$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft (raw, json) Hash identifier: k52yhfUGjaaUdg8gXSHmWLMSVfvKQ3fjAflLYXomLWU= Subject key identifier: 45:31:8A:3B:B0:D2:27:BB:0F:16:03:A8:EE:0C:EA:59:FF:39:C8:AF Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A Certificate issuer: /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Certificate serial: 34F82494750D3D9C60C3FD9329E2A21BACB85C29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 05:37:54 +0000 Manifest this update: Tue 10 Nov 2026 05:32:54 +0000 Manifest next update: Wed 11 Nov 2026 07:19:54 +0000 Files and hashes: 1: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl (hash: +6EZkECloEc27xMsh+ER8DOORAD1BU8CReUaGIN8j34=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: CZzWnarJZGz+1ihXkwXcLlHMFIQJITOjnmvNdl7iuE0=) 3: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: FPQ2j3eI8yNWuffWW/KivobaVVZM8ZwQRSH4Q+fMF+8=) 4: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f8:24:94:75:0d:3d:9c:60:c3:fd:93:29:e2:a2:1b:ac:b8:5c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Validity Not Before: Nov 10 05:32:54 2026 GMT Not After : Nov 11 07:19:54 2026 GMT Subject: CN=45318A3BB0D227BB0F1603A8EE0CEA59FF39C8AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:83:7f:29:b5:59:f5:34:9e:e2:f2:e9:7a: b9:f1:c4:fc:06:3e:c1:17:5b:ec:3c:e8:7c:2a:3f: df:60:54:5c:8a:cc:7e:fe:38:14:d6:87:44:9d:38: 21:6c:92:82:1f:f9:c5:8b:41:94:07:27:83:cc:85: 42:1b:a1:63:90:e3:6c:98:e1:fe:26:e1:be:62:d3: 05:d5:c7:4f:a1:91:cf:a1:bd:b1:c4:92:6b:43:1c: fb:50:32:d6:21:1f:7b:46:c7:bd:f0:56:21:6b:ae: 74:16:5f:76:98:38:2c:ac:0f:fc:3f:02:6e:57:d5: ea:8f:79:1f:91:5e:8d:32:5c:4b:b2:8d:9d:03:5c: 2c:6c:73:f3:47:97:68:0c:97:72:d2:02:2b:10:08: 13:8e:23:3a:0c:be:8c:f0:2b:cc:a8:79:80:e4:1c: 93:0c:e7:08:c0:68:1e:98:bf:f2:05:94:7b:63:59: 81:be:34:ee:b5:b4:e7:d7:31:9c:b0:1f:2b:a8:7c: 50:7f:26:94:d9:75:8f:22:88:8e:54:4a:4f:8e:df: 5e:c0:cb:bf:95:5b:55:4c:cd:ff:33:1a:f1:3e:9e: e3:74:b3:36:44:5c:fa:08:aa:11:6e:79:21:0c:17: 07:27:ad:5d:dc:a8:42:75:45:62:c4:82:97:75:e3: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:8A:3B:B0:D2:27:BB:0F:16:03:A8:EE:0C:EA:59:FF:39:C8:AF X509v3 Authority Key Identifier: keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:89:c6:fc:b0:a5:fc:95:0a:45:c4:c7:31:3e:17:ad:f7:c2: 72:94:f9:2f:c9:d2:01:21:e9:9d:d1:36:50:a8:b4:f8:32:06: 3f:5f:44:f2:af:79:fd:ba:c2:6d:87:59:de:22:0c:4a:e7:6f: eb:7d:35:19:3d:6c:03:4f:d3:69:e0:70:3e:45:ea:f1:8d:c4: 38:f0:0c:e3:db:17:4c:93:5d:b3:0f:dd:27:3b:df:e4:fb:e0: 5e:57:86:f2:1a:ed:59:56:e8:1b:19:a8:d2:11:7f:51:b6:19: 3b:17:c7:14:81:e8:4a:49:03:62:a1:00:48:c1:49:8e:b2:fc: ce:72:35:20:76:9d:e3:e7:31:59:ce:4b:3b:9b:bd:ba:1a:2f: 6d:1a:91:e3:58:7a:a1:d5:80:d3:9a:fc:c0:a6:05:e8:02:4b: ff:b8:02:9e:1e:cc:5e:c2:5c:d6:d7:6e:fb:19:16:ee:07:75: a5:7e:6c:14:11:a8:22:8f:3e:dc:3f:40:33:e4:a8:e5:60:81: 3a:f5:bc:7a:87:4b:82:12:98:81:91:c6:b4:c5:f2:fa:b1:e4: 1e:86:0b:d4:b6:2c:76:3c:e2:50:40:41:16:eb:ce:85:6a:14: c3:9d:02:50:cc:a7:f2:a0:8d:dc:13:55:c4:42:26:8d:68:65: 33:b6:4a:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPgklHUNPZxgw/2TKeKiG6y4XCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJBQjhC Q0Q5REE2QTAeFw0yNjExMTAwNTMyNTRaFw0yNjExMTEwNzE5NTRaMDMxMTAvBgNV BAMTKDQ1MzE4QTNCQjBEMjI3QkIwRjE2MDNBOEVFMENFQTU5RkYzOUM4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSVoN/KbVZ9TSe4vLpernxxPwG PsEXW+w86HwqP99gVFyKzH7+OBTWh0SdOCFskoIf+cWLQZQHJ4PMhUIboWOQ42yY 4f4m4b5i0wXVx0+hkc+hvbHEkmtDHPtQMtYhH3tGx73wViFrrnQWX3aYOCysD/w/ Am5X1eqPeR+RXo0yXEuyjZ0DXCxsc/NHl2gMl3LSAisQCBOOIzoMvozwK8yoeYDk HJMM5wjAaB6Yv/IFlHtjWYG+NO61tOfXMZywHyuofFB/JpTZdY8iiI5USk+O317A y7+VW1VMzf8zGvE+nuN0szZEXPoIqhFueSEMFwcnrV3cqEJ1RWLEgpd140MdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURTGKO7DSJ7sPFgOo7gzqWf85yK8wHwYDVR0j BBgwFoAUW+TCnuo92TuhwnHcuoi6uLzZ2mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEwNzE1MTQtZTRkZS00YWNlLWEwZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVF QTNERDkzQkExQzI3MURDQkE4OEJBQjhCQ0Q5REE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkU0QzI5RUVBM0REOTNCQTFDMjcxRENCQTg4QkFCOEJDRDlE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJB QjhCQ0Q5REE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmJxvywpfyVCkXExzE+F633wnKU+S/J0gEh 6Z3RNlCotPgyBj9fRPKvef26wm2HWd4iDErnb+t9NRk9bANP02ngcD5F6vGNxDjw DOPbF0yTXbMP3Sc73+T74F5XhvIa7VlW6BsZqNIRf1G2GTsXxxSB6EpJA2KhAEjB SY6y/M5yNSB2nePnMVnOSzubvboaL20akeNYeqHVgNOa/MCmBegCS/+4Ap4ezF7C XNbXbvsZFu4HdaV+bBQRqCKPPtw/QDPkqOVggTr1vHqHS4ISmIGRxrTF8vqx5B6G C9S2LHY84lBAQRbrzoVqFMOdAlDMp/KgjdwTVcRCJo1oZTO2Sko= -----END CERTIFICATE-----Generated at Tue Nov 10 10:25:58 2026 by rpki-client