$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: 0S6tEIeuhLbPpn+6edq5MNAgmLSbdkWxvF+Xs4ZN3kM= Subject key identifier: 06:1D:D1:CC:F3:6B:45:AE:11:E4:BA:5E:47:A6:21:38:8F:61:CB:34 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 39E2605DD568713B3CD872006B40FA064CB3020C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 055B Signing time: Thu 26 Mar 2026 07:00:53 +0000 Manifest this update: Thu 26 Mar 2026 06:55:53 +0000 Manifest next update: Sun 29 Mar 2026 11:17:53 +0000 Files and hashes: 1: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: 3LnS6BS2HR+DzjjNBJQxlMtFz9Js0rEczXXUnYRarMo=) 2: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e2:60:5d:d5:68:71:3b:3c:d8:72:00:6b:40:fa:06:4c:b3:02:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Mar 26 06:55:53 2026 GMT Not After : Mar 29 11:17:53 2026 GMT Subject: CN=061DD1CCF36B45AE11E4BA5E47A621388F61CB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:89:52:ef:06:06:35:53:6e:1a:2f:8d:a4: 3a:a0:11:cd:65:59:b9:1e:af:80:04:e8:2a:42:27: 09:d1:44:3d:08:cc:7f:31:c6:ec:fc:37:37:3b:b4: f9:14:70:a1:df:88:69:68:3f:80:53:29:53:2a:82: f7:97:55:df:b5:a0:f0:c1:96:6a:e7:7b:37:b4:82: f5:b0:dd:8b:90:f0:79:8c:05:36:2a:77:da:fd:64: 0f:df:6b:5a:f8:43:ee:72:cc:17:32:ec:60:b4:ae: 8d:20:08:0b:a7:a5:4f:34:8c:0a:9b:7f:7d:eb:43: 5a:01:c4:f8:46:8b:ce:6b:17:6f:2c:51:d5:5c:2d: a5:54:4b:7d:65:82:af:84:61:0f:f6:92:02:d5:96: 37:54:93:d2:2e:c5:99:21:38:0d:39:f3:72:8e:21: 53:e1:b4:42:7a:77:46:84:3b:7e:9f:5e:b8:1f:eb: 49:1b:a6:90:db:f0:b7:4e:90:a8:33:95:04:49:f3: 67:5d:9f:c4:b0:44:fd:25:bc:4a:d3:d6:f6:8d:e4: c2:4d:dc:67:99:9a:a0:80:00:9e:8a:c5:ab:57:70: 7a:42:d8:84:74:3b:c1:eb:0b:28:51:37:0d:9c:7f: 20:f8:e8:b9:b9:ea:99:07:a8:43:be:c8:55:6e:32: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1D:D1:CC:F3:6B:45:AE:11:E4:BA:5E:47:A6:21:38:8F:61:CB:34 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:dc:9a:40:54:a8:4b:99:d9:13:f1:6c:d6:ff:e2:19:3b:77: a6:c2:64:4c:38:ff:a2:b0:e8:c9:a6:9b:66:34:81:9f:e9:c2: 58:3a:e6:f5:4a:f0:bf:89:2f:97:6d:a3:6b:08:5a:a6:f3:15: 0b:09:e2:37:33:47:9b:91:a5:39:bb:20:34:4d:5a:ac:6e:47: 41:2c:2b:62:1b:08:ff:aa:ba:f5:7e:00:aa:a9:e2:45:55:25: 0b:cc:be:b0:e5:15:5e:26:b1:09:a6:b8:4a:9b:8a:7d:94:06: 45:66:6d:96:84:d6:1f:bd:1d:ec:69:ee:2d:6a:9c:82:03:ba: 51:98:0f:73:25:0e:9e:14:09:e6:0f:d8:5d:53:b7:e9:ab:63: b1:ae:99:9f:e4:6e:22:0f:ed:d3:cd:89:0a:bb:15:44:44:4f: 08:ad:07:c7:a5:69:62:54:77:86:36:94:82:31:fa:48:97:e8: 88:4f:a7:90:e7:a4:67:2f:8b:fb:7b:91:91:ca:21:f7:72:dd: 5a:c9:d1:63:d6:0c:3b:1b:d2:4b:a8:58:27:7b:19:81:01:7d: 41:5c:ce:ac:60:71:e3:46:02:f5:3d:d8:34:da:9b:b8:6d:9a: 62:8f:a4:ee:ba:75:02:02:81:5e:a9:97:00:1b:1c:f1:a5:39: 84:99:a0:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeJgXdVocTs82HIAa0D6BkyzAgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNjAzMjYwNjU1NTNaFw0yNjAzMjkxMTE3NTNaMDMxMTAvBgNV BAMTKDA2MUREMUNDRjM2QjQ1QUUxMUU0QkE1RTQ3QTYyMTM4OEY2MUNCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOolS7wYGNVNuGi+NpDqgEc1l Wbker4AE6CpCJwnRRD0IzH8xxuz8Nzc7tPkUcKHfiGloP4BTKVMqgveXVd+1oPDB lmrneze0gvWw3YuQ8HmMBTYqd9r9ZA/fa1r4Q+5yzBcy7GC0ro0gCAunpU80jAqb f33rQ1oBxPhGi85rF28sUdVcLaVUS31lgq+EYQ/2kgLVljdUk9IuxZkhOA0583KO IVPhtEJ6d0aEO36fXrgf60kbppDb8LdOkKgzlQRJ82ddn8SwRP0lvErT1vaN5MJN 3GeZmqCAAJ6KxatXcHpC2IR0O8HrCyhRNw2cfyD46Lm56pkHqEO+yFVuMuXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBh3RzPNrRa4R5LpeR6YhOI9hyzQwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXcmkBUqEuZ2RPxbNb/4hk7d6bCZEw4/6Kw 6Mmmm2Y0gZ/pwlg65vVK8L+JL5dto2sIWqbzFQsJ4jczR5uRpTm7IDRNWqxuR0Es K2IbCP+quvV+AKqp4kVVJQvMvrDlFV4msQmmuEqbin2UBkVmbZaE1h+9Hexp7i1q nIIDulGYD3MlDp4UCeYP2F1Tt+mrY7GumZ/kbiIP7dPNiQq7FURETwitB8elaWJU d4Y2lIIx+kiX6IhPp5DnpGcvi/t7kZHKIfdy3VrJ0WPWDDsb0kuoWCd7GYEBfUFc zqxgceNGAvU92DTam7htmmKPpO66dQICgV6plwAbHPGlOYSZoAg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:53 2026 by rpki-client