$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: 4oUwwDgQtZGzA3sdJnk3ntlp/OqnwbfY3IgNKxgsKWo= Subject key identifier: AA:E8:A1:8A:1B:0F:4A:58:BC:BE:30:1A:C5:46:33:08:47:B5:43:99 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 1EAB1A986A799BDB4B0C3A8CDA94C3CD37838AA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 055E Signing time: Tue 24 Mar 2026 13:52:22 +0000 Manifest this update: Tue 24 Mar 2026 13:47:22 +0000 Manifest next update: Fri 27 Mar 2026 16:49:22 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: /sUy2OwE31FnTh0YnshhRBEd3wN+hSvvW8bZftetbsg=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ab:1a:98:6a:79:9b:db:4b:0c:3a:8c:da:94:c3:cd:37:83:8a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Mar 24 13:47:22 2026 GMT Not After : Mar 27 16:49:22 2026 GMT Subject: CN=AAE8A18A1B0F4A58BCBE301AC546330847B54399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:c4:bd:d7:a4:e8:00:ff:a6:e3:12:35:43: 95:bd:4e:8e:2c:7a:18:08:2b:2d:24:4c:40:99:f1: df:43:15:12:cc:11:a2:94:60:42:19:72:69:0d:ce: e3:80:1e:ce:93:a6:ed:0f:31:a8:69:85:3e:76:d8: cf:39:de:fd:0f:d6:73:b3:44:ba:00:ba:7b:7d:39: 62:76:6d:af:25:40:91:4d:ef:f1:a5:7e:ba:a4:a1: 46:e2:01:ab:36:bb:dc:27:59:d5:0f:b7:d6:76:5d: f3:0f:ac:16:cd:a6:41:36:6f:7c:89:c5:00:01:c4: 6c:ca:70:da:42:2e:27:53:d7:6c:49:6b:ed:a0:37: 55:4b:a8:be:13:e7:83:20:13:03:bb:72:18:01:63: 7a:7d:eb:02:40:c0:b6:bb:c8:8e:ca:d9:92:ec:5d: 8b:ad:32:6e:41:b5:71:7f:2e:66:3a:1b:68:2d:ec: ee:d5:ee:95:85:77:1c:f7:06:bc:f1:ea:1b:87:94: 01:26:8d:04:9d:d8:00:d1:ee:08:00:a6:11:ea:97: 6e:89:9a:9d:f6:b6:21:04:5f:9c:3f:49:cb:19:0e: c1:45:42:13:b1:0a:6a:56:4e:e5:a8:e9:8a:ae:0f: 3a:61:16:ac:41:c7:9a:13:b9:ba:d2:ea:e1:0a:c4: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E8:A1:8A:1B:0F:4A:58:BC:BE:30:1A:C5:46:33:08:47:B5:43:99 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:af:fa:ed:9b:86:3f:06:47:ad:ed:81:a1:92:f6:17:04:57: 4e:27:79:04:3c:48:ae:a0:c0:2e:d1:ae:e8:28:1c:c1:be:2f: 07:a3:e6:1b:d5:15:de:f9:2d:e7:3f:b2:23:94:ce:84:74:6c: 23:cb:6c:45:18:e5:44:1a:88:39:8d:65:fc:82:04:62:42:97: cb:26:cd:1f:9b:4b:31:02:29:90:a3:ed:f5:d6:77:50:b4:3f: be:6c:6e:74:a7:9b:80:8b:77:c2:ea:d7:92:c9:0b:6d:52:cd: d4:7b:b7:d4:fa:ed:90:b5:34:50:4e:25:47:88:82:52:1e:c0: c3:0a:db:56:00:05:c2:54:e5:3f:8d:cf:66:cb:b9:60:88:b7: a1:bb:c0:c1:69:5e:41:4f:30:4f:8a:92:10:0e:82:c5:68:01: fd:a2:ca:8b:92:ca:ee:1b:51:1a:52:0d:56:42:89:a6:f6:01: 63:fb:28:37:76:86:b5:94:cd:a0:82:15:42:34:95:6f:e4:16: 8c:8d:e4:62:79:a0:f1:18:5e:40:61:72:3b:b5:5f:d3:54:f4: c4:b7:f4:30:80:29:6f:81:c0:18:0c:f8:2f:e9:2f:b2:be:91: d2:44:1f:49:da:f5:04:d2:cd:dd:42:a9:a5:29:a4:d1:66:f9: bd:b8:ff:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqsamGp5m9tLDDqM2pTDzTeDiqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNjAzMjQxMzQ3MjJaFw0yNjAzMjcxNjQ5MjJaMDMxMTAvBgNV BAMTKEFBRThBMThBMUIwRjRBNThCQ0JFMzAxQUM1NDYzMzA4NDdCNTQzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzMS916ToAP+m4xI1Q5W9To4s ehgIKy0kTECZ8d9DFRLMEaKUYEIZcmkNzuOAHs6Tpu0PMahphT522M853v0P1nOz RLoAunt9OWJ2ba8lQJFN7/GlfrqkoUbiAas2u9wnWdUPt9Z2XfMPrBbNpkE2b3yJ xQABxGzKcNpCLidT12xJa+2gN1VLqL4T54MgEwO7chgBY3p96wJAwLa7yI7K2ZLs XYutMm5BtXF/LmY6G2gt7O7V7pWFdxz3Brzx6huHlAEmjQSd2ADR7ggAphHql26J mp32tiEEX5w/ScsZDsFFQhOxCmpWTuWo6YquDzphFqxBx5oTubrS6uEKxHU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUquihihsPSli8vjAaxUYzCEe1Q5kwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGv+u2bhj8GR63tgaGS9hcEV04neQQ8SK6g wC7RrugoHMG+Lwej5hvVFd75Lec/siOUzoR0bCPLbEUY5UQaiDmNZfyCBGJCl8sm zR+bSzECKZCj7fXWd1C0P75sbnSnm4CLd8Lq15LJC21SzdR7t9T67ZC1NFBOJUeI glIewMMK21YABcJU5T+Nz2bLuWCIt6G7wMFpXkFPME+KkhAOgsVoAf2iyouSyu4b URpSDVZCiab2AWP7KDd2hrWUzaCCFUI0lW/kFoyN5GJ5oPEYXkBhcju1X9NU9MS3 9DCAKW+BwBgM+C/pL7K+kdJEH0na9QTSzd1CqaUppNFm+b24/2Y= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:13 2026 by rpki-client