$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: EJ90W/KiGxUQ++p92sXTUBz0Os8uzIBwhhpl6uT9T/I= Subject key identifier: 9E:06:19:6D:67:E3:38:AB:1F:A9:5B:91:F6:03:E6:88:6C:BC:92:F6 Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 027D9F10F32A0E9BEE84CA483C5000692E5FEFFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 023B Signing time: Thu 26 Mar 2026 08:41:55 +0000 Manifest this update: Thu 26 Mar 2026 08:36:55 +0000 Manifest next update: Sun 29 Mar 2026 09:40:55 +0000 Files and hashes: 1: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: HP+FKtQt5jGUlZv7I8aossi442tCr2zRK2luAMA18iE=) 2: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) 3: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) 4: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: Vrmcu03T647sbP3GWEBBWylAAxqciaCOgVn/2H7+uB8=) 5: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7d:9f:10:f3:2a:0e:9b:ee:84:ca:48:3c:50:00:69:2e:5f:ef:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Mar 26 08:36:55 2026 GMT Not After : Mar 29 09:40:55 2026 GMT Subject: CN=9E06196D67E338AB1FA95B91F603E6886CBC92F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:25:80:6e:f6:c1:1c:8a:8a:be:60:5e:b0: dc:fb:f9:8e:e0:04:d5:14:4b:2a:ac:e5:51:cb:16: 02:ab:ba:5f:18:15:85:9b:36:c8:cc:de:61:67:1d: 8d:2b:e6:a8:69:32:b5:c4:e4:84:d2:86:86:bf:33: a5:17:45:a4:c7:3b:f0:ff:d1:ef:7e:23:2f:62:e7: 74:3c:fc:3c:3e:8f:a1:73:6e:af:a7:d9:f7:48:7b: 47:94:0c:48:13:c2:2a:76:6d:54:fc:65:f5:23:d8: 07:e5:b8:66:ba:6c:7a:61:6a:2b:98:f4:c5:7e:87: b5:37:b5:49:b1:cb:44:fb:0d:5c:e8:6c:3c:fb:53: a8:9f:ed:c5:1b:bb:17:36:f6:9e:f0:49:c0:54:cd: 3a:f2:7c:7e:b0:9b:bf:21:74:93:b8:36:5d:0e:51: f0:a6:b2:c5:a2:b7:7e:22:dc:29:dc:f1:2d:37:d2: 18:37:47:d8:f5:9c:d2:aa:b9:f0:fc:d9:ac:89:1e: 9e:19:77:f0:ec:d3:70:00:9d:e7:4a:48:81:1c:f7: aa:d0:74:37:e7:7d:95:1b:b3:43:2f:63:91:ed:c6: c7:4b:c9:65:09:fc:30:99:68:46:da:35:aa:b6:bd: 2b:8a:61:26:4a:08:70:3e:70:8b:41:4e:b7:1f:7d: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:19:6D:67:E3:38:AB:1F:A9:5B:91:F6:03:E6:88:6C:BC:92:F6 X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ba:af:05:96:b6:42:d1:8c:e3:65:42:68:44:9d:35:d3:19: f3:61:08:ab:af:fe:89:7a:9a:48:fc:05:cd:c5:6d:71:9e:79: 61:87:e7:fb:89:d0:bc:36:50:f4:f3:52:29:6c:cd:e4:e8:23: 30:20:f8:04:c5:26:08:b9:80:01:69:d8:ce:ce:ae:44:81:3f: 68:f4:54:05:0b:95:2a:4f:22:15:fb:ec:45:59:7d:fd:db:3d: 28:82:10:bb:95:d4:72:34:a9:76:38:a2:fb:4c:57:bc:d9:cd: cf:67:ca:99:e9:f0:cd:35:9f:d1:93:79:5e:ee:47:2d:fe:0a: f3:4f:1a:a7:5d:2c:fd:28:bc:79:37:d1:59:b8:e4:ff:88:db: b6:17:ae:96:88:9d:b9:44:91:8f:72:c7:e0:4a:f2:9c:96:92: e8:4e:b2:1c:88:51:26:d3:70:a0:a7:ff:38:9d:91:d6:83:19: 16:a2:13:cb:8c:64:95:51:cb:d0:94:4a:f3:63:40:7e:f2:42: 7d:29:e4:6c:d1:55:03:96:ac:1a:a0:12:2b:54:2a:a6:2a:85: ca:e3:42:4a:48:b3:89:1e:88:b5:2e:14:cf:ba:df:02:03:af: f0:de:b7:e5:ab:a5:6e:88:6b:e1:f3:a2:98:c5:e9:e2:e1:fb: 0a:f4:8a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAn2fEPMqDpvuhMpIPFAAaS5f7/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNjAzMjYwODM2NTVaFw0yNjAzMjkwOTQwNTVaMDMxMTAvBgNV BAMTKDlFMDYxOTZENjdFMzM4QUIxRkE5NUI5MUY2MDNFNjg4NkNCQzkyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EiWAbvbBHIqKvmBesNz7+Y7g BNUUSyqs5VHLFgKrul8YFYWbNsjM3mFnHY0r5qhpMrXE5ITShoa/M6UXRaTHO/D/ 0e9+Iy9i53Q8/Dw+j6Fzbq+n2fdIe0eUDEgTwip2bVT8ZfUj2AfluGa6bHphaiuY 9MV+h7U3tUmxy0T7DVzobDz7U6if7cUbuxc29p7wScBUzTryfH6wm78hdJO4Nl0O UfCmssWit34i3Cnc8S030hg3R9j1nNKqufD82ayJHp4Zd/Ds03AAnedKSIEc96rQ dDfnfZUbs0MvY5HtxsdLyWUJ/DCZaEbaNaq2vSuKYSZKCHA+cItBTrcffRWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngYZbWfjOKsfqVuR9gPmiGy8kvYwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC6rwWWtkLRjONlQmhEnTXTGfNhCKuv/ol6 mkj8Bc3FbXGeeWGH5/uJ0Lw2UPTzUilszeToIzAg+ATFJgi5gAFp2M7OrkSBP2j0 VAULlSpPIhX77EVZff3bPSiCELuV1HI0qXY4ovtMV7zZzc9nypnp8M01n9GTeV7u Ry3+CvNPGqddLP0ovHk30Vm45P+I27YXrpaInblEkY9yx+BK8pyWkuhOshyIUSbT cKCn/zidkdaDGRaiE8uMZJVRy9CUSvNjQH7yQn0p5GzRVQOWrBqgEitUKqYqhcrj QkpIs4keiLUuFM+63wIDr/Det+WrpW6Ia+HzopjF6eLh+wr0ijk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:38 2026 by rpki-client