$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json) Hash identifier: zHeg5DPRiuEnymIsZ2JxkXjBajiFmTXu3cDKUs5lwwg= Subject key identifier: BB:CF:D7:1E:48:00:1A:D4:F3:8D:68:9F:96:58:0C:85:20:16:C0:13 Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Certificate serial: 599AE5C19FB0C3B4DCD071D02298B32DA23D82A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft Manifest number: DA Signing time: Mon 12 Oct 2026 17:17:46 +0000 Manifest this update: Mon 12 Oct 2026 17:12:46 +0000 Manifest next update: Tue 13 Oct 2026 19:30:46 +0000 Files and hashes: 1: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: sVOVfrDZUJWbiu4rFqwzDWDjUFUQhoAODNGpWdNzTqw=) 2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9a:e5:c1:9f:b0:c3:b4:dc:d0:71:d0:22:98:b3:2d:a2:3d:82:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Validity Not Before: Oct 12 17:12:46 2026 GMT Not After : Oct 13 19:30:46 2026 GMT Subject: CN=BBCFD71E48001AD4F38D689F96580C852016C013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:40:ee:ce:09:c8:4c:a7:d5:b5:5d:9c:2f: eb:83:3b:ce:b7:07:e3:b8:bf:d9:64:75:96:a0:0e: 97:c6:ac:a9:75:a4:ed:a1:6b:03:97:d9:e5:b8:4f: 5f:d2:9a:7f:b8:0b:e2:ba:5c:eb:7e:bc:a2:46:16: 62:67:07:35:b5:1a:f1:48:d2:19:88:0d:ae:49:11: 6c:36:5d:5f:d0:19:01:fe:fd:bd:66:01:b5:83:4d: c2:ab:b4:99:6e:c8:dc:5d:b3:c9:ff:95:7d:ff:6d: ed:c3:be:9d:1c:c4:df:eb:c5:b8:12:c8:a7:94:03: 07:ec:fc:99:78:04:96:cf:90:ac:90:f9:32:d8:2c: b3:94:87:6e:b3:1e:44:02:f2:05:8a:63:87:0b:41: 5d:33:89:88:52:34:d7:0f:83:c9:52:2e:1b:5b:74: 55:8c:35:76:58:df:f0:93:69:0f:c8:b8:8c:86:bc: 41:e5:c5:65:77:0b:e7:23:a8:a2:31:e3:e9:91:ef: eb:33:f5:10:70:4c:1b:af:a1:f9:a1:49:0a:05:c4: 0f:29:58:f8:35:15:d4:f5:07:c6:f7:f5:f8:e6:1a: bd:46:45:53:48:7d:c0:df:a0:12:62:26:7f:2f:60: 3e:3b:3d:ff:9f:b9:9f:4e:83:b3:9f:cf:aa:ed:16: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CF:D7:1E:48:00:1A:D4:F3:8D:68:9F:96:58:0C:85:20:16:C0:13 X509v3 Authority Key Identifier: keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:c2:3e:fb:e9:26:24:04:c7:19:0c:fb:f7:dd:35:b5:67: a7:96:01:a1:8b:e2:19:43:e4:61:0d:9d:38:1d:bd:5b:9d:e9: bc:cb:45:26:7d:c2:b1:18:17:73:b0:4a:53:0f:6a:8e:e3:ee: aa:92:9b:52:16:d2:7c:88:d6:1c:95:dc:18:cd:1f:eb:bc:b8: 8f:83:66:fd:82:a3:dc:41:4f:f7:a7:88:93:97:19:07:e8:a9: b6:00:7e:b9:d9:56:0d:74:38:49:11:40:d9:1c:9b:eb:18:5a: 4b:b0:5f:ab:e3:ce:68:8f:aa:6c:01:4a:0b:dc:b4:75:c8:93: fb:54:e4:20:bf:e9:9f:7f:78:10:81:20:c6:b5:67:48:02:c2: 1f:57:f0:75:2c:e8:b8:37:c2:3d:36:0b:f1:87:7d:1c:aa:c5: 9f:db:66:82:ba:62:96:30:50:83:ef:c5:1c:61:55:c7:16:46: d1:7b:34:ff:8d:6d:75:50:68:e3:50:55:27:63:d0:38:a8:45: ce:fa:db:38:51:61:60:70:55:f0:90:f5:62:22:b3:0c:01:2e: e5:3b:c5:fe:94:8e:00:1f:f8:9e:c8:48:02:7d:3e:fb:66:fe: 55:e9:21:97:8f:a6:82:7a:8e:12:ff:ff:72:c4:d1:f2:26:e9: 38:c0:76:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZrlwZ+ww7Tc0HHQIpizLaI9gqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBC OURCOUJGMTAeFw0yNjEwMTIxNzEyNDZaFw0yNjEwMTMxOTMwNDZaMDMxMTAvBgNV BAMTKEJCQ0ZENzFFNDgwMDFBRDRGMzhENjg5Rjk2NTgwQzg1MjAxNkMwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOUDuzgnITKfVtV2cL+uDO863 B+O4v9lkdZagDpfGrKl1pO2hawOX2eW4T1/Smn+4C+K6XOt+vKJGFmJnBzW1GvFI 0hmIDa5JEWw2XV/QGQH+/b1mAbWDTcKrtJluyNxds8n/lX3/be3Dvp0cxN/rxbgS yKeUAwfs/Jl4BJbPkKyQ+TLYLLOUh26zHkQC8gWKY4cLQV0ziYhSNNcPg8lSLhtb dFWMNXZY3/CTaQ/IuIyGvEHlxWV3C+cjqKIx4+mR7+sz9RBwTBuvofmhSQoFxA8p WPg1FdT1B8b39fjmGr1GRVNIfcDfoBJiJn8vYD47Pf+fuZ9Og7Ofz6rtFrlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8/XHkgAGtTzjWifllgMhSAWwBMwHwYDVR0j BBgwFoAUW7EsMdNuVc/Wr5RMpOdn4Lnbm/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTliOTNlMWMtNWYyYS00M2E5LTk5ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFE MzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBCOURCOUJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkIxMkMzMUQzNkU1NUNGRDZBRjk0NENBNEU3NjdFMEI5REI5 QkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3 RTBCOURCOUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXHwj776SYkBMcZDPv33TW1Z6eWAaGL4hlD 5GENnTgdvVud6bzLRSZ9wrEYF3OwSlMPao7j7qqSm1IW0nyI1hyV3BjNH+u8uI+D Zv2Co9xBT/eniJOXGQfoqbYAfrnZVg10OEkRQNkcm+sYWkuwX6vjzmiPqmwBSgvc tHXIk/tU5CC/6Z9/eBCBIMa1Z0gCwh9X8HUs6Lg3wj02C/GHfRyqxZ/bZoK6YpYw UIPvxRxhVccWRtF7NP+NbXVQaONQVSdj0DioRc762zhRYWBwVfCQ9WIiswwBLuU7 xf6UjgAf+J7ISAJ9Pvtm/lXpIZePpoJ6jhL//3LE0fIm6TjAdp4= -----END CERTIFICATE-----Generated at Mon Oct 12 23:00:41 2026 by rpki-client