$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: NcqaxtXyjsyfxu1E8BnXnW9IgiqXU4gLkXvngAMpIdM= Subject key identifier: 5D:BB:EC:B6:FE:5F:EA:CB:75:F3:DE:2A:7C:D2:CE:96:C2:37:21:44 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 32A3DAD74E31F553BBA9DCFDC7A68E26DAB503A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 0203 Signing time: Wed 25 Mar 2026 11:20:43 +0000 Manifest this update: Wed 25 Mar 2026 11:15:43 +0000 Manifest next update: Sat 28 Mar 2026 22:11:43 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=) 3: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: QA8F6DXK3B0xhV3ufuHWbEyqcB/B0yRKD9FWe1NjcJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a3:da:d7:4e:31:f5:53:bb:a9:dc:fd:c7:a6:8e:26:da:b5:03:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Mar 25 11:15:43 2026 GMT Not After : Mar 28 22:11:43 2026 GMT Subject: CN=5DBBECB6FE5FEACB75F3DE2A7CD2CE96C2372144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:3b:08:c8:af:dd:74:fa:98:14:b3:5f:47: f1:3b:ef:18:8c:12:8f:31:9c:c3:3a:32:ec:54:24: 9f:d3:7a:65:95:0c:47:d1:60:4c:b0:bc:4a:80:1b: 75:c9:75:c1:34:dd:87:c5:0d:8e:19:66:14:e9:05: 03:d9:65:62:42:62:4e:71:ca:75:95:66:d3:87:d1: 5f:45:16:2e:ec:f8:5d:12:d8:e3:58:b7:f1:f0:d7: 8e:6c:d3:14:85:98:b0:17:fd:1b:13:26:d0:da:30: 48:2f:d7:81:8b:7f:19:b2:25:58:5e:ad:ac:72:66: b9:8d:c3:ab:77:21:2c:00:9f:a7:4b:cb:7b:c5:b8: 6a:de:cd:e1:6d:10:c3:76:a1:32:6a:c1:df:2b:55: b2:52:0f:01:dc:2f:a8:52:23:2c:92:d2:42:4d:9f: 5c:3c:e0:a0:92:47:4e:36:50:59:f3:22:c5:fc:3f: 95:0d:e2:d3:94:21:b5:aa:a7:63:29:1b:1c:87:ee: 1d:fa:be:7e:5d:bb:75:6d:ba:21:d4:1e:7c:c3:63: c3:ce:ae:3d:93:6a:3c:8c:84:f7:b2:a3:39:01:6a: 06:6f:b9:d7:3f:58:be:5b:1c:09:f1:42:14:99:e8: 98:80:9e:b8:9b:67:ec:fa:60:26:7c:5d:88:58:4d: b1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BB:EC:B6:FE:5F:EA:CB:75:F3:DE:2A:7C:D2:CE:96:C2:37:21:44 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:1d:85:9e:5c:2d:ae:5a:3a:aa:be:9c:24:46:49:8e:e6:f3: 11:2a:34:a9:6d:80:9b:55:72:fc:3e:ad:d5:33:54:ca:41:a4: 0f:be:29:45:f6:2c:bc:80:b5:0d:dd:75:46:ff:30:66:4f:d1: b0:68:b3:e2:3e:c0:37:0b:fb:42:a9:1f:35:52:ea:81:a7:57: 09:3c:0a:76:35:b7:d2:b4:48:08:de:de:ec:00:08:bd:e5:cc: e8:f5:7e:2c:27:b2:fa:6e:c9:2f:78:72:73:e4:63:e6:e6:f0: 88:d7:b0:08:7d:e2:70:b0:d9:e8:b0:e2:1a:7b:a6:6e:ff:72: fa:01:37:0c:d6:26:69:c4:ee:46:0f:7e:49:1e:b0:18:99:eb: e4:b1:eb:3e:99:f7:87:5c:85:74:78:25:35:86:39:d6:b1:27: 81:80:bd:4e:d8:d8:44:ab:74:91:c5:af:80:c4:b0:1b:55:47: 06:2b:6d:54:f3:02:6e:b3:01:a0:79:44:a2:b0:e7:8a:93:87: f2:db:2c:26:5e:d4:e1:40:a8:ce:54:1d:e1:a3:9a:3d:c1:90: a3:1a:a8:c1:c4:12:19:0a:33:c9:fb:80:49:fe:c6:c7:04:cd: f3:7c:62:c6:a7:df:2d:2d:3a:e9:0a:ae:d1:4e:b4:36:7d:a1: 53:cf:81:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqPa104x9VO7qdz9x6aOJtq1A6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNjAzMjUxMTE1NDNaFw0yNjAzMjgyMjExNDNaMDMxMTAvBgNV BAMTKDVEQkJFQ0I2RkU1RkVBQ0I3NUYzREUyQTdDRDJDRTk2QzIzNzIxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdjTsIyK/ddPqYFLNfR/E77xiM Eo8xnMM6MuxUJJ/TemWVDEfRYEywvEqAG3XJdcE03YfFDY4ZZhTpBQPZZWJCYk5x ynWVZtOH0V9FFi7s+F0S2ONYt/Hw145s0xSFmLAX/RsTJtDaMEgv14GLfxmyJVhe raxyZrmNw6t3ISwAn6dLy3vFuGrezeFtEMN2oTJqwd8rVbJSDwHcL6hSIyyS0kJN n1w84KCSR042UFnzIsX8P5UN4tOUIbWqp2MpGxyH7h36vn5du3VtuiHUHnzDY8PO rj2TajyMhPeyozkBagZvudc/WL5bHAnxQhSZ6JiAnribZ+z6YCZ8XYhYTbHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXbvstv5f6st1894qfNLOlsI3IUQwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMdhZ5cLa5aOqq+nCRGSY7m8xEqNKltgJtV cvw+rdUzVMpBpA++KUX2LLyAtQ3ddUb/MGZP0bBos+I+wDcL+0KpHzVS6oGnVwk8 CnY1t9K0SAje3uwACL3lzOj1fiwnsvpuyS94cnPkY+bm8IjXsAh94nCw2eiw4hp7 pm7/cvoBNwzWJmnE7kYPfkkesBiZ6+Sx6z6Z94dchXR4JTWGOdaxJ4GAvU7Y2ESr dJHFr4DEsBtVRwYrbVTzAm6zAaB5RKKw54qTh/LbLCZe1OFAqM5UHeGjmj3BkKMa qMHEEhkKM8n7gEn+xscEzfN8Ysan3y0tOukKrtFOtDZ9oVPPgTo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:52 2026 by rpki-client