$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft File: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft (raw, json) Hash identifier: /ujEzSwA4oic7RLAikuAThp26d8xeVNjrryOVCAWA/I= Subject key identifier: 38:07:CA:95:7C:4C:31:2B:07:C7:A4:CF:7C:F3:DC:86:07:C2:11:10 Authority key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC Certificate issuer: /CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Certificate serial: 5F6C8E23623F234DA0250D0F9F4651443B92F8FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft Manifest number: FF Signing time: Mon 09 Nov 2026 10:18:29 +0000 Manifest this update: Mon 09 Nov 2026 10:13:29 +0000 Manifest next update: Tue 10 Nov 2026 12:18:29 +0000 Files and hashes: 1: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl (hash: ipWo9Fjhm+41d1yHyZ/MqQeIKeW46FGO72a0ePOz5ds=) 2: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: RqUjB86YVPgt7tRWRmn7/EkRMj2UXiSSsOWSw1LcnVs=) 3: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: Zd8dKndrIl4VSQfqixAyA/TOWCY5DaeyRMvOby+h3uw=) 4: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: c5ycRdkZmzicMcHlVxH8DNqWq6vMY1pMgkNwLRJ1u08=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 12:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6c:8e:23:62:3f:23:4d:a0:25:0d:0f:9f:46:51:44:3b:92:f8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Validity Not Before: Nov 9 10:13:29 2026 GMT Not After : Nov 10 12:18:29 2026 GMT Subject: CN=3807CA957C4C312B07C7A4CF7CF3DC8607C21110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:4b:7f:df:2c:ee:59:28:92:72:70:ba:c9: ab:80:39:4d:3a:e6:3d:b3:ff:f4:1f:c8:c2:5f:94: 6e:1f:b9:7d:23:26:c9:65:59:90:e6:a7:58:2e:35: e7:bc:b9:ef:6f:77:52:4f:b3:8a:f1:c2:d4:9e:73: 97:d5:8d:d7:26:96:5d:1e:5c:a7:ca:eb:c3:a6:d0: c8:e2:27:29:f0:54:50:1a:d6:54:dd:32:74:09:39: ed:b6:fd:1c:e7:a5:e7:64:c1:39:da:44:8c:35:eb: d8:31:25:71:74:87:ef:ab:1c:7f:41:c2:c8:bb:44: 9a:eb:4d:6b:9c:f1:05:f8:99:f5:93:f4:b9:f4:59: 2b:eb:b0:20:bf:61:92:4c:d3:4d:63:46:cc:fd:93: 34:c2:9a:49:ad:27:eb:70:50:7d:15:ea:f9:d1:83: 39:00:44:ce:0b:59:b2:5c:c5:3c:93:b7:01:f0:62: 84:23:31:ba:86:07:fa:b1:0a:82:4c:c2:76:71:91: e8:54:ae:c0:20:94:e5:2b:f1:09:ad:86:98:06:5a: 70:39:e4:22:b6:26:b9:17:90:a9:8b:13:eb:3b:1c: 9e:26:81:8d:a0:8d:38:df:16:2d:ef:a5:b1:fb:f1: 03:f7:a0:df:bd:9e:6e:f1:59:76:6e:8c:96:d3:2d: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:07:CA:95:7C:4C:31:2B:07:C7:A4:CF:7C:F3:DC:86:07:C2:11:10 X509v3 Authority Key Identifier: keyid:D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:18:ff:d0:1d:8c:2a:0a:76:cd:14:55:83:59:53:2a:2a:ab: 7e:da:6d:e0:73:08:60:46:bd:1a:46:12:4f:3d:4d:7b:4c:70: b4:12:08:65:87:78:ae:f4:33:8c:97:73:3a:91:03:51:82:6a: 83:b6:f7:3b:b0:17:21:2e:69:d3:c2:19:01:7b:58:67:ec:40: 21:66:f6:a1:df:6b:94:63:34:50:4a:04:01:78:7f:27:bf:19: 6f:72:b4:37:60:3a:92:5a:f1:4b:ec:2c:c9:94:62:57:5e:6a: 87:57:62:1c:d3:7f:2f:90:dd:eb:07:c2:df:a1:fa:56:4c:de: 4f:d2:ba:05:13:39:0f:a7:da:f0:e9:23:ce:bd:73:ac:b8:9c: 6f:35:37:08:5d:a0:07:ed:81:40:64:41:29:7c:fb:9c:29:d3: 09:36:27:5b:84:ec:7a:bd:40:c2:89:5f:23:6c:98:9d:c5:ea: 9e:9f:62:d1:02:86:d0:13:34:14:f8:c4:1f:40:17:3c:37:28: 4c:e2:6f:60:cb:e2:03:c4:02:5c:cd:d1:7c:89:82:24:89:6f: d2:36:d2:b4:ee:32:df:e4:d0:15:16:2e:d2:7d:d8:f2:a0:7f: 5e:e4:0e:78:8b:45:34:10:12:9b:63:70:e8:dd:dd:0e:57:03: 98:58:be:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2yOI2I/I02gJQ0Pn0ZRRDuS+PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFFRUI0 OEIyRTVFQzAeFw0yNjExMDkxMDEzMjlaFw0yNjExMTAxMjE4MjlaMDMxMTAvBgNV BAMTKDM4MDdDQTk1N0M0QzMxMkIwN0M3QTRDRjdDRjNEQzg2MDdDMjExMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ukt/3yzuWSiScnC6yauAOU06 5j2z//QfyMJflG4fuX0jJsllWZDmp1guNee8ue9vd1JPs4rxwtSec5fVjdcmll0e XKfK68Om0MjiJynwVFAa1lTdMnQJOe22/RznpedkwTnaRIw169gxJXF0h++rHH9B wsi7RJrrTWuc8QX4mfWT9Ln0WSvrsCC/YZJM001jRsz9kzTCmkmtJ+twUH0V6vnR gzkARM4LWbJcxTyTtwHwYoQjMbqGB/qxCoJMwnZxkehUrsAglOUr8QmthpgGWnA5 5CK2JrkXkKmLE+s7HJ4mgY2gjTjfFi3vpbH78QP3oN+9nm7xWXZujJbTLV+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOAfKlXxMMSsHx6TPfPPchgfCERAwHwYDVR0j BBgwFoAU1c6MTiHsgfSVjPYHQg8e60iy5ewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVjOGI5ZTMtYjQ0Zi00OTBiLWJmNTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUy MUVDODFGNDk1OENGNjA3NDIwRjFFRUI0OEIyRTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUNFOEM0RTIxRUM4MUY0OTU4Q0Y2MDc0MjBGMUVFQjQ4QjJF NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFF RUI0OEIyRTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4Y/9AdjCoKds0UVYNZUyoqq37abeBzCGBG vRpGEk89TXtMcLQSCGWHeK70M4yXczqRA1GCaoO29zuwFyEuadPCGQF7WGfsQCFm 9qHfa5RjNFBKBAF4fye/GW9ytDdgOpJa8UvsLMmUYldeaodXYhzTfy+Q3esHwt+h +lZM3k/SugUTOQ+n2vDpI869c6y4nG81NwhdoAftgUBkQSl8+5wp0wk2J1uE7Hq9 QMKJXyNsmJ3F6p6fYtEChtATNBT4xB9AFzw3KEzib2DL4gPEAlzN0XyJgiSJb9I2 0rTuMt/k0BUWLtJ92PKgf17kDniLRTQQEptjcOjd3Q5XA5hYvnI= -----END CERTIFICATE-----Generated at Tue Nov 10 05:09:33 2026 by rpki-client