$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: hlq6tCXPyMxQUzMMRcAGpqgbEXWBw2QNkxmtrDURhKY= Subject key identifier: D1:90:C5:80:93:EF:61:D8:12:86:49:CE:32:10:15:0A:A3:36:06:3C Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 572F1B2D89A309066D04C3CCBD38238DDFEFA9F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 055A Signing time: Tue 24 Mar 2026 14:10:50 +0000 Manifest this update: Tue 24 Mar 2026 14:05:50 +0000 Manifest next update: Fri 27 Mar 2026 22:00:50 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: bCEotu9rzLKUK1LYj14qcBPzmt8qQxQzR6Rlez8TZ18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2f:1b:2d:89:a3:09:06:6d:04:c3:cc:bd:38:23:8d:df:ef:a9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Mar 24 14:05:50 2026 GMT Not After : Mar 27 22:00:50 2026 GMT Subject: CN=D190C58093EF61D8128649CE3210150AA336063C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:73:60:59:e4:89:b7:42:21:7f:22:0f:e0: ed:1e:2f:f3:3f:0e:71:97:ad:dc:11:9e:75:df:80: 16:6f:7c:cd:a4:fd:aa:b1:51:1b:92:07:0a:b1:54: c8:fe:88:2a:f2:11:81:70:b7:96:50:4e:d6:f4:64: 76:ef:33:2f:4a:bf:cd:52:32:b0:07:ca:52:c4:40: 94:c3:b2:ae:df:f7:ad:dd:4c:5e:f3:1a:ed:4f:fb: d5:02:81:65:af:23:f8:33:b2:09:17:59:5b:85:30: a0:40:61:7c:fe:08:f8:88:4e:a2:ae:82:42:96:f0: 52:fb:71:7e:86:b5:c4:96:e9:0f:c1:85:b4:b4:fe: 42:fd:76:26:fc:f4:9e:f5:8c:72:29:b6:cd:52:97: dc:01:91:c4:f8:d4:06:70:3f:98:02:1d:37:a0:77: 6d:38:76:f7:fe:33:b2:a3:c5:77:da:cd:30:88:a8: b3:11:38:95:98:c7:ab:26:98:d0:d3:c4:3f:62:eb: fd:b7:cf:9d:99:3c:c8:2a:46:6b:a5:a7:e1:05:3f: de:09:fe:1e:78:aa:6d:5d:35:bb:51:cc:4a:bc:22: d9:92:73:c6:b0:e2:86:e1:4b:0b:20:99:aa:f3:b9: 9b:71:77:58:03:84:e6:fa:d2:2d:fd:e3:9b:77:0d: d6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:90:C5:80:93:EF:61:D8:12:86:49:CE:32:10:15:0A:A3:36:06:3C X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6a:82:24:a3:c5:f1:a2:e9:18:7a:57:4d:5e:e9:24:aa:2a: fb:5e:dd:de:eb:66:19:43:63:76:36:c5:27:79:2f:ef:5e:f3: 96:91:17:f2:d0:95:99:62:5e:8b:8a:d7:46:8c:14:c0:dc:8b: 3c:c7:7d:f0:3e:78:1e:47:96:04:f3:b8:36:e0:90:45:12:65: 2a:b3:4a:67:7e:8c:12:4c:d8:b3:5e:22:ba:35:24:e7:2f:84: ff:11:4f:c4:bc:5a:a9:c4:e3:7e:8d:6a:a9:25:95:71:1e:7e: a9:a2:6d:61:ae:aa:2e:21:e2:97:7e:71:0e:d0:b6:86:35:f8: 75:e4:44:44:84:f0:a0:62:1c:f8:5b:de:0f:c5:7e:ed:05:59: 83:bd:5c:ff:aa:8f:74:e8:74:5b:3e:8b:2f:67:b1:19:5d:4e: 69:ae:f3:53:a2:f6:a9:d6:eb:2e:b8:ef:5a:ab:5c:23:08:45: a3:2f:c9:0b:b7:3d:37:d7:94:e1:84:72:db:5a:28:d0:b2:ea: a0:5e:10:41:6f:ec:2e:12:38:50:76:26:9a:06:33:38:59:dc: b1:76:61:6e:11:b0:a6:66:ee:cf:99:3f:04:23:83:2d:33:dc: bf:3f:93:73:7f:3c:8e:5a:25:8d:66:f1:cf:e8:1f:02:60:be: 15:86:99:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVy8bLYmjCQZtBMPMvTgjjd/vqfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNjAzMjQxNDA1NTBaFw0yNjAzMjcyMjAwNTBaMDMxMTAvBgNV BAMTKEQxOTBDNTgwOTNFRjYxRDgxMjg2NDlDRTMyMTAxNTBBQTMzNjA2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjnNgWeSJt0IhfyIP4O0eL/M/ DnGXrdwRnnXfgBZvfM2k/aqxURuSBwqxVMj+iCryEYFwt5ZQTtb0ZHbvMy9Kv81S MrAHylLEQJTDsq7f963dTF7zGu1P+9UCgWWvI/gzsgkXWVuFMKBAYXz+CPiITqKu gkKW8FL7cX6GtcSW6Q/BhbS0/kL9dib89J71jHIpts1Sl9wBkcT41AZwP5gCHTeg d204dvf+M7KjxXfazTCIqLMROJWYx6smmNDTxD9i6/23z52ZPMgqRmulp+EFP94J /h54qm1dNbtRzEq8ItmSc8aw4obhSwsgmarzuZtxd1gDhOb60i3945t3DdZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ZDFgJPvYdgShknOMhAVCqM2BjwwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlqgiSjxfGi6Rh6V01e6SSqKvte3d7rZhlD Y3Y2xSd5L+9e85aRF/LQlZliXouK10aMFMDcizzHffA+eB5HlgTzuDbgkEUSZSqz Smd+jBJM2LNeIro1JOcvhP8RT8S8WqnE436NaqkllXEefqmibWGuqi4h4pd+cQ7Q toY1+HXkRESE8KBiHPhb3g/Ffu0FWYO9XP+qj3TodFs+iy9nsRldTmmu81Oi9qnW 6y6471qrXCMIRaMvyQu3PTfXlOGEcttaKNCy6qBeEEFv7C4SOFB2JpoGMzhZ3LF2 YW4RsKZm7s+ZPwQjgy0z3L8/k3N/PI5aJY1m8c/oHwJgvhWGmWA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:53 2026 by rpki-client