$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: U9yc0dqd3Wwx4TW5z9j0ygzVr7npET7WXXBxDGpEH2U= Subject key identifier: 1C:91:C9:AD:C7:8A:B5:D1:B7:D2:92:EE:C9:06:99:AE:CA:41:50:23 Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 53C051E8FA6E7A0E7E3A7C62E72DE312EA251E00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 17:53:36 +0000 Manifest this update: Tue 10 Nov 2026 17:48:36 +0000 Manifest next update: Wed 11 Nov 2026 20:01:36 +0000 Files and hashes: 1: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 2: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: khRiGTu9Rz/qzhHhsfIRjPdh6Z4kVyJh+LW8d4yVIP0=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c0:51:e8:fa:6e:7a:0e:7e:3a:7c:62:e7:2d:e3:12:ea:25:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Nov 10 17:48:36 2026 GMT Not After : Nov 11 20:01:36 2026 GMT Subject: CN=1C91C9ADC78AB5D1B7D292EEC90699AECA415023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:37:bc:11:03:01:6e:a4:fa:cd:7e:55:ab: 95:72:55:71:bc:e3:bd:64:29:ea:3e:91:68:05:c5: c4:ba:af:f8:3d:0c:cc:5a:c1:8a:c1:f2:b3:76:02: 83:9b:6b:b4:78:49:1f:a8:5d:0b:a9:77:78:ce:6d: fb:f6:06:74:d1:80:59:f9:81:e3:0c:50:c2:0b:39: af:52:0f:8e:ec:fc:ed:17:93:77:5c:22:29:da:75: 9c:0c:6f:08:3e:fc:9e:e7:c3:5a:cc:55:e4:2b:51: 42:14:36:7c:18:ad:21:57:2c:8c:ae:d1:52:96:3f: 6d:4a:bc:d4:ee:13:0b:75:3d:5a:bc:62:ee:0b:d2: 23:06:5c:80:07:40:b4:01:34:29:d2:c5:84:37:c9: c5:69:13:52:e9:dc:8f:8a:25:f7:34:1c:5a:6e:87: 52:bd:e0:f8:af:01:9b:69:09:16:2b:22:ff:fb:df: 62:b4:cc:92:7e:83:0d:af:df:b0:87:9c:5c:10:ac: ed:af:08:3f:a2:ff:fe:d0:f2:3a:64:83:b3:09:62: 7a:a7:88:e7:98:38:34:81:90:08:25:a2:dc:2f:0d: aa:38:43:46:c2:2f:57:53:91:8e:9c:09:2e:79:f7: 88:2c:cc:57:fb:c1:04:46:0b:bf:cb:f4:82:3e:f5: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:91:C9:AD:C7:8A:B5:D1:B7:D2:92:EE:C9:06:99:AE:CA:41:50:23 X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cc:e8:ca:c3:50:a8:8a:e4:63:33:fa:7a:99:4f:21:92:41: 38:63:20:ca:b7:d2:3a:3c:58:ab:fb:ee:52:94:80:a4:fe:8e: 8d:36:94:3f:cc:b6:57:cc:c5:e6:6d:03:3c:81:c6:37:da:fa: 74:41:6d:cd:62:2e:5f:22:c2:17:f8:0c:98:32:c8:12:1a:1a: 99:9f:46:84:31:82:46:d8:20:72:44:6f:76:02:d7:84:88:31: 8c:77:d3:d2:44:2b:cf:cd:a0:4d:c1:a9:ad:ae:61:27:9f:d2: 2d:3a:48:6e:50:5f:27:24:0d:fe:e1:e4:87:07:97:fa:ca:1c: 73:45:9b:c0:15:8e:71:40:00:fa:f1:c0:1b:05:d4:af:8d:d7: 01:6e:61:78:bc:5c:d3:3c:ad:64:00:ce:43:b8:9a:dd:03:63: 1c:fa:c1:1f:7e:04:2a:d0:3e:bc:c1:3b:64:dc:ee:e6:07:8c: 77:66:5d:96:a5:6d:47:3b:e5:e5:bf:2f:47:fc:95:f2:c3:dc: 40:41:c7:ed:cb:ca:80:69:1c:c8:77:a0:66:67:44:e3:61:61: 56:21:63:74:5f:55:93:c7:2f:00:79:8d:4d:67:18:d5:ed:b1: c3:07:2b:69:bc:d3:22:20:dd:c2:d2:ba:8b:d2:7d:8f:5f:53: cf:d4:67:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8BR6Ppueg5+Onxi5y3jEuolHgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjExMTAxNzQ4MzZaFw0yNjExMTEyMDAxMzZaMDMxMTAvBgNV BAMTKDFDOTFDOUFEQzc4QUI1RDFCN0QyOTJFRUM5MDY5OUFFQ0E0MTUwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QDe8EQMBbqT6zX5Vq5VyVXG8 471kKeo+kWgFxcS6r/g9DMxawYrB8rN2AoOba7R4SR+oXQupd3jObfv2BnTRgFn5 geMMUMILOa9SD47s/O0Xk3dcIinadZwMbwg+/J7nw1rMVeQrUUIUNnwYrSFXLIyu 0VKWP21KvNTuEwt1PVq8Yu4L0iMGXIAHQLQBNCnSxYQ3ycVpE1Lp3I+KJfc0HFpu h1K94PivAZtpCRYrIv/732K0zJJ+gw2v37CHnFwQrO2vCD+i//7Q8jpkg7MJYnqn iOeYODSBkAglotwvDao4Q0bCL1dTkY6cCS5594gszFf7wQRGC7/L9II+9YV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHJHJrceKtdG30pLuyQaZrspBUCMwHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbM6MrDUKiK5GMz+nqZTyGSQThjIMq30jo8 WKv77lKUgKT+jo02lD/MtlfMxeZtAzyBxjfa+nRBbc1iLl8iwhf4DJgyyBIaGpmf RoQxgkbYIHJEb3YC14SIMYx309JEK8/NoE3Bqa2uYSef0i06SG5QXyckDf7h5IcH l/rKHHNFm8AVjnFAAPrxwBsF1K+N1wFuYXi8XNM8rWQAzkO4mt0DYxz6wR9+BCrQ PrzBO2Tc7uYHjHdmXZalbUc75eW/L0f8lfLD3EBBx+3LyoBpHMh3oGZnRONhYVYh Y3RfVZPHLwB5jU1nGNXtscMHK2m80yIg3cLSuovSfY9fU8/UZ5Q= -----END CERTIFICATE-----Generated at Wed Nov 11 02:13:54 2026 by rpki-client