$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: Hc8bnEDbpFCDR5c728YD9ooOeOGCHBdbxT4ZotiT58g= Subject key identifier: 54:29:EB:48:8F:F1:B5:4D:B2:A6:DC:36:0A:1B:4D:C5:3F:39:4F:10 Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 6A5E7517B85AF31AAA6169C4A9183FB214279B8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 04A1 Signing time: Wed 25 Mar 2026 19:11:30 +0000 Manifest this update: Wed 25 Mar 2026 19:06:30 +0000 Manifest next update: Sat 28 Mar 2026 19:20:30 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: bibNs8h1zw9lKWKWpyAYwehjByTDzmW5vsl9yg8omUU=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: xufBW0tgF9GH044ZCtCODOthPCoRzgsrcm0HHfNPNhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5e:75:17:b8:5a:f3:1a:aa:61:69:c4:a9:18:3f:b2:14:27:9b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Mar 25 19:06:30 2026 GMT Not After : Mar 28 19:20:30 2026 GMT Subject: CN=5429EB488FF1B54DB2A6DC360A1B4DC53F394F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e1:0e:b2:b4:ec:cc:8e:bc:19:2f:43:db:17: f4:7f:be:6e:49:b8:80:ef:51:25:e7:5e:2f:40:59: 7b:ad:65:db:04:b3:3d:74:10:88:91:9e:e6:ed:28: 23:9b:60:24:c4:6b:78:d4:5b:9a:b9:18:77:73:87: 98:e1:74:85:47:7d:33:da:4d:69:35:51:c6:d0:0e: e7:b4:30:8d:44:d2:2b:4d:29:77:82:6f:ab:29:1d: 98:7e:a1:31:f2:bc:94:47:7d:68:89:c3:69:33:e9: 4f:23:cd:84:47:7d:79:6c:2c:57:fe:2c:3d:20:6e: c9:ae:21:bd:20:7a:a2:4a:41:42:c3:c9:d3:00:83: c0:04:55:94:f3:8e:a3:b8:3a:d6:7f:f2:09:43:4e: 06:d9:8a:4d:a4:4f:65:74:b7:28:a4:64:bb:98:64: 1c:83:be:49:c4:fb:d5:29:08:4c:cf:98:f2:58:3b: 39:3a:6b:cf:f1:5e:30:e9:be:d4:0e:e0:51:20:37: 23:c3:d7:1b:43:aa:8c:19:c2:3d:86:52:51:44:5f: 3d:f1:b4:f3:71:95:e5:4b:a3:60:1e:39:4b:ba:09: c3:a4:6b:de:2c:84:34:48:dd:38:1d:e3:5c:ad:7d: fc:fb:83:7c:dd:56:c2:6b:a0:02:e5:ff:1d:18:c3: a3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:29:EB:48:8F:F1:B5:4D:B2:A6:DC:36:0A:1B:4D:C5:3F:39:4F:10 X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c0:42:2a:17:60:c3:d1:ae:7f:ec:21:fb:e3:68:35:d2:f8: 7d:30:4c:7e:81:84:87:9b:a5:84:fd:4f:39:ea:bb:73:6d:d6: 2b:aa:a8:76:2d:7e:7a:3a:d4:0d:f0:ee:15:30:1b:50:d1:10: 0d:65:a1:56:66:5f:7c:05:4e:ec:1a:86:06:b1:ae:2d:9b:60: 99:f8:f3:6c:ab:dd:4f:bd:9e:34:5f:e5:82:e9:e0:fc:12:bd: 17:10:fe:de:e7:95:c6:ca:31:ed:f3:5a:fc:19:84:d2:67:4b: d7:4c:ac:2d:78:5c:f3:52:53:bb:66:46:d5:61:22:cb:3e:b3: 91:1a:43:49:b7:40:28:38:3e:1d:5b:41:93:d4:89:21:1d:c6: d0:43:d6:20:b2:c8:95:7e:fe:b3:ba:75:7b:32:0d:a4:af:d2: 5a:ae:f1:d0:fb:18:87:ba:19:90:1c:25:2c:02:e3:77:51:f9: d5:0c:bb:53:50:af:74:8f:a3:15:63:1e:02:c5:99:5b:31:cf: 80:4b:19:45:09:15:4e:8b:06:55:a0:f7:45:0f:52:60:d8:de: 09:a8:82:6e:3d:22:ca:9f:3f:d5:95:ba:c0:91:13:ea:d2:5b: e4:38:05:da:cb:7e:15:69:77:be:f5:db:c2:af:88:7c:79:de: 78:eb:de:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUal51F7ha8xqqYWnEqRg/shQnm4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNjAzMjUxOTA2MzBaFw0yNjAzMjgxOTIwMzBaMDMxMTAvBgNV BAMTKDU0MjlFQjQ4OEZGMUI1NERCMkE2REMzNjBBMUI0REM1M0YzOTRGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4Q6ytOzMjrwZL0PbF/R/vm5J uIDvUSXnXi9AWXutZdsEsz10EIiRnubtKCObYCTEa3jUW5q5GHdzh5jhdIVHfTPa TWk1UcbQDue0MI1E0itNKXeCb6spHZh+oTHyvJRHfWiJw2kz6U8jzYRHfXlsLFf+ LD0gbsmuIb0geqJKQULDydMAg8AEVZTzjqO4OtZ/8glDTgbZik2kT2V0tyikZLuY ZByDvknE+9UpCEzPmPJYOzk6a8/xXjDpvtQO4FEgNyPD1xtDqowZwj2GUlFEXz3x tPNxleVLo2AeOUu6CcOka94shDRI3Tgd41ytffz7g3zdVsJroALl/x0Yw6N7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCnrSI/xtU2yptw2ChtNxT85TxAwHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTAQioXYMPRrn/sIfvjaDXS+H0wTH6BhIeb pYT9Tznqu3Nt1iuqqHYtfno61A3w7hUwG1DREA1loVZmX3wFTuwahgaxri2bYJn4 82yr3U+9njRf5YLp4PwSvRcQ/t7nlcbKMe3zWvwZhNJnS9dMrC14XPNSU7tmRtVh Iss+s5EaQ0m3QCg4Ph1bQZPUiSEdxtBD1iCyyJV+/rO6dXsyDaSv0lqu8dD7GIe6 GZAcJSwC43dR+dUMu1NQr3SPoxVjHgLFmVsxz4BLGUUJFU6LBlWg90UPUmDY3gmo gm49IsqfP9WVusCRE+rSW+Q4BdrLfhVpd77128KviHx53njr3pU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:43 2026 by rpki-client