$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json) Hash identifier: GV6QT4009BJQ6a6ASzSe9LkseNabDbi9pfEAjS6Zhkc= Subject key identifier: D0:E9:E1:2C:1F:AC:44:B7:BF:8D:E5:DF:22:43:D5:CF:3D:C0:AD:72 Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B Certificate serial: 7483FB081DA0C9F4D2393805C36AE0C677CB57B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 12:34:42 +0000 Manifest this update: Sun 15 Nov 2026 12:29:42 +0000 Manifest next update: Mon 16 Nov 2026 16:32:42 +0000 Files and hashes: 1: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=) 2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=) 3: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: JuzsULUoDnxVCPjxW+sfxgkpwk0mq6Kcjvz4R/iR3yw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:83:fb:08:1d:a0:c9:f4:d2:39:38:05:c3:6a:e0:c6:77:cb:57:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B Validity Not Before: Nov 15 12:29:42 2026 GMT Not After : Nov 16 16:32:42 2026 GMT Subject: CN=D0E9E12C1FAC44B7BF8DE5DF2243D5CF3DC0AD72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:3b:01:56:ad:d6:87:c1:be:04:9d:02:ac: 0a:48:ae:95:73:95:46:93:a4:5b:03:9b:07:49:56: 7a:17:ee:20:78:bb:0a:cb:90:20:cf:a0:df:b3:a6: 72:37:46:ba:ff:84:07:13:d8:ac:d6:00:48:31:ba: 93:81:e6:15:f7:89:fc:0f:bc:97:6e:b9:ee:fe:f4: 4e:0d:0d:73:01:c8:c0:a5:a3:b4:60:ee:3c:7d:1c: 62:9a:20:e4:fc:e4:1c:24:4f:b3:6c:32:6d:3a:47: a5:f9:96:da:65:83:4f:e4:ae:01:a3:1d:68:8c:e2: 84:df:3f:67:93:4b:ac:e6:cf:8c:ac:61:ac:97:18: 05:39:c8:6a:75:49:d2:7b:fa:65:8e:16:4d:31:67: 59:3c:75:7d:53:63:56:a9:72:b7:ea:22:08:cc:b3: be:78:92:97:a4:e4:4a:05:a1:f4:70:11:52:61:c8: d2:92:f2:80:fc:98:96:c9:b2:0e:9c:06:82:7e:1c: 42:9b:bf:d7:60:e3:21:10:3d:ab:53:ed:29:00:e1: 37:74:ea:47:69:98:b2:78:e6:48:32:ed:34:fc:70: 52:f7:b8:68:56:b0:5e:9a:59:a1:9a:e3:28:52:92: 72:54:de:4f:3a:b7:10:78:5f:24:8b:10:8d:c1:31: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E9:E1:2C:1F:AC:44:B7:BF:8D:E5:DF:22:43:D5:CF:3D:C0:AD:72 X509v3 Authority Key Identifier: keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:26:2b:2a:ba:9f:94:e8:c3:e8:73:16:a4:32:9b:9e:b3: 45:0c:57:1b:7b:61:2f:d8:5c:c8:1e:f9:e7:c3:4a:2d:ab:4c: 37:88:a4:27:e2:fb:19:48:40:80:22:2c:0f:4f:1a:63:2b:61: 8a:5d:5d:01:53:09:b6:cf:4b:c7:e9:db:1a:fd:ab:72:db:5b: f9:f4:b7:4e:27:b5:cc:51:e6:ce:c1:97:61:e4:6e:be:da:5d: 5a:13:5b:cd:a8:6d:68:22:14:7d:1c:64:c0:81:5c:58:11:36: 93:f0:60:aa:03:34:6a:0e:b0:87:72:08:fa:4a:c5:49:01:e0: 59:18:fc:8a:22:9a:39:25:fb:c9:6a:b1:ae:da:9a:2d:38:0b: fd:d9:3e:db:52:a1:b5:db:7d:4f:16:4f:07:fa:8d:82:71:9c: 8a:29:40:d8:c2:e6:e4:78:3a:b6:ff:e3:7a:85:cd:dc:38:10: 8f:58:92:d5:3b:5a:68:85:d2:a0:04:30:74:91:83:a2:01:77: 40:ac:29:71:2e:80:3e:96:02:b8:8c:ce:5b:3b:c5:ad:13:3d: 3e:e0:5f:22:dc:c0:57:c0:93:86:e3:ab:55:16:2a:1f:8a:d1: f6:9d:11:7c:69:6b:c4:9a:85:ab:ea:1f:fd:6f:bb:05:32:60: 2d:aa:6d:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIP7CB2gyfTSOTgFw2rgxnfLV7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx NDlCNjIyQjAeFw0yNjExMTUxMjI5NDJaFw0yNjExMTYxNjMyNDJaMDMxMTAvBgNV BAMTKEQwRTlFMTJDMUZBQzQ0QjdCRjhERTVERjIyNDNENUNGM0RDMEFENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0TsBVq3Wh8G+BJ0CrApIrpVz lUaTpFsDmwdJVnoX7iB4uwrLkCDPoN+zpnI3Rrr/hAcT2KzWAEgxupOB5hX3ifwP vJduue7+9E4NDXMByMClo7Rg7jx9HGKaIOT85BwkT7NsMm06R6X5ltplg0/krgGj HWiM4oTfP2eTS6zmz4ysYayXGAU5yGp1SdJ7+mWOFk0xZ1k8dX1TY1apcrfqIgjM s754kpek5EoFofRwEVJhyNKS8oD8mJbJsg6cBoJ+HEKbv9dg4yEQPatT7SkA4Td0 6kdpmLJ45kgy7TT8cFL3uGhWsF6aWaGa4yhSknJU3k86txB4XySLEI3BMVvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0OnhLB+sRLe/jeXfIkPVzz3ArXIwHwYDVR0j BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4 OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2 MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4 OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP5Jisqup+U6MPocxakMpues0UMVxt7YS/Y XMge+efDSi2rTDeIpCfi+xlIQIAiLA9PGmMrYYpdXQFTCbbPS8fp2xr9q3LbW/n0 t04ntcxR5s7Bl2Hkbr7aXVoTW82obWgiFH0cZMCBXFgRNpPwYKoDNGoOsIdyCPpK xUkB4FkY/Ioimjkl+8lqsa7ami04C/3ZPttSobXbfU8WTwf6jYJxnIopQNjC5uR4 Orb/43qFzdw4EI9YktU7WmiF0qAEMHSRg6IBd0CsKXEugD6WAriMzls7xa0TPT7g XyLcwFfAk4bjq1UWKh+K0fadEXxpa8SahavqH/1vuwUyYC2qbaI= -----END CERTIFICATE-----Generated at Sun Nov 15 18:21:39 2026 by rpki-client