$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: hANhs1tOnv7oTR4XgdY5t2R2KJu6KsfUgVWETmQE/x8= Subject key identifier: 84:42:98:FA:CB:9B:66:6A:8C:93:E2:1E:69:48:F0:43:41:4E:9B:09 Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 6664E6962EA1E01B47AABD93F5D95D2BB0186326 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 02A9 Signing time: Thu 26 Mar 2026 02:42:03 +0000 Manifest this update: Thu 26 Mar 2026 02:37:03 +0000 Manifest next update: Sun 29 Mar 2026 08:43:03 +0000 Files and hashes: 1: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=) 2: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: IJW2N3hpUVSX4Iw0cCrlmFCV/NoBoyUddoLeUvCTLFQ=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:64:e6:96:2e:a1:e0:1b:47:aa:bd:93:f5:d9:5d:2b:b0:18:63:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Mar 26 02:37:03 2026 GMT Not After : Mar 29 08:43:03 2026 GMT Subject: CN=844298FACB9B666A8C93E21E6948F043414E9B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:d4:cf:be:f6:e9:dd:3b:b3:50:6b:2c:30: 33:e0:ea:61:80:eb:b5:d5:02:31:bc:92:29:1d:a0: 4a:18:6e:80:2f:84:b0:79:be:5d:84:72:9a:d5:98: a9:9a:53:99:94:dd:87:66:36:e4:06:ba:97:b7:2c: f8:49:d1:8c:45:dd:4b:a1:21:61:7f:32:48:93:16: 46:65:79:0b:64:20:e6:ac:da:5a:39:27:f9:c5:42: dd:0a:8d:65:66:b3:e5:b7:a9:26:02:ea:cd:88:68: e9:f2:ca:9f:7d:33:da:98:e1:a6:fd:79:d3:9f:df: a8:57:86:f2:86:9f:ad:4c:61:64:b7:60:2b:d7:3a: fa:68:13:0d:50:ae:94:a0:cd:a2:c7:f8:e6:c0:ca: aa:fa:0a:9a:2a:db:6b:9c:d7:d8:31:d6:e0:33:cc: 80:43:42:ce:6a:ad:14:28:36:25:6b:d9:92:db:ef: 93:cc:69:13:ce:53:90:aa:40:94:cb:b8:b5:83:35: ce:01:ce:7b:21:6d:1c:78:9d:76:3e:d7:8c:b4:75: 6c:2a:fb:7a:de:55:ed:19:56:a7:39:a7:39:27:8a: c5:3e:fd:c9:4f:7c:5c:d8:e6:b7:27:ee:78:16:39: a1:e2:09:15:13:ce:3e:0d:67:27:57:8b:0a:22:56: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:42:98:FA:CB:9B:66:6A:8C:93:E2:1E:69:48:F0:43:41:4E:9B:09 X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:2c:58:62:25:a5:df:fd:82:79:5a:ee:34:ee:2e:9a:db:64: 41:e1:87:b2:14:b8:27:cd:b6:56:4b:7a:ec:b1:32:ef:9f:df: 43:9c:78:53:32:f6:31:0b:5c:06:d0:8d:7f:fc:45:cf:a7:cf: bd:26:5c:bc:45:5e:28:e1:6c:c5:0e:6e:eb:fc:90:3a:27:ac: df:98:d3:87:02:71:66:6c:e5:af:68:a3:ab:43:51:89:3d:d0: fc:0e:42:b7:1c:f0:13:e0:0b:a5:10:3f:a8:d9:9c:dd:09:fe: 02:67:c9:a0:7d:19:7f:d2:a7:69:7c:fe:7f:c8:fb:4b:eb:3e: 92:4f:5a:d4:7a:02:55:11:4c:f0:58:ed:4e:29:d6:6a:29:ac: c8:27:bb:82:09:a6:a1:c6:01:cb:12:21:08:c1:b5:a3:6d:a5: 98:7b:7c:bd:57:cc:6b:15:de:2c:16:0a:e5:0a:e4:a1:ab:f5: 83:0e:c5:ae:92:d0:81:68:82:ef:8e:80:82:93:b0:f4:0b:77: 6f:d3:6c:8e:fa:dc:a5:83:a1:22:60:64:80:33:d0:f6:72:1d: 59:8f:e4:95:6d:f5:ca:cd:b1:74:e3:f1:07:cc:bc:e9:10:c1: da:b6:7e:a1:89:1f:f3:2b:5d:aa:27:18:99:59:ce:5a:75:94: b1:05:eb:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmTmli6h4BtHqr2T9dldK7AYYyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNjAzMjYwMjM3MDNaFw0yNjAzMjkwODQzMDNaMDMxMTAvBgNV BAMTKDg0NDI5OEZBQ0I5QjY2NkE4QzkzRTIxRTY5NDhGMDQzNDE0RTlCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/NTPvvbp3TuzUGssMDPg6mGA 67XVAjG8kikdoEoYboAvhLB5vl2EcprVmKmaU5mU3YdmNuQGupe3LPhJ0YxF3Uuh IWF/MkiTFkZleQtkIOas2lo5J/nFQt0KjWVms+W3qSYC6s2IaOnyyp99M9qY4ab9 edOf36hXhvKGn61MYWS3YCvXOvpoEw1QrpSgzaLH+ObAyqr6Cpoq22uc19gx1uAz zIBDQs5qrRQoNiVr2ZLb75PMaRPOU5CqQJTLuLWDNc4BznshbRx4nXY+14y0dWwq +3reVe0ZVqc5pzknisU+/clPfFzY5rcn7ngWOaHiCRUTzj4NZydXiwoiVhKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEKY+subZmqMk+IeaUjwQ0FOmwkwHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0sWGIlpd/9gnla7jTuLprbZEHhh7IUuCfN tlZLeuyxMu+f30OceFMy9jELXAbQjX/8Rc+nz70mXLxFXijhbMUObuv8kDonrN+Y 04cCcWZs5a9oo6tDUYk90PwOQrcc8BPgC6UQP6jZnN0J/gJnyaB9GX/Sp2l8/n/I +0vrPpJPWtR6AlURTPBY7U4p1moprMgnu4IJpqHGAcsSIQjBtaNtpZh7fL1XzGsV 3iwWCuUK5KGr9YMOxa6S0IFogu+OgIKTsPQLd2/TbI763KWDoSJgZIAz0PZyHVmP 5JVt9crNsXTj8QfMvOkQwdq2fqGJH/MrXaonGJlZzlp1lLEF68k= -----END CERTIFICATE-----Generated at Thu Mar 26 07:20:32 2026 by rpki-client