$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft File: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft (raw, json) Hash identifier: 9ExlXskv0Kij5rS0QHm+sWKhogaaIEvURKMg3Np6Mdc= Subject key identifier: C2:C3:15:2A:3D:5A:BA:33:92:AB:6C:42:28:F9:94:9C:6D:52:E3:F6 Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D Certificate issuer: /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Certificate serial: 40D9F8AC6F5D8F239CCE507A46AB0E9B4AD2D865 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 07:25:19 +0000 Manifest this update: Tue 10 Nov 2026 07:20:19 +0000 Manifest next update: Wed 11 Nov 2026 09:47:19 +0000 Files and hashes: 1: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl (hash: HZU/Sy7O3/oNH2JgjY3a3wLkcvnFSIG6FyYjxDk9xTk=) 2: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d9:f8:ac:6f:5d:8f:23:9c:ce:50:7a:46:ab:0e:9b:4a:d2:d8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Validity Not Before: Nov 10 07:20:19 2026 GMT Not After : Nov 11 09:47:19 2026 GMT Subject: CN=C2C3152A3D5ABA3392AB6C4228F9949C6D52E3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:c4:19:c4:4d:db:78:0d:ee:3b:c3:a7:79: a4:9e:0d:3d:09:39:b9:f7:9f:17:7c:10:1b:c7:2d: 2d:71:23:c7:a3:e4:c0:1c:b9:f4:6a:d9:6d:21:d5: 9b:3d:81:2c:9e:33:71:b5:06:78:35:e7:cd:c3:d8: e3:47:fa:e6:c2:de:16:bd:4e:48:38:1f:db:36:cb: b5:33:b3:0b:e7:7a:0a:bc:e0:c6:7c:99:d1:ee:31: e0:4f:e0:c8:43:fd:db:ee:90:87:cf:6a:22:82:91: e9:66:a2:a6:4b:f7:dc:de:ee:79:e1:e3:35:16:d0: fb:a9:46:bc:6f:3a:6f:9e:25:d5:b0:68:d2:10:0d: 7f:25:af:c1:a7:29:6b:d1:e4:2b:a6:a3:10:b3:75: 61:3b:20:5b:20:1c:ab:69:e6:4a:47:be:26:b5:87: 85:65:fc:9e:5a:1f:f8:45:cd:f0:c3:d0:50:3f:0a: 03:12:99:39:a6:ad:0d:8f:2c:c4:a4:be:f4:fe:d3: 3f:10:ba:d2:bf:72:96:0b:08:b1:5e:aa:1b:74:9a: 2f:0b:8d:af:c5:fd:e7:f7:79:6e:1e:df:19:97:cb: 11:10:4b:e6:4c:54:6e:bc:48:0a:0d:51:f5:3f:99: fb:c9:2f:65:b5:b4:48:67:de:a6:a5:d5:88:5d:96: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C3:15:2A:3D:5A:BA:33:92:AB:6C:42:28:F9:94:9C:6D:52:E3:F6 X509v3 Authority Key Identifier: keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:6e:45:d9:d2:b2:99:82:4e:a9:c0:46:c3:9e:c0:13:60:e0: 3d:cc:43:ef:84:01:4e:5d:41:e6:c8:b0:b0:0f:90:0f:2f:4d: d5:a2:1b:7c:1b:18:5e:0d:78:59:81:c2:b4:03:03:12:07:c3: b0:df:18:3c:93:58:64:4b:17:fe:b8:ad:e5:3f:0f:c5:56:ec: 9e:ad:b7:b6:bd:cf:8e:58:e8:b9:03:d6:16:d4:c2:76:7a:e7: 00:2d:b4:79:29:83:1c:7e:5d:5e:1b:0d:bc:9e:95:ef:46:cc: 09:2c:8a:12:f1:81:c1:33:c1:56:5b:8a:bc:8e:dc:ec:3d:2a: 1c:89:df:fb:48:1a:60:b6:a9:bc:d5:26:88:ae:18:20:a4:c6: 43:1e:d4:d0:7b:79:25:64:9a:ac:8f:11:28:18:17:68:97:c7: 86:62:b0:b0:1e:46:f8:03:79:6a:f7:c8:a7:9e:a0:69:d6:50: b4:bd:b1:85:d8:20:e4:2d:0e:15:aa:69:d0:85:7d:73:24:4b: 1c:ee:81:38:39:dd:a4:03:69:4f:b0:e0:af:5f:8e:81:85:28: a8:d0:60:9f:39:b1:9a:c1:4c:4d:e8:bf:cb:d9:46:d8:49:4c: 9d:81:92:55:0f:b9:8b:62:68:34:a3:4b:c6:50:61:0b:34:21: 3d:12:75:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNn4rG9djyOczlB6RqsOm0rS2GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIwRUZD RDlGNzI1RDAeFw0yNjExMTAwNzIwMTlaFw0yNjExMTEwOTQ3MTlaMDMxMTAvBgNV BAMTKEMyQzMxNTJBM0Q1QUJBMzM5MkFCNkM0MjI4Rjk5NDlDNkQ1MkUzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrcQZxE3beA3uO8OneaSeDT0J Obn3nxd8EBvHLS1xI8ej5MAcufRq2W0h1Zs9gSyeM3G1Bng1583D2ONH+ubC3ha9 Tkg4H9s2y7Uzswvnegq84MZ8mdHuMeBP4MhD/dvukIfPaiKCkelmoqZL99ze7nnh 4zUW0PupRrxvOm+eJdWwaNIQDX8lr8GnKWvR5CumoxCzdWE7IFsgHKtp5kpHvia1 h4Vl/J5aH/hFzfDD0FA/CgMSmTmmrQ2PLMSkvvT+0z8QutK/cpYLCLFeqht0mi8L ja/F/ef3eW4e3xmXyxEQS+ZMVG68SAoNUfU/mfvJL2W1tEhn3qal1Yhdls5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwsMVKj1aujOSq2xCKPmUnG1S4/YwHwYDVR0j BBgwFoAUVQP/VlcBIzft86Oc2oog782fcl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhNWZmZGMtMTUxYS00YWFkLWEyYjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1 NzAxMjMzN0VERjNBMzlDREE4QTIwRUZDRDlGNzI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NTAzRkY1NjU3MDEyMzM3RURGM0EzOUNEQThBMjBFRkNEOUY3 MjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIw RUZDRDlGNzI1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpuRdnSspmCTqnARsOewBNg4D3MQ++EAU5d QebIsLAPkA8vTdWiG3wbGF4NeFmBwrQDAxIHw7DfGDyTWGRLF/64reU/D8VW7J6t t7a9z45Y6LkD1hbUwnZ65wAttHkpgxx+XV4bDbyele9GzAksihLxgcEzwVZbiryO 3Ow9KhyJ3/tIGmC2qbzVJoiuGCCkxkMe1NB7eSVkmqyPESgYF2iXx4ZisLAeRvgD eWr3yKeeoGnWULS9sYXYIOQtDhWqadCFfXMkSxzugTg53aQDaU+w4K9fjoGFKKjQ YJ85sZrBTE3ov8vZRthJTJ2BklUPuYtiaDSjS8ZQYQs0IT0SdTs= -----END CERTIFICATE-----Generated at Tue Nov 10 13:29:20 2026 by rpki-client