$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft File: 5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json) Hash identifier: jxY1URyhgD4ySa0GhUrjij/GIML0G7AZwMoK6DXEIio= Subject key identifier: B0:C3:A5:A8:94:2D:FB:97:B2:92:CF:6F:9D:E8:7B:AD:B6:5A:EA:5D Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 Certificate issuer: /CN=5509BA3B36B8E5C809C09949749272FEF605F530 Certificate serial: 6A910006EB2D0DF5820094B9797D55CD0BC860A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft Manifest number: 0201 Signing time: Wed 25 Mar 2026 18:31:28 +0000 Manifest this update: Wed 25 Mar 2026 18:26:28 +0000 Manifest next update: Sun 29 Mar 2026 03:35:28 +0000 Files and hashes: 1: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: fswipt2GzpbLxNVSKLJNBtjumryj1H079NPKIHEQz6g=) 2: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: 8ZofTM+D5M9nvYq11uPI8+eNUF6q36psEqXW1noJg48=) 3: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: GpDEKCgBX9XD+jiRaKE2yJjAbdJ9JvSIqiEv2cy9Py0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:91:00:06:eb:2d:0d:f5:82:00:94:b9:79:7d:55:cd:0b:c8:60:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530 Validity Not Before: Mar 25 18:26:28 2026 GMT Not After : Mar 29 03:35:28 2026 GMT Subject: CN=B0C3A5A8942DFB97B292CF6F9DE87BADB65AEA5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:f9:d6:a5:8f:1d:53:fd:02:62:44:21:db: a4:5c:c8:b2:c6:f7:c5:45:eb:77:ec:1d:0c:be:41: 27:f8:0c:bc:4e:b3:e5:15:66:c7:9f:d4:e5:f4:75: f2:f0:b8:15:c3:a8:cd:fd:4a:82:77:9a:cd:39:7b: 90:a4:cf:0b:0e:d6:85:e5:60:0a:df:48:9b:02:30: 4e:78:38:41:7f:0d:3d:e4:e8:a6:dc:77:86:92:ec: c1:23:68:11:3d:2b:d4:08:aa:12:49:e4:d4:d3:21: 70:f0:2e:da:bf:75:f2:6c:6e:e6:28:f5:f6:5b:ba: d5:27:95:2e:43:56:59:b4:21:2c:a6:65:23:a6:86: cd:99:75:95:bf:74:d7:00:50:f4:3a:22:b3:ce:23: 8e:09:41:7d:67:93:83:d4:85:a1:88:19:03:6f:5e: 90:67:56:80:e9:a7:f1:0e:76:ec:d7:a9:e6:c1:44: 10:e5:e0:d6:a0:6d:c4:dc:96:12:b7:de:a0:45:39: 80:e7:91:b3:b8:f2:6c:3f:98:d7:2f:2c:eb:bf:72: 33:f2:cf:8a:16:65:59:0b:7d:af:be:b5:f9:bf:f3: 1c:30:52:f0:75:1a:7d:71:65:38:11:59:6c:ce:3a: cf:71:97:b4:aa:12:9d:02:06:44:e4:92:be:98:b9: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C3:A5:A8:94:2D:FB:97:B2:92:CF:6F:9D:E8:7B:AD:B6:5A:EA:5D X509v3 Authority Key Identifier: keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a6:c0:8d:75:9a:80:aa:86:a8:3d:e5:64:65:25:4f:b1:68: d2:fa:4a:8b:e5:45:16:5d:78:eb:f1:f4:d8:05:6c:e4:c0:00: 4f:19:3e:36:fb:8b:d7:ba:87:3e:ab:74:ce:44:99:f2:82:1a: 89:74:3a:46:69:12:c2:36:8a:7c:f4:33:04:cb:09:d1:ea:ae: b0:73:8c:b2:af:04:57:a8:04:01:87:1c:3b:4f:b4:79:d4:f0: 39:c8:e9:bf:d7:f3:fc:85:2f:3d:44:80:ca:55:b3:3a:43:a2: 1d:23:70:a5:70:9f:ff:49:22:c2:09:84:5a:68:2b:2b:4d:60: 09:35:7d:45:63:e6:3a:68:d3:19:99:45:0c:b8:dd:31:78:a2: 38:f0:5d:2b:53:91:50:44:52:fe:0b:1b:bb:be:18:e9:36:66: 5c:c3:f7:03:6f:8c:c5:65:09:1f:07:2d:90:3f:12:9b:16:3b: b9:a9:8c:39:3c:6f:c0:64:1d:55:84:3a:42:67:ef:b4:09:db: ac:f1:fb:34:10:1d:7f:76:aa:6a:cc:0b:11:ce:93:a1:68:40: ab:79:a7:e6:2e:2f:41:70:2a:db:db:25:df:85:de:74:57:07: 6e:c6:47:fe:1c:02:9f:d2:14:5b:7e:ad:df:9b:38:51:4b:e5: b2:f5:d2:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUapEABustDfWCAJS5eX1VzQvIYKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVG NjA1RjUzMDAeFw0yNjAzMjUxODI2MjhaFw0yNjAzMjkwMzM1MjhaMDMxMTAvBgNV BAMTKEIwQzNBNUE4OTQyREZCOTdCMjkyQ0Y2RjlERTg3QkFEQjY1QUVBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQi/nWpY8dU/0CYkQh26RcyLLG 98VF63fsHQy+QSf4DLxOs+UVZsef1OX0dfLwuBXDqM39SoJ3ms05e5CkzwsO1oXl YArfSJsCME54OEF/DT3k6Kbcd4aS7MEjaBE9K9QIqhJJ5NTTIXDwLtq/dfJsbuYo 9fZbutUnlS5DVlm0ISymZSOmhs2ZdZW/dNcAUPQ6IrPOI44JQX1nk4PUhaGIGQNv XpBnVoDpp/EOduzXqebBRBDl4NagbcTclhK33qBFOYDnkbO48mw/mNcvLOu/cjPy z4oWZVkLfa++tfm/8xwwUvB1Gn1xZTgRWWzOOs9xl7SqEp0CBkTkkr6Yua6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsMOlqJQt+5eyks9vneh7rbZa6l0wHwYDVR0j BBgwFoAUVQm6Oza45cgJwJlJdJJy/vYF9TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGEzOTJkYy0yZTRlLTQ3NzAtOGY2OC1iYzYxZjgwYjc0YTcvMC81NTA5QkEzQjM2 QjhFNUM4MDlDMDk5NDk3NDkyNzJGRUY2MDVGNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVGNjA1 RjUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5Mjcy RkVGNjA1RjUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJymwI11moCqhqg95WRlJU+xaNL6SovlRRZd eOvx9NgFbOTAAE8ZPjb7i9e6hz6rdM5EmfKCGol0OkZpEsI2inz0MwTLCdHqrrBz jLKvBFeoBAGHHDtPtHnU8DnI6b/X8/yFLz1EgMpVszpDoh0jcKVwn/9JIsIJhFpo KytNYAk1fUVj5jpo0xmZRQy43TF4ojjwXStTkVBEUv4LG7u+GOk2ZlzD9wNvjMVl CR8HLZA/EpsWO7mpjDk8b8BkHVWEOkJn77QJ26zx+zQQHX92qmrMCxHOk6FoQKt5 p+YuL0FwKtvbJd+F3nRXB27GR/4cAp/SFFt+rd+bOFFL5bL10oI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:00 2026 by rpki-client