$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft File: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft (raw, json) Hash identifier: JaOwIkHRv7uPKPSThBloMr1yHguuBTN63nC74SaRs7U= Subject key identifier: B2:52:9E:A6:93:C2:E1:1E:F6:C9:09:F9:E7:E9:40:F0:B6:7A:72:D8 Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D Certificate issuer: /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Certificate serial: 4F18C6290406A4AC244CF3C04C67B3AB821672BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft Manifest number: D8 Signing time: Sun 11 Oct 2026 13:08:41 +0000 Manifest this update: Sun 11 Oct 2026 13:03:41 +0000 Manifest next update: Mon 12 Oct 2026 14:00:41 +0000 Files and hashes: 1: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl (hash: UX5geTvzCZTwfMefMtVFY1Zfw9nGc2AGI3Q1fIcJo+E=) 2: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: SLYwMEBT661dkmjDpYSCi8eFhdF8+h1KCwjAiRVXBbM=) 3: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: efvSat7dwZI7/h9HiVLzn4AEIjGPLWmD8NmsCl2Z3eg=) 4: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: GD5PKDcWrMo+jB6m0zjy8Pss+9lo2DQ/VB/jtC+zOzo=) 5: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: qU+T/ppZu7pLksCA/CM9lZkM5mfpYBVP5R9hFRPxoSA=) 6: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 03GjbFQLnGl1ayimN4oj+A3/RatUprwYfoHZREcuOgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:18:c6:29:04:06:a4:ac:24:4c:f3:c0:4c:67:b3:ab:82:16:72:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Validity Not Before: Oct 11 13:03:41 2026 GMT Not After : Oct 12 14:00:41 2026 GMT Subject: CN=B2529EA693C2E11EF6C909F9E7E940F0B67A72D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:58:70:d3:cd:fe:52:0b:1d:aa:54:c1:84: 55:2c:4e:b1:79:9b:24:c7:fe:2b:93:38:ee:86:e8: c5:57:28:fc:ec:52:f5:bd:43:57:cb:e1:77:c9:2f: 79:3e:da:cc:7b:d1:3d:e9:9e:22:28:00:3c:c4:62: de:48:e0:ce:5a:9e:ce:b6:11:5d:84:73:92:56:94: 81:bb:d5:13:6d:ce:5c:00:1f:d0:17:bb:ef:f2:f4: 29:f7:d2:96:92:35:0f:e3:52:b2:cd:f8:2d:8a:8b: 68:33:79:08:87:34:96:af:1b:67:7f:4c:b5:7d:4f: 0f:c5:2b:c6:eb:9f:a3:de:c5:61:f0:74:9b:6f:ca: ae:ac:e4:02:47:60:4e:ba:82:d1:73:15:5b:d9:7d: 71:4a:5f:52:24:3f:7b:48:db:09:44:85:47:4a:26: 4f:cc:d6:8f:64:f1:5a:e7:ba:6c:13:0b:ec:7a:34: 16:9b:75:7c:21:40:db:7e:a4:e9:ab:52:40:c4:45: ad:76:72:e6:26:aa:ec:dc:57:77:b9:68:32:70:5a: 0a:f2:f7:7d:d0:a0:15:c6:c0:a8:92:c7:ae:38:0b: 99:ec:85:72:45:04:5f:c1:10:00:d6:77:e4:58:aa: 00:91:bc:3a:2d:1c:36:f3:e9:45:0a:e1:21:75:2a: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:52:9E:A6:93:C2:E1:1E:F6:C9:09:F9:E7:E9:40:F0:B6:7A:72:D8 X509v3 Authority Key Identifier: keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:44:8e:61:0f:10:84:1c:5a:33:16:af:1a:74:44:6a:6f:46: 25:43:47:a7:5d:2b:0b:27:39:5a:ee:fd:3e:4d:0e:6e:5f:36: 72:63:ad:c6:34:e8:4a:b5:8c:7c:d5:ce:f6:64:44:a5:5d:ad: 2a:d6:8b:56:a6:a0:a8:1b:55:8f:ce:e2:c5:fb:1d:c7:ab:d8: 19:39:df:8f:68:fb:97:75:e8:86:36:01:6c:07:67:3e:7b:81: e4:3e:65:54:cf:c9:5d:14:e9:ac:ae:b4:3f:8b:9d:c7:59:c1: 93:c9:67:bc:ea:02:b3:00:30:2d:a1:b5:2e:25:cf:77:be:11: c4:cd:5a:77:d8:17:c9:45:96:91:97:4e:9c:cf:00:59:50:52: 20:45:52:42:1d:7b:3c:1c:e6:4a:98:5b:a5:62:30:fc:f7:be: 03:b0:a6:ea:3e:c0:4d:2d:97:c0:bc:81:08:bd:c4:24:7e:8e: 45:17:9c:44:00:e6:6b:09:15:00:76:91:32:4e:ff:2d:55:ba: 1c:1d:bc:f3:44:73:53:55:a5:29:68:27:f6:a7:cc:97:c9:5e: 6d:3f:a5:04:5d:18:5e:0c:1f:84:0e:0c:72:87:67:0e:64:88: 64:a7:8f:f4:c2:ec:23:3f:42:b6:db:2c:4b:da:22:f0:cf:48: d3:40:d8:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxjGKQQGpKwkTPPATGezq4IWcrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5 NUEzRDIwRDAeFw0yNjEwMTExMzAzNDFaFw0yNjEwMTIxNDAwNDFaMDMxMTAvBgNV BAMTKEIyNTI5RUE2OTNDMkUxMUVGNkM5MDlGOUU3RTk0MEYwQjY3QTcyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthFhw083+UgsdqlTBhFUsTrF5 myTH/iuTOO6G6MVXKPzsUvW9Q1fL4XfJL3k+2sx70T3pniIoADzEYt5I4M5ans62 EV2Ec5JWlIG71RNtzlwAH9AXu+/y9Cn30paSNQ/jUrLN+C2Ki2gzeQiHNJavG2d/ TLV9Tw/FK8brn6PexWHwdJtvyq6s5AJHYE66gtFzFVvZfXFKX1IkP3tI2wlEhUdK Jk/M1o9k8VrnumwTC+x6NBabdXwhQNt+pOmrUkDERa12cuYmquzcV3e5aDJwWgry 933QoBXGwKiSx644C5nshXJFBF/BEADWd+RYqgCRvDotHDbz6UUK4SF1Kj51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUslKeppPC4R72yQn55+lA8LZ6ctgwHwYDVR0j BBgwFoAUXXu22+oA5wF3mJKqaGzL8ZWj0g0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUyYzkyODUtYzA5YS00NTA2LWEzMjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJF QTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5NUEzRDIwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdCQjZEQkVBMDBFNzAxNzc5ODkyQUE2ODZDQ0JGMTk1QTNE MjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NC RjE5NUEzRDIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVEjmEPEIQcWjMWrxp0RGpvRiVDR6ddKwsn OVru/T5NDm5fNnJjrcY06Eq1jHzVzvZkRKVdrSrWi1amoKgbVY/O4sX7Hcer2Bk5 349o+5d16IY2AWwHZz57geQ+ZVTPyV0U6ayutD+LncdZwZPJZ7zqArMAMC2htS4l z3e+EcTNWnfYF8lFlpGXTpzPAFlQUiBFUkIdezwc5kqYW6ViMPz3vgOwpuo+wE0t l8C8gQi9xCR+jkUXnEQA5msJFQB2kTJO/y1VuhwdvPNEc1NVpSloJ/anzJfJXm0/ pQRdGF4MH4QODHKHZw5kiGSnj/TC7CM/QrbbLEvaIvDPSNNA2DI= -----END CERTIFICATE-----Generated at Sun Oct 11 22:38:58 2026 by rpki-client