$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: gtUA1wterVXGv8DGhuUm41WMQPR2S7IxmaO1ROCkJjI= Subject key identifier: 19:B1:D3:19:70:5B:DC:94:E9:1D:A6:EC:1F:AB:3C:9D:72:24:33:B6 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 0D1C4A3B3B52E220EA6247DF5CBE3D954A72DC4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: A6 Signing time: Wed 25 Mar 2026 23:42:25 +0000 Manifest this update: Wed 25 Mar 2026 23:37:25 +0000 Manifest next update: Sat 28 Mar 2026 23:52:25 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3Xgb+N3NB2TeJyMhydH37LrnvXNKcCYu+8Jn+LTb9Mk=) 2: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: CGN6oHUOEHA5tZxpFqUmkJrY/giiRbeHIj5LZYUysXk=) 3: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 015aA8T+8ETys0VPJF7SaN/NGUY5b/DbWClhBrzMd1I=) 4: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: sN9oQCwDYePBe8r+43GJgwamWTT8YKpnPVKv3cAiMnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1c:4a:3b:3b:52:e2:20:ea:62:47:df:5c:be:3d:95:4a:72:dc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Mar 25 23:37:25 2026 GMT Not After : Mar 28 23:52:25 2026 GMT Subject: CN=19B1D319705BDC94E91DA6EC1FAB3C9D722433B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:d9:9b:92:8d:98:e4:f8:68:32:d7:44:b4: 4e:80:6d:3f:ef:96:53:29:f4:e5:1f:5b:c8:8b:98: 70:fe:31:2f:8b:76:3d:2f:2c:35:b9:f2:d8:8d:6d: 03:8e:de:8e:c8:4f:c9:e0:21:3e:76:85:4a:aa:cd: 2d:1b:85:7c:58:21:00:93:1b:84:de:a1:20:58:13: d1:58:f2:2f:76:e7:b9:b4:d1:a3:8e:2a:ec:36:13: b5:46:3d:7b:0d:af:54:94:f1:07:de:43:a1:e9:b0: b9:4c:ea:da:c0:50:d9:6f:6f:7d:88:db:18:55:ea: 40:f1:5b:84:59:fa:03:11:ad:a4:29:d4:7a:5d:1a: 70:b2:9d:c2:ff:fc:18:a5:9c:9f:11:2a:a7:5d:2b: 03:df:62:7a:78:16:03:d6:a6:30:ba:0d:b0:bb:f3: d0:56:8f:18:2f:33:44:c3:ea:ee:3f:36:f1:8e:c0: fa:6e:fd:51:6a:d6:12:cb:de:d5:89:f3:16:47:b9: fd:b6:90:5a:2c:fc:55:e6:11:21:dd:5a:83:5a:17: 8e:62:e9:cc:03:bb:31:4e:e7:f6:ea:fc:a5:4d:10: cd:bc:0b:39:35:0b:cf:e9:b1:c6:99:70:71:f7:28: 40:3b:83:29:66:16:ea:e9:90:62:8d:4a:74:8e:08: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B1:D3:19:70:5B:DC:94:E9:1D:A6:EC:1F:AB:3C:9D:72:24:33:B6 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:82:d5:f9:78:a1:e8:34:ec:5f:7c:a2:07:30:07:3d:a2:70: 56:66:93:a5:4f:fa:6a:d7:c8:3c:36:d3:61:bc:17:8e:46:fa: 9c:dd:b0:b0:79:6f:1f:13:9b:d7:c6:ed:25:d7:b3:04:6d:21: 4a:76:1d:d4:f8:c5:e0:0c:f8:9e:64:9c:60:4c:c9:53:19:7e: a6:13:1d:af:dc:97:cb:e5:96:c6:0f:6f:0e:27:e7:8f:93:d5: ae:bd:0f:82:80:20:c6:01:53:55:f9:d7:9f:c1:c4:2e:ce:73: 54:e1:a9:35:f9:99:9d:05:ca:bf:06:27:8b:f9:37:a3:fd:c2: 10:9d:aa:13:8c:ef:64:f7:ce:2e:a1:ec:aa:7a:ba:80:57:fb: 8e:d8:63:31:10:29:8a:fc:94:33:8d:5b:d2:b5:32:21:0e:5f: a8:cc:66:c7:1d:8f:18:d5:8c:8d:29:99:a0:0a:dd:13:79:e5: 1c:1b:df:7a:eb:0d:10:fd:99:d3:3a:a7:e4:62:10:4a:f9:42: 6a:1f:16:9a:bf:cc:42:e8:37:8c:02:40:da:d4:3d:9f:5c:8b: 7a:ca:16:04:d8:f6:cc:d6:f9:ec:4a:54:49:6b:e8:33:e0:15: d0:2d:e6:5e:96:d6:06:25:62:b2:f8:dc:41:4a:04:03:36:b2: 23:12:ba:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRxKOztS4iDqYkffXL49lUpy3EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNjAzMjUyMzM3MjVaFw0yNjAzMjgyMzUyMjVaMDMxMTAvBgNV BAMTKDE5QjFEMzE5NzA1QkRDOTRFOTFEQTZFQzFGQUIzQzlENzIyNDMzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ydmbko2Y5PhoMtdEtE6AbT/v llMp9OUfW8iLmHD+MS+Ldj0vLDW58tiNbQOO3o7IT8ngIT52hUqqzS0bhXxYIQCT G4TeoSBYE9FY8i9257m00aOOKuw2E7VGPXsNr1SU8QfeQ6HpsLlM6trAUNlvb32I 2xhV6kDxW4RZ+gMRraQp1HpdGnCyncL//BilnJ8RKqddKwPfYnp4FgPWpjC6DbC7 89BWjxgvM0TD6u4/NvGOwPpu/VFq1hLL3tWJ8xZHuf22kFos/FXmESHdWoNaF45i 6cwDuzFO5/bq/KVNEM28Czk1C8/pscaZcHH3KEA7gylmFurpkGKNSnSOCOBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGbHTGXBb3JTpHabsH6s8nXIkM7YwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2C1fl4oeg07F98ogcwBz2icFZmk6VP+mrX yDw202G8F45G+pzdsLB5bx8Tm9fG7SXXswRtIUp2HdT4xeAM+J5knGBMyVMZfqYT Ha/cl8vllsYPbw4n54+T1a69D4KAIMYBU1X515/BxC7Oc1ThqTX5mZ0Fyr8GJ4v5 N6P9whCdqhOM72T3zi6h7Kp6uoBX+47YYzEQKYr8lDONW9K1MiEOX6jMZscdjxjV jI0pmaAK3RN55Rwb33rrDRD9mdM6p+RiEEr5QmofFpq/zELoN4wCQNrUPZ9ci3rK FgTY9szW+exKVElr6DPgFdAt5l6W1gYlYrL43EFKBAM2siMSuvY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:36 2026 by rpki-client