$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: /pBZYU06rN0UahorJWk+pqRMnc8k1SXdFr9E2YPRD2A= Subject key identifier: 9A:15:D5:6E:0F:A7:84:5E:1E:87:FD:8F:D0:D4:C6:E8:7B:1F:BE:D1 Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 5D20C67E0842DCD38551D645EF3742AF29AF44A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 0245 Signing time: Wed 25 Mar 2026 01:21:18 +0000 Manifest this update: Wed 25 Mar 2026 01:16:18 +0000 Manifest next update: Sat 28 Mar 2026 07:29:18 +0000 Files and hashes: 1: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: 0a6d0VadEC4mllKiwomZ9jBfURtS2Uj6BdXxHPbtGhc=) 2: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: ZGzH8DAIrZfTwOQ/BEWV4q9hWjZO3FaTLQXcyJNZGkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:20:c6:7e:08:42:dc:d3:85:51:d6:45:ef:37:42:af:29:af:44:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Mar 25 01:16:18 2026 GMT Not After : Mar 28 07:29:18 2026 GMT Subject: CN=9A15D56E0FA7845E1E87FD8FD0D4C6E87B1FBED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:eb:3f:86:fb:24:57:63:1d:62:5e:c8:60: 7c:b2:ed:da:7c:37:b4:24:2d:47:35:c2:83:bc:b9: a7:4c:8f:72:04:95:8f:d6:b9:6d:cf:6e:0f:7e:69: 40:f5:4c:45:6f:0c:9f:7a:d1:6d:c3:26:38:20:38: 0f:2d:0e:b0:5c:4b:4d:89:7b:e7:19:02:88:c1:a1: 8a:7e:c7:7f:43:fa:17:9b:2e:f1:82:25:18:14:8c: 94:e9:69:e0:42:bb:87:19:de:68:bf:d7:fb:ad:54: 8d:fa:1f:13:7c:0c:3c:a7:12:19:4d:1c:71:03:6e: b2:20:3f:09:d6:11:44:be:4d:c8:b9:94:cc:c8:e5: 55:5d:35:4d:f0:48:c0:e2:ec:50:ca:10:78:22:3b: d9:96:cc:54:5d:70:9a:d5:74:8f:ab:3e:d4:47:11: 88:ff:17:9d:e3:ae:74:19:d0:01:a9:a7:5f:af:11: 99:5e:c3:f7:f2:b2:85:3c:95:68:0a:69:37:03:87: 45:a7:76:d6:95:97:42:92:45:cc:33:1c:1f:2f:46: e3:ba:2a:6c:0a:97:69:01:97:c7:2a:11:be:51:f8: 7b:e3:ad:e5:59:bc:e3:2f:e3:4c:18:d9:3d:89:38: c3:18:67:f8:be:ec:16:e7:4f:f9:a0:8d:4c:eb:dc: 78:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:15:D5:6E:0F:A7:84:5E:1E:87:FD:8F:D0:D4:C6:E8:7B:1F:BE:D1 X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7a:76:50:7d:ed:7c:18:6a:65:7e:33:67:ca:5d:bc:10:99: a7:63:e8:b4:cb:c0:37:0c:a3:a5:f4:b2:90:db:c3:08:41:e6: 86:86:fe:78:9f:b6:b1:ef:53:df:9b:96:70:93:5d:31:01:29: 56:35:ec:54:13:a2:1f:15:18:14:d8:52:dd:f7:51:8d:3e:3b: 52:1b:1d:ed:f4:2d:18:38:82:ce:bf:c1:28:3d:54:74:f7:b7: f4:12:ed:3f:3d:3b:d9:b0:2f:83:e2:e3:df:64:b3:e9:21:53: f6:c3:b1:a0:e2:1c:17:67:b0:fd:d1:73:b4:9a:c5:82:bd:2c: 3e:eb:e9:ed:42:26:ba:80:32:e6:27:a5:4b:9b:9c:f6:f5:3a: 3f:b9:a9:7b:c0:c5:af:f9:96:3f:d2:bd:95:58:6d:62:21:93: cc:1a:a9:04:54:98:90:c9:03:49:c5:ce:21:0c:07:e8:bd:b1: 78:8d:f6:ac:3b:5e:28:2d:cb:07:f0:e1:50:32:f8:5f:68:6a: 41:76:8b:07:f6:56:1c:2e:67:9a:5e:62:23:8d:54:eb:27:b0: 11:48:53:ef:21:0b:bc:1f:53:2e:91:68:f4:c4:62:f5:5a:d0: 2a:a9:3f:53:03:80:c0:52:0f:bd:13:ec:15:d5:a4:81:1d:75: fc:51:b1:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSDGfghC3NOFUdZF7zdCrymvRKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNjAzMjUwMTE2MThaFw0yNjAzMjgwNzI5MThaMDMxMTAvBgNV BAMTKDlBMTVENTZFMEZBNzg0NUUxRTg3RkQ4RkQwRDRDNkU4N0IxRkJFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiius/hvskV2MdYl7IYHyy7dp8 N7QkLUc1woO8uadMj3IElY/WuW3Pbg9+aUD1TEVvDJ960W3DJjggOA8tDrBcS02J e+cZAojBoYp+x39D+hebLvGCJRgUjJTpaeBCu4cZ3mi/1/utVI36HxN8DDynEhlN HHEDbrIgPwnWEUS+Tci5lMzI5VVdNU3wSMDi7FDKEHgiO9mWzFRdcJrVdI+rPtRH EYj/F53jrnQZ0AGpp1+vEZlew/fysoU8lWgKaTcDh0WndtaVl0KSRcwzHB8vRuO6 KmwKl2kBl8cqEb5R+HvjreVZvOMv40wY2T2JOMMYZ/i+7BbnT/mgjUzr3HiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmhXVbg+nhF4eh/2P0NTG6HsfvtEwHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJR6dlB97XwYamV+M2fKXbwQmadj6LTLwDcM o6X0spDbwwhB5oaG/niftrHvU9+blnCTXTEBKVY17FQToh8VGBTYUt33UY0+O1Ib He30LRg4gs6/wSg9VHT3t/QS7T89O9mwL4Pi499ks+khU/bDsaDiHBdnsP3Rc7Sa xYK9LD7r6e1CJrqAMuYnpUubnPb1Oj+5qXvAxa/5lj/SvZVYbWIhk8waqQRUmJDJ A0nFziEMB+i9sXiN9qw7Xigtywfw4VAy+F9oakF2iwf2VhwuZ5peYiONVOsnsBFI U+8hC7wfUy6RaPTEYvVa0CqpP1MDgMBSD70T7BXVpIEddfxRsSs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:52 2026 by rpki-client