$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: Y9e0gI1gqMzeTu7hbODhSBkuoB/hQV7JBQchUMdS9TU= Subject key identifier: F3:A7:E5:BE:06:25:B1:75:FA:2F:D8:F9:B3:49:03:78:F9:3B:7F:21 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 216C1AE358A01668711C418A328D30CC4DE26C5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0397 Signing time: Wed 25 Mar 2026 18:20:44 +0000 Manifest this update: Wed 25 Mar 2026 18:15:44 +0000 Manifest next update: Sat 28 Mar 2026 20:27:44 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 3: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: MznJaKYBc7eshj/W5KLp6tviBFhkE8CGAr3MLIVYTEI=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6c:1a:e3:58:a0:16:68:71:1c:41:8a:32:8d:30:cc:4d:e2:6c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Mar 25 18:15:44 2026 GMT Not After : Mar 28 20:27:44 2026 GMT Subject: CN=F3A7E5BE0625B175FA2FD8F9B3490378F93B7F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:ec:ac:0d:9e:92:31:46:f3:33:08:e3:f4: 98:7e:19:bb:e1:1c:dc:cd:1a:29:b8:ee:ca:a4:6f: 0e:9e:a7:08:30:f1:49:85:cb:3a:da:46:02:96:98: 7d:75:cc:66:d1:7c:50:79:29:41:e1:b0:d8:5d:e1: e2:81:cd:52:ff:7f:a2:48:f2:dc:9a:7f:70:0a:04: 78:24:40:39:2c:3f:92:ab:7d:ca:8d:bf:b7:ad:40: 73:fc:2b:81:c8:0d:9a:2e:29:6f:ca:11:d5:72:b5: dd:7d:23:d1:ae:bc:d7:9a:f7:d0:af:86:5d:da:6b: 20:69:45:42:9d:f6:eb:02:fe:e0:8e:23:e7:63:5e: 63:d5:dc:ed:fe:81:a1:61:30:0f:8a:88:c5:ab:29: 05:7c:ff:42:5b:ad:0a:20:fc:d1:db:fc:bf:1d:a1: a4:8a:46:fa:d5:66:d4:15:e3:21:05:83:58:8a:4f: af:87:10:a0:9e:6d:d0:d0:b4:a8:7b:33:ab:4f:9d: a8:b3:ba:68:46:3b:79:84:3b:ad:5d:38:66:bb:48: 6f:9b:30:07:6f:cb:ed:40:2a:73:b1:f7:b6:6f:14: 2e:f4:22:86:46:52:20:49:31:60:50:16:dd:4b:bd: f8:ff:41:21:14:f3:5c:62:64:66:c6:2f:a8:5d:c4: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:E5:BE:06:25:B1:75:FA:2F:D8:F9:B3:49:03:78:F9:3B:7F:21 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b5:8a:f2:97:08:51:4f:40:2d:05:17:13:a4:53:8b:10:6d: 41:98:cc:9a:b2:02:8d:a1:77:66:5d:a0:91:d5:76:d7:23:4e: 92:3f:4c:0b:44:b7:54:8b:16:6d:ae:eb:42:e4:0b:5d:94:4a: 92:2c:2c:eb:fd:68:07:51:3b:72:62:f0:29:2a:bd:8b:0e:4a: 12:26:63:db:f8:78:17:bb:0f:e2:ea:4b:9c:2b:0e:a9:06:1c: 5d:3a:ea:61:9f:37:93:4a:09:b1:98:35:ad:ab:ee:99:e4:72: 77:b0:f0:be:45:a9:23:38:5e:d4:3d:2e:42:f6:ef:d5:d3:5e: ba:d3:96:72:32:d4:f3:bc:1e:51:53:07:4e:3e:22:c9:cc:3f: 9b:80:0f:ca:81:54:da:94:ea:82:f6:4a:e3:ad:0d:ce:5d:5a: 01:d2:68:53:a2:d1:6c:b6:8e:c4:bb:70:36:6f:bf:06:7d:1e: ec:2e:4c:11:45:45:01:64:5d:fb:82:96:c8:53:d1:44:e7:66: 53:56:9b:70:17:2c:53:a0:ed:23:b4:05:89:ce:21:a5:d7:a0: 45:69:9a:2a:fa:60:e6:1a:e1:80:14:58:69:cb:6d:43:64:9d: 63:b8:98:7b:2f:68:20:57:81:8a:c0:b8:77:21:e4:91:b4:5c: f0:7c:0b:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWwa41igFmhxHEGKMo0wzE3ibF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNjAzMjUxODE1NDRaFw0yNjAzMjgyMDI3NDRaMDMxMTAvBgNV BAMTKEYzQTdFNUJFMDYyNUIxNzVGQTJGRDhGOUIzNDkwMzc4RjkzQjdGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXOysDZ6SMUbzMwjj9Jh+Gbvh HNzNGim47sqkbw6epwgw8UmFyzraRgKWmH11zGbRfFB5KUHhsNhd4eKBzVL/f6JI 8tyaf3AKBHgkQDksP5KrfcqNv7etQHP8K4HIDZouKW/KEdVytd19I9GuvNea99Cv hl3aayBpRUKd9usC/uCOI+djXmPV3O3+gaFhMA+KiMWrKQV8/0JbrQog/NHb/L8d oaSKRvrVZtQV4yEFg1iKT6+HEKCebdDQtKh7M6tPnaizumhGO3mEO61dOGa7SG+b MAdvy+1AKnOx97ZvFC70IoZGUiBJMWBQFt1Lvfj/QSEU81xiZGbGL6hdxFK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU86flvgYlsXX6L9j5s0kDePk7fyEwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABq1ivKXCFFPQC0FFxOkU4sQbUGYzJqyAo2h d2ZdoJHVdtcjTpI/TAtEt1SLFm2u60LkC12USpIsLOv9aAdRO3Ji8CkqvYsOShIm Y9v4eBe7D+LqS5wrDqkGHF066mGfN5NKCbGYNa2r7pnkcnew8L5FqSM4XtQ9LkL2 79XTXrrTlnIy1PO8HlFTB04+IsnMP5uAD8qBVNqU6oL2SuOtDc5dWgHSaFOi0Wy2 jsS7cDZvvwZ9HuwuTBFFRQFkXfuClshT0UTnZlNWm3AXLFOg7SO0BYnOIaXXoEVp mir6YOYa4YAUWGnLbUNknWO4mHsvaCBXgYrAuHch5JG0XPB8C28= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:37 2026 by rpki-client