$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: qG6k7TGzipuWM1YhoU2Q88yjXP+FTXylAXZY4WZqQoU= Subject key identifier: CD:43:FF:68:A2:62:95:C4:A0:AA:B6:72:35:E4:68:3B:8D:FC:49:44 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 2B5E225B3665E135210E42C48FEB728DAAF47922 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: 0126 Signing time: Tue 24 Mar 2026 22:41:18 +0000 Manifest this update: Tue 24 Mar 2026 22:36:18 +0000 Manifest next update: Sat 28 Mar 2026 07:48:18 +0000 Files and hashes: 1: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 2: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: msoLFvI2bl5cLim1E2QX2rI/u1YrS0u96pdVD50h1A8=) 3: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5e:22:5b:36:65:e1:35:21:0e:42:c4:8f:eb:72:8d:aa:f4:79:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Mar 24 22:36:18 2026 GMT Not After : Mar 28 07:48:18 2026 GMT Subject: CN=CD43FF68A26295C4A0AAB67235E4683B8DFC4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:07:29:be:18:d8:5c:68:53:b1:27:35:93: 8c:81:c9:7f:0b:29:dc:81:6e:bf:b5:f3:d3:78:ee: 76:90:75:70:d5:df:3d:7a:27:ce:b4:37:0e:1b:73: aa:3f:d0:4d:fa:e7:14:85:8b:c9:2a:32:b7:15:85: 96:50:5d:98:a0:d1:ac:66:e7:34:2a:fb:6e:7e:d0: 93:13:9a:33:43:f4:17:e1:93:82:2f:8b:26:13:fc: 7d:af:1f:ff:01:e0:6f:c1:2a:45:2d:16:d9:b1:07: 6b:c3:5e:f6:b5:ce:73:bd:77:5b:88:58:33:9f:9e: 04:bf:6d:f7:36:c7:4d:46:4e:03:87:23:69:88:9e: 23:da:0c:be:4d:26:65:97:49:24:1b:52:f4:89:e3: 4b:5b:8c:29:1c:52:7b:4f:21:d2:38:76:9b:56:73: e4:b7:62:be:f7:b6:a0:84:e6:8e:c1:9b:cf:39:a3: 8d:f2:91:75:ad:af:1d:3a:d6:92:e4:43:27:d8:33: 5c:84:f1:aa:d6:3b:33:b6:7a:18:33:c3:15:2b:86: 13:37:34:e0:e6:af:81:f6:cf:94:27:93:b7:67:29: 72:32:b9:2f:74:63:e6:66:75:95:40:f9:36:a8:46: cd:7a:a0:fd:18:25:64:04:1e:c5:b3:3c:45:7b:61: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:43:FF:68:A2:62:95:C4:A0:AA:B6:72:35:E4:68:3B:8D:FC:49:44 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c6:49:af:75:2a:d8:1f:f8:e3:22:f7:2e:5f:d5:dd:46:5f: 3e:76:02:f8:f6:6b:e4:81:2e:80:fc:b1:1d:28:f1:bc:9c:62: 85:ea:aa:40:38:b3:21:8d:8e:0e:66:5f:3d:42:53:db:60:78: d8:59:e0:ad:8a:ac:97:f9:3b:46:67:80:94:52:35:31:21:d5: 6b:18:17:6e:7b:1c:1c:1c:89:4e:77:d8:1d:f6:8e:b3:00:d0: a5:35:b6:39:22:a2:0b:0e:6c:e1:ba:09:42:25:bc:81:9c:30: 35:27:7e:5e:7e:4c:27:70:1e:79:97:af:42:e8:f7:24:f9:c6: 37:20:3c:2e:d8:50:06:59:4f:85:f9:76:ae:73:1e:65:ea:0d: b9:23:7f:b7:4e:ab:cc:7e:8f:18:55:ff:94:01:d7:fe:11:f0: d0:62:69:db:60:f7:c3:9a:ec:6f:06:2f:3f:cc:26:23:a7:a6: 61:32:04:f5:2b:15:1b:45:60:c9:16:ff:78:44:27:04:2e:9d: 2b:5c:37:42:cf:65:7e:1a:65:67:74:ff:c4:8f:b0:b3:e8:a2: 8b:5a:23:48:97:81:46:0a:87:9f:ae:da:5f:3f:c8:5c:f3:3f: 70:1c:8e:c9:0e:88:08:14:73:d0:24:4d:46:8c:7b:8d:c9:95: 9b:f6:2f:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK14iWzZl4TUhDkLEj+tyjar0eSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNjAzMjQyMjM2MThaFw0yNjAzMjgwNzQ4MThaMDMxMTAvBgNV BAMTKENENDNGRjY4QTI2Mjk1QzRBMEFBQjY3MjM1RTQ2ODNCOERGQzQ5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbAcpvhjYXGhTsSc1k4yByX8L KdyBbr+189N47naQdXDV3z16J860Nw4bc6o/0E365xSFi8kqMrcVhZZQXZig0axm 5zQq+25+0JMTmjND9Bfhk4IviyYT/H2vH/8B4G/BKkUtFtmxB2vDXva1znO9d1uI WDOfngS/bfc2x01GTgOHI2mIniPaDL5NJmWXSSQbUvSJ40tbjCkcUntPIdI4dptW c+S3Yr73tqCE5o7Bm885o43ykXWtrx061pLkQyfYM1yE8arWOzO2ehgzwxUrhhM3 NODmr4H2z5Qnk7dnKXIyuS90Y+ZmdZVA+TaoRs16oP0YJWQEHsWzPEV7Yf3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzUP/aKJilcSgqrZyNeRoO438SUQwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnGSa91Ktgf+OMi9y5f1d1GXz52Avj2a+SB LoD8sR0o8bycYoXqqkA4syGNjg5mXz1CU9tgeNhZ4K2KrJf5O0ZngJRSNTEh1WsY F257HBwciU532B32jrMA0KU1tjkiogsObOG6CUIlvIGcMDUnfl5+TCdwHnmXr0Lo 9yT5xjcgPC7YUAZZT4X5dq5zHmXqDbkjf7dOq8x+jxhV/5QB1/4R8NBiadtg98Oa 7G8GLz/MJiOnpmEyBPUrFRtFYMkW/3hEJwQunStcN0LPZX4aZWd0/8SPsLPooota I0iXgUYKh5+u2l8/yFzzP3AcjskOiAgUc9AkTUaMe43JlZv2L2A= -----END CERTIFICATE-----Generated at Thu Mar 26 15:44:00 2026 by rpki-client