$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft File: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft (raw, json) Hash identifier: zNZlpcRt6b+GrgPSzgV6wcqNkwq7nHSSGn703Dkh+vE= Subject key identifier: 40:52:EC:97:38:BB:42:65:66:A3:02:C1:DC:0E:A1:EF:1D:3A:70:87 Authority key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB Certificate issuer: /CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Certificate serial: 4A6643703D726297B07D82C33972A9644B815CE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 05:20:46 +0000 Manifest this update: Sun 15 Nov 2026 05:15:46 +0000 Manifest next update: Mon 16 Nov 2026 06:03:46 +0000 Files and hashes: 1: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl (hash: NRltt7OXd2SjZCQzLXy0hVZz6F+9GItLLhM6qGe+EWk=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: HU+tP0ePX+yD7/CYpvvWhY8DWw0D5TG8DRzaRiSU/0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:66:43:70:3d:72:62:97:b0:7d:82:c3:39:72:a9:64:4b:81:5c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Validity Not Before: Nov 15 05:15:46 2026 GMT Not After : Nov 16 06:03:46 2026 GMT Subject: CN=4052EC9738BB426566A302C1DC0EA1EF1D3A7087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:e8:cd:6e:c5:71:d7:97:0b:d4:34:dc:d5: 0f:32:f5:9e:a5:88:ff:3f:97:1a:82:fa:c3:a6:34: 5c:b2:65:ff:ef:c4:0f:a7:5b:4c:e4:74:f9:0c:ac: e9:db:5a:7b:52:64:9b:ae:6f:e6:a7:be:1a:d8:36: 23:bd:7d:67:d8:c9:75:5e:67:b2:32:40:a1:98:61: d7:fe:e7:bd:2a:ba:9b:8f:a1:d6:f8:23:2e:ab:36: ff:b3:9b:83:27:66:ec:10:4b:9b:a2:0d:80:2f:03: ed:93:0f:90:65:06:40:54:a2:ac:65:a1:a7:a8:ed: 23:93:7f:73:f5:1d:27:ad:ee:50:71:1f:67:e0:e7: 8a:35:5a:c8:15:dd:be:6b:24:b3:f6:8d:a0:55:01: e3:07:66:24:8a:3a:38:db:80:c7:a7:86:22:36:46: a3:6b:c3:29:a3:63:b3:a8:88:aa:a8:6a:35:93:4f: 79:bf:84:38:24:95:f4:e7:1c:23:56:ae:d8:08:03: ba:47:5f:fa:b2:4b:3a:ff:7f:c5:74:6e:d2:4c:77: ef:6c:47:9f:93:cd:31:70:b0:1b:8b:d5:66:63:b0: 17:55:f2:73:1f:c2:fd:30:84:ee:17:83:63:38:0a: f5:0e:13:ca:a4:79:21:2b:e4:ea:3c:59:86:84:bd: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:52:EC:97:38:BB:42:65:66:A3:02:C1:DC:0E:A1:EF:1D:3A:70:87 X509v3 Authority Key Identifier: keyid:5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:90:79:4b:80:64:91:21:60:d0:4c:b5:45:f9:80:f2:fb:2f: 1f:e7:26:10:ac:ec:53:ca:64:37:c2:97:5b:59:ef:d7:1c:57: c4:f8:e4:d9:ef:af:c3:23:ac:b3:45:7c:f2:3a:07:0f:c5:c1: 13:e0:55:7c:d1:9e:1c:f6:59:eb:7c:df:97:8b:1f:a5:70:6a: fc:b5:21:72:27:d7:78:12:ca:cd:38:9a:de:40:b6:62:e2:d0: 33:a5:e5:44:54:c0:1c:80:de:d3:d3:56:e3:df:cc:44:d6:da: 29:e1:18:78:c6:53:aa:6c:cd:97:f2:69:a3:2c:97:fd:d0:d2: c0:c4:b2:f3:db:55:0c:3a:3f:72:2f:20:13:71:42:49:b4:dd: b2:57:f1:26:1a:97:1a:2b:a1:65:64:f2:29:4a:40:92:04:83: ed:d4:06:a5:e1:66:b2:36:35:ef:1f:53:83:97:4f:68:99:f2: f4:fc:07:d6:14:89:42:76:6e:4e:e9:46:24:18:85:f3:6d:e6: be:9c:5f:45:b6:ae:4c:f5:54:c0:17:7f:7b:67:46:15:00:25: 31:74:a4:3f:a7:b4:3b:ce:09:52:72:65:09:65:15:3d:5e:97: b1:64:fa:c0:1f:e4:13:53:50:87:99:ef:71:cd:51:27:ef:19: 94:5e:f7:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSmZDcD1yYpewfYLDOXKpZEuBXOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1 RURFQ0JEQjAeFw0yNjExMTUwNTE1NDZaFw0yNjExMTYwNjAzNDZaMDMxMTAvBgNV BAMTKDQwNTJFQzk3MzhCQjQyNjU2NkEzMDJDMURDMEVBMUVGMUQzQTcwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEOjNbsVx15cL1DTc1Q8y9Z6l iP8/lxqC+sOmNFyyZf/vxA+nW0zkdPkMrOnbWntSZJuub+anvhrYNiO9fWfYyXVe Z7IyQKGYYdf+570qupuPodb4Iy6rNv+zm4MnZuwQS5uiDYAvA+2TD5BlBkBUoqxl oaeo7SOTf3P1HSet7lBxH2fg54o1WsgV3b5rJLP2jaBVAeMHZiSKOjjbgMenhiI2 RqNrwymjY7OoiKqoajWTT3m/hDgklfTnHCNWrtgIA7pHX/qySzr/f8V0btJMd+9s R5+TzTFwsBuL1WZjsBdV8nMfwv0whO4Xg2M4CvUOE8qkeSEr5Oo8WYaEvZhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQFLslzi7QmVmowLB3A6h7x06cIcwHwYDVR0j BBgwFoAUXVlZwEre26XrF+cflfbEAl7ey9swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlYWI0NDItNzQ4MC00NTgxLTgxZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0 QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1RURFQ0JEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDU5NTlDMDRBREVEQkE1RUIxN0U3MUY5NUY2QzQwMjVFREVD QkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0 MDI1RURFQ0JEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmQeUuAZJEhYNBMtUX5gPL7Lx/nJhCs7FPK ZDfCl1tZ79ccV8T45Nnvr8MjrLNFfPI6Bw/FwRPgVXzRnhz2Wet835eLH6Vwavy1 IXIn13gSys04mt5AtmLi0DOl5URUwByA3tPTVuPfzETW2inhGHjGU6pszZfyaaMs l/3Q0sDEsvPbVQw6P3IvIBNxQkm03bJX8SYalxoroWVk8ilKQJIEg+3UBqXhZrI2 Ne8fU4OXT2iZ8vT8B9YUiUJ2bk7pRiQYhfNt5r6cX0W2rkz1VMAXf3tnRhUAJTF0 pD+ntDvOCVJyZQllFT1el7Fk+sAf5BNTUIeZ73HNUSfvGZRe9/8= -----END CERTIFICATE-----Generated at Sun Nov 15 15:20:03 2026 by rpki-client