$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.mft (raw, json) Hash identifier: P7UZjArlngJ8+PWIEh0xW6LVHnYHAzGL4C9sQoal2Gc= Subject key identifier: F2:F3:10:26:F1:1F:1E:6C:D8:BC:B5:66:72:F0:AD:07:48:3C:A3:D5 Authority key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Certificate issuer: /CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Certificate serial: 522D1DB56640EE7BB5CB443BCAB7405030CD0C62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft Manifest number: FF Signing time: Mon 09 Nov 2026 19:25:00 +0000 Manifest this update: Mon 09 Nov 2026 19:20:00 +0000 Manifest next update: Tue 10 Nov 2026 22:10:00 +0000 Files and hashes: 1: 5FD95F455755676CB89A532D2F2A8301877C4AEC.crl (hash: E3GerEe7wZn23dwEVztSS7gFoUw7oEeT+SMrrTZC/Wo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 22:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2d:1d:b5:66:40:ee:7b:b5:cb:44:3b:ca:b7:40:50:30:cd:0c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Validity Not Before: Nov 9 19:20:00 2026 GMT Not After : Nov 10 22:10:00 2026 GMT Subject: CN=F2F31026F11F1E6CD8BCB56672F0AD07483CA3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:fb:7c:1f:2c:b2:f8:cb:af:74:e0:23:49: f7:85:4d:20:da:e5:51:fa:66:a8:a4:ba:20:9e:07: 35:b0:38:9c:14:aa:68:83:85:fe:53:74:57:c9:20: e6:d2:d0:dc:a1:bd:c2:c4:c0:c4:c6:31:30:39:6f: f5:d1:13:e7:79:18:80:8f:d7:cb:ff:53:dd:ba:65: de:7f:c9:43:66:8b:cb:0b:fa:90:45:88:59:32:09: 2f:90:37:3c:e3:c2:59:60:c5:05:17:58:36:e8:1f: 38:dc:27:45:6f:9e:3b:f0:bd:b4:b0:2c:e7:50:26: 8e:89:42:2e:bc:ea:07:ae:80:68:46:81:50:85:d1: 24:ad:4f:c2:0f:d9:dd:83:19:1e:03:66:f6:d6:d2: 1b:ae:8e:31:4d:6d:f6:7d:0d:50:8b:64:fe:55:df: 05:5e:5b:13:24:c8:49:c5:ee:8c:f4:1f:16:e2:a2: 04:f3:26:ae:8a:f8:fe:69:64:90:e8:4e:56:21:f1: b6:56:5f:81:b4:30:eb:af:02:7e:fd:0c:ab:ba:24: 27:c0:63:bd:f6:f6:aa:ef:02:61:8d:f3:67:fb:ae: e8:ed:59:65:23:a7:3a:fa:71:6d:06:04:8d:73:12: 5d:04:c1:d5:db:11:19:55:ee:17:cd:d3:89:e6:36: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F3:10:26:F1:1F:1E:6C:D8:BC:B5:66:72:F0:AD:07:48:3C:A3:D5 X509v3 Authority Key Identifier: keyid:5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b5:1c:d3:93:30:cd:4d:f2:82:a4:f9:fc:8c:99:98:2f:4f: 8a:cc:3c:6f:76:7b:6b:50:37:30:4d:a9:d3:69:d8:fd:cc:ef: 92:7c:8e:68:92:ea:44:e4:99:e3:12:18:18:f1:9e:e6:e5:7b: 59:b9:66:e5:29:48:27:e5:23:0d:fb:b6:0c:b1:cd:92:c3:ac: c0:96:9c:03:46:3a:be:5b:b9:66:1a:19:ba:99:50:88:a9:b6: 33:a3:df:11:09:b1:a3:c9:5d:05:03:e4:52:c7:cd:5e:3f:68: 68:40:e6:c0:77:ce:27:56:7d:89:70:cb:11:73:e3:10:dd:e9: 06:04:86:6f:40:41:1a:0a:0a:81:eb:55:0d:20:08:f5:5e:a0: 6f:a1:da:c6:dd:59:4b:48:4a:47:20:c5:79:df:32:67:3c:25: 2e:2b:10:df:1c:ae:47:53:d3:70:04:49:09:4a:be:7b:60:3a: a2:d0:48:f5:c5:4d:09:98:5d:4c:1c:83:63:18:58:3a:e2:3a: 01:e9:5f:1d:62:8b:a4:a1:6b:25:73:8f:f4:95:78:99:97:38: ba:47:0d:69:e3:de:e8:8d:f9:08:4f:7d:93:53:28:1d:16:42: 36:b2:33:87:87:64:45:f5:5d:b9:96:ae:81:53:1c:24:76:e9: cd:6e:b1:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUi0dtWZA7nu1y0Q7yrdAUDDNDGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4 NzdDNEFFQzAeFw0yNjExMDkxOTIwMDBaFw0yNjExMTAyMjEwMDBaMDMxMTAvBgNV BAMTKEYyRjMxMDI2RjExRjFFNkNEOEJDQjU2NjcyRjBBRDA3NDgzQ0EzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOzPt8Hyyy+MuvdOAjSfeFTSDa 5VH6ZqikuiCeBzWwOJwUqmiDhf5TdFfJIObS0NyhvcLEwMTGMTA5b/XRE+d5GICP 18v/U926Zd5/yUNmi8sL+pBFiFkyCS+QNzzjwllgxQUXWDboHzjcJ0VvnjvwvbSw LOdQJo6JQi686geugGhGgVCF0SStT8IP2d2DGR4DZvbW0huujjFNbfZ9DVCLZP5V 3wVeWxMkyEnF7oz0HxbiogTzJq6K+P5pZJDoTlYh8bZWX4G0MOuvAn79DKu6JCfA Y7329qrvAmGN82f7rujtWWUjpzr6cW0GBI1zEl0EwdXbERlV7hfN04nmNkiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8vMQJvEfHmzYvLVmcvCtB0g8o9UwHwYDVR0j BBgwFoAUX9lfRVdVZ2y4mlMtLyqDAYd8SuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJhOTdiMGItMzlhZS00YzJjLWIxM2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1 NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4NzdDNEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkQ5NUY0NTU3NTU2NzZDQjg5QTUzMkQyRjJBODMwMTg3N0M0 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgz MDE4NzdDNEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB61HNOTMM1N8oKk+fyMmZgvT4rMPG92e2tQ NzBNqdNp2P3M75J8jmiS6kTkmeMSGBjxnuble1m5ZuUpSCflIw37tgyxzZLDrMCW nANGOr5buWYaGbqZUIiptjOj3xEJsaPJXQUD5FLHzV4/aGhA5sB3zidWfYlwyxFz 4xDd6QYEhm9AQRoKCoHrVQ0gCPVeoG+h2sbdWUtISkcgxXnfMmc8JS4rEN8crkdT 03AESQlKvntgOqLQSPXFTQmYXUwcg2MYWDriOgHpXx1ii6ShayVzj/SVeJmXOLpH DWnj3uiN+QhPfZNTKB0WQjayM4eHZEX1XbmWroFTHCR26c1usdk= -----END CERTIFICATE-----Generated at Tue Nov 10 14:40:38 2026 by rpki-client