$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: RznPqBnEwj7qacOVvp6+DVVYJUzNb5yg9vnf7mAIFps= Subject key identifier: DA:97:8A:40:7B:1F:3D:0D:8C:4D:47:BE:E7:D8:5D:6C:CA:72:EC:AC Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 067AE4E570E6F1027CD58C319EA8A12888B5E5F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 055A Signing time: Wed 25 Mar 2026 06:10:53 +0000 Manifest this update: Wed 25 Mar 2026 06:05:53 +0000 Manifest next update: Sat 28 Mar 2026 07:43:53 +0000 Files and hashes: 1: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: fx69GZbwSyhORuIolRO9eL5W6J4WXB6ZKUfH50Q/NoQ=) 2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7a:e4:e5:70:e6:f1:02:7c:d5:8c:31:9e:a8:a1:28:88:b5:e5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Mar 25 06:05:53 2026 GMT Not After : Mar 28 07:43:53 2026 GMT Subject: CN=DA978A407B1F3D0D8C4D47BEE7D85D6CCA72ECAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:14:ff:91:b9:e0:db:bf:f3:dd:77:9f:42: 65:5b:fa:33:f8:a1:bb:01:eb:32:34:d4:c3:d1:c6: 89:3a:7f:ea:7e:51:40:a5:bf:20:8d:5f:57:0a:ff: 01:07:2c:50:f2:ec:e9:b1:3d:76:ab:29:ea:76:23: bc:51:23:31:39:60:20:cf:c8:b1:9e:2c:5a:82:9d: 04:b5:d9:0f:06:e0:f6:78:0d:97:4f:38:10:a7:5d: f1:b9:68:a6:ce:e8:05:5a:14:50:c2:d1:2e:69:9b: a9:e3:77:b4:6b:80:de:79:cc:de:25:db:64:77:45: 95:c8:08:70:6a:2f:41:4d:c1:6b:c7:8f:2d:27:d2: 0f:4d:81:e3:db:86:0b:6a:6c:4a:ef:bb:a9:8c:4b: 01:35:54:98:78:af:d1:2c:49:3f:cd:3c:31:33:39: 47:b8:37:c6:53:10:88:0a:42:65:ef:8a:7e:8b:d6: a0:1e:bf:fd:34:d4:41:00:ec:7f:df:34:97:ee:59: 99:8d:32:6c:c3:af:48:18:cc:b5:a2:25:69:65:73: cc:04:33:4b:78:4d:5d:ae:31:a1:58:c6:42:74:8e: d3:cc:75:18:b1:12:e5:ee:1c:54:61:4d:89:8c:5d: 52:69:0c:1b:ac:e9:64:7e:7d:06:bc:d7:83:eb:59: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:97:8A:40:7B:1F:3D:0D:8C:4D:47:BE:E7:D8:5D:6C:CA:72:EC:AC X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b0:87:99:7b:69:1d:df:bb:0e:84:02:70:bd:ee:4c:6f:33: f2:62:48:38:a9:29:8f:d8:26:82:49:15:a0:d3:c8:eb:b5:10: d7:ec:1f:33:32:70:3d:f1:2f:e5:9c:d4:d0:59:ed:6a:65:29: 46:89:29:47:96:2b:10:31:47:b9:a7:ae:a7:48:75:94:30:de: 4d:2b:3e:63:c8:be:d4:95:77:75:d8:72:da:60:4d:1f:7f:04: 28:e8:41:3f:42:29:cb:bc:51:8d:ee:1d:15:76:a4:8e:d3:b2: 41:ad:64:80:67:f2:dd:f8:2e:db:c8:b0:c2:0b:db:22:fb:dd: af:c5:9b:bb:f9:9a:98:82:03:6e:47:ae:8a:f4:51:77:e7:e7: ad:c0:a3:27:2c:86:e2:c8:df:c1:61:84:35:c0:d0:35:03:82: e3:56:0b:b8:45:fd:23:2a:79:b7:00:9f:3c:65:6b:0a:ca:b2: 49:79:af:9c:a7:c5:30:26:bf:c6:32:4c:b7:7a:cb:fe:40:8b: 32:5a:9a:1f:ba:18:ab:17:e3:e4:c9:1f:58:c8:6b:50:df:79: db:95:d1:20:ef:35:28:76:67:a4:5d:cb:6e:6d:1d:dd:7e:85: a4:2d:d4:9d:fe:00:95:83:69:9d:61:54:fa:e8:a6:5e:d5:a5: d4:cd:46:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnrk5XDm8QJ81YwxnqihKIi15fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNjAzMjUwNjA1NTNaFw0yNjAzMjgwNzQzNTNaMDMxMTAvBgNV BAMTKERBOTc4QTQwN0IxRjNEMEQ4QzRENDdCRUU3RDg1RDZDQ0E3MkVDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvRT/kbng27/z3XefQmVb+jP4 obsB6zI01MPRxok6f+p+UUClvyCNX1cK/wEHLFDy7OmxPXarKep2I7xRIzE5YCDP yLGeLFqCnQS12Q8G4PZ4DZdPOBCnXfG5aKbO6AVaFFDC0S5pm6njd7RrgN55zN4l 22R3RZXICHBqL0FNwWvHjy0n0g9NgePbhgtqbErvu6mMSwE1VJh4r9EsST/NPDEz OUe4N8ZTEIgKQmXvin6L1qAev/001EEA7H/fNJfuWZmNMmzDr0gYzLWiJWllc8wE M0t4TV2uMaFYxkJ0jtPMdRixEuXuHFRhTYmMXVJpDBus6WR+fQa814PrWQT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2peKQHsfPQ2MTUe+59hdbMpy7KwwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmwh5l7aR3fuw6EAnC97kxvM/JiSDipKY/Y JoJJFaDTyOu1ENfsHzMycD3xL+Wc1NBZ7WplKUaJKUeWKxAxR7mnrqdIdZQw3k0r PmPIvtSVd3XYctpgTR9/BCjoQT9CKcu8UY3uHRV2pI7TskGtZIBn8t34LtvIsMIL 2yL73a/Fm7v5mpiCA25Hror0UXfn563AoycshuLI38FhhDXA0DUDguNWC7hF/SMq ebcAnzxlawrKskl5r5ynxTAmv8YyTLd6y/5AizJamh+6GKsX4+TJH1jIa1DfeduV 0SDvNSh2Z6Rdy25tHd1+haQt1J3+AJWDaZ1hVPropl7VpdTNRqk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:35 2026 by rpki-client