$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: HZOhecJxqdsfW8TTmOYRejNUSyoqRnQr6DcJfs0e1Cg= Subject key identifier: CD:F6:DF:7D:F5:E2:D0:40:C8:27:64:75:BF:80:AA:30:86:0B:70:11 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 4B9B5D0DB5E9360F4B04ECEEA0DACAD6C920260E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 023A Signing time: Thu 26 Mar 2026 15:31:58 +0000 Manifest this update: Thu 26 Mar 2026 15:26:58 +0000 Manifest next update: Mon 30 Mar 2026 00:16:58 +0000 Files and hashes: 1: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 2: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: 6fGmHtXWVmXNcvNBXYt0bQyrgg5F8qNmawGKbNDLCAQ=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 00:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9b:5d:0d:b5:e9:36:0f:4b:04:ec:ee:a0:da:ca:d6:c9:20:26:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Mar 26 15:26:58 2026 GMT Not After : Mar 30 00:16:58 2026 GMT Subject: CN=CDF6DF7DF5E2D040C8276475BF80AA30860B7011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:e4:55:15:f6:53:18:99:26:04:f3:0a:c5: d0:76:4d:e5:0b:1d:ac:cc:85:6c:c7:0d:60:bd:d6: d5:31:90:f1:d9:9c:5e:f3:dc:55:aa:4c:da:c4:8e: ab:d9:f4:b1:99:0e:7a:4b:9e:a4:a1:2b:fb:d1:2e: 39:84:a5:b4:1f:e8:88:30:b4:e9:98:88:dd:4a:a4: ca:89:ea:4e:b0:07:43:7f:0f:be:45:93:21:1c:6b: 0d:ba:fa:41:cb:3e:0c:5b:57:fb:a2:e4:9d:89:48: 1e:3e:f3:ae:6b:19:59:ed:57:af:42:2e:f3:b1:50: c6:c4:02:17:85:7b:8c:bd:94:6d:da:8c:05:34:3f: a4:b7:0f:10:05:4b:07:8a:4c:1e:bb:d8:95:ce:5e: 6d:fa:21:ae:c4:ad:c0:34:6b:a7:7c:b1:fc:0c:22: 22:36:08:74:8f:83:ea:75:6c:be:c5:79:9c:19:75: 71:b8:a8:8a:d6:57:a9:1b:4b:0a:6c:f2:d1:9c:40: b5:6e:14:d3:db:c8:07:18:20:57:96:bd:33:d9:98: 64:55:10:ae:54:32:71:fa:77:ce:7c:5d:34:c2:13: ab:a9:fc:10:89:6b:26:fa:1c:fb:27:ea:23:1a:06: dd:6b:4d:48:68:a0:e6:b6:b9:01:2f:3e:cb:c4:f1: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:DF:7D:F5:E2:D0:40:C8:27:64:75:BF:80:AA:30:86:0B:70:11 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:56:9a:4a:d5:26:b9:b2:df:bb:35:8a:0a:7b:30:7b:19:00: 98:6c:57:57:dd:86:5e:1c:82:a0:ed:ed:95:44:36:8c:cc:81: 6a:5c:5f:06:bc:55:b7:9c:58:c7:ef:2a:57:3a:cc:f3:cc:7d: e3:54:97:f1:03:54:91:5b:2a:40:7f:05:fa:93:61:00:8b:de: 1d:4f:21:c3:eb:48:55:7b:0d:5f:ec:93:5b:57:2f:ce:b4:0a: aa:05:42:98:59:fa:a8:9b:79:21:69:03:5a:5b:d6:e0:6a:00: 74:3c:9e:6b:34:a3:cd:f0:54:0a:04:fd:50:fe:4f:6f:3e:d3: e0:b2:ec:ab:d2:1a:c9:56:18:8b:2e:73:24:40:82:17:4e:c7: 62:1e:0a:f3:01:d8:70:cf:2e:0b:81:23:07:66:e5:98:20:0e: 70:df:25:63:de:fd:a6:50:13:69:1c:c9:77:cb:b7:23:a3:c0: b0:71:ea:7c:49:8d:dc:3a:d1:a9:79:d5:7f:f0:54:e2:34:dc: ae:f6:8c:dd:c9:6b:7b:c5:3a:36:57:06:49:6c:21:d6:79:ed: 54:d9:20:73:f5:83:4f:51:c0:17:da:f1:e6:01:7b:8d:2e:93: b5:5b:a3:a1:08:39:04:ec:93:ad:fd:83:bd:8b:35:64:e8:7d: e5:34:73:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5tdDbXpNg9LBOzuoNrK1skgJg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNjAzMjYxNTI2NThaFw0yNjAzMzAwMDE2NThaMDMxMTAvBgNV BAMTKENERjZERjdERjVFMkQwNDBDODI3NjQ3NUJGODBBQTMwODYwQjcwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxORVFfZTGJkmBPMKxdB2TeUL HazMhWzHDWC91tUxkPHZnF7z3FWqTNrEjqvZ9LGZDnpLnqShK/vRLjmEpbQf6Igw tOmYiN1KpMqJ6k6wB0N/D75FkyEcaw26+kHLPgxbV/ui5J2JSB4+865rGVntV69C LvOxUMbEAheFe4y9lG3ajAU0P6S3DxAFSweKTB672JXOXm36Ia7ErcA0a6d8sfwM IiI2CHSPg+p1bL7FeZwZdXG4qIrWV6kbSwps8tGcQLVuFNPbyAcYIFeWvTPZmGRV EK5UMnH6d858XTTCE6up/BCJayb6HPsn6iMaBt1rTUhooOa2uQEvPsvE8eHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfbfffXi0EDIJ2R1v4CqMIYLcBEwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBWmkrVJrmy37s1igp7MHsZAJhsV1fdhl4c gqDt7ZVENozMgWpcXwa8VbecWMfvKlc6zPPMfeNUl/EDVJFbKkB/BfqTYQCL3h1P IcPrSFV7DV/sk1tXL860CqoFQphZ+qibeSFpA1pb1uBqAHQ8nms0o83wVAoE/VD+ T28+0+Cy7KvSGslWGIsucyRAghdOx2IeCvMB2HDPLguBIwdm5ZggDnDfJWPe/aZQ E2kcyXfLtyOjwLBx6nxJjdw60al51X/wVOI03K72jN3Ja3vFOjZXBklsIdZ57VTZ IHP1g09RwBfa8eYBe40uk7Vbo6EIOQTsk639g72LNWTofeU0c/s= -----END CERTIFICATE-----Generated at Thu Mar 26 18:24:27 2026 by rpki-client