$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: Om21MGIC8dM/ySKyGp6SSafZY0m/xuQinXEa4S8vp6c= Subject key identifier: 5B:49:B0:2C:74:E2:31:20:CB:63:2D:E8:DD:84:D2:BA:2B:FF:B0:75 Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 7729DA871803BEA76065778CF8D54DFEFFE4337C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 0513 Signing time: Tue 24 Mar 2026 14:52:45 +0000 Manifest this update: Tue 24 Mar 2026 14:47:45 +0000 Manifest next update: Sat 28 Mar 2026 01:00:45 +0000 Files and hashes: 1: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: 6FDlg2YsSMm8JjnMIXGzOcZ1FnkRsEgWK9YmBpKsu00=) 2: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:29:da:87:18:03:be:a7:60:65:77:8c:f8:d5:4d:fe:ff:e4:33:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Mar 24 14:47:45 2026 GMT Not After : Mar 28 01:00:45 2026 GMT Subject: CN=5B49B02C74E23120CB632DE8DD84D2BA2BFFB075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:2d:eb:09:a9:9e:1b:aa:9e:64:3d:ad:4e: e3:eb:06:3d:b6:76:0d:d2:2c:14:ce:3a:4b:fb:3b: ae:b4:14:4a:a1:f4:f2:ea:68:a0:cc:70:be:09:fc: 26:95:4a:f7:f0:d4:96:ae:d6:cf:65:83:18:b5:0e: ce:32:19:b6:32:86:a3:91:56:e9:60:2d:2b:de:39: a7:1b:b6:ca:09:bf:ce:38:94:01:1e:96:a9:f6:b0: 50:50:4c:0b:33:7b:33:ea:9c:0e:bc:75:a6:59:fa: d7:47:73:eb:5c:e7:35:53:84:c6:67:77:ea:c5:a6: f9:d1:c2:bd:b7:27:3f:7d:8a:d8:72:10:2a:c2:9d: 87:e8:10:b9:1d:73:f3:86:51:dd:bb:af:6d:70:8b: 59:02:57:92:a4:d5:fb:cb:b5:99:ba:fb:5b:43:3a: 66:e3:d1:8e:ca:18:4f:70:34:a3:fc:39:4e:00:cf: 19:87:fd:e1:40:e9:61:c9:59:12:d0:57:11:c6:d8: 3e:4f:3b:85:85:4e:df:47:21:96:ef:1b:de:e1:d2: 07:6e:3b:77:b8:5a:cb:3d:ed:5f:fb:a4:59:ec:bd: b0:d1:da:06:6d:8e:ca:c0:0a:36:4b:94:77:7b:c2: 2d:4a:16:9c:a3:80:32:22:ac:d8:03:07:ae:70:91: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:B0:2C:74:E2:31:20:CB:63:2D:E8:DD:84:D2:BA:2B:FF:B0:75 X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9c:df:ba:ab:12:c1:e9:86:5f:df:e1:19:13:56:c7:dc:d3: 57:cf:c4:65:57:10:a5:9b:ad:76:10:3e:ae:61:dd:30:56:1a: c1:4f:4e:26:6f:d3:57:aa:8a:f0:8a:58:38:16:66:04:dd:fb: e9:a1:a3:b8:a4:1c:4d:47:a2:f5:7a:3f:2b:2d:c1:9a:45:b6: 84:3d:22:ce:48:53:e8:37:26:3e:ac:b6:ec:5d:1f:0b:97:6e: d5:ee:a4:c1:42:e5:52:ce:97:ef:2c:5c:e9:a3:17:64:1e:59: c2:85:27:bc:53:b7:f5:de:a8:02:c2:61:d7:0f:bf:13:aa:e5: 60:e9:87:61:f9:58:07:09:2a:65:49:3d:18:7d:31:b8:b0:ea: e9:ae:2c:1e:74:5f:60:1f:0b:c6:e8:53:4b:13:98:30:dd:0d: fa:82:8f:60:da:cd:71:93:3e:58:da:83:e7:89:df:2b:c7:4a: da:43:f5:90:c7:6d:30:5e:72:c0:c0:71:a1:76:53:21:7f:f9: bd:c9:28:fa:51:cc:7f:00:8d:8f:0b:19:04:5e:6f:71:6a:79: 9b:42:fc:1a:ef:1d:75:a1:42:3f:ee:44:e7:ed:64:7e:33:d5: 18:aa:76:d8:ed:2a:d7:5e:1a:45:0d:b6:0a:f5:7a:ed:43:35: fa:6a:9e:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdynahxgDvqdgZXeM+NVN/v/kM3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNjAzMjQxNDQ3NDVaFw0yNjAzMjgwMTAwNDVaMDMxMTAvBgNV BAMTKDVCNDlCMDJDNzRFMjMxMjBDQjYzMkRFOEREODREMkJBMkJGRkIwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoC3rCameG6qeZD2tTuPrBj22 dg3SLBTOOkv7O660FEqh9PLqaKDMcL4J/CaVSvfw1Jau1s9lgxi1Ds4yGbYyhqOR VulgLSveOacbtsoJv844lAEelqn2sFBQTAszezPqnA68daZZ+tdHc+tc5zVThMZn d+rFpvnRwr23Jz99ithyECrCnYfoELkdc/OGUd27r21wi1kCV5Kk1fvLtZm6+1tD Ombj0Y7KGE9wNKP8OU4AzxmH/eFA6WHJWRLQVxHG2D5PO4WFTt9HIZbvG97h0gdu O3e4Wss97V/7pFnsvbDR2gZtjsrACjZLlHd7wi1KFpyjgDIirNgDB65wkae3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0mwLHTiMSDLYy3o3YTSuiv/sHUwHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmc37qrEsHphl/f4RkTVsfc01fPxGVXEKWb rXYQPq5h3TBWGsFPTiZv01eqivCKWDgWZgTd++mho7ikHE1HovV6PystwZpFtoQ9 Is5IU+g3Jj6stuxdHwuXbtXupMFC5VLOl+8sXOmjF2QeWcKFJ7xTt/XeqALCYdcP vxOq5WDph2H5WAcJKmVJPRh9Mbiw6umuLB50X2AfC8boU0sTmDDdDfqCj2DazXGT Pljag+eJ3yvHStpD9ZDHbTBecsDAcaF2UyF/+b3JKPpRzH8AjY8LGQReb3FqeZtC /BrvHXWhQj/uROftZH4z1RiqdtjtKtdeGkUNtgr1eu1DNfpqnkw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:49:13 2026 by rpki-client