$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: n5ACUuN2z6nRrCPAx5PlkraPap+NGliOEAxmlQVd6rI= Subject key identifier: EC:91:4E:8B:45:DC:FD:A1:18:2A:35:4F:FE:E8:6D:DA:71:97:60:64 Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 5765EB6E4ECD5B797604F225FE7105D9CFB1FDBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:27:42 +0000 Manifest this update: Sat 14 Nov 2026 18:22:42 +0000 Manifest next update: Sun 15 Nov 2026 21:21:42 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) 2: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: cqCVP/IFjlrLmNprslHzKbHeFthhWoCNuDMhsuB6j0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:65:eb:6e:4e:cd:5b:79:76:04:f2:25:fe:71:05:d9:cf:b1:fd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Nov 14 18:22:42 2026 GMT Not After : Nov 15 21:21:42 2026 GMT Subject: CN=EC914E8B45DCFDA1182A354FFEE86DDA71976064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:b6:6a:58:86:35:7c:c3:44:dd:5d:08:93: e7:99:81:52:4b:96:6b:3f:31:50:df:9f:2b:26:73: 8c:f3:0d:69:3f:9e:e0:08:15:49:b3:88:b5:1f:a3: 9e:8c:b4:a2:0a:98:f3:94:29:0c:3c:45:d4:77:61: d6:4a:fa:71:dc:b5:db:1c:88:38:5d:1e:85:06:a8: 7c:0c:57:57:bc:c9:04:8f:bd:ff:c2:92:6a:36:1e: a5:52:4c:92:26:22:42:40:3d:45:c8:32:ff:df:3b: 1d:65:69:b2:e7:2c:db:72:9f:03:51:da:a6:75:a7: 1e:ae:b1:85:9e:b6:e4:c5:22:26:51:fa:05:e7:5c: d1:42:40:cd:83:b8:20:6f:c0:60:aa:cc:50:e9:6c: b5:cb:51:a9:e7:7a:f1:b5:c4:bb:98:e2:06:a7:0c: 17:ab:29:1a:c2:58:fd:0a:11:e5:28:41:6a:bf:28: e0:bc:9f:04:38:bd:88:a0:11:70:db:a7:da:b3:4d: fd:f4:74:9d:60:9b:cb:a0:fc:f6:2d:5b:75:fc:ad: f8:3a:4b:cf:a5:7a:ce:7a:1d:bd:0e:90:92:63:42: 7e:e7:ef:b3:c5:8c:98:89:b9:df:6b:83:6b:ba:be: 23:4a:b8:e4:3d:ec:98:5b:e0:0b:6b:b5:d8:da:d5: 55:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:91:4E:8B:45:DC:FD:A1:18:2A:35:4F:FE:E8:6D:DA:71:97:60:64 X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:71:de:2f:8c:60:8e:e3:c1:ae:d7:ca:42:68:c5:62:11:37: 67:07:85:23:c5:4a:70:da:18:e4:f4:2d:1c:df:42:91:8f:bb: f6:1d:00:91:44:10:6c:45:54:13:ad:65:bc:2c:c9:57:69:e9: e7:a2:c5:3e:ba:b9:79:ba:a8:02:91:cc:48:f5:3b:ab:4c:fa: 69:30:b6:97:3b:4d:05:05:29:7a:de:f2:20:5f:e0:63:17:ad: fb:b1:9a:46:02:0a:ed:0f:24:d2:9c:0a:37:4f:4b:77:cc:2b: 8d:8d:27:6e:37:d2:3d:9e:ac:fd:ee:58:33:34:de:40:3f:ff: 76:30:c2:13:e9:39:a1:d7:7f:96:3c:98:5a:d3:ae:c0:d6:e7: 47:e8:84:31:0a:8c:d3:3f:ac:cf:4a:df:63:b1:9c:bf:74:0b: fa:3b:69:07:dd:ff:09:df:ce:e3:d7:6c:19:cf:21:ac:f1:3e: 43:cc:8d:a3:ad:0a:7e:d8:9e:ac:ee:4c:ab:02:87:40:95:38: fc:69:9e:20:ac:43:a0:b0:0d:52:3c:49:3f:ba:38:41:99:99: 52:ee:5e:d5:1c:72:bf:92:a5:48:c2:27:17:d9:50:ac:6f:b4: 76:53:3c:d7:29:15:8c:e3:33:c0:79:eb:52:43:68:24:64:19: da:6a:21:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2Xrbk7NW3l2BPIl/nEF2c+x/b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjExMTQxODIyNDJaFw0yNjExMTUyMTIxNDJaMDMxMTAvBgNV BAMTKEVDOTE0RThCNDVEQ0ZEQTExODJBMzU0RkZFRTg2RERBNzE5NzYwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh77ZqWIY1fMNE3V0Ik+eZgVJL lms/MVDfnysmc4zzDWk/nuAIFUmziLUfo56MtKIKmPOUKQw8RdR3YdZK+nHctdsc iDhdHoUGqHwMV1e8yQSPvf/Ckmo2HqVSTJImIkJAPUXIMv/fOx1labLnLNtynwNR 2qZ1px6usYWetuTFIiZR+gXnXNFCQM2DuCBvwGCqzFDpbLXLUannevG1xLuY4gan DBerKRrCWP0KEeUoQWq/KOC8nwQ4vYigEXDbp9qzTf30dJ1gm8ug/PYtW3X8rfg6 S8+les56Hb0OkJJjQn7n77PFjJiJud9rg2u6viNKuOQ97Jhb4Atrtdja1VV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7JFOi0Xc/aEYKjVP/uht2nGXYGQwHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVx3i+MYI7jwa7XykJoxWIRN2cHhSPFSnDa GOT0LRzfQpGPu/YdAJFEEGxFVBOtZbwsyVdp6eeixT66uXm6qAKRzEj1O6tM+mkw tpc7TQUFKXre8iBf4GMXrfuxmkYCCu0PJNKcCjdPS3fMK42NJ2430j2erP3uWDM0 3kA//3YwwhPpOaHXf5Y8mFrTrsDW50fohDEKjNM/rM9K32OxnL90C/o7aQfd/wnf zuPXbBnPIazxPkPMjaOtCn7YnqzuTKsCh0CVOPxpniCsQ6CwDVI8ST+6OEGZmVLu XtUccr+SpUjCJxfZUKxvtHZTPNcpFYzjM8B561JDaCRkGdpqIfU= -----END CERTIFICATE-----Generated at Sun Nov 15 12:30:21 2026 by rpki-client