$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: 4cw2O5gAmTwwD2Mers71zvdNV9uiNZHBd5mlfkp0cuw= Subject key identifier: 95:5E:A3:C5:DD:F5:80:60:2D:38:03:C6:7B:1C:46:07:52:F6:8B:8E Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 5BFB1A9392ED778ADFD3480394592694D745A804 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 025C Signing time: Thu 26 Mar 2026 02:51:26 +0000 Manifest this update: Thu 26 Mar 2026 02:46:26 +0000 Manifest next update: Sun 29 Mar 2026 06:36:26 +0000 Files and hashes: 1: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: BM3/ntG2tCXetdLzUXN2Dv36rJzRqgaPhlxdrf1W2CU=) 2: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: r9SVfRPCCO6Vtp/Ep+AtielHzNI3IGy4ov5IgZ3sTaU=) 3: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: xyT4zKT8NFk3Z1gc92x/qcdgsjujeYKnslQNsScDAUU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fb:1a:93:92:ed:77:8a:df:d3:48:03:94:59:26:94:d7:45:a8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Mar 26 02:46:26 2026 GMT Not After : Mar 29 06:36:26 2026 GMT Subject: CN=955EA3C5DDF580602D3803C67B1C460752F68B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:64:93:09:14:82:9c:fa:9c:65:b5:16:c7:1b: d8:d4:24:0c:38:de:d0:ce:21:a9:dc:ba:07:f4:73: e1:ee:7d:64:69:77:d5:d4:b4:66:d6:22:db:9d:ae: 38:a7:8b:b0:43:11:0c:a5:a6:08:d0:63:82:c3:63: 9a:0a:cc:b5:96:e1:4c:3a:22:d1:f8:3a:12:ec:08: 9a:23:5d:83:58:5a:bb:fb:fe:26:b4:ab:23:e4:64: 25:a6:89:37:20:05:54:6a:52:b5:51:ea:b7:95:f0: 7f:a2:7e:16:c9:63:ec:ed:78:90:06:c7:8a:fa:1b: d7:bb:af:85:83:00:a0:cf:48:68:6e:f4:31:03:79: 1a:55:92:49:eb:ef:92:2d:b4:d7:20:e5:94:db:9a: 3a:8a:fa:c7:09:7a:87:e2:51:13:78:af:e6:6b:b5: 5f:69:0a:d1:db:5e:95:8c:c5:c6:d3:49:fc:21:17: 16:83:c6:25:53:61:d7:af:c1:52:32:13:97:41:3f: 30:b0:86:3e:75:3c:6e:eb:93:18:62:a8:4d:1b:db: c5:eb:15:33:98:2f:67:6f:d1:d5:20:04:69:96:f6: a9:a4:6c:89:b4:90:36:e4:ab:57:26:05:25:ed:b9: f0:1e:a4:11:ee:bf:87:35:84:9d:db:13:49:10:71: 6b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:A3:C5:DD:F5:80:60:2D:38:03:C6:7B:1C:46:07:52:F6:8B:8E X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fb:11:3e:59:d2:16:42:1d:a6:b6:d9:7f:7b:5e:16:a1:dc: a1:ad:09:b2:94:25:5f:64:b0:08:ff:72:83:36:06:90:40:79: d2:86:c1:0b:3a:1f:0e:7c:55:7b:8d:af:8d:a8:08:ed:a0:0b: 1d:79:87:05:b1:a9:0b:a1:14:8f:5b:22:20:f7:3a:25:12:79: 66:48:7b:8c:8b:91:d1:35:4f:56:2d:1c:13:a9:ce:91:b2:87: 7e:97:c8:f1:f2:74:80:a7:70:a8:50:f8:9b:7f:6e:db:65:8a: eb:2b:47:b4:08:79:cf:bf:78:64:14:21:58:7a:e7:fb:78:97: 96:35:fb:00:d3:0a:72:db:76:e4:ed:91:73:8b:26:41:c9:9b: d3:38:0d:37:db:a1:fb:10:7c:34:11:73:85:a7:90:82:35:d7: be:e6:05:db:dc:0c:dd:be:28:ce:33:fc:5d:11:5a:6b:68:7f: 0c:39:13:8c:26:9e:0b:a6:7e:a6:40:d6:e2:c6:78:93:8b:24: 12:b9:78:a6:1a:b1:2d:3f:f3:a1:b2:15:8d:79:b6:40:bb:10: b0:7b:43:8e:b1:3a:91:12:da:22:4a:61:11:ab:42:92:f0:ad: 17:f1:77:d7:e7:2f:c8:af:20:2e:28:6c:d6:72:fd:49:20:98: 07:7b:b2:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/sak5Ltd4rf00gDlFkmlNdFqAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNjAzMjYwMjQ2MjZaFw0yNjAzMjkwNjM2MjZaMDMxMTAvBgNV BAMTKDk1NUVBM0M1RERGNTgwNjAyRDM4MDNDNjdCMUM0NjA3NTJGNjhCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZJMJFIKc+pxltRbHG9jUJAw4 3tDOIancugf0c+HufWRpd9XUtGbWItudrjini7BDEQylpgjQY4LDY5oKzLWW4Uw6 ItH4OhLsCJojXYNYWrv7/ia0qyPkZCWmiTcgBVRqUrVR6reV8H+ifhbJY+zteJAG x4r6G9e7r4WDAKDPSGhu9DEDeRpVkknr75IttNcg5ZTbmjqK+scJeofiURN4r+Zr tV9pCtHbXpWMxcbTSfwhFxaDxiVTYdevwVIyE5dBPzCwhj51PG7rkxhiqE0b28Xr FTOYL2dv0dUgBGmW9qmkbIm0kDbkq1cmBSXtufAepBHuv4c1hJ3bE0kQcWsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlV6jxd31gGAtOAPGexxGB1L2i44wHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP7ET5Z0hZCHaa22X97Xhah3KGtCbKUJV9k sAj/coM2BpBAedKGwQs6Hw58VXuNr42oCO2gCx15hwWxqQuhFI9bIiD3OiUSeWZI e4yLkdE1T1YtHBOpzpGyh36XyPHydICncKhQ+Jt/bttliusrR7QIec+/eGQUIVh6 5/t4l5Y1+wDTCnLbduTtkXOLJkHJm9M4DTfbofsQfDQRc4WnkII1177mBdvcDN2+ KM4z/F0RWmtofww5E4wmngumfqZA1uLGeJOLJBK5eKYasS0/86GyFY15tkC7ELB7 Q46xOpES2iJKYRGrQpLwrRfxd9fnL8ivIC4obNZy/UkgmAd7skk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:31 2026 by rpki-client