$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft File: 0FA563F934776139827AEC94F0EABC66549ABEA7.mft (raw, json) Hash identifier: GGyggRWMa7kxFtIMF9P8fqHaQV6GqLTyL6jDKNUffLk= Subject key identifier: 58:74:8C:17:64:AC:BB:56:ED:5C:09:CC:62:1F:3C:0F:64:71:C2:7A Authority key identifier: 0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 Certificate issuer: /CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Certificate serial: 511DF20570F058D52DD337D356F32A51C93843A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft Manifest number: D5 Signing time: Wed 07 Oct 2026 11:58:28 +0000 Manifest this update: Wed 07 Oct 2026 11:53:28 +0000 Manifest next update: Thu 08 Oct 2026 14:20:28 +0000 Files and hashes: 1: 0FA563F934776139827AEC94F0EABC66549ABEA7.crl (hash: 5Tk7kI8hQoNCVT2aZZn2WYvArHrhSErix/mGdJb+m14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 14:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1d:f2:05:70:f0:58:d5:2d:d3:37:d3:56:f3:2a:51:c9:38:43:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Validity Not Before: Oct 7 11:53:28 2026 GMT Not After : Oct 8 14:20:28 2026 GMT Subject: CN=58748C1764ACBB56ED5C09CC621F3C0F6471C27A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:9e:4f:21:6a:fc:0a:72:6c:8d:c8:27:e8: 7b:ec:68:0b:45:d8:4d:d6:d4:ae:53:c6:68:71:23: c9:e7:64:57:97:49:aa:8a:11:97:2b:9d:c3:06:b1: 93:4e:a4:8f:c0:17:5d:9b:ae:a0:44:24:99:b9:c7: db:03:a4:4d:73:49:d2:3e:ba:ee:a2:cf:05:7c:12: 86:d2:db:6c:ae:a1:ac:fe:1d:a8:b1:63:9c:e3:58: 52:91:58:55:4f:8b:ff:01:40:1c:2b:c1:b7:0f:5f: 6e:07:4e:96:53:3d:32:9d:37:6b:e9:03:cd:31:ba: 8e:26:35:bc:73:ec:5f:9a:9d:4c:54:6a:f8:2a:6f: 69:11:ea:ac:c9:ce:38:3d:3d:c4:b3:26:d0:f1:38: a3:0e:b5:14:43:e5:5a:71:69:09:4a:49:e4:22:d0: 1d:3f:5d:cb:d8:44:eb:5a:c3:10:cf:ce:a9:37:c1: d1:7e:97:36:26:c9:93:4d:b7:c2:ec:f4:0c:3a:f1: 74:f6:d9:18:11:20:dc:01:d1:f9:47:b7:ab:79:6a: 36:6f:af:67:f1:47:c6:60:69:fc:c4:73:b9:07:b2: 29:33:1f:9c:48:c5:b4:e5:12:7e:b3:ee:db:e0:80: f7:45:09:10:1c:44:4d:57:b6:bf:93:a9:b0:e1:0a: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:8C:17:64:AC:BB:56:ED:5C:09:CC:62:1F:3C:0F:64:71:C2:7A X509v3 Authority Key Identifier: keyid:0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:56:1b:47:28:5d:8e:17:27:75:cb:dd:2d:87:56:ed:57:6c: a6:24:0f:bc:07:9b:e8:90:75:1d:a8:ca:87:e7:9a:84:6b:af: 91:a7:43:21:c4:af:6b:d3:8f:60:7f:a9:a1:2e:8b:58:09:b0: 3f:90:33:60:36:f7:e0:17:34:1d:20:00:4a:f4:87:eb:08:1f: d5:e5:90:ef:c9:7d:1a:40:03:39:a6:c4:49:73:8e:f6:9a:43: e0:62:f3:73:91:0e:62:3c:2c:30:41:0d:46:37:52:26:c3:48: 90:48:20:c3:12:54:24:5b:75:57:2c:61:9f:61:a9:88:78:63: cc:7b:5f:5f:ae:29:ea:ee:3b:cf:ee:95:2a:37:16:60:7b:ef: 5d:2c:28:b4:92:cf:0e:08:e9:99:c1:b3:b7:1d:46:43:9e:f2: f7:df:fa:6e:08:c2:4a:16:f6:df:2e:de:1b:3d:74:d4:56:89: 86:65:44:c7:37:5b:6c:e4:78:3a:70:c3:03:39:c4:13:83:00: c3:07:9d:2d:65:88:58:eb:aa:a4:29:08:d6:c4:b8:eb:ac:24: d8:ec:4c:7f:37:fa:85:15:7d:49:7d:a6:1c:bd:31:f7:40:07: 01:da:00:69:f5:10:c4:0f:79:fe:40:39:46:bb:f4:bd:a4:31: e9:4f:c6:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUR3yBXDwWNUt0zfTVvMqUck4Q6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1 NDlBQkVBNzAeFw0yNjEwMDcxMTUzMjhaFw0yNjEwMDgxNDIwMjhaMDMxMTAvBgNV BAMTKDU4NzQ4QzE3NjRBQ0JCNTZFRDVDMDlDQzYyMUYzQzBGNjQ3MUMyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJp5PIWr8CnJsjcgn6HvsaAtF 2E3W1K5TxmhxI8nnZFeXSaqKEZcrncMGsZNOpI/AF12brqBEJJm5x9sDpE1zSdI+ uu6izwV8EobS22yuoaz+HaixY5zjWFKRWFVPi/8BQBwrwbcPX24HTpZTPTKdN2vp A80xuo4mNbxz7F+anUxUavgqb2kR6qzJzjg9PcSzJtDxOKMOtRRD5VpxaQlKSeQi 0B0/XcvYROtawxDPzqk3wdF+lzYmyZNNt8Ls9Aw68XT22RgRINwB0flHt6t5ajZv r2fxR8ZgafzEc7kHsikzH5xIxbTlEn6z7tvggPdFCRAcRE1Xtr+TqbDhClulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHSMF2Ssu1btXAnMYh88D2RxwnowHwYDVR0j BBgwFoAUD6Vj+TR3YTmCeuyU8Oq8ZlSavqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJiNDNlYzgtZjU4Mi00MDI1LThmMzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkz NDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1NDlBQkVBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkE1NjNGOTM0Nzc2MTM5ODI3QUVDOTRGMEVBQkM2NjU0OUFC RUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJD NjY1NDlBQkVBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxWG0coXY4XJ3XL3S2HVu1XbKYkD7wHm+iQ dR2oyofnmoRrr5GnQyHEr2vTj2B/qaEui1gJsD+QM2A29+AXNB0gAEr0h+sIH9Xl kO/JfRpAAzmmxElzjvaaQ+Bi83ORDmI8LDBBDUY3UibDSJBIIMMSVCRbdVcsYZ9h qYh4Y8x7X1+uKeruO8/ulSo3FmB7710sKLSSzw4I6ZnBs7cdRkOe8vff+m4IwkoW 9t8u3hs9dNRWiYZlRMc3W2zkeDpwwwM5xBODAMMHnS1liFjrqqQpCNbEuOusJNjs TH83+oUVfUl9phy9MfdABwHaAGn1EMQPef5AOUa79L2kMelPxnU= -----END CERTIFICATE-----Generated at Thu Oct 8 03:37:52 2026 by rpki-client