$ rpki-client -vvf repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft File: 5EF007981390128F8F14B087123454D686E41CB8.mft (raw, json) Hash identifier: BjcSa2QQq2d7+XFdNLbp44C7bL9CO0+xP8mE/0Gl7IM= Subject key identifier: 29:17:96:A3:23:1C:31:0D:E8:DE:13:18:D5:DE:A9:9D:B7:2A:67:F0 Authority key identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 Certificate issuer: /CN=5EF007981390128F8F14B087123454D686E41CB8 Certificate serial: 409A034184DB01299FEB7585CDB6B5AE17206C2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft Manifest number: 0238 Signing time: Wed 25 Mar 2026 02:02:04 +0000 Manifest this update: Wed 25 Mar 2026 01:57:04 +0000 Manifest next update: Sat 28 Mar 2026 07:32:04 +0000 Files and hashes: 1: 5EF007981390128F8F14B087123454D686E41CB8.crl (hash: rItf53AmBwAz84m6IOWPTq9k11mNE/kz2X5dsioVkTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9a:03:41:84:db:01:29:9f:eb:75:85:cd:b6:b5:ae:17:20:6c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF007981390128F8F14B087123454D686E41CB8 Validity Not Before: Mar 25 01:57:04 2026 GMT Not After : Mar 28 07:32:04 2026 GMT Subject: CN=291796A3231C310DE8DE1318D5DEA99DB72A67F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:7a:75:5b:a7:38:42:cd:80:23:c4:7d:12: 13:33:28:e0:ef:54:da:33:0e:dd:f8:25:75:0b:6b: a6:a0:b7:fd:c3:94:59:b6:fd:5b:be:cf:6d:c9:9c: bb:36:30:bc:43:43:e2:5e:21:c1:98:e1:3e:d5:b9: 3d:ba:61:2b:68:07:87:80:34:29:b6:d9:e0:39:c6: c1:70:9b:33:b4:d6:99:37:d5:e5:49:b1:6d:04:ac: d5:36:c5:2d:b8:ec:92:65:26:c0:7e:ad:de:34:11: 6c:47:bb:c1:90:c3:a0:9a:0c:f9:f9:3f:e3:ff:b5: ec:67:01:16:2c:df:f1:f7:c9:ce:f6:7d:90:f3:b8: 10:05:17:4f:97:94:2d:3e:80:7c:1f:a7:5d:cf:1e: c0:0b:0a:b0:d1:d8:b7:9d:e5:29:cd:3d:93:47:7e: b5:5e:e7:94:50:92:6c:a2:7a:48:39:5b:58:63:28: d7:d3:a2:68:fa:cf:c7:7f:03:36:26:89:43:25:fa: 93:9c:20:54:e5:ab:03:f8:25:06:2c:27:24:5f:c4: 34:2f:65:b8:4b:a5:cf:5d:56:3b:f4:90:c8:48:89: 92:73:02:90:f9:1d:26:24:2c:e1:5b:70:38:a3:0b: 32:4a:d0:ef:59:d7:20:8f:fb:ac:86:40:76:fa:54: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:17:96:A3:23:1C:31:0D:E8:DE:13:18:D5:DE:A9:9D:B7:2A:67:F0 X509v3 Authority Key Identifier: keyid:5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0b:13:be:5b:73:42:b2:e1:43:85:ee:6b:64:88:6e:d8:b8: 27:7e:19:0c:e9:e4:6f:70:a4:b7:14:81:b4:6c:c6:93:49:29: cf:f5:c6:d4:a5:e5:41:43:8a:67:1d:64:01:84:d5:10:c2:3c: 2c:fa:e6:51:d2:c0:96:9c:c4:b3:bc:eb:0c:5c:90:bd:dd:27: e8:b6:dc:d3:59:d2:18:0b:bc:a1:67:87:ed:d2:e8:92:7f:34: 5c:07:3e:37:87:68:c7:48:f7:2f:4e:b0:1e:fe:d0:4b:58:2e: 8f:41:cf:94:01:9b:56:58:72:41:50:ac:13:25:1c:46:7f:7f: b4:6a:cc:14:2a:9f:80:82:b0:a5:9d:dd:69:ce:ba:42:0c:ad: 49:b6:d7:bd:e8:b6:45:bf:53:70:7f:30:47:d0:98:29:00:7c: 7b:b7:d9:d1:a1:88:90:6d:31:0d:b7:b8:ce:6c:53:d9:85:e8: b2:d8:a2:ba:76:10:ea:eb:a3:a3:b5:95:b3:16:c0:17:36:66: e7:0e:5b:fe:1e:71:18:44:26:de:f5:f5:13:07:97:96:ef:31: 6d:29:5f:b0:15:71:0e:3a:ab:2a:6e:e4:14:76:51:58:c2:e7: 42:f7:9b:31:76:cb:0c:9e:a1:a3:0c:de:57:e4:0f:23:80:dc: 99:f2:ce:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJoDQYTbASmf63WFzba1rhcgbCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4 NkU0MUNCODAeFw0yNjAzMjUwMTU3MDRaFw0yNjAzMjgwNzMyMDRaMDMxMTAvBgNV BAMTKDI5MTc5NkEzMjMxQzMxMERFOERFMTMxOEQ1REVBOTlEQjcyQTY3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaXp1W6c4Qs2AI8R9EhMzKODv VNozDt34JXULa6agt/3DlFm2/Vu+z23JnLs2MLxDQ+JeIcGY4T7VuT26YStoB4eA NCm22eA5xsFwmzO01pk31eVJsW0ErNU2xS247JJlJsB+rd40EWxHu8GQw6CaDPn5 P+P/texnARYs3/H3yc72fZDzuBAFF0+XlC0+gHwfp13PHsALCrDR2Led5SnNPZNH frVe55RQkmyiekg5W1hjKNfTomj6z8d/AzYmiUMl+pOcIFTlqwP4JQYsJyRfxDQv ZbhLpc9dVjv0kMhIiZJzApD5HSYkLOFbcDijCzJK0O9Z1yCP+6yGQHb6VB0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKReWoyMcMQ3o3hMY1d6pnbcqZ/AwHwYDVR0j BBgwFoAUXvAHmBOQEo+PFLCHEjRU1obkHLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU5OTQ3NC1mNmI2LTQwODctYTk3ZS03ODhiNTk0OWQ1N2IvMC81RUYwMDc5ODEz OTAxMjhGOEYxNEIwODcxMjM0NTRENjg2RTQxQ0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4NkU0 MUNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1OTk0NzQtZjZiNi00MDg3LWE5 N2UtNzg4YjU5NDlkNTdiLzAvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0 RDY4NkU0MUNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcLE75bc0Ky4UOF7mtkiG7YuCd+GQzp5G9w pLcUgbRsxpNJKc/1xtSl5UFDimcdZAGE1RDCPCz65lHSwJacxLO86wxckL3dJ+i2 3NNZ0hgLvKFnh+3S6JJ/NFwHPjeHaMdI9y9OsB7+0EtYLo9Bz5QBm1ZYckFQrBMl HEZ/f7RqzBQqn4CCsKWd3WnOukIMrUm2173otkW/U3B/MEfQmCkAfHu32dGhiJBt MQ23uM5sU9mF6LLYorp2EOrro6O1lbMWwBc2ZucOW/4ecRhEJt719RMHl5bvMW0p X7AVcQ46qypu5BR2UVjC50L3mzF2ywyeoaMM3lfkDyOA3Jnyzjg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:17:04 2026 by rpki-client