$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: IyaAhbzFJvrqVP4Grq78ZKla9DCjjl5YWDEHXUahVbE= Subject key identifier: 59:B8:AF:4F:41:3F:85:6B:F6:F7:8B:3F:E3:DA:11:A3:A4:8D:72:CA Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 4B7386C3551B496E9E622EC75D6402430AE63485 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 055E Signing time: Wed 25 Mar 2026 21:40:04 +0000 Manifest this update: Wed 25 Mar 2026 21:35:04 +0000 Manifest next update: Sun 29 Mar 2026 00:55:04 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: yZXQq1AsbvVqsIpt8X61N4yo3oIwRlVFOr0RHwfGuds=) 2: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: JqYdmXQJFS32z7EVrnHbhdbkJVUDXONbFVJbfV6XX4A=) 3: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 4: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:73:86:c3:55:1b:49:6e:9e:62:2e:c7:5d:64:02:43:0a:e6:34:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Mar 25 21:35:04 2026 GMT Not After : Mar 29 00:55:04 2026 GMT Subject: CN=59B8AF4F413F856BF6F78B3FE3DA11A3A48D72CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:a1:a0:e0:3f:a1:40:b7:a8:4d:b6:fb:26: 08:1d:f0:38:78:ea:a8:fe:90:a6:8e:18:55:d5:3b: da:0f:00:70:62:fa:d9:fa:cd:21:f5:45:7e:29:ad: 00:78:ff:5b:d2:2c:61:35:c4:5a:3c:92:ae:db:08: 10:73:58:83:04:80:4d:af:ba:9a:0e:dd:c4:7a:a1: 13:fd:fb:89:dd:4f:c5:87:3b:d6:ff:18:1e:af:da: 1a:1a:48:95:19:50:c5:5d:0c:e3:c5:d7:b5:ad:10: 8c:bc:7a:f0:20:9a:7e:43:96:14:0d:f5:bc:75:e9: 17:89:87:be:07:2e:bc:cd:45:3b:ed:8c:d8:5b:2c: b5:5f:27:f9:f9:07:78:0c:10:13:b9:72:74:d1:59: 4a:45:49:7b:3f:48:c1:2a:2f:a7:37:44:ae:f9:b1: f4:a4:0c:55:f6:15:4d:ba:59:f1:39:66:34:04:51: c1:e0:da:ac:2c:f4:94:c4:0e:1c:b2:a6:b3:47:1e: 8b:5b:cf:24:2a:f5:8e:ec:2a:2c:d5:eb:b5:49:40: 25:d7:bd:11:b2:95:8d:d6:e8:eb:cb:fc:97:84:9b: 4c:81:87:5e:76:83:f4:12:d2:c5:c4:a5:2d:e1:8f: 9e:3e:cf:8b:94:7f:ce:f3:58:ae:1c:eb:f2:48:dd: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B8:AF:4F:41:3F:85:6B:F6:F7:8B:3F:E3:DA:11:A3:A4:8D:72:CA X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:50:23:47:74:53:e7:6e:3a:17:f8:03:f9:68:53:6d:12:4e: 8d:2b:94:a3:28:0d:de:cb:62:7d:9c:88:66:60:b2:ee:fb:b6: 9a:77:02:00:cd:de:1d:10:a4:ba:d6:05:1b:b1:38:a0:8b:75: e7:f8:eb:33:61:30:7e:02:69:a6:9f:5c:86:2f:fa:1c:a1:98: ad:10:c9:55:57:e6:0e:ea:df:cf:59:a3:35:3e:c8:32:b9:cd: be:b6:25:4c:dc:55:d7:5d:d8:8e:dd:be:89:92:4a:35:a1:ab: 74:43:ba:a9:34:ef:6f:c8:94:94:1a:d8:71:3f:b5:f7:c7:cf: 47:04:d7:35:fd:10:78:3d:20:60:1d:97:41:c6:1d:ff:45:80: ce:51:56:d6:06:22:95:9a:b2:8e:4d:48:08:f4:fd:70:4b:e1: 97:55:6d:7e:21:d8:c0:50:3c:24:b4:b0:3a:92:12:0f:df:68: a8:13:0f:07:96:9d:89:2f:12:c4:bc:b7:27:52:4b:ef:3b:e7: c2:87:e8:54:5b:c8:83:af:f6:6b:7e:04:e9:e4:e4:e1:1e:69: 2d:e6:6c:57:b0:2c:37:0b:08:e9:dc:65:a7:66:67:cf:75:43: 57:b1:cc:5a:4c:83:c4:31:e8:7c:5f:4e:e7:21:63:19:1b:55: c8:12:9f:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3OGw1UbSW6eYi7HXWQCQwrmNIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNjAzMjUyMTM1MDRaFw0yNjAzMjkwMDU1MDRaMDMxMTAvBgNV BAMTKDU5QjhBRjRGNDEzRjg1NkJGNkY3OEIzRkUzREExMUEzQTQ4RDcyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCqGg4D+hQLeoTbb7Jggd8Dh4 6qj+kKaOGFXVO9oPAHBi+tn6zSH1RX4prQB4/1vSLGE1xFo8kq7bCBBzWIMEgE2v upoO3cR6oRP9+4ndT8WHO9b/GB6v2hoaSJUZUMVdDOPF17WtEIy8evAgmn5DlhQN 9bx16ReJh74HLrzNRTvtjNhbLLVfJ/n5B3gMEBO5cnTRWUpFSXs/SMEqL6c3RK75 sfSkDFX2FU26WfE5ZjQEUcHg2qws9JTEDhyyprNHHotbzyQq9Y7sKizV67VJQCXX vRGylY3W6OvL/JeEm0yBh152g/QS0sXEpS3hj54+z4uUf87zWK4c6/JI3VLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWbivT0E/hWv294s/49oRo6SNcsowHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANQI0d0U+duOhf4A/loU20STo0rlKMoDd7L Yn2ciGZgsu77tpp3AgDN3h0QpLrWBRuxOKCLdef46zNhMH4CaaafXIYv+hyhmK0Q yVVX5g7q389ZozU+yDK5zb62JUzcVddd2I7dvomSSjWhq3RDuqk072/IlJQa2HE/ tffHz0cE1zX9EHg9IGAdl0HGHf9FgM5RVtYGIpWaso5NSAj0/XBL4ZdVbX4h2MBQ PCS0sDqSEg/faKgTDweWnYkvEsS8tydSS+8758KH6FRbyIOv9mt+BOnk5OEeaS3m bFewLDcLCOncZadmZ891Q1exzFpMg8Qx6HxfTuchYxkbVcgSn5w= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:15 2026 by rpki-client