$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: ufDxyhFknRr9dR7Vwj847MV8tEe684TSyCOt12ZZepU= Subject key identifier: CE:FD:E9:98:53:09:B1:44:1C:CB:2E:3E:5F:0F:9B:CE:D4:6E:1F:14 Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 27E81D031B8B7387D9FB1307F161D40F34DA5AEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 0284 Signing time: Thu 26 Mar 2026 00:21:58 +0000 Manifest this update: Thu 26 Mar 2026 00:16:58 +0000 Manifest next update: Sun 29 Mar 2026 06:56:58 +0000 Files and hashes: 1: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: DwuJBnbSVlbZcV8H44lKUxzwnuqAHcz6aT2wuYoVFBc=) 2: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: zNJv1QUhUzOTOEHHZCRJRlOjmSzt57PuZJkeSUFwNrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e8:1d:03:1b:8b:73:87:d9:fb:13:07:f1:61:d4:0f:34:da:5a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Mar 26 00:16:58 2026 GMT Not After : Mar 29 06:56:58 2026 GMT Subject: CN=CEFDE9985309B1441CCB2E3E5F0F9BCED46E1F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:80:a2:ad:24:3a:f7:d1:88:d2:dd:63:52: 0e:2b:64:82:d3:2f:b2:57:16:0e:91:6d:71:30:26: 60:f4:77:77:0e:6c:bf:12:d7:58:a4:98:20:be:0f: 7b:ec:70:49:8f:e1:73:7b:ac:4e:a9:8b:7c:a7:83: d3:03:6e:d0:5b:1b:a7:47:f3:1a:50:3c:18:9b:41: 72:45:f6:77:62:db:09:b6:fb:44:fe:a8:f7:0b:fd: c3:b3:09:e2:b3:19:53:26:f6:9c:8b:dc:10:49:f3: a2:a0:41:45:45:8a:dd:65:d3:b0:4e:87:09:ab:d1: 07:cc:a1:95:b3:fa:9f:e7:09:31:f6:92:ab:45:bc: b4:02:3a:26:3b:b0:cd:44:5d:46:9e:02:e7:67:c3: 2b:87:19:bd:b0:cf:a9:a5:32:e2:78:64:47:56:bb: 22:2b:d8:59:a9:5f:21:38:49:aa:da:22:e6:99:bb: ee:82:7e:94:eb:46:3e:6a:9f:24:c9:0a:b2:fa:a3: 1c:b1:cc:aa:f9:da:04:a4:27:0c:00:8c:d4:30:6a: a7:fa:07:af:a7:97:ac:5f:94:bd:6e:43:c0:5c:c2: d7:6f:64:e7:de:95:cb:a3:46:85:84:2f:46:72:05: 64:29:50:79:40:b2:57:00:75:9b:d9:5f:cd:ff:20: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FD:E9:98:53:09:B1:44:1C:CB:2E:3E:5F:0F:9B:CE:D4:6E:1F:14 X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ad:7d:54:d8:67:16:b4:8c:3b:34:10:69:ab:04:a1:2a:0a: 27:5c:be:28:a7:f0:c0:d9:c8:f8:2a:83:cb:f0:cc:eb:32:34: c8:c8:80:dd:46:bc:72:bf:3f:f0:35:42:ca:35:df:ab:e0:4f: 59:77:e3:df:09:95:ba:c3:a7:1c:a6:c9:06:85:30:bf:83:86: e0:f4:2c:4c:94:11:0c:52:18:aa:bb:6e:3a:42:ee:b2:32:83: 8c:50:43:ae:79:51:ab:b5:4d:58:0f:ab:86:5d:92:a4:4d:d5: d0:f3:c2:49:34:db:98:d9:41:57:d2:05:bf:46:b6:14:58:72: c2:62:94:d1:5f:2e:3d:ac:83:b7:a8:16:be:ec:5e:8e:7a:58: c3:93:ca:e2:a7:4d:91:01:43:76:fa:ae:d0:5e:68:1f:c4:ae: 77:be:52:bf:ea:19:61:3b:a6:ef:73:03:f3:db:31:55:be:9c: 7f:7d:08:92:c4:e5:0d:7b:4e:d2:be:43:a3:96:81:c3:16:6a: 14:5b:7f:27:f7:17:a4:6e:bc:28:2b:74:86:db:18:14:1e:d3: 6f:47:34:48:34:7b:7b:bb:ad:61:25:72:ad:b4:fb:60:b5:7c: db:09:fb:d5:f7:19:69:27:f2:8f:6a:c7:f6:70:61:3f:a9:f5: 70:56:b9:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+gdAxuLc4fZ+xMH8WHUDzTaWuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNjAzMjYwMDE2NThaFw0yNjAzMjkwNjU2NThaMDMxMTAvBgNV BAMTKENFRkRFOTk4NTMwOUIxNDQxQ0NCMkUzRTVGMEY5QkNFRDQ2RTFGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGYCirSQ699GI0t1jUg4rZILT L7JXFg6RbXEwJmD0d3cObL8S11ikmCC+D3vscEmP4XN7rE6pi3yng9MDbtBbG6dH 8xpQPBibQXJF9ndi2wm2+0T+qPcL/cOzCeKzGVMm9pyL3BBJ86KgQUVFit1l07BO hwmr0QfMoZWz+p/nCTH2kqtFvLQCOiY7sM1EXUaeAudnwyuHGb2wz6mlMuJ4ZEdW uyIr2FmpXyE4SaraIuaZu+6CfpTrRj5qnyTJCrL6oxyxzKr52gSkJwwAjNQwaqf6 B6+nl6xflL1uQ8BcwtdvZOfelcujRoWEL0ZyBWQpUHlAslcAdZvZX83/IPuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzv3pmFMJsUQcyy4+Xw+bztRuHxQwHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEutfVTYZxa0jDs0EGmrBKEqCidcviin8MDZ yPgqg8vwzOsyNMjIgN1GvHK/P/A1Qso136vgT1l3498JlbrDpxymyQaFML+DhuD0 LEyUEQxSGKq7bjpC7rIyg4xQQ655Uau1TVgPq4ZdkqRN1dDzwkk025jZQVfSBb9G thRYcsJilNFfLj2sg7eoFr7sXo56WMOTyuKnTZEBQ3b6rtBeaB/Erne+Ur/qGWE7 pu9zA/PbMVW+nH99CJLE5Q17TtK+Q6OWgcMWahRbfyf3F6RuvCgrdIbbGBQe029H NEg0e3u7rWElcq20+2C1fNsJ+9X3GWkn8o9qx/ZwYT+p9XBWuUk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:10 2026 by rpki-client