$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft File: 5137BC6C642818ED44761CE24BD59136B86E9502.mft (raw, json) Hash identifier: +O0cUHG2a9pSIfW4bHjsYx78mAEtqDHVRt3lKiLAZvU= Subject key identifier: 58:A2:9A:C2:EB:CD:A9:31:9A:96:32:7D:99:4E:28:63:A9:91:E8:1F Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 1E147EC6156AA3ED1E00EA0604702CC96898302B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 05:32:23 +0000 Manifest this update: Mon 09 Nov 2026 05:27:23 +0000 Manifest next update: Tue 10 Nov 2026 07:27:23 +0000 Files and hashes: 1: 5137BC6C642818ED44761CE24BD59136B86E9502.crl (hash: lG5TEONTRb0adWV2FfmCyXnnZGLP+gGBZXwlYFQz1IM=) 2: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: Bjupm6rpCAaMTeTPZ2eGuF40Rt3f9ZMn/qqAW7B+FsQ=) 3: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:14:7e:c6:15:6a:a3:ed:1e:00:ea:06:04:70:2c:c9:68:98:30:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: Nov 9 05:27:23 2026 GMT Not After : Nov 10 07:27:23 2026 GMT Subject: CN=58A29AC2EBCDA9319A96327D994E2863A991E81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:b1:5e:3d:f1:43:3f:fa:08:34:5a:24:29: 96:e0:50:0b:7c:c3:63:4b:ab:e6:a9:63:dc:c7:a6: 5e:73:1b:d8:2a:53:e1:9b:be:c6:f9:6d:fa:f4:da: 51:2f:cf:ea:8a:04:e2:14:18:be:43:2d:7c:18:67: f9:11:fb:73:fc:54:da:a1:39:24:db:25:c9:91:cf: e2:9c:a5:dd:d0:ec:14:27:25:d0:89:8b:cc:ba:f8: 7f:fa:78:b2:26:64:b0:f0:98:f3:bf:63:d5:59:3a: a4:95:fb:ce:ba:0f:0b:a6:be:d3:9f:e3:22:02:f9: bc:b0:28:c5:93:5d:e7:c8:7e:7f:f4:6a:08:a3:13: cc:5c:f5:32:aa:2c:16:1f:a1:c1:46:6f:dd:ba:47: ca:ea:64:01:76:37:97:05:46:3a:f3:a8:f2:fc:96: 74:93:41:15:25:65:d0:1e:4e:b3:60:f7:d5:ae:0c: 13:ef:a2:23:3d:a9:72:55:72:05:ea:ea:2f:bf:72: e5:52:7c:9c:a9:83:99:44:7e:8c:44:ca:72:ee:3f: ee:be:e2:63:74:75:74:68:f5:a1:84:cc:1e:6f:fe: 4a:66:c1:98:40:f3:ab:da:2a:5c:90:9a:4b:ff:cc: 23:fa:22:7e:6a:f8:2f:c5:2d:f0:07:ab:17:7d:84: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A2:9A:C2:EB:CD:A9:31:9A:96:32:7D:99:4E:28:63:A9:91:E8:1F X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ce:cc:11:cd:96:10:ea:a4:d2:f0:74:c5:8b:be:47:74:2d: b6:56:bf:6b:c4:6b:13:e9:55:c7:9b:3a:c8:6c:ce:d9:94:e4: 0f:b0:3e:34:15:3f:06:b8:92:c7:9e:8a:db:e6:b7:20:a9:ee: 76:bb:6a:85:1e:30:33:74:e5:4a:5b:8d:5f:15:20:48:92:4d: bc:c9:ef:d9:9a:a4:98:32:e4:76:de:e9:4d:28:b9:4c:20:29: cb:e7:93:13:09:2e:17:e8:41:7a:d8:10:e3:61:4b:62:bd:f4: d5:a9:5b:e5:79:4f:19:4f:fe:04:4d:bb:8c:97:b9:49:0a:0c: 77:34:7c:11:7c:b4:7e:da:c0:db:9b:c6:70:3d:ac:c3:fa:10: c2:5b:2b:28:94:79:36:04:5f:b9:d6:c3:c7:a0:ec:c4:34:4c: e6:6b:42:ca:6a:27:73:b3:e7:ae:2e:b9:d4:20:ec:8f:6a:ff: 2a:63:22:6d:41:8e:00:08:1b:10:c7:72:5d:14:71:00:7a:a5: c6:8e:60:73:07:b0:c6:4f:1f:e6:fe:23:b7:1a:49:57:98:df: ac:84:47:eb:01:56:be:f7:71:8a:10:04:0e:d1:72:7d:40:76: 3d:ab:0c:bf:47:69:88:a6:8f:96:f6:99:06:fb:f8:2b:50:ca: b5:5d:e3:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhR+xhVqo+0eAOoGBHAsyWiYMCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjExMDkwNTI3MjNaFw0yNjExMTAwNzI3MjNaMDMxMTAvBgNV BAMTKDU4QTI5QUMyRUJDREE5MzE5QTk2MzI3RDk5NEUyODYzQTk5MUU4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OrFePfFDP/oINFokKZbgUAt8 w2NLq+apY9zHpl5zG9gqU+Gbvsb5bfr02lEvz+qKBOIUGL5DLXwYZ/kR+3P8VNqh OSTbJcmRz+Kcpd3Q7BQnJdCJi8y6+H/6eLImZLDwmPO/Y9VZOqSV+866DwumvtOf 4yIC+bywKMWTXefIfn/0agijE8xc9TKqLBYfocFGb926R8rqZAF2N5cFRjrzqPL8 lnSTQRUlZdAeTrNg99WuDBPvoiM9qXJVcgXq6i+/cuVSfJypg5lEfoxEynLuP+6+ 4mN0dXRo9aGEzB5v/kpmwZhA86vaKlyQmkv/zCP6In5q+C/FLfAHqxd9hO+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKKawuvNqTGaljJ9mU4oY6mR6B8wHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkx MzZCODZFOTUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfOzBHNlhDqpNLwdMWLvkd0LbZWv2vEaxPp VcebOshsztmU5A+wPjQVPwa4kseeitvmtyCp7na7aoUeMDN05UpbjV8VIEiSTbzJ 79mapJgy5Hbe6U0ouUwgKcvnkxMJLhfoQXrYEONhS2K99NWpW+V5TxlP/gRNu4yX uUkKDHc0fBF8tH7awNubxnA9rMP6EMJbKyiUeTYEX7nWw8eg7MQ0TOZrQspqJ3Oz 564uudQg7I9q/ypjIm1BjgAIGxDHcl0UcQB6pcaOYHMHsMZPH+b+I7caSVeY36yE R+sBVr73cYoQBA7Rcn1Adj2rDL9HaYimj5b2mQb7+CtQyrVd41Q= -----END CERTIFICATE-----Generated at Mon Nov 9 22:56:09 2026 by rpki-client