$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft File: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft (raw, json) Hash identifier: LmA1QzLGhdakDt8NPzO+TW1U4EHplgO9Wjswx7qy0tM= Subject key identifier: DA:99:96:95:4F:07:56:B5:79:E5:70:BD:18:EF:1F:67:7A:7A:21:E2 Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED Certificate issuer: /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Certificate serial: 2780817BF4E05AFF6F582DF52AD05D3FCF2C8069 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft Manifest number: 0102 Signing time: Mon 09 Nov 2026 23:29:59 +0000 Manifest this update: Mon 09 Nov 2026 23:24:59 +0000 Manifest next update: Wed 11 Nov 2026 03:08:59 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: 7rg8BQPn02cWQCL5uHjDLR1BDjr+8xgU8r0m19XIL1o=) 2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=) 3: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl (hash: 2C+XGQOFsFAgurrPQj5h4jBs+J6VoQtjKM9c1Dwp8co=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 03:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:80:81:7b:f4:e0:5a:ff:6f:58:2d:f5:2a:d0:5d:3f:cf:2c:80:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Validity Not Before: Nov 9 23:24:59 2026 GMT Not After : Nov 11 03:08:59 2026 GMT Subject: CN=DA9996954F0756B579E570BD18EF1F677A7A21E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:a2:4f:cf:45:00:a2:80:0b:90:94:20:41: a0:35:ec:e1:b7:a0:44:1d:cb:c9:9a:03:7d:51:62: 4a:7b:67:4c:9a:1d:12:74:b3:b2:ac:6f:2b:c3:40: 91:8f:c7:87:de:3b:93:8d:85:22:0b:c5:47:23:e7: 66:ff:a5:05:e2:29:40:7f:44:61:4f:d6:d5:e9:5b: a8:0f:6d:e6:4a:1a:dd:30:95:ae:02:5e:a0:4e:2c: eb:9d:14:f1:ea:43:4f:fc:7e:2b:6c:12:07:34:b4: 6b:1d:75:4e:d9:02:dc:e3:fe:d7:3b:12:4b:b1:98: 45:eb:a3:3a:b1:8d:0e:5b:d4:e1:7e:1f:42:f0:39: 10:87:5e:e3:f1:7f:a2:d0:fc:bc:43:be:a1:61:fd: 8a:c0:63:15:7e:41:1c:f5:70:e5:4c:1f:1f:90:e4: f6:94:de:91:ab:fe:a5:bd:36:c7:4f:5d:d7:70:6a: 12:8d:96:1a:45:0a:eb:0c:22:68:7e:2e:f2:e0:4c: 67:4b:95:e6:2f:3f:16:4c:39:0c:cf:04:8d:2b:d6: 2a:59:9a:b6:ae:89:63:94:b2:fd:12:19:ff:d8:e0: 96:01:e8:36:1f:a9:7d:0e:a7:55:39:20:16:57:29: 7a:45:2f:2f:17:41:9a:14:23:74:39:7c:82:3a:d6: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:99:96:95:4F:07:56:B5:79:E5:70:BD:18:EF:1F:67:7A:7A:21:E2 X509v3 Authority Key Identifier: keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a0:6f:f1:8b:55:3f:6f:76:ab:7e:50:5e:07:8b:57:bc:76: d3:40:ef:3f:6a:f3:71:b7:1a:6f:6e:91:14:b1:98:cb:b7:00: 82:6a:87:b6:2d:5a:cc:d4:b2:8e:15:77:e1:1c:a4:8b:19:d7: 2b:3b:be:35:c6:03:25:39:11:5c:3b:46:44:8a:0d:66:a6:eb: 61:41:7b:d9:71:53:97:5b:c7:b8:10:e1:56:7c:a3:7d:fa:cc: f8:ae:4a:32:68:66:ac:50:4b:9d:e6:3a:40:16:e3:80:5e:20: bf:1d:74:c6:26:13:18:dc:3e:39:6f:42:6d:b1:1c:17:aa:04: 87:98:fd:a5:2b:9f:91:d8:e5:a0:a4:68:c6:dd:b1:45:7b:12: bb:8a:dc:97:03:37:49:e4:32:c2:35:14:e6:d4:ba:03:ae:2d: 9c:97:ad:79:3d:7e:73:de:2f:e6:75:02:6e:fc:3e:89:6d:da: ec:6e:9c:3a:93:b9:b3:f0:5f:de:3a:f8:9c:6b:0a:84:c9:0c: 2b:27:bd:1d:ec:72:8a:04:ff:2f:96:3a:51:e2:2b:b1:81:00: f2:39:8f:88:f1:5e:f9:69:3a:7f:20:91:7c:5c:d2:be:40:5d: 5f:7e:87:e6:3e:84:18:d8:03:8e:61:83:79:e9:35:e2:a0:48: 68:9b:2b:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4CBe/TgWv9vWC31KtBdP88sgGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0 M0I5NjhFRDAeFw0yNjExMDkyMzI0NTlaFw0yNjExMTEwMzA4NTlaMDMxMTAvBgNV BAMTKERBOTk5Njk1NEYwNzU2QjU3OUU1NzBCRDE4RUYxRjY3N0E3QTIxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMu6JPz0UAooALkJQgQaA17OG3 oEQdy8maA31RYkp7Z0yaHRJ0s7KsbyvDQJGPx4feO5ONhSILxUcj52b/pQXiKUB/ RGFP1tXpW6gPbeZKGt0wla4CXqBOLOudFPHqQ0/8fitsEgc0tGsddU7ZAtzj/tc7 EkuxmEXrozqxjQ5b1OF+H0LwORCHXuPxf6LQ/LxDvqFh/YrAYxV+QRz1cOVMHx+Q 5PaU3pGr/qW9NsdPXddwahKNlhpFCusMImh+LvLgTGdLleYvPxZMOQzPBI0r1ipZ mrauiWOUsv0SGf/Y4JYB6DYfqX0Op1U5IBZXKXpFLy8XQZoUI3Q5fII61n19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pmWlU8HVrV55XC9GO8fZ3p6IeIwHwYDVR0j BBgwFoAUW3g50/ovvDdFIGVrDr23h0O5aO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjljNTMyN2YtMTBmZC00Y2YwLTg1MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNG QTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0M0I5NjhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjc4MzlEM0ZBMkZCQzM3NDUyMDY1NkIwRUJEQjc4NzQzQjk2 OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3 ODc0M0I5NjhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADygb/GLVT9vdqt+UF4Hi1e8dtNA7z9q83G3 Gm9ukRSxmMu3AIJqh7YtWszUso4Vd+EcpIsZ1ys7vjXGAyU5EVw7RkSKDWam62FB e9lxU5dbx7gQ4VZ8o336zPiuSjJoZqxQS53mOkAW44BeIL8ddMYmExjcPjlvQm2x HBeqBIeY/aUrn5HY5aCkaMbdsUV7EruK3JcDN0nkMsI1FObUugOuLZyXrXk9fnPe L+Z1Am78Polt2uxunDqTubPwX946+JxrCoTJDCsnvR3scooE/y+WOlHiK7GBAPI5 j4jxXvlpOn8gkXxc0r5AXV9+h+Y+hBjYA45hg3npNeKgSGibKyg= -----END CERTIFICATE-----Generated at Tue Nov 10 07:07:32 2026 by rpki-client