$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: bY11Ed+q8FfS+oxp6nZ+L7BAG+AVptPl1x4MwjfmRKw= Subject key identifier: 7E:13:3E:81:47:31:F9:E7:64:CC:E2:20:6B:C0:1C:B3:C3:49:B4:F0 Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 55396CEE7B85693F2B5AC291C18139F4246F11D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: 0120 Signing time: Thu 26 Mar 2026 04:30:45 +0000 Manifest this update: Thu 26 Mar 2026 04:25:45 +0000 Manifest next update: Sun 29 Mar 2026 15:10:45 +0000 Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: CErZ3u/tAmzFJPQB/4YNSdZLJFUkWEfNxoELeZrPctM=) 2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:39:6c:ee:7b:85:69:3f:2b:5a:c2:91:c1:81:39:f4:24:6f:11:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Mar 26 04:25:45 2026 GMT Not After : Mar 29 15:10:45 2026 GMT Subject: CN=7E133E814731F9E764CCE2206BC01CB3C349B4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:8e:e2:e9:f3:5c:d9:d4:5a:94:25:3d:6f: c0:78:3d:79:91:e1:a9:c1:0b:5a:3f:7a:f6:cf:63: 23:6d:10:86:f1:fe:28:33:1e:2a:8d:6a:36:c7:ac: f7:cd:77:e4:63:c1:ab:b6:64:c7:a0:8c:4d:5f:7f: 53:99:90:0a:6f:72:59:d8:08:bf:32:eb:0a:fc:5d: 95:ea:f6:f1:bd:90:50:f3:54:2f:f9:e7:0d:e6:1d: bf:e3:a7:e2:74:45:c7:ea:cb:6a:eb:0b:3c:f2:54: 33:4d:9b:9c:ce:b0:d4:3f:ce:49:a7:3e:8c:f5:0c: 13:77:60:fe:84:bc:48:98:3f:b4:cb:b3:f4:a2:d7: b7:cc:58:56:e7:3b:4f:7c:1d:17:14:e4:cc:0e:61: 6b:e6:21:4c:84:4d:57:48:74:a4:34:d7:b3:a0:21: 3a:9c:63:c3:da:b2:ae:8c:ab:9a:c0:d9:06:82:f7: 05:f0:65:cf:5f:a0:fe:04:aa:8b:69:23:bd:f2:db: 3a:b2:23:1b:4a:0e:e7:e5:a7:aa:2f:c1:5a:c3:9e: 1d:90:89:af:0b:05:a2:88:94:57:59:c2:62:3d:15: e8:e4:ee:3e:59:91:4e:1b:53:4e:76:56:ee:7f:5e: 5e:d9:4b:59:6e:82:93:93:ae:7b:7e:65:73:bb:be: ba:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:13:3E:81:47:31:F9:E7:64:CC:E2:20:6B:C0:1C:B3:C3:49:B4:F0 X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:ad:4d:80:5b:1b:8d:19:63:d8:29:0f:a6:3b:0e:6d:a2:64: 38:01:98:51:c7:27:b1:2a:2c:db:0a:18:aa:c4:52:5a:7e:1f: ce:8f:ae:aa:75:32:3d:fb:cf:79:79:f0:83:6f:c8:60:21:a1: f2:22:8d:d4:5d:7e:44:58:a6:b7:de:59:ca:9c:42:c8:1e:61: 0c:8a:49:67:52:50:04:36:14:5b:ee:be:b7:94:21:09:42:7c: 2d:a6:96:de:32:a7:d1:a5:c2:15:63:db:aa:34:7c:f9:d1:b3: b8:29:f0:48:0b:75:52:9e:ea:f9:bb:98:b0:eb:66:c3:24:c5: cc:fb:91:89:6a:46:f3:03:e2:1c:ce:57:bd:fc:44:5d:3d:46: 5e:95:f8:e6:14:95:05:aa:c7:7c:65:1b:28:74:64:b4:68:fb: d5:8a:27:92:fb:cf:ae:dd:34:d4:31:33:f4:bc:13:a6:06:fa: 86:9c:10:0c:b5:9c:1e:c5:9e:c6:9e:66:93:c3:af:60:1e:39: 90:17:02:a4:59:9b:dd:79:91:dc:1e:fe:49:bb:3d:cc:53:c4: cb:ab:5c:c3:82:51:ef:d4:99:0c:ab:03:9e:ef:31:70:74:65: 99:a1:20:89:d3:71:0c:2a:86:6a:e1:42:4e:e0:5d:e7:d5:a2: 53:e5:d2:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTls7nuFaT8rWsKRwYE59CRvEdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNjAzMjYwNDI1NDVaFw0yNjAzMjkxNTEwNDVaMDMxMTAvBgNV BAMTKDdFMTMzRTgxNDczMUY5RTc2NENDRTIyMDZCQzAxQ0IzQzM0OUI0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPY47i6fNc2dRalCU9b8B4PXmR 4anBC1o/evbPYyNtEIbx/igzHiqNajbHrPfNd+Rjwau2ZMegjE1ff1OZkApvclnY CL8y6wr8XZXq9vG9kFDzVC/55w3mHb/jp+J0Rcfqy2rrCzzyVDNNm5zOsNQ/zkmn Poz1DBN3YP6EvEiYP7TLs/Si17fMWFbnO098HRcU5MwOYWvmIUyETVdIdKQ017Og ITqcY8Pasq6Mq5rA2QaC9wXwZc9foP4EqotpI73y2zqyIxtKDuflp6ovwVrDnh2Q ia8LBaKIlFdZwmI9Fejk7j5ZkU4bU052Vu5/Xl7ZS1lugpOTrnt+ZXO7vrpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfhM+gUcx+edkzOIga8Acs8NJtPAwHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqtTYBbG40ZY9gpD6Y7Dm2iZDgBmFHHJ7Eq LNsKGKrEUlp+H86Prqp1Mj37z3l58INvyGAhofIijdRdfkRYprfeWcqcQsgeYQyK SWdSUAQ2FFvuvreUIQlCfC2mlt4yp9GlwhVj26o0fPnRs7gp8EgLdVKe6vm7mLDr ZsMkxcz7kYlqRvMD4hzOV738RF09Rl6V+OYUlQWqx3xlGyh0ZLRo+9WKJ5L7z67d NNQxM/S8E6YG+oacEAy1nB7FnsaeZpPDr2AeOZAXAqRZm915kdwe/km7PcxTxMur XMOCUe/UmQyrA57vMXB0ZZmhIInTcQwqhmrhQk7gXefVolPl0tc= -----END CERTIFICATE-----Generated at Thu Mar 26 21:22:08 2026 by rpki-client