$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: p36u24e9xXUN4tqqVN4bc2TvIcudEaD6Flb4jDVNWi8= Subject key identifier: BE:75:87:89:74:AE:32:9B:AD:83:CF:C7:EA:08:17:0A:15:FA:17:C5 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 59E4ACA37D1AC332A31420A4D88268DE7B6D7DD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0289 Signing time: Tue 24 Mar 2026 09:02:47 +0000 Manifest this update: Tue 24 Mar 2026 08:57:47 +0000 Manifest next update: Fri 27 Mar 2026 13:22:47 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: LeeGwZNg1xeTEHyLpyP7xbBZEKxpkxbvCL0BfojuuRU=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 3: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: fxyhsEOolrVwtpaxENWPmO8B0bOJG2AG0cRm1ooVHrA=) 4: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: oPdKvuSaVZv8alsSE2ACZ+vyXVDRBNBm8/f/QuNBFZU=) 5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 6: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: rC9zDsuuHrRHxm490P5sveoMq6dVJ3UnsdtYS7hgs/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e4:ac:a3:7d:1a:c3:32:a3:14:20:a4:d8:82:68:de:7b:6d:7d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Mar 24 08:57:47 2026 GMT Not After : Mar 27 13:22:47 2026 GMT Subject: CN=BE75878974AE329BAD83CFC7EA08170A15FA17C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e9:5f:bb:3f:3b:9b:f0:3b:79:f5:88:ef:d4: 40:31:97:f4:4d:34:91:f4:cd:82:66:e1:dc:9e:34: 53:14:73:43:ad:ae:56:1b:aa:3b:be:01:19:cc:44: f0:af:17:b0:09:65:bf:1c:98:ed:2d:b6:b3:9a:90: 29:c5:5c:52:8e:40:09:66:86:9b:23:1a:f2:0e:78: 91:49:c2:d4:d5:cb:da:2d:b4:44:5f:aa:ae:14:96: f2:09:a3:69:bd:61:59:23:77:5c:9c:32:2f:95:e4: 05:ff:60:2b:55:e7:7a:e0:2b:86:74:ff:4f:3d:85: 5e:0f:5d:3f:45:51:be:10:60:4e:0a:d7:be:1d:f7: 2c:58:f7:ae:70:db:1a:9a:7f:29:75:cc:38:bb:2b: f1:56:1a:eb:e2:57:33:c7:51:21:bc:92:aa:e0:16: 42:67:92:6d:90:c5:81:b3:eb:20:36:ea:24:ee:aa: 96:cc:79:a2:96:dc:c6:0f:3f:fe:f9:e0:91:26:16: 13:6a:79:c2:3e:e0:3c:eb:e1:13:bd:4d:94:05:a5: fa:09:67:8c:64:2d:6d:e7:7d:80:7b:1b:6d:92:1f: a6:ed:86:01:6b:c9:09:8f:cb:1e:7f:b2:d6:b1:54: 51:a5:d6:65:da:3c:32:81:5a:5a:1c:f8:24:9d:cb: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:75:87:89:74:AE:32:9B:AD:83:CF:C7:EA:08:17:0A:15:FA:17:C5 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d6:30:cb:0e:5d:07:cb:de:fd:ff:73:e0:2f:8c:33:17:6d: 76:7f:a1:52:c9:02:05:52:89:4c:32:3c:a8:b3:43:06:8f:d8: cc:42:ce:16:cd:29:c5:3f:dd:b4:82:32:7e:1a:d9:54:a8:2f: f5:e9:a7:0f:a2:c3:70:1e:e9:26:f6:8e:48:b7:d4:f0:7b:f4: 26:b1:86:a5:82:7e:55:a9:1a:6d:77:28:67:01:a6:df:d0:03: 5c:52:82:3a:c0:76:7d:fe:2b:d7:82:5c:19:7b:7d:ad:64:4b: 56:b7:1f:54:9b:04:31:6b:98:83:41:09:60:61:c1:84:29:2d: 4f:53:09:6d:31:42:3b:cb:9a:91:a9:45:f3:63:b0:b5:5c:34: d5:ae:1a:00:19:e9:4f:2a:ca:51:e7:12:35:f5:f6:3c:1c:f0: f2:d0:7b:b9:ad:01:84:05:90:69:dc:86:20:1c:f5:fc:c8:ce: 44:88:06:d9:13:04:65:85:51:49:10:21:6b:3d:d4:9d:08:49: 90:b0:f0:87:d7:6d:c7:b8:f3:6e:fb:6d:a6:74:d0:0e:15:5a: e8:f8:b8:54:d6:e9:f2:10:4a:70:f5:e8:03:d6:45:85:5a:06: b3:a6:ab:e8:2f:7e:22:99:64:3e:cd:96:a4:60:ec:fc:9c:75: c6:c6:39:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeSso30awzKjFCCk2IJo3nttfdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNjAzMjQwODU3NDdaFw0yNjAzMjcxMzIyNDdaMDMxMTAvBgNV BAMTKEJFNzU4Nzg5NzRBRTMyOUJBRDgzQ0ZDN0VBMDgxNzBBMTVGQTE3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw6V+7Pzub8Dt59Yjv1EAxl/RN NJH0zYJm4dyeNFMUc0OtrlYbqju+ARnMRPCvF7AJZb8cmO0ttrOakCnFXFKOQAlm hpsjGvIOeJFJwtTVy9ottERfqq4UlvIJo2m9YVkjd1ycMi+V5AX/YCtV53rgK4Z0 /089hV4PXT9FUb4QYE4K174d9yxY965w2xqafyl1zDi7K/FWGuviVzPHUSG8kqrg FkJnkm2QxYGz6yA26iTuqpbMeaKW3MYPP/754JEmFhNqecI+4Dzr4RO9TZQFpfoJ Z4xkLW3nfYB7G22SH6bthgFryQmPyx5/staxVFGl1mXaPDKBWloc+CSdy1lVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvnWHiXSuMputg8/H6ggXChX6F8UwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/WMMsOXQfL3v3/c+AvjDMXbXZ/oVLJAgVS iUwyPKizQwaP2MxCzhbNKcU/3bSCMn4a2VSoL/Xppw+iw3Ae6Sb2jki31PB79Cax hqWCflWpGm13KGcBpt/QA1xSgjrAdn3+K9eCXBl7fa1kS1a3H1SbBDFrmINBCWBh wYQpLU9TCW0xQjvLmpGpRfNjsLVcNNWuGgAZ6U8qylHnEjX19jwc8PLQe7mtAYQF kGnchiAc9fzIzkSIBtkTBGWFUUkQIWs91J0ISZCw8IfXbce48277baZ00A4VWuj4 uFTW6fIQSnD16APWRYVaBrOmq+gvfiKZZD7NlqRg7PycdcbGOQY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:10:40 2026 by rpki-client