$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: E1df9Ant6trWwU7FOWXVPyKIAx5foW+j5s/t0iXzpuA= Subject key identifier: F5:FD:52:68:1F:9E:BA:8D:35:B6:CB:A6:51:36:F9:34:01:FD:D5:4D Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 2A8AA0BEB4297EA86A562595024F23217EE46D67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 025C Signing time: Tue 24 Mar 2026 09:02:01 +0000 Manifest this update: Tue 24 Mar 2026 08:57:01 +0000 Manifest next update: Fri 27 Mar 2026 15:23:01 +0000 Files and hashes: 1: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: TC7kjKI9TxMB3HNBPej3++Y7S3V1L2WaqE07r70wEgc=) 2: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: cXkbM2VDPHAMtezT3GG/k9XIgcsPZTYfY8tAzuSozyA=) 3: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IqdyBss4FzdA/M3SnxcRkepuTRZFmOB0g6ykhyyOeAs=) 4: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: 1tQK8tVqahFNVXFYDO5uZbQzHzSuLZ0475iEobwvhVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8a:a0:be:b4:29:7e:a8:6a:56:25:95:02:4f:23:21:7e:e4:6d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Mar 24 08:57:01 2026 GMT Not After : Mar 27 15:23:01 2026 GMT Subject: CN=F5FD52681F9EBA8D35B6CBA65136F93401FDD54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e4:4f:e5:5b:0a:30:b7:b6:d6:51:cc:54:3f: 5b:bd:c3:d7:1a:fe:f6:f9:40:5b:dc:5d:c7:18:70: 17:9f:81:a5:d5:29:da:29:de:9a:fd:ea:37:ce:bd: c7:c2:de:2a:8f:0f:eb:32:5e:3a:63:6e:0d:a6:cf: 79:0c:39:c7:91:73:9f:c9:44:38:42:6d:42:73:26: c0:4a:6d:2a:d5:d7:57:1f:d5:6b:72:e3:db:b1:11: 4a:bf:35:a6:a2:35:5a:5f:2e:9f:99:81:c6:93:86: b0:eb:eb:94:d7:fc:50:94:63:02:4a:42:f1:c5:a5: ed:5e:4d:e2:8b:cd:08:f1:63:be:b1:bb:0e:fb:2d: d5:19:85:f6:01:ac:7e:0f:0a:9e:9a:03:64:38:11: da:9e:27:4e:59:30:4e:6d:ed:4c:b1:ac:33:36:0b: ef:9a:64:e4:be:38:1c:32:f6:c0:d3:ce:1d:1d:45: ed:79:3a:81:1c:70:0e:31:73:13:f7:0b:63:d5:24: 16:0c:85:91:3c:7d:55:5f:d4:b2:22:19:31:9e:c5: 3c:09:e6:e8:90:3a:1f:6d:3b:a2:38:4f:ec:e1:6a: ed:10:36:72:81:d9:70:88:12:00:f5:8e:04:c4:23: 96:f1:ca:90:f3:fe:41:2e:a8:4b:06:63:2b:43:0c: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FD:52:68:1F:9E:BA:8D:35:B6:CB:A6:51:36:F9:34:01:FD:D5:4D X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:cb:5b:e9:33:92:26:55:c8:32:df:15:97:0d:ec:1d:92:12: d7:60:31:7d:82:24:6c:b5:a4:f2:de:fc:20:57:70:4d:85:49: a3:e1:96:8c:32:ec:b0:f5:5c:af:0f:e8:e3:b1:8a:21:53:35: 8c:4f:80:2e:8f:9a:93:57:d7:fb:d5:9e:c3:f9:d0:52:ff:e5: 46:04:c7:f9:9a:cd:ca:e0:21:86:11:bb:b2:bd:21:6b:e2:2d: 84:cb:35:08:a4:4e:13:71:cf:59:6a:1d:e6:de:93:fd:04:3c: 45:bc:e1:1f:6a:64:8f:90:4f:82:f9:4f:6a:1f:3c:9d:18:c0: ee:91:df:8e:a8:74:7d:81:42:03:53:20:a6:8d:91:af:7f:bb: 95:e7:88:ce:46:7f:bb:7e:ab:41:01:2b:56:b1:b9:c5:2a:f6: 51:ac:20:a0:17:5e:53:13:fd:93:46:63:9a:52:76:fd:42:38: db:31:4e:e2:00:65:f0:bf:b0:52:3e:c1:90:c3:91:6f:1a:1c: b6:f6:06:96:99:53:bd:5f:0e:30:b2:bd:96:21:f7:90:c2:17: 06:db:25:87:79:63:3b:05:4e:a5:b1:db:ef:13:69:ee:a6:bb: c9:39:27:04:66:c5:2b:6a:a0:fb:0a:85:0b:4b:5a:11:7f:e2: 71:13:75:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKoqgvrQpfqhqViWVAk8jIX7kbWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNjAzMjQwODU3MDFaFw0yNjAzMjcxNTIzMDFaMDMxMTAvBgNV BAMTKEY1RkQ1MjY4MUY5RUJBOEQzNUI2Q0JBNjUxMzZGOTM0MDFGREQ1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq5E/lWwowt7bWUcxUP1u9w9ca /vb5QFvcXccYcBefgaXVKdop3pr96jfOvcfC3iqPD+syXjpjbg2mz3kMOceRc5/J RDhCbUJzJsBKbSrV11cf1Wty49uxEUq/NaaiNVpfLp+ZgcaThrDr65TX/FCUYwJK QvHFpe1eTeKLzQjxY76xuw77LdUZhfYBrH4PCp6aA2Q4EdqeJ05ZME5t7UyxrDM2 C++aZOS+OBwy9sDTzh0dRe15OoEccA4xcxP3C2PVJBYMhZE8fVVf1LIiGTGexTwJ 5uiQOh9tO6I4T+zhau0QNnKB2XCIEgD1jgTEI5bxypDz/kEuqEsGYytDDLLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9f1SaB+euo01tsumUTb5NAH91U0wHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfLW+kzkiZVyDLfFZcN7B2SEtdgMX2CJGy1 pPLe/CBXcE2FSaPhlowy7LD1XK8P6OOxiiFTNYxPgC6PmpNX1/vVnsP50FL/5UYE x/mazcrgIYYRu7K9IWviLYTLNQikThNxz1lqHebek/0EPEW84R9qZI+QT4L5T2of PJ0YwO6R346odH2BQgNTIKaNka9/u5XniM5Gf7t+q0EBK1axucUq9lGsIKAXXlMT /ZNGY5pSdv1CONsxTuIAZfC/sFI+wZDDkW8aHLb2BpaZU71fDjCyvZYh95DCFwbb JYd5YzsFTqWx2+8Tae6mu8k5JwRmxStqoPsKhQtLWhF/4nETdTo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:14 2026 by rpki-client