$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: I8X5z4g2urq+vrCE0s3N4IXos7JmfQ2YBLA+Ij1t2Oo= Subject key identifier: C0:C1:92:AC:60:10:1E:CC:CC:4C:14:C5:58:A1:41:35:08:AF:BA:39 Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 489AA1FF583C5C4C3F0F8523D11EE51CAF074C7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 025E Signing time: Wed 25 Mar 2026 19:41:58 +0000 Manifest this update: Wed 25 Mar 2026 19:36:58 +0000 Manifest next update: Sun 29 Mar 2026 02:46:58 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: LJBx92m4Du4oVILHvH1ebkRb00eGKguVsoIMCHjOH68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9a:a1:ff:58:3c:5c:4c:3f:0f:85:23:d1:1e:e5:1c:af:07:4c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Mar 25 19:36:58 2026 GMT Not After : Mar 29 02:46:58 2026 GMT Subject: CN=C0C192AC60101ECCCC4C14C558A1413508AFBA39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:63:82:ea:22:a8:65:ec:41:dc:8f:f4:1a: b1:76:d4:93:b9:b4:4e:6c:65:b9:7b:6c:02:42:60: 5d:7e:19:0b:27:c7:55:42:ff:ba:46:22:1b:9e:48: ee:f9:94:b0:52:81:e7:f0:35:e2:16:22:f2:6a:9d: 62:8d:49:5c:98:07:5b:07:77:d1:8a:e6:79:5a:11: be:a1:fa:79:fc:1a:29:82:40:36:7b:68:4d:27:ff: f5:01:60:0d:fd:d8:33:8c:ab:72:1d:2d:d2:7c:0c: 96:b9:40:68:64:7b:da:b1:39:fe:4b:ee:54:39:7e: 6f:9f:fc:ca:6b:2a:52:da:21:15:91:46:a1:a0:0d: 10:a5:b0:31:d0:59:d5:b5:ab:f6:2a:ae:35:eb:a6: 3e:8d:d8:f5:20:93:f0:94:8f:49:1c:79:1f:49:89: f2:4d:9b:4c:a9:37:ae:2a:36:73:89:33:16:9f:d2: cf:e8:d7:81:dd:8f:fc:3d:76:09:f9:6b:d3:f0:a8: 3b:4f:04:9d:3d:e4:43:e3:6a:ae:e0:04:c8:99:83: 44:04:d9:37:87:96:bf:0f:97:01:75:ef:c0:23:0a: ee:0b:4f:e2:af:8a:26:6b:22:4a:1f:b7:70:5e:96: 13:41:bf:2e:42:42:9f:4c:0b:cc:22:51:61:96:cc: 3d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C1:92:AC:60:10:1E:CC:CC:4C:14:C5:58:A1:41:35:08:AF:BA:39 X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5c:9c:36:85:53:ed:3e:53:f2:c4:09:9f:49:22:15:ef:1e: 1b:df:50:79:0e:82:67:a2:23:f5:15:57:9f:e3:3a:60:24:71: e6:2c:8c:14:20:a5:03:59:7e:bf:4d:51:a1:c7:62:64:64:28: 2a:7c:2e:42:d6:5a:5f:e2:16:ed:74:34:85:f3:5b:1d:4a:e2: 3c:11:3f:ea:15:47:0e:89:78:22:84:86:c9:3a:dd:7b:7a:ea: 77:69:1e:41:d0:96:81:0f:38:e0:ba:9c:82:bf:d3:e2:6f:e2: 04:9f:a3:2c:a7:b5:4d:97:f6:e0:65:aa:80:1a:b2:79:77:62: 8b:58:f1:4b:95:f5:8b:78:c3:89:e1:b4:6d:bf:cb:c5:45:2c: af:c9:0d:4b:c9:18:7c:cd:6e:26:1d:18:4d:cb:77:32:fe:81: d8:21:7e:cb:9c:59:ca:69:27:18:36:c8:eb:7b:a2:4e:06:08: 5f:43:55:8b:33:68:2f:6c:73:da:8f:de:38:45:a3:9a:4b:97: 8d:70:1f:fa:a1:ba:9b:97:f7:56:e4:1c:85:b5:0d:34:89:f8: 64:42:17:e6:de:99:8a:7e:17:5d:34:00:17:a6:b7:71:54:1f: 5d:cc:73:5a:14:67:fd:bd:9b:13:b7:44:f0:2c:46:59:d1:a2: 67:21:a7:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJqh/1g8XEw/D4Uj0R7lHK8HTH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNjAzMjUxOTM2NThaFw0yNjAzMjkwMjQ2NThaMDMxMTAvBgNV BAMTKEMwQzE5MkFDNjAxMDFFQ0NDQzRDMTRDNTU4QTE0MTM1MDhBRkJBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjWOC6iKoZexB3I/0GrF21JO5 tE5sZbl7bAJCYF1+GQsnx1VC/7pGIhueSO75lLBSgefwNeIWIvJqnWKNSVyYB1sH d9GK5nlaEb6h+nn8GimCQDZ7aE0n//UBYA392DOMq3IdLdJ8DJa5QGhke9qxOf5L 7lQ5fm+f/MprKlLaIRWRRqGgDRClsDHQWdW1q/YqrjXrpj6N2PUgk/CUj0kceR9J ifJNm0ypN64qNnOJMxaf0s/o14Hdj/w9dgn5a9PwqDtPBJ095EPjaq7gBMiZg0QE 2TeHlr8PlwF178AjCu4LT+KviiZrIkoft3BelhNBvy5CQp9MC8wiUWGWzD37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMGSrGAQHszMTBTFWKFBNQivujkwHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5cnDaFU+0+U/LECZ9JIhXvHhvfUHkOgmei I/UVV5/jOmAkceYsjBQgpQNZfr9NUaHHYmRkKCp8LkLWWl/iFu10NIXzWx1K4jwR P+oVRw6JeCKEhsk63Xt66ndpHkHQloEPOOC6nIK/0+Jv4gSfoyyntU2X9uBlqoAa snl3YotY8UuV9Yt4w4nhtG2/y8VFLK/JDUvJGHzNbiYdGE3LdzL+gdghfsucWcpp Jxg2yOt7ok4GCF9DVYszaC9sc9qP3jhFo5pLl41wH/qhupuX91bkHIW1DTSJ+GRC F+bemYp+F100ABemt3FUH13Mc1oUZ/29mxO3RPAsRlnRomchp5U= -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:49 2026 by rpki-client