$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: 9ae9i6l2mD5K0P6HbGqNKa1W6+R2bKbEHrMRbVoI+Nw= Subject key identifier: FE:65:CC:5F:2B:93:11:B7:AC:A8:DA:91:23:5A:35:B7:4F:FA:8C:E0 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 6239232544126FCDB34D560BA791EDB64BBB08E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 051A Signing time: Tue 24 Mar 2026 16:40:53 +0000 Manifest this update: Tue 24 Mar 2026 16:35:53 +0000 Manifest next update: Sat 28 Mar 2026 03:34:53 +0000 Files and hashes: 1: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) 2: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: +EFXmqu3JLaq42h7z1lE1v93Bgk0y0IL5bxecaOnNys=) 3: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 4: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: 6kuzxJGYdh4/ojzw99gmEVrbSFoycFaHX+7mVhZH1Ig=) 5: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 6: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 7: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:39:23:25:44:12:6f:cd:b3:4d:56:0b:a7:91:ed:b6:4b:bb:08:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Mar 24 16:35:53 2026 GMT Not After : Mar 28 03:34:53 2026 GMT Subject: CN=FE65CC5F2B9311B7ACA8DA91235A35B74FFA8CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:50:a6:df:8c:94:fa:63:94:e8:3d:4f:9b: 3f:1c:7a:e3:d6:ae:8c:48:0f:2a:05:ad:14:8f:47: 16:20:8b:4f:60:2f:7b:9d:ea:aa:a7:a5:7a:95:db: 88:6f:66:71:23:be:5c:b1:2d:3e:7d:cb:4e:a0:8f: 5d:ec:1d:06:b9:f0:2e:12:b2:bc:c5:c1:43:ee:01: 60:fe:7d:22:57:ad:45:88:be:45:3e:fa:53:97:64: cf:81:ae:5b:38:5a:de:1c:7c:5b:65:90:05:f0:9e: 37:0f:01:86:c0:44:e7:86:d6:ac:8d:00:64:d4:19: e2:7e:3a:d4:b3:b7:38:5c:af:7f:a5:84:98:20:28: d2:df:80:5f:73:18:34:7f:41:5f:5e:2e:3f:e5:80: ae:3d:8f:12:84:5a:8b:7c:80:0c:1c:fd:cb:a6:54: c8:e3:c2:80:c6:99:93:ca:ca:03:48:4c:f4:ab:c5: 53:ff:35:2e:93:8a:07:89:91:6e:ca:bd:00:1c:3f: 0f:a4:b9:08:2c:ad:79:17:62:2b:79:e5:0d:68:62: fe:d4:44:78:5a:92:71:33:46:9b:76:db:c5:20:ba: 19:98:4d:0a:7d:d8:33:06:c2:d2:6a:cc:8e:dd:5c: bb:56:a3:00:3b:36:3e:40:25:ef:2b:4d:24:fe:08: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:65:CC:5F:2B:93:11:B7:AC:A8:DA:91:23:5A:35:B7:4F:FA:8C:E0 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:01:b8:28:59:eb:da:f1:81:eb:9c:54:2e:5b:83:d0:58:64: fd:9e:7a:11:c0:17:b6:82:ff:ad:64:8c:11:58:26:a2:33:c2: 8b:9b:4e:a5:4a:54:36:aa:b4:79:35:f4:3e:3b:38:3c:6e:73: c2:ad:56:6c:65:9b:3f:54:6f:49:26:18:33:d2:bb:f9:80:7b: 39:ca:b2:e4:1a:5e:a8:a1:d1:3d:41:3c:c2:f0:fa:6f:c5:9a: 82:6e:2c:1b:d3:67:b8:77:84:e4:dc:ff:ab:ce:0e:19:d8:f9: 85:d2:b2:b5:76:38:90:7e:5e:05:73:06:06:6a:1c:e4:fb:3d: d0:22:96:1c:cc:b2:d5:21:c8:93:2c:70:79:c1:83:80:21:79: 4f:3f:97:16:a4:47:a3:70:ff:69:74:d2:ff:2c:02:cc:f8:71: 7a:49:e0:a1:f8:1f:b4:e3:d9:f7:f8:ac:dd:3c:a0:e9:b7:84: 4b:f0:a9:13:8c:41:8a:33:a3:ca:f6:b9:c2:f3:19:31:b6:b3: 4f:ca:9e:59:c1:c4:08:6a:78:3a:5f:1a:69:cb:39:5b:ff:aa: d8:a4:71:45:4c:c5:ac:1b:1a:ab:be:c7:b5:34:c4:ff:fc:fa: 96:30:da:85:13:89:8d:3c:14:64:55:91:e1:f2:34:c1:0a:58: b3:97:85:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjkjJUQSb82zTVYLp5Httku7COQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNjAzMjQxNjM1NTNaFw0yNjAzMjgwMzM0NTNaMDMxMTAvBgNV BAMTKEZFNjVDQzVGMkI5MzExQjdBQ0E4REE5MTIzNUEzNUI3NEZGQThDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBg1Cm34yU+mOU6D1Pmz8ceuPW roxIDyoFrRSPRxYgi09gL3ud6qqnpXqV24hvZnEjvlyxLT59y06gj13sHQa58C4S srzFwUPuAWD+fSJXrUWIvkU++lOXZM+Brls4Wt4cfFtlkAXwnjcPAYbAROeG1qyN AGTUGeJ+OtSztzhcr3+lhJggKNLfgF9zGDR/QV9eLj/lgK49jxKEWot8gAwc/cum VMjjwoDGmZPKygNITPSrxVP/NS6TigeJkW7KvQAcPw+kuQgsrXkXYit55Q1oYv7U RHhaknEzRpt228UguhmYTQp92DMGwtJqzI7dXLtWowA7Nj5AJe8rTST+CPfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mXMXyuTEbesqNqRI1o1t0/6jOAwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQBuChZ69rxgeucVC5bg9BYZP2eehHAF7aC /61kjBFYJqIzwoubTqVKVDaqtHk19D47ODxuc8KtVmxlmz9Ub0kmGDPSu/mAeznK suQaXqih0T1BPMLw+m/FmoJuLBvTZ7h3hOTc/6vODhnY+YXSsrV2OJB+XgVzBgZq HOT7PdAilhzMstUhyJMscHnBg4AheU8/lxakR6Nw/2l00v8sAsz4cXpJ4KH4H7Tj 2ff4rN08oOm3hEvwqROMQYozo8r2ucLzGTG2s0/KnlnBxAhqeDpfGmnLOVv/qtik cUVMxawbGqu+x7U0xP/8+pYw2oUTiY08FGRVkeHyNMEKWLOXhVM= -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:47 2026 by rpki-client