$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: 4HTMe6swNkt64TRH+SReuyHaklFuQq9BvTz7y0jjU48= Subject key identifier: 39:6C:44:82:E1:A7:FE:47:05:97:68:63:14:0D:B7:78:DA:FD:E3:CC Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 5E0AFB0598BD364A763C38B47CCFA7B9146E359B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 02D6 Signing time: Wed 25 Mar 2026 05:12:46 +0000 Manifest this update: Wed 25 Mar 2026 05:07:46 +0000 Manifest next update: Sat 28 Mar 2026 11:12:46 +0000 Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: XOx+Y+mkAhB2mcb+FJC1yNBUigY5rPkFh3SuaebuN88=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: TPHc8hMgpG4lNB1VT7M46EhAo2F9SEdX4ITwbrTmfrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0a:fb:05:98:bd:36:4a:76:3c:38:b4:7c:cf:a7:b9:14:6e:35:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Mar 25 05:07:46 2026 GMT Not After : Mar 28 11:12:46 2026 GMT Subject: CN=396C4482E1A7FE4705976863140DB778DAFDE3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:94:4c:fa:fb:5e:e3:f6:9c:6e:31:10:21:fc: 7f:0a:fa:3e:8a:64:f7:9c:b3:08:b2:52:7f:a2:f5: 5e:d2:6f:fb:1b:8d:9b:8e:4d:c4:25:0e:c6:87:4a: df:3d:7f:c7:db:d9:ea:a7:5e:69:51:d3:89:60:82: 55:07:ab:60:9c:7e:18:55:d1:8a:86:91:71:78:b2: 89:a9:9a:cc:2d:ef:5b:3c:3f:d3:33:ee:e6:21:5b: 98:35:b2:9b:ce:e6:26:1b:eb:b0:0f:2f:41:67:b7: 98:bf:a3:28:06:02:42:3c:54:15:1e:f0:9c:dc:1d: e2:c0:da:93:85:71:8e:cc:89:97:14:6c:2b:bc:b2: 20:7c:9e:9b:49:bf:77:f9:aa:7c:d4:ee:a7:0b:d9: 5b:21:22:a3:00:79:09:84:4f:5b:78:43:b5:e7:e8: ef:f7:47:52:b6:18:b9:a8:b5:9a:e1:6b:51:5a:89: d0:fa:64:6d:43:12:a5:a6:98:5d:70:60:c2:1e:13: 42:f4:78:6e:05:c6:4c:ad:c4:ef:62:19:99:17:62: 4a:d5:35:cb:94:b6:81:79:70:4d:ce:2f:9d:81:d3: 1e:b3:03:04:73:86:2d:c3:9f:97:e7:35:80:86:dc: 7c:60:f1:9e:23:75:de:89:13:77:0a:ab:56:4e:61: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:44:82:E1:A7:FE:47:05:97:68:63:14:0D:B7:78:DA:FD:E3:CC X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:bf:c6:6c:68:94:b2:06:38:cd:f2:39:e6:cd:9b:b0:ec:f2: d0:b1:a7:5c:91:36:43:8c:26:05:b6:8e:ae:8f:de:08:58:ef: 5e:b4:f3:16:67:b6:17:0c:6b:c0:1b:db:58:f1:f1:30:a0:08: 39:e7:c4:7b:24:40:db:79:39:b4:0c:6a:68:d1:6d:72:51:45: c5:59:6b:31:35:8a:06:d6:ec:ef:a0:72:00:e2:cc:68:f2:e3: 26:81:e7:7e:1b:72:54:2f:ba:6a:d1:9b:92:69:5c:43:f9:cf: b5:37:b9:27:fa:f1:b3:05:64:21:bc:da:b4:47:0c:f0:65:d4: d7:6c:d3:0b:1d:ba:07:11:08:c8:52:3b:f7:90:c7:96:fb:7a: 5e:35:53:c3:ff:ed:f2:ac:7c:29:f8:cd:aa:d3:ac:c4:0f:7f: f9:24:1c:8f:4b:83:19:73:55:02:bc:12:81:35:c4:02:da:22: 12:36:a0:d3:fd:4d:27:c0:fc:7e:63:a1:fa:de:33:55:80:30: a2:ff:ca:b5:55:e7:4b:c3:c2:9e:9b:bc:4d:14:88:a3:2e:34: 3d:e2:96:cc:ab:70:fb:d3:ab:5e:c4:32:ee:d8:74:52:5d:f8: ce:dd:eb:72:f4:07:56:76:4c:35:a8:13:8c:8b:ad:f8:24:56: e1:62:ce:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgr7BZi9Nkp2PDi0fM+nuRRuNZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNjAzMjUwNTA3NDZaFw0yNjAzMjgxMTEyNDZaMDMxMTAvBgNV BAMTKDM5NkM0NDgyRTFBN0ZFNDcwNTk3Njg2MzE0MERCNzc4REFGREUzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDilEz6+17j9pxuMRAh/H8K+j6K ZPecswiyUn+i9V7Sb/sbjZuOTcQlDsaHSt89f8fb2eqnXmlR04lgglUHq2CcfhhV 0YqGkXF4sompmswt71s8P9Mz7uYhW5g1spvO5iYb67APL0Fnt5i/oygGAkI8VBUe 8JzcHeLA2pOFcY7MiZcUbCu8siB8nptJv3f5qnzU7qcL2VshIqMAeQmET1t4Q7Xn 6O/3R1K2GLmotZrha1FaidD6ZG1DEqWmmF1wYMIeE0L0eG4FxkytxO9iGZkXYkrV NcuUtoF5cE3OL52B0x6zAwRzhi3Dn5fnNYCG3Hxg8Z4jdd6JE3cKq1ZOYU1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOWxEguGn/kcFl2hjFA23eNr948wwHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANC/xmxolLIGOM3yOebNm7Ds8tCxp1yRNkOM JgW2jq6P3ghY71608xZnthcMa8Ab21jx8TCgCDnnxHskQNt5ObQMamjRbXJRRcVZ azE1igbW7O+gcgDizGjy4yaB534bclQvumrRm5JpXEP5z7U3uSf68bMFZCG82rRH DPBl1Nds0wsdugcRCMhSO/eQx5b7el41U8P/7fKsfCn4zarTrMQPf/kkHI9Lgxlz VQK8EoE1xALaIhI2oNP9TSfA/H5jofreM1WAMKL/yrVV50vDwp6bvE0UiKMuND3i lsyrcPvTq17EMu7YdFJd+M7d63L0B1Z2TDWoE4yLrfgkVuFiznw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:47 2026 by rpki-client