$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: RRcmU9A0zAwz0FeOdzzLz21AIEyXQ01jS0ZziLr5paM= Subject key identifier: 7A:3B:FB:5A:5B:BC:6D:F5:5E:9C:96:6A:8A:F4:B5:FE:8F:73:AA:7C Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 09A436A10F4176B893C555EF8F367CE48EAE0505 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 055F Signing time: Wed 25 Mar 2026 14:21:21 +0000 Manifest this update: Wed 25 Mar 2026 14:16:21 +0000 Manifest next update: Sat 28 Mar 2026 18:47:21 +0000 Files and hashes: 1: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: qfsocuHbtKKweujddVE8sEDXiy2zIDmUdZRx8+OHNGc=) 2: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 3: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) 4: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 5: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a4:36:a1:0f:41:76:b8:93:c5:55:ef:8f:36:7c:e4:8e:ae:05:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Mar 25 14:16:21 2026 GMT Not After : Mar 28 18:47:21 2026 GMT Subject: CN=7A3BFB5A5BBC6DF55E9C966A8AF4B5FE8F73AA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:9d:b3:6d:b1:81:26:2a:c9:da:39:33:76: a0:3e:f7:b9:c2:c1:1b:6c:c2:e2:1b:96:5d:00:a4: 44:c3:00:31:73:e0:00:ba:f6:eb:4f:a5:66:4e:13: b6:47:84:e5:52:de:8e:23:a6:b9:3a:5a:1a:e4:5d: b8:19:72:2e:54:33:4c:cf:14:ec:17:a1:2b:cc:c2: c1:ca:4a:c4:a9:9c:7f:0a:3a:22:4e:3e:f6:1d:2c: df:da:db:e6:b8:19:47:7e:95:4e:61:52:c8:6f:c5: fc:11:b2:b4:1d:d3:c9:a0:5b:52:32:94:52:fb:af: 44:d5:bd:d7:0d:3d:24:c8:48:a4:c1:61:ff:26:fd: 1e:32:41:8f:90:d4:a9:61:f2:1e:0f:0f:8c:a3:11: aa:c5:07:9a:95:a0:24:ad:e5:d1:a9:f2:32:ca:82: e8:97:1d:30:3c:86:84:60:5a:16:fc:ba:02:ac:5d: 89:58:90:a8:f0:ef:cc:0f:76:9f:8c:b9:d6:5d:bb: 9c:de:27:78:24:8d:15:ae:b3:6e:f1:70:fe:2b:22: 93:31:70:82:69:73:95:c4:a3:33:76:ad:84:17:85: 70:4f:86:71:13:79:42:f8:89:7d:8f:af:b7:3c:2b: 6c:f1:ad:b2:58:e6:f7:a7:ad:47:2e:eb:67:4f:b3: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3B:FB:5A:5B:BC:6D:F5:5E:9C:96:6A:8A:F4:B5:FE:8F:73:AA:7C X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:d4:7a:d8:50:d3:eb:d0:a7:63:88:1c:52:40:19:40:a5: 6a:91:61:5e:ab:5e:a3:4f:d2:a8:1b:b6:7f:a9:81:2f:cf:a3: ec:65:80:4e:6a:0b:ba:8c:a3:a5:f3:e5:09:95:25:74:c9:21: 7d:63:5e:ec:39:a9:01:1f:77:44:0a:81:ab:df:91:d6:f0:08: 0f:01:63:d0:9f:2e:2a:dc:2c:1f:b2:06:bd:a3:63:02:fc:48: 9c:5c:cd:9d:29:35:d8:14:be:f2:a2:2c:8e:a4:2b:4c:59:b4: 05:9e:30:9d:14:bf:b1:2d:de:8f:e7:85:77:c6:47:cc:5a:3a: 55:86:85:c9:ea:37:41:02:78:92:46:d0:33:36:4c:4a:ef:7f: 88:3a:e6:81:42:a3:09:3f:55:b1:98:83:d6:c1:36:90:7f:45: f8:cf:2c:16:5d:a9:26:e1:75:19:a9:08:59:c3:89:8c:4a:80: 4f:17:57:81:d9:63:13:4b:24:f0:2f:54:41:ad:2e:4b:87:71: da:a7:92:1f:1a:b4:4f:2f:fd:77:a0:37:5b:88:04:96:3b:fa: 5a:cc:ae:11:7b:2d:64:f3:40:fc:77:d4:1a:5a:e6:c2:7a:37: 0b:09:3a:4c:c7:80:ad:b1:61:e5:d1:ae:26:ac:8b:12:48:79: ad:9b:be:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCaQ2oQ9BdriTxVXvjzZ85I6uBQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNjAzMjUxNDE2MjFaFw0yNjAzMjgxODQ3MjFaMDMxMTAvBgNV BAMTKDdBM0JGQjVBNUJCQzZERjU1RTlDOTY2QThBRjRCNUZFOEY3M0FBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmZ2zbbGBJirJ2jkzdqA+97nC wRtswuIbll0ApETDADFz4AC69utPpWZOE7ZHhOVS3o4jprk6WhrkXbgZci5UM0zP FOwXoSvMwsHKSsSpnH8KOiJOPvYdLN/a2+a4GUd+lU5hUshvxfwRsrQd08mgW1Iy lFL7r0TVvdcNPSTISKTBYf8m/R4yQY+Q1Klh8h4PD4yjEarFB5qVoCSt5dGp8jLK guiXHTA8hoRgWhb8ugKsXYlYkKjw78wPdp+MudZdu5zeJ3gkjRWus27xcP4rIpMx cIJpc5XEozN2rYQXhXBPhnETeUL4iX2Pr7c8K2zxrbJY5venrUcu62dPs9l5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUejv7Wlu8bfVenJZqivS1/o9zqnwwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0K1HrYUNPr0KdjiBxSQBlApWqRYV6rXqNP 0qgbtn+pgS/Po+xlgE5qC7qMo6Xz5QmVJXTJIX1jXuw5qQEfd0QKgavfkdbwCA8B Y9CfLircLB+yBr2jYwL8SJxczZ0pNdgUvvKiLI6kK0xZtAWeMJ0Uv7Et3o/nhXfG R8xaOlWGhcnqN0ECeJJG0DM2TErvf4g65oFCowk/VbGYg9bBNpB/RfjPLBZdqSbh dRmpCFnDiYxKgE8XV4HZYxNLJPAvVEGtLkuHcdqnkh8atE8v/XegN1uIBJY7+lrM rhF7LWTzQPx31Bpa5sJ6NwsJOkzHgK2xYeXRriasixJIea2bvjw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:57 2026 by rpki-client