08:2b:1d:2f:03:22:d1:68:fb: 76:66:2d:f7:72:1b:ed:c4:57:29:73:7d:0b:ca:e0: 35:d1:bc:30:fb:c6:67:f9:91:f5:c9:bd:ec:45:79: d7:30:68:25:58:02:9a:86:94:99:18:46:98:d9:ee: 7e:fe:4b:d7:68:af:26:0d:fc:a4:1f:61:74:e7:12: 20:40:7b:fd:08:7f:17:13:a7:ef:01:95:42:03:41: 45:9c:c7:18:5b:2b:d2:16:29:7b:6a:93:79:20:e4: 2d:ed:2c:8f:81:12:fa:e5:e7:bc:27:86:16:86:1e: c1:fa:48:31:d8:7c:72:55:98:b5:0a:7f:cc:b0:d2: 49:bc:ed:3e:4a:5a:76:89:70:87:82:fb:50:06:fb: d3:5f:f4:2d:6f:60:dc:b3:c3:fc:91:a4:fc:28:68: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B6:70:5D:01:86:69:D2:03:A8:07:37:E2:77:73:37:F5:27:71:7B X509v3 Authority Key Identifier: keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:62:83:cf:51:59:d1:9d:75:c3:18:50:7d:09:e1:36:cf: b5:d6:3c:f2:3c:3e:17:35:24:e0:9f:81:db:33:14:f7:6a:3e: 36:c3:2c:91:82:a3:f5:e5:2f:b3:9f:72:2e:9d:56:2d:3b:18: 38:73:b1:57:ac:17:98:07:60:3b:2c:2f:8c:25:47:ac:3f:cf: ab:db:73:41:cd:63:f0:11:7a:9e:70:7e:ce:07:5c:2d:2b:ab: db:97:92:41:39:8b:17:38:6a:32:e4:fc:5d:7f:14:f6:f5:e3: 99:1e:b2:7b:74:1b:ed:92:be:1c:b5:35:d0:f4:e8:22:fe:03: cc:b1:80:80:1d:d9:8b:df:f8:8d:b3:5b:0e:08:b4:5a:73:12: d6:0d:9c:18:52:4a:58:27:e7:2c:e8:2d:0a:ce:19:cc:b4:cc: ae:aa:17:8c:65:6b:6b:34:ef:c8:08:4a:8a:85:01:62:cc:8b: 75:af:d5:13:ea:be:7b:1b:f3:56:09:ba:b4:d7:2f:4a:ce:89: 6d:25:93:49:6a:fd:ef:95:32:63:b0:d2:6e:07:c2:c8:b3:dd: b1:b0:55:ed:f7:21:e3:2b:8c:48:46:46:8e:c4:7c:76:d5:38: d0:9f:8c:ed:11:f2:21:65:61:3d:34:38:82:f3:5e:6e:a8:5a: af:c9:e8:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClXTeSC9m+1JFhPLS5qzXR/OLhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4 NTYxMzIxNDAeFw0yNjExMTQwNzA4MTVaFw0yNjExMTUxMDM5MTVaMDMxMTAvBgNV BAMTKEVDQjY3MDVEMDE4NjY5RDIwM0E4MDczN0UyNzc3MzM3RjUyNzcxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrtHUnljCSF4pdnPCpmjgx7ACE jzEZkPDTFSnIIfvunS2rlpPVJymXTYh63Ch1EUC+nJYdu6zzPfewqHiS3l7mKAu5 G1qK4HZMhP8gEw9Nj64ybs4qWfbP5fVxJiYnJAgrHS8DItFo+3ZmLfdyG+3EVylz fQvK4DXRvDD7xmf5kfXJvexFedcwaCVYApqGlJkYRpjZ7n7+S9doryYN/KQfYXTn EiBAe/0IfxcTp+8BlUIDQUWcxxhbK9IWKXtqk3kg5C3tLI+BEvrl57wnhhaGHsH6 SDHYfHJVmLUKf8yw0km87T5KWnaJcIeC+1AG+9Nf9C1vYNyzw/yRpPwoaB91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7LZwXQGGadIDqAc34ndzN/UncXswHwYDVR0j BBgwFoAUWGPvz4znBhzf8brO6vz9sYVhMhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4 Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4NTYxMzIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81ODYzRUZDRjhDRTcwNjFDREZGMUJBQ0VFQUZDRkRCMTg1NjEz MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZE QjE4NTYxMzIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4TYoPPUVnRnXXDGFB9CeE2z7XWPPI8Phc1 JOCfgdszFPdqPjbDLJGCo/XlL7Ofci6dVi07GDhzsVesF5gHYDssL4wlR6w/z6vb c0HNY/ARep5wfs4HXC0rq9uXkkE5ixc4ajLk/F1/FPb145kesnt0G+2Svhy1NdD0 6CL+A8yxgIAd2Yvf+I2zWw4ItFpzEtYNnBhSSlgn5yzoLQrOGcy0zK6qF4xla2s0 78gISoqFAWLMi3Wv1RPqvnsb81YJurTXL0rOiW0lk0lq/e+VMmOw0m4Hwsiz3bGw Ve33IeMrjEhGRo7EfHbVONCfjO0R8iFlYT00OILzXm6oWq/J6LM= -----END CERTIFICATE-----Generated at Sat Nov 14 22:28:46 2026 by rpki-client