$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: tcAwuAtbSb0r60mCylVolXdTsqcvOiXUHffALSP43P4= Subject key identifier: 18:5F:47:4E:7B:F6:E4:FF:67:4B:C7:3F:FA:1D:4A:FA:6A:05:F0:E4 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 2D4AC5C677BC8B043503EF47DD1938C38DFCDC04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0564 Signing time: Thu 26 Mar 2026 01:21:55 +0000 Manifest this update: Thu 26 Mar 2026 01:16:55 +0000 Manifest next update: Sun 29 Mar 2026 11:29:55 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 2: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: BTRpQK3IymCM+92GV4YuhoZKKLktHUpBVHUeDUxgGWo=) 3: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: PR6tCmOpsN34UaTOcKKylyBUbEJHRGhqi70NsXysHs0=) 4: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 5: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4a:c5:c6:77:bc:8b:04:35:03:ef:47:dd:19:38:c3:8d:fc:dc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Mar 26 01:16:55 2026 GMT Not After : Mar 29 11:29:55 2026 GMT Subject: CN=185F474E7BF6E4FF674BC73FFA1D4AFA6A05F0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:ba:8f:c5:68:45:fd:1a:23:01:99:a6:da: c4:09:4f:07:13:1c:7d:fc:99:43:6c:20:49:eb:96: 0f:d9:94:03:60:e1:32:7d:f9:7d:80:55:24:13:23: 85:8f:82:ec:ee:2c:c1:ea:e3:3d:e2:79:82:f8:c8: ab:c3:dd:74:ec:a8:03:96:58:55:57:63:96:65:bc: d3:7a:65:f8:b2:81:1b:85:11:71:09:4a:05:ae:cc: f8:2b:32:68:01:83:fd:e7:3c:47:5f:3d:6e:eb:e9: d4:b4:25:e5:a2:0c:ca:5b:0c:3a:e5:3a:42:83:1d: ab:28:f4:21:84:14:71:5a:8a:01:92:ce:d9:cc:67: 3d:fb:45:b5:19:65:f9:c3:06:71:ee:71:db:32:af: 31:8a:f0:0a:a3:d2:f8:5f:0f:cb:b3:63:14:b6:27: ee:b1:b2:ed:06:25:67:59:5c:77:9d:d7:bd:f9:85: aa:5a:c7:1f:19:d3:dc:99:1d:d4:fb:32:1f:10:50: c2:40:19:6a:bd:15:96:e0:da:42:e3:ec:f1:a9:8b: f2:fa:02:29:a5:79:ff:c4:97:a3:5b:51:b6:fa:b9: 96:68:fa:1f:ce:c7:68:f1:cb:66:25:5e:5e:20:bd: be:cc:11:5f:a4:c3:e7:50:ee:9a:c7:46:74:79:7f: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5F:47:4E:7B:F6:E4:FF:67:4B:C7:3F:FA:1D:4A:FA:6A:05:F0:E4 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:10:ef:db:c0:6e:f4:1b:88:1e:8b:ae:d6:da:c8:17:ad:5b: 71:35:94:32:90:84:dc:14:d5:ba:a5:0e:14:e8:e7:92:5c:78: 65:05:76:c7:3e:12:f0:27:48:5c:3e:56:61:2f:b1:01:5d:14: 47:bd:93:61:e2:6d:34:70:43:b8:a8:55:ad:02:1b:c6:64:06: 93:f6:85:de:04:0e:25:ca:d9:93:48:35:ff:91:5e:33:6f:3d: 52:06:43:df:34:ab:6d:95:07:92:6f:96:83:b2:50:5f:b4:c9: 93:cb:db:cd:b7:e9:75:bc:96:ea:9a:93:03:dc:0f:4d:af:9d: 36:e1:7b:88:10:31:7a:d7:d2:3d:82:73:11:98:08:53:ca:24: 00:f0:51:18:55:88:1d:64:81:87:39:1e:af:b8:78:e8:78:2a: 68:26:09:76:ad:cc:05:2d:89:a8:3b:cd:31:9e:be:c6:60:24: 44:ef:7d:46:02:fb:9a:04:29:37:67:36:68:9f:91:8c:bd:f3: d8:58:77:0e:6e:7a:b8:9b:a3:cc:90:48:e9:f0:d3:c9:12:9a: 0e:08:5b:dc:ff:fb:13:c8:78:96:4d:99:74:30:57:77:4f:a8: 26:90:19:28:45:84:b8:b4:ae:6b:d9:ed:d5:80:46:75:d4:f0: 26:ba:d2:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUrFxne8iwQ1A+9H3Rk4w4383AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNjAzMjYwMTE2NTVaFw0yNjAzMjkxMTI5NTVaMDMxMTAvBgNV BAMTKDE4NUY0NzRFN0JGNkU0RkY2NzRCQzczRkZBMUQ0QUZBNkEwNUYwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMbqPxWhF/RojAZmm2sQJTwcT HH38mUNsIEnrlg/ZlANg4TJ9+X2AVSQTI4WPguzuLMHq4z3ieYL4yKvD3XTsqAOW WFVXY5ZlvNN6ZfiygRuFEXEJSgWuzPgrMmgBg/3nPEdfPW7r6dS0JeWiDMpbDDrl OkKDHaso9CGEFHFaigGSztnMZz37RbUZZfnDBnHucdsyrzGK8Aqj0vhfD8uzYxS2 J+6xsu0GJWdZXHed1735hapaxx8Z09yZHdT7Mh8QUMJAGWq9FZbg2kLj7PGpi/L6 Aimlef/El6NbUbb6uZZo+h/Ox2jxy2YlXl4gvb7MEV+kw+dQ7prHRnR5f1DBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGF9HTnv25P9nS8c/+h1K+moF8OQwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIQ79vAbvQbiB6LrtbayBetW3E1lDKQhNwU 1bqlDhTo55JceGUFdsc+EvAnSFw+VmEvsQFdFEe9k2HibTRwQ7ioVa0CG8ZkBpP2 hd4EDiXK2ZNINf+RXjNvPVIGQ980q22VB5JvloOyUF+0yZPL28236XW8luqakwPc D02vnTbhe4gQMXrX0j2CcxGYCFPKJADwURhViB1kgYc5Hq+4eOh4KmgmCXatzAUt iag7zTGevsZgJETvfUYC+5oEKTdnNmifkYy989hYdw5ueribo8yQSOnw08kSmg4I W9z/+xPIeJZNmXQwV3dPqCaQGShFhLi0rmvZ7dWARnXU8Ca60gA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:38 2026 by rpki-client