$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft (raw, json) Hash identifier: yFjh2loScsZcUJb7FTwjvivwep2bkrXHHC7a8YiMyWM= Subject key identifier: 33:FD:21:2F:F9:F8:1C:7B:97:83:91:D3:D0:85:D7:00:03:1F:31:D4 Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Certificate serial: 70D23BBD9A9AC0D22EB10C7A5459D71EF0DE0883 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 18:24:19 +0000 Manifest this update: Tue 10 Nov 2026 18:19:19 +0000 Manifest next update: Wed 11 Nov 2026 20:00:19 +0000 Files and hashes: 1: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl (hash: gskEbDRquA0wcmgj4KaMY3Q/KGtQacv13TrIJJdQVmU=) 2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=) 3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: fc+4JU1Tpp/1O31vstVFMWqbX3rMZmX9kGoVnJ5dzDQ=) 4: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: KmWWkFu4uWgTsq2Hfq2FHIMCUvYeIO46DVlLY6UTkvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d2:3b:bd:9a:9a:c0:d2:2e:b1:0c:7a:54:59:d7:1e:f0:de:08:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Validity Not Before: Nov 10 18:19:19 2026 GMT Not After : Nov 11 20:00:19 2026 GMT Subject: CN=33FD212FF9F81C7B978391D3D085D700031F31D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:5e:1a:04:bd:d8:2d:b7:40:2a:4d:5c:fc: f1:13:56:44:b8:da:b4:13:30:60:be:42:3d:83:a9: 9c:50:12:21:79:5d:55:12:56:de:cf:66:0e:15:68: 9b:a3:a6:39:c2:dd:34:36:c7:ea:9e:93:15:e8:05: 18:78:51:02:43:03:32:a1:73:b5:7e:fe:b4:45:22: d1:f7:53:df:2d:68:80:e0:21:88:46:7a:4e:09:69: b4:7d:59:89:a1:39:ee:bf:e5:bd:41:02:09:fd:20: ad:19:fd:11:32:0f:6a:d6:b6:71:69:63:df:c2:7a: 3f:84:09:c0:93:d8:b4:b2:d5:62:15:96:f2:45:ef: b8:1f:22:58:da:1f:78:c7:2b:29:01:d4:05:41:fa: 68:3e:b9:f7:32:83:cf:12:71:3b:2c:93:d1:e8:92: 4b:db:61:b6:32:02:8c:7b:2d:48:19:c5:cb:69:56: 85:83:34:4c:80:ee:4a:92:06:61:e9:87:6a:03:85: 8d:36:f4:03:94:44:18:14:9d:78:89:e0:4a:e9:dd: ed:fd:c6:3b:54:0e:e4:29:4b:b5:29:ea:e6:e1:6c: c8:d3:95:4c:52:a2:14:e4:15:41:40:69:30:44:dd: 82:33:51:ca:f5:e8:6d:d1:c3:f2:f3:b4:7e:63:9c: 7c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:21:2F:F9:F8:1C:7B:97:83:91:D3:D0:85:D7:00:03:1F:31:D4 X509v3 Authority Key Identifier: keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:dd:d6:31:01:3e:63:28:8c:eb:4d:cc:0a:17:1d:bf:6b:9b: b3:5a:a5:59:5d:69:22:14:9c:7e:fc:6c:5d:e9:68:8d:f3:fb: b8:86:6f:8a:3f:05:0b:3d:d8:cf:08:93:0e:b8:fd:1a:4e:7b: db:82:54:92:4e:0d:78:12:14:c7:ee:74:5d:06:b4:7a:b6:f9: 55:6b:9b:4d:8e:d2:f1:bd:4f:08:14:20:af:72:8e:68:2d:92: a2:75:1c:73:2c:4b:83:a4:2e:57:20:54:39:98:d8:20:47:92: 9e:0e:d2:ba:b5:16:3c:10:25:58:4a:7f:56:67:e8:7a:96:95: 69:03:07:b4:3d:e9:59:34:b9:64:47:cd:a5:94:b0:54:6f:d0: cd:08:12:a6:aa:08:5f:0f:2b:7f:36:58:7a:ce:6e:4d:05:b0: 01:63:68:86:21:51:24:31:c2:e0:de:4e:e0:bb:f5:05:eb:e3: 44:c6:c2:73:95:e7:3f:bb:3f:a6:6b:40:f2:27:fc:ef:c1:00: fc:6e:65:f9:70:43:6d:a9:19:98:74:92:37:b0:0f:09:04:dc: c9:8f:9c:40:c4:de:b6:47:44:a0:d9:be:ac:f5:1e:2a:72:3e: cc:0e:43:0b:75:b6:6f:e2:48:94:d3:3e:15:2f:28:78:27:74: 05:31:34:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcNI7vZqawNIusQx6VFnXHvDeCIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy Rjk1QTBDMDAeFw0yNjExMTAxODE5MTlaFw0yNjExMTEyMDAwMTlaMDMxMTAvBgNV BAMTKDMzRkQyMTJGRjlGODFDN0I5NzgzOTFEM0QwODVENzAwMDMxRjMxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRl4aBL3YLbdAKk1c/PETVkS4 2rQTMGC+Qj2DqZxQEiF5XVUSVt7PZg4VaJujpjnC3TQ2x+qekxXoBRh4UQJDAzKh c7V+/rRFItH3U98taIDgIYhGek4JabR9WYmhOe6/5b1BAgn9IK0Z/REyD2rWtnFp Y9/Cej+ECcCT2LSy1WIVlvJF77gfIljaH3jHKykB1AVB+mg+ufcyg88ScTssk9Ho kkvbYbYyAox7LUgZxctpVoWDNEyA7kqSBmHph2oDhY029AOURBgUnXiJ4Erp3e39 xjtUDuQpS7Up6ubhbMjTlUxSohTkFUFAaTBE3YIzUcr16G3Rw/LztH5jnHxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/0hL/n4HHuXg5HT0IXXAAMfMdQwHwYDVR0j BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB MEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFF N0QyRjk1QTBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTd1jEBPmMojOtNzAoXHb9rm7NapVldaSIU nH78bF3paI3z+7iGb4o/BQs92M8Ikw64/RpOe9uCVJJODXgSFMfudF0GtHq2+VVr m02O0vG9TwgUIK9yjmgtkqJ1HHMsS4OkLlcgVDmY2CBHkp4O0rq1FjwQJVhKf1Zn 6HqWlWkDB7Q96Vk0uWRHzaWUsFRv0M0IEqaqCF8PK382WHrObk0FsAFjaIYhUSQx wuDeTuC79QXr40TGwnOV5z+7P6ZrQPIn/O/BAPxuZflwQ22pGZh0kjewDwkE3MmP nEDE3rZHRKDZvqz1HipyPswOQwt1tm/iSJTTPhUvKHgndAUxNJk= -----END CERTIFICATE-----Generated at Tue Nov 10 23:13:36 2026 by rpki-client