$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: gxbjhqxNj/Hsj+Nn9fsLyCupIPcoZ7rILzGfZyZJZq8= Subject key identifier: DD:7B:C0:F0:D2:38:B9:4B:6C:43:9F:47:AB:48:A6:B9:2C:54:5D:34 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 4578EAD28757EDE4315EB7488023DB55E54757E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 0562 Signing time: Thu 26 Mar 2026 09:02:43 +0000 Manifest this update: Thu 26 Mar 2026 08:57:43 +0000 Manifest next update: Sun 29 Mar 2026 16:41:43 +0000 Files and hashes: 1: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: YWZUHbS4JRRXweq93vW3qsdx6zVPRVsfzeXTfxxwOhQ=) 2: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 3: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 4: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) 5: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:78:ea:d2:87:57:ed:e4:31:5e:b7:48:80:23:db:55:e5:47:57:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Mar 26 08:57:43 2026 GMT Not After : Mar 29 16:41:43 2026 GMT Subject: CN=DD7BC0F0D238B94B6C439F47AB48A6B92C545D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:44:b2:26:a9:59:63:3d:cb:40:25:b9:0b: e2:f5:2c:37:c6:42:26:a1:bd:dd:a6:8c:6e:4a:2e: e8:82:08:ba:6f:b7:55:81:a3:92:70:1e:77:fd:b2: a1:7b:9e:c6:81:bb:3f:f8:e7:f3:aa:7e:05:93:b7: cd:95:76:e7:9e:53:f1:f4:74:14:9e:b1:f7:00:3d: 28:f9:9b:ce:58:56:76:d4:37:9c:e2:16:d7:af:01: 68:7e:d9:d3:d8:c1:3c:98:21:e4:a3:c1:bd:ef:66: b5:9c:9e:47:6e:99:fc:2f:4e:5d:da:fe:a5:6b:72: 8f:d7:5d:2a:1b:b4:59:7a:7e:ac:57:76:55:86:ec: 35:e8:9d:12:c8:ef:df:6f:19:3e:64:01:2b:6c:fb: 32:7b:2e:46:52:7a:f5:cc:18:70:22:50:1b:60:55: 7e:57:9c:f2:b3:a9:8a:f3:08:8d:6f:14:ba:d7:b2: c3:1e:d8:8d:db:60:2b:d3:c7:52:fd:d5:3b:b5:ae: 22:05:74:bc:5c:59:94:ee:0b:b3:9a:44:17:50:09: 82:41:92:06:d6:62:46:9d:af:76:85:b4:af:62:af: 69:01:3f:3d:74:ec:43:f8:e8:72:f7:5e:2d:e6:0d: 47:9b:33:06:84:0d:f1:98:9a:9f:7b:c5:e0:52:20: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7B:C0:F0:D2:38:B9:4B:6C:43:9F:47:AB:48:A6:B9:2C:54:5D:34 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5b:d8:73:13:4d:7b:e6:6f:62:3b:d4:91:62:6d:4e:e3:9f: 30:c5:ac:aa:8f:b5:9f:4c:5e:13:e5:88:f3:1c:7d:82:17:a7: f9:0c:0a:9c:9c:26:45:24:59:53:70:a2:b6:db:b8:97:d1:f7: 8e:b6:94:79:97:91:1c:79:f6:e9:df:62:85:dc:14:99:f4:c2: 65:62:b2:b4:51:64:39:94:ff:c2:ad:d9:9b:db:c1:75:f8:5d: 70:12:ab:83:11:74:93:57:6b:1e:38:3c:30:97:ed:f6:35:86: 0a:f0:18:89:28:a7:8d:7d:ae:4b:3b:a1:4b:7e:ee:23:29:46: b6:30:c4:16:a1:b2:14:1c:fd:bc:c2:81:76:d2:93:eb:d8:c7: cd:4b:f4:ed:ad:08:d9:1f:3d:05:80:c0:94:2f:92:15:10:17: 94:47:c6:f2:f2:36:c9:25:6c:39:b0:46:92:16:1e:36:df:5d: 13:0e:43:69:4a:ee:99:10:67:18:cd:5b:3f:08:fd:71:9f:26: 91:40:40:e0:f6:76:ad:45:4a:e8:8e:f4:f5:82:fe:e1:f0:44: 80:2a:32:4c:81:3e:db:3d:cd:f2:8c:20:40:1f:0e:c9:eb:8c: dc:fe:2e:d0:69:45:e5:f6:e5:e4:07:b9:5c:88:7d:c8:34:87: 55:9a:34:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXjq0odX7eQxXrdIgCPbVeVHV+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNjAzMjYwODU3NDNaFw0yNjAzMjkxNjQxNDNaMDMxMTAvBgNV BAMTKEREN0JDMEYwRDIzOEI5NEI2QzQzOUY0N0FCNDhBNkI5MkM1NDVEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjESyJqlZYz3LQCW5C+L1LDfG Qiahvd2mjG5KLuiCCLpvt1WBo5JwHnf9sqF7nsaBuz/45/OqfgWTt82VdueeU/H0 dBSesfcAPSj5m85YVnbUN5ziFtevAWh+2dPYwTyYIeSjwb3vZrWcnkdumfwvTl3a /qVrco/XXSobtFl6fqxXdlWG7DXonRLI799vGT5kASts+zJ7LkZSevXMGHAiUBtg VX5XnPKzqYrzCI1vFLrXssMe2I3bYCvTx1L91Tu1riIFdLxcWZTuC7OaRBdQCYJB kgbWYkadr3aFtK9ir2kBPz107EP46HL3Xi3mDUebMwaEDfGYmp97xeBSIL+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XvA8NI4uUtsQ59Hq0imuSxUXTQwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFb2HMTTXvmb2I71JFibU7jnzDFrKqPtZ9M XhPliPMcfYIXp/kMCpycJkUkWVNworbbuJfR9462lHmXkRx59unfYoXcFJn0wmVi srRRZDmU/8Kt2ZvbwXX4XXASq4MRdJNXax44PDCX7fY1hgrwGIkop419rks7oUt+ 7iMpRrYwxBahshQc/bzCgXbSk+vYx81L9O2tCNkfPQWAwJQvkhUQF5RHxvLyNskl bDmwRpIWHjbfXRMOQ2lK7pkQZxjNWz8I/XGfJpFAQOD2dq1FSuiO9PWC/uHwRIAq MkyBPts9zfKMIEAfDsnrjNz+LtBpReX25eQHuVyIfcg0h1WaNPU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:34 2026 by rpki-client