$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: WObI/6PXhTZXgfUDzd+9Jbiz2VJ8RM/FDLLLqA4PO7o= Subject key identifier: FF:D4:F9:BA:17:2E:08:3E:B8:25:27:21:55:9F:EA:CA:3C:66:19:BA Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 1D62D41FFF3874066909D03C2486E6499FD1BC4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 04D3 Signing time: Tue 24 Mar 2026 23:21:01 +0000 Manifest this update: Tue 24 Mar 2026 23:16:01 +0000 Manifest next update: Sat 28 Mar 2026 00:11:01 +0000 Files and hashes: 1: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=) 2: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: sCs9GEbRQqlqvUmm9K8Eo9LBLW45lnEeoRE8QjpdhPQ=) 3: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:62:d4:1f:ff:38:74:06:69:09:d0:3c:24:86:e6:49:9f:d1:bc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Mar 24 23:16:01 2026 GMT Not After : Mar 28 00:11:01 2026 GMT Subject: CN=FFD4F9BA172E083EB8252721559FEACA3C6619BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:15:0f:d6:64:7e:a4:90:97:63:33:45:d8: d0:bc:7e:e9:fb:13:57:e3:47:e0:94:07:ca:2e:06: ce:83:6b:90:65:6d:77:5f:4a:bb:3a:90:f3:8e:65: 7b:45:94:ab:58:9e:45:ad:1c:c8:2b:b4:6d:72:56: 94:84:4a:00:1d:22:d3:00:ae:0c:0f:b6:8f:7b:a1: e4:f5:6d:c2:c1:ee:4e:99:27:a7:57:e3:54:02:61: a0:61:4c:c6:96:76:a5:58:84:82:83:23:17:d7:4c: f9:cd:70:4c:69:ae:a8:3d:fd:9a:a2:f7:9c:a3:fb: 72:19:01:ff:c7:7a:1a:28:6d:07:29:86:47:e0:ca: b5:6b:6c:73:0b:7d:b5:b2:d3:9e:2b:18:47:66:0f: 30:08:6a:7f:d4:a5:f0:d0:d2:e9:05:0d:7f:be:a6: 4d:ed:be:72:8c:44:23:28:91:97:f8:48:9d:e3:bc: c7:08:d3:79:d5:52:23:ef:dc:5c:aa:7d:f4:7c:9e: c0:bd:23:8e:54:5e:12:c5:c1:66:22:2a:7b:69:a7: 10:dc:17:72:87:85:69:82:fd:01:33:fa:7a:db:13: 5c:7e:39:c1:2f:f6:13:5a:6c:08:64:3b:02:4d:3b: 28:a2:f4:07:00:45:73:39:55:c8:ff:6e:05:cd:d5: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:F9:BA:17:2E:08:3E:B8:25:27:21:55:9F:EA:CA:3C:66:19:BA X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:03:24:f3:e0:02:0a:ce:49:32:27:2e:9a:35:f7:bb:7f:c0: 62:5c:84:88:ca:54:15:32:44:4c:6c:2a:0e:16:d9:b3:76:35: 79:9a:22:4e:0d:69:2f:0f:0d:9c:ce:1c:95:23:11:1a:2b:25: 16:6b:53:57:aa:87:65:9b:fb:c6:cc:25:a9:a4:82:bd:94:eb: 28:bc:43:47:1d:a3:68:3a:d2:4b:fd:91:83:96:83:ef:10:40: 1d:74:75:0f:25:2b:07:56:b1:75:e4:bc:05:2a:fb:b9:30:52: a9:a4:88:98:be:c8:86:7d:0f:84:19:34:de:6e:da:da:31:1b: b4:62:a3:16:a9:ee:0a:ff:da:e3:40:f9:2f:46:29:b7:88:ff: 67:cf:76:40:83:ca:6b:36:6e:8e:06:97:4f:bf:bd:d9:7c:a3: 07:cd:41:ae:e1:16:9b:5b:00:9e:6a:af:52:9a:c8:ba:ea:a7: b1:5f:db:4b:ba:bf:4f:c2:f2:f5:52:6f:84:06:bd:f4:17:ee: c8:e2:e7:89:6a:a7:46:57:a9:4c:2e:f9:bb:54:e5:76:f5:41: 4d:1a:38:fe:6f:55:6f:74:6d:ba:93:64:47:ff:7c:b7:67:ae: 73:6b:9d:7b:a2:8a:c0:1c:0d:b5:f0:3b:06:a2:e9:fe:d3:82: 25:2f:85:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWLUH/84dAZpCdA8JIbmSZ/RvE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNjAzMjQyMzE2MDFaFw0yNjAzMjgwMDExMDFaMDMxMTAvBgNV BAMTKEZGRDRGOUJBMTcyRTA4M0VCODI1MjcyMTU1OUZFQUNBM0M2NjE5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRxUP1mR+pJCXYzNF2NC8fun7 E1fjR+CUB8ouBs6Da5BlbXdfSrs6kPOOZXtFlKtYnkWtHMgrtG1yVpSESgAdItMA rgwPto97oeT1bcLB7k6ZJ6dX41QCYaBhTMaWdqVYhIKDIxfXTPnNcExprqg9/Zqi 95yj+3IZAf/HehoobQcphkfgyrVrbHMLfbWy054rGEdmDzAIan/UpfDQ0ukFDX++ pk3tvnKMRCMokZf4SJ3jvMcI03nVUiPv3FyqffR8nsC9I45UXhLFwWYiKntppxDc F3KHhWmC/QEz+nrbE1x+OcEv9hNabAhkOwJNOyii9AcARXM5Vcj/bgXN1S2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/9T5uhcuCD64JSchVZ/qyjxmGbowHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0DJPPgAgrOSTInLpo197t/wGJchIjKVBUy RExsKg4W2bN2NXmaIk4NaS8PDZzOHJUjERorJRZrU1eqh2Wb+8bMJamkgr2U6yi8 Q0cdo2g60kv9kYOWg+8QQB10dQ8lKwdWsXXkvAUq+7kwUqmkiJi+yIZ9D4QZNN5u 2toxG7Rioxap7gr/2uNA+S9GKbeI/2fPdkCDyms2bo4Gl0+/vdl8owfNQa7hFptb AJ5qr1KayLrqp7Ff20u6v0/C8vVSb4QGvfQX7sji54lqp0ZXqUwu+btU5Xb1QU0a OP5vVW90bbqTZEf/fLdnrnNrnXuiisAcDbXwOwai6f7TgiUvhVY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:29 2026 by rpki-client