$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft File: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft (raw, json) Hash identifier: d6iX5n9TeCLehKGmLMV2hFrL452heCWosrDxslhy3Xg= Subject key identifier: C9:05:93:E1:5D:69:55:5E:2A:56:37:EC:FA:12:19:FC:D8:52:2F:74 Authority key identifier: 5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 Certificate issuer: /CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Certificate serial: 6180E2B91C1C1CE4205155734A2E6F59DF7DDC9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 08:36:49 +0000 Manifest this update: Tue 10 Nov 2026 08:31:49 +0000 Manifest next update: Wed 11 Nov 2026 10:19:49 +0000 Files and hashes: 1: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: oCDO+C8a0RrEJ6lxOXaK0sUnJXysyt3W9yTdznU1D4w=) 2: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl (hash: LlxX8WZUjTSpej1aX4oXpEinFBD5wkofxQbj2ax4u9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:80:e2:b9:1c:1c:1c:e4:20:51:55:73:4a:2e:6f:59:df:7d:dc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Validity Not Before: Nov 10 08:31:49 2026 GMT Not After : Nov 11 10:19:49 2026 GMT Subject: CN=C90593E15D69555E2A5637ECFA1219FCD8522F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:07:d4:21:92:d0:c2:0b:22:1d:f4:f7:30: c7:9d:1d:0c:76:47:1b:23:77:9b:68:04:e7:a2:18: bc:e3:c8:26:8f:32:cd:b6:8a:c5:b4:37:51:79:21: 59:ce:d0:1e:51:4c:4a:d2:bb:09:96:fe:41:81:39: ce:c2:4b:ac:16:d0:a0:e9:d0:1b:65:44:6c:fc:ed: 16:b8:f8:f8:83:e0:e9:65:bc:68:5c:07:2a:52:00: cc:8e:f4:b5:53:71:86:28:80:82:fc:97:a6:9f:62: ae:06:8c:67:bf:c3:4e:44:ad:c2:c4:c9:1f:89:d0: b9:b7:c7:38:20:d1:de:bb:43:05:94:c8:0f:01:b8: 49:69:80:e3:5e:0a:30:7b:a4:28:10:60:ee:e5:72: 50:a8:ed:4d:34:19:18:82:dc:89:33:68:9c:0e:49: d5:5d:5e:2c:d3:fc:87:cc:cd:7e:ae:91:6a:99:4d: 9f:4a:aa:00:1f:13:32:c1:aa:34:66:d5:3e:79:0a: d9:d1:44:fb:9f:7e:e8:9d:30:f7:0d:62:e8:0c:f1: bd:da:73:68:fc:d4:4c:71:55:b7:a7:ed:b6:78:13: 0c:20:ab:94:90:f3:0d:7c:6a:98:a9:a4:47:63:c7: ec:44:f3:8c:6c:3f:24:7e:36:b7:51:5e:52:3b:e1: 46:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:05:93:E1:5D:69:55:5E:2A:56:37:EC:FA:12:19:FC:D8:52:2F:74 X509v3 Authority Key Identifier: keyid:5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f7:3f:c8:b6:d4:14:f7:d2:e2:10:ee:d1:8c:fa:15:34:c9: 3d:ee:f7:b3:05:74:22:15:a4:76:51:0c:d1:9c:3f:a9:db:a9: 7b:38:b1:67:22:25:16:24:e4:6d:a9:50:f6:af:0a:4c:5c:26: e5:6b:54:06:18:84:82:36:f2:ea:06:55:86:14:35:43:f9:06: 61:b5:39:0a:e1:ce:86:97:c8:69:ff:88:75:e1:61:72:8d:62: b9:20:fe:d9:2c:84:04:8e:65:1d:1b:b6:e4:fd:f2:82:a1:a8: b7:fb:53:f5:e6:cb:69:31:5e:3b:81:5d:69:35:03:19:43:41: f9:ce:63:eb:3b:40:ae:d1:3c:11:ef:11:74:9c:66:5d:a2:14: 18:de:be:9a:6a:16:4a:f8:b4:6c:ac:88:fb:71:38:05:f6:fa: d8:99:d8:32:63:97:59:4e:b9:07:fd:1f:bf:85:c9:3b:40:a9: 16:ee:93:3a:64:eb:2e:58:9d:2c:0e:de:0f:99:cd:2b:4d:5c: 11:e1:64:39:65:9f:fe:90:77:65:2b:31:e7:f5:09:ef:ea:36: 8c:12:ac:ff:41:b5:c8:d3:8e:92:be:75:43:98:2b:a1:be:3e: d5:56:cb:01:88:4b:f4:34:09:4a:43:91:f5:90:61:00:0e:97: fb:89:53:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYDiuRwcHOQgUVVzSi5vWd993J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4 QjkwMTQ5NjAeFw0yNjExMTAwODMxNDlaFw0yNjExMTExMDE5NDlaMDMxMTAvBgNV BAMTKEM5MDU5M0UxNUQ2OTU1NUUyQTU2MzdFQ0ZBMTIxOUZDRDg1MjJGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUwfUIZLQwgsiHfT3MMedHQx2 Rxsjd5toBOeiGLzjyCaPMs22isW0N1F5IVnO0B5RTErSuwmW/kGBOc7CS6wW0KDp 0BtlRGz87Ra4+PiD4OllvGhcBypSAMyO9LVTcYYogIL8l6afYq4GjGe/w05ErcLE yR+J0Lm3xzgg0d67QwWUyA8BuElpgONeCjB7pCgQYO7lclCo7U00GRiC3IkzaJwO SdVdXizT/IfMzX6ukWqZTZ9KqgAfEzLBqjRm1T55CtnRRPuffuidMPcNYugM8b3a c2j81ExxVben7bZ4Ewwgq5SQ8w18apippEdjx+xE84xsPyR+NrdRXlI74UZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQWT4V1pVV4qVjfs+hIZ/NhSL3QwHwYDVR0j BBgwFoAUXBnvK5msbznq/TyQpRz/LYuQFJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZWNjZmYtY2U5Yi00MWRhLWI5OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5 OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4QjkwMTQ5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzE5RUYyQjk5QUM2RjM5RUFGRDNDOTBBNTFDRkYyRDhCOTAx NDk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZG MkQ4QjkwMTQ5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHb3P8i21BT30uIQ7tGM+hU0yT3u97MFdCIV pHZRDNGcP6nbqXs4sWciJRYk5G2pUPavCkxcJuVrVAYYhII28uoGVYYUNUP5BmG1 OQrhzoaXyGn/iHXhYXKNYrkg/tkshASOZR0btuT98oKhqLf7U/Xmy2kxXjuBXWk1 AxlDQfnOY+s7QK7RPBHvEXScZl2iFBjevppqFkr4tGysiPtxOAX2+tiZ2DJjl1lO uQf9H7+FyTtAqRbukzpk6y5YnSwO3g+ZzStNXBHhZDlln/6Qd2UrMef1Ce/qNowS rP9BtcjTjpK+dUOYK6G+PtVWywGIS/Q0CUpDkfWQYQAOl/uJUxc= -----END CERTIFICATE-----Generated at Tue Nov 10 17:35:53 2026 by rpki-client