$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: ieUlbPsDP23u7/RAGISiI98j8mj3N4yjhClR40t3LnM= Subject key identifier: 76:AE:FF:41:C3:7E:BD:BE:96:30:8D:82:7D:4D:FB:F4:3B:FC:61:6B Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 257C03BF2565B11F8415B7DE3F3D40258CCFA781 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 0111 Signing time: Wed 25 Mar 2026 19:32:11 +0000 Manifest this update: Wed 25 Mar 2026 19:27:11 +0000 Manifest next update: Sun 29 Mar 2026 03:24:11 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: nftyyuOIBj+++CxbH99kDls7Fy/hsK2K48HouC+uTa4=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7c:03:bf:25:65:b1:1f:84:15:b7:de:3f:3d:40:25:8c:cf:a7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Mar 25 19:27:11 2026 GMT Not After : Mar 29 03:24:11 2026 GMT Subject: CN=76AEFF41C37EBDBE96308D827D4DFBF43BFC616B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:8b:e0:94:58:3f:c9:a2:85:9f:a9:e2:53: 76:73:84:81:72:06:2a:0c:26:a1:14:b4:ff:d2:a7: de:9e:9c:d2:c4:69:5b:e3:e7:44:92:bb:69:f3:4e: c2:db:b1:26:18:60:3b:f6:a3:34:20:f8:a1:b8:ed: 88:2c:4a:cc:1d:56:28:87:59:e6:01:d0:3e:8d:3b: ac:fc:56:f4:9b:c3:f0:21:3f:f6:9a:72:77:8e:63: fc:e2:ea:32:b9:e1:ad:23:9f:47:62:ab:41:b8:fd: fe:8d:7f:9d:aa:4f:90:f9:94:f9:f3:af:3a:d1:19: 87:24:cb:87:22:e9:28:b3:37:b1:1f:63:59:e7:f2: 09:da:6f:de:c5:13:84:53:ca:b7:17:3b:1d:e0:74: e1:17:0e:f7:73:18:25:02:87:ad:d0:12:f8:db:0e: 54:10:e0:f5:7c:b5:0a:ac:4b:82:df:2b:08:b5:fd: c8:1f:0d:e7:c6:4f:23:17:c8:12:1c:7a:6b:24:16: 17:14:95:1b:d7:82:56:ea:11:58:fb:bf:fa:a9:60: 70:f8:b6:a8:1a:52:d5:bf:41:cd:af:58:20:d0:e3: 46:ba:39:f9:48:f8:06:df:22:7f:37:3c:93:6a:46: eb:c2:14:fe:d9:26:a4:89:53:e0:60:00:8a:05:25: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AE:FF:41:C3:7E:BD:BE:96:30:8D:82:7D:4D:FB:F4:3B:FC:61:6B X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a3:7f:01:e6:72:51:ff:5a:22:27:b8:b6:c6:bf:7b:9c:e6: 2e:f7:24:15:ca:37:ac:99:6d:09:fb:05:96:fa:1d:75:64:91: 8a:16:1e:42:95:72:c3:d2:f7:06:0c:bc:43:80:e5:be:5c:02: e0:9d:cb:26:0f:90:5a:6d:f2:eb:a9:15:e6:4c:a8:4e:0f:23: b1:7b:a2:77:7e:c5:2d:5e:63:a0:bb:f5:0e:f9:49:02:5c:d6: fb:c8:47:45:7c:4f:ee:76:05:6b:a6:62:bd:34:99:94:76:fa: 97:37:b2:04:3c:a9:d5:de:4f:5d:9d:95:81:1e:69:5f:6c:cf: 14:cc:08:a7:ee:44:fd:c0:70:2a:15:23:71:74:1d:16:53:fd: 51:28:85:da:77:d0:e5:2a:14:b6:3f:a5:a0:39:12:82:1f:30: 94:a0:9d:88:a0:ce:bc:22:39:54:9d:13:b7:05:fe:01:8b:14: 82:5b:97:e1:53:1d:45:00:25:be:6c:9a:34:40:62:46:8a:b0: 97:59:4c:72:c3:53:91:5d:7f:b2:76:8e:b6:cf:28:46:4a:05: 74:9d:0e:ff:75:ab:04:41:43:09:f2:6c:a7:e0:ca:fd:70:a7: 28:e4:4b:5a:01:ef:f5:67:0b:d3:9e:36:4e:7c:c0:05:d2:e8: d8:28:f3:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXwDvyVlsR+EFbfePz1AJYzPp4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNjAzMjUxOTI3MTFaFw0yNjAzMjkwMzI0MTFaMDMxMTAvBgNV BAMTKDc2QUVGRjQxQzM3RUJEQkU5NjMwOEQ4MjdENERGQkY0M0JGQzYxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBovglFg/yaKFn6niU3ZzhIFy BioMJqEUtP/Sp96enNLEaVvj50SSu2nzTsLbsSYYYDv2ozQg+KG47YgsSswdViiH WeYB0D6NO6z8VvSbw/AhP/aacneOY/zi6jK54a0jn0diq0G4/f6Nf52qT5D5lPnz rzrRGYcky4ci6SizN7EfY1nn8gnab97FE4RTyrcXOx3gdOEXDvdzGCUCh63QEvjb DlQQ4PV8tQqsS4LfKwi1/cgfDefGTyMXyBIcemskFhcUlRvXglbqEVj7v/qpYHD4 tqgaUtW/Qc2vWCDQ40a6OflI+AbfIn83PJNqRuvCFP7ZJqSJU+BgAIoFJQbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdq7/QcN+vb6WMI2CfU379Dv8YWswHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGujfwHmclH/WiInuLbGv3uc5i73JBXKN6yZ bQn7BZb6HXVkkYoWHkKVcsPS9wYMvEOA5b5cAuCdyyYPkFpt8uupFeZMqE4PI7F7 ond+xS1eY6C79Q75SQJc1vvIR0V8T+52BWumYr00mZR2+pc3sgQ8qdXeT12dlYEe aV9szxTMCKfuRP3AcCoVI3F0HRZT/VEohdp30OUqFLY/paA5EoIfMJSgnYigzrwi OVSdE7cF/gGLFIJbl+FTHUUAJb5smjRAYkaKsJdZTHLDU5Fdf7J2jrbPKEZKBXSd Dv91qwRBQwnybKfgyv1wpyjkS1oB7/VnC9OeNk58wAXS6Ngo89g= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:19 2026 by rpki-client