$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft File: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft (raw, json) Hash identifier: 1IjrNauWpUzHpyMx0ZOEB8/X6MC7K1fjXCPDsRgL7dc= Subject key identifier: 6D:16:28:22:47:F4:18:3E:29:0D:7E:6F:C4:BB:4A:4E:5A:6B:7F:00 Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Certificate serial: 70C156FCEB4F64B273A084DDBA11597465A15826 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft Manifest number: 031A Signing time: Wed 25 Mar 2026 21:01:36 +0000 Manifest this update: Wed 25 Mar 2026 20:56:36 +0000 Manifest next update: Sat 28 Mar 2026 21:03:36 +0000 Files and hashes: 1: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: YXx5Bw2zDfhA+7upHzk0fggnqS7avx0UyQWlGd+c6ho=) 2: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl (hash: OSs6wYCoTQcUbASToBdUPT8i/XIUx0EXDA6btPFn0yQ=) 3: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: Pde8ZRn/YR1eEQs9jhqkBqeOttjCZYFFF+oLWp4txyM=) 4: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: 6VeZZkQSxmPBfD/p/ZPzZF+ZOY1TH4l3lSmr+WKEfNg=) 5: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: FIKYzhegJ+QdJvbufYNcNaWEogZDQv2FPdCaupK4CvM=) 6: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: OfM9qbYA2FsZXx9f6aFgGG7j8DkF7jOG45ZDg1DMlXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c1:56:fc:eb:4f:64:b2:73:a0:84:dd:ba:11:59:74:65:a1:58:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Validity Not Before: Mar 25 20:56:36 2026 GMT Not After : Mar 28 21:03:36 2026 GMT Subject: CN=6D16282247F4183E290D7E6FC4BB4A4E5A6B7F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:43:4c:d1:b8:a5:06:7f:8e:91:33:f1:25: 81:da:6f:7b:87:42:bf:6d:2d:88:6f:ea:be:1f:7c: 91:c2:a0:e0:35:4a:af:22:50:ef:ea:ea:d0:8c:c7: e8:87:9a:38:7c:9e:8a:86:d6:c2:eb:3f:6e:e6:e7: 54:70:4a:b3:76:f4:07:7c:4b:1a:fe:d6:7c:c1:bd: 6e:b3:62:8d:02:b2:0b:28:6e:88:7d:5f:88:f6:04: 81:fa:53:ee:83:27:3f:dd:0b:41:98:42:c6:cd:84: 4f:5b:ce:e5:a7:d1:ce:f2:65:e8:73:6f:0e:fe:31: 9c:75:80:5b:70:52:50:4d:aa:87:48:23:4e:bf:6b: 21:05:d8:3a:91:98:48:56:3d:41:a7:75:9b:0e:d5: d1:5f:89:9d:9a:39:26:c6:cb:20:4f:56:f5:46:04: 44:90:23:79:5f:27:ca:a3:a4:43:4c:fa:76:c3:9a: 04:19:9d:62:bb:bb:08:db:ee:75:35:79:e1:c2:3f: 8c:56:87:5e:0a:7e:92:57:fc:bf:96:ff:82:d4:47: 3b:d7:35:a4:cb:53:a2:33:10:30:9c:c9:14:70:48: 9e:d4:04:5d:53:bf:d1:4d:4c:b3:4d:c2:4f:da:d5: c2:b5:4c:19:7f:1a:ee:cc:84:96:d3:62:84:2f:92: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:16:28:22:47:F4:18:3E:29:0D:7E:6F:C4:BB:4A:4E:5A:6B:7F:00 X509v3 Authority Key Identifier: keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:80:3f:5d:37:e6:e0:4a:1b:eb:53:36:29:7d:64:30:64:de: f1:0a:c9:d9:8d:d3:21:c3:7f:f2:f8:8c:97:84:61:45:89:7a: 63:de:6c:3d:88:3c:0b:79:04:2b:1f:d1:c9:a3:74:90:34:ea: 56:3f:33:ee:69:91:15:cc:c2:94:2c:74:cd:d8:b5:17:8a:71: 00:db:b4:0d:e5:05:18:84:c1:9e:57:a8:40:6e:a8:21:81:4c: 97:a9:3e:a0:ff:9b:6b:90:4a:ad:a1:1b:e6:e9:97:05:eb:68: 26:d1:72:ec:78:88:72:2b:d3:82:7d:40:4a:e0:05:93:d1:7b: 75:80:07:7c:a0:49:f5:0c:18:5d:0d:1b:4f:1c:eb:9f:42:2d: a3:87:c8:35:a5:c3:02:9f:bf:58:7c:84:0c:5f:a5:d7:4f:95: 55:b1:1d:49:ec:d3:ba:80:31:2b:bb:f6:f5:da:64:ea:e8:c7: 60:8f:56:39:a4:36:ff:d3:9d:e7:9e:f2:00:75:be:99:db:17: 2d:92:d0:ee:1a:ef:58:6a:c9:85:57:e7:b6:95:77:ae:35:8f: ef:ad:43:23:e6:b2:44:08:5b:0d:94:6b:f3:2d:37:ec:b9:ee: 8c:c6:a2:c8:98:77:dd:28:a5:1b:30:44:e9:e7:24:fe:83:27: 40:df:bd:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMFW/OtPZLJzoITduhFZdGWhWCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3 RTc5RTY0MjAeFw0yNjAzMjUyMDU2MzZaFw0yNjAzMjgyMTAzMzZaMDMxMTAvBgNV BAMTKDZEMTYyODIyNDdGNDE4M0UyOTBEN0U2RkM0QkI0QTRFNUE2QjdGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgkNM0bilBn+OkTPxJYHab3uH Qr9tLYhv6r4ffJHCoOA1Sq8iUO/q6tCMx+iHmjh8noqG1sLrP27m51RwSrN29Ad8 Sxr+1nzBvW6zYo0Csgsoboh9X4j2BIH6U+6DJz/dC0GYQsbNhE9bzuWn0c7yZehz bw7+MZx1gFtwUlBNqodII06/ayEF2DqRmEhWPUGndZsO1dFfiZ2aOSbGyyBPVvVG BESQI3lfJ8qjpENM+nbDmgQZnWK7uwjb7nU1eeHCP4xWh14KfpJX/L+W/4LURzvX NaTLU6IzEDCcyRRwSJ7UBF1Tv9FNTLNNwk/a1cK1TBl/Gu7MhJbTYoQvkhiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbRYoIkf0GD4pDX5vxLtKTlprfwAwHwYDVR0j BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5 RTY0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZD QzU3RTc5RTY0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaAP1035uBKG+tTNil9ZDBk3vEKydmN0yHD f/L4jJeEYUWJemPebD2IPAt5BCsf0cmjdJA06lY/M+5pkRXMwpQsdM3YtReKcQDb tA3lBRiEwZ5XqEBuqCGBTJepPqD/m2uQSq2hG+bplwXraCbRcux4iHIr04J9QErg BZPRe3WAB3ygSfUMGF0NG08c659CLaOHyDWlwwKfv1h8hAxfpddPlVWxHUns07qA MSu79vXaZOrox2CPVjmkNv/Tneee8gB1vpnbFy2S0O4a71hqyYVX57aVd641j++t QyPmskQIWw2Ua/MtN+y57ozGosiYd90opRswROnnJP6DJ0DfvXM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:30:59 2026 by rpki-client