$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: bngJjxnkIGX32oSnMK/8W2JQ4drY+lbTkeBK6GQ34eM= Subject key identifier: F2:1F:31:1E:97:54:BD:A8:A3:7F:C7:35:A6:2A:AE:A7:65:0D:7B:DE Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 3FDCC518E9D551158DCB6B080501B2806ED0DECF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: 0115 Signing time: Wed 25 Mar 2026 00:41:42 +0000 Manifest this update: Wed 25 Mar 2026 00:36:42 +0000 Manifest next update: Sat 28 Mar 2026 01:58:42 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 2: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: DAVim8JFNC6RfvE/CcPehcndBlsXyUSPo4FvAfHcpvE=) 3: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) 4: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dc:c5:18:e9:d5:51:15:8d:cb:6b:08:05:01:b2:80:6e:d0:de:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Mar 25 00:36:42 2026 GMT Not After : Mar 28 01:58:42 2026 GMT Subject: CN=F21F311E9754BDA8A37FC735A62AAEA7650D7BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:db:3b:06:b6:23:f6:e6:e6:05:15:de:42: f3:7d:6d:49:40:87:24:29:7b:25:68:00:b7:c4:da: f9:6a:22:09:55:42:36:82:13:b3:6b:5b:d3:1b:d8: 05:c5:96:a0:73:f5:6b:04:25:7b:b5:3d:d7:96:c2: de:1d:af:52:71:99:76:c9:f9:c5:6b:bc:27:d5:1e: 67:33:e3:4c:6e:32:33:c6:90:4c:b3:c0:af:f6:1d: 3e:8a:08:6e:15:83:87:25:50:51:57:15:a2:75:5c: a6:65:5b:e6:bf:8f:28:6e:69:44:6a:ac:05:12:63: 46:43:50:c7:e6:cf:ed:ec:e5:30:89:f4:32:58:5f: 1b:ba:d8:78:0d:34:97:7d:5f:d4:25:f3:47:03:56: 46:48:4d:e1:d5:01:70:46:09:9c:47:f6:72:8a:b5: 1d:08:06:bb:ce:6f:ec:6a:6d:aa:25:ad:e1:0a:ce: c9:e1:11:1f:43:5c:64:ea:4e:e0:77:4a:3a:d6:8b: 82:47:e9:b4:58:7d:34:9c:bd:6f:f7:7f:ef:0e:7a: 85:0b:dd:ba:4a:f6:fc:6e:2a:37:3d:b4:71:cc:2d: ee:9f:f0:f5:6a:30:a1:49:db:14:48:ca:9b:90:25: 41:20:4f:ae:03:c8:3a:a7:29:24:47:8c:9b:c1:1b: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1F:31:1E:97:54:BD:A8:A3:7F:C7:35:A6:2A:AE:A7:65:0D:7B:DE X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fb:4b:85:4a:74:8a:d0:43:73:17:ef:10:13:2a:b6:2c:54: d7:8c:6f:6c:fa:32:31:c6:64:51:83:da:bb:f6:fc:0b:93:e1: ca:a3:62:58:c3:64:0f:1b:a8:7f:75:98:99:1d:d8:e8:77:33: 30:1f:ca:53:c2:30:95:10:8d:90:30:79:a4:5c:79:40:41:bf: 2e:28:df:02:95:52:ec:57:cc:7f:ed:d4:b4:07:45:84:f3:d8: 96:75:73:ca:98:2f:03:38:5e:eb:23:5b:a4:b4:cc:59:3e:5b: 59:99:69:00:99:8c:53:b2:29:2e:10:11:b0:ee:9a:b6:f7:e0: 69:9c:59:20:e6:15:e9:ee:b4:c8:d6:4a:2e:cb:16:5e:54:30: 18:82:9a:d6:b9:ef:11:b8:38:9a:a5:d0:f4:c3:d1:a1:df:84: 3c:e0:a9:21:31:bd:5c:09:7e:7d:50:48:8d:fd:d3:16:37:4d: 4c:dc:09:bc:80:d8:a0:32:77:68:83:1a:a7:ac:b1:e5:8b:b6: bb:c1:83:09:8d:86:8c:ec:f3:5e:2e:51:ea:68:06:4a:a2:d0: 3c:f4:0b:46:13:a8:9b:97:a1:80:d2:e9:d7:9d:f4:bb:07:f3: 19:45:a9:bb:45:34:ec:be:74:1f:9d:f9:1a:ac:c5:f7:08:17: 9e:4f:b3:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9zFGOnVURWNy2sIBQGygG7Q3s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNjAzMjUwMDM2NDJaFw0yNjAzMjgwMTU4NDJaMDMxMTAvBgNV BAMTKEYyMUYzMTFFOTc1NEJEQThBMzdGQzczNUE2MkFBRUE3NjUwRDdCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzNs7BrYj9ubmBRXeQvN9bUlA hyQpeyVoALfE2vlqIglVQjaCE7NrW9Mb2AXFlqBz9WsEJXu1PdeWwt4dr1JxmXbJ +cVrvCfVHmcz40xuMjPGkEyzwK/2HT6KCG4Vg4clUFFXFaJ1XKZlW+a/jyhuaURq rAUSY0ZDUMfmz+3s5TCJ9DJYXxu62HgNNJd9X9Ql80cDVkZITeHVAXBGCZxH9nKK tR0IBrvOb+xqbaolreEKzsnhER9DXGTqTuB3SjrWi4JH6bRYfTScvW/3f+8OeoUL 3bpK9vxuKjc9tHHMLe6f8PVqMKFJ2xRIypuQJUEgT64DyDqnKSRHjJvBG9aLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8h8xHpdUvaijf8c1piqup2UNe94wHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb7S4VKdIrQQ3MX7xATKrYsVNeMb2z6MjHG ZFGD2rv2/AuT4cqjYljDZA8bqH91mJkd2Oh3MzAfylPCMJUQjZAweaRceUBBvy4o 3wKVUuxXzH/t1LQHRYTz2JZ1c8qYLwM4XusjW6S0zFk+W1mZaQCZjFOyKS4QEbDu mrb34GmcWSDmFenutMjWSi7LFl5UMBiCmta57xG4OJql0PTD0aHfhDzgqSExvVwJ fn1QSI390xY3TUzcCbyA2KAyd2iDGqesseWLtrvBgwmNhozs814uUepoBkqi0Dz0 C0YTqJuXoYDS6ded9LsH8xlFqbtFNOy+dB+d+RqsxfcIF55PsxE= -----END CERTIFICATE-----Generated at Thu Mar 26 23:17:14 2026 by rpki-client