$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: EFrRAtsVHUmS/jNTxfZmWVmZrUWlBKDw03brJPniBoU= Subject key identifier: D5:67:83:7C:1F:CF:E4:B4:38:57:30:06:D4:35:C2:6E:1A:FA:DF:AD Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 5761B075839DAFA350CB98095D22587422D911E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 04A5 Signing time: Tue 24 Mar 2026 04:51:25 +0000 Manifest this update: Tue 24 Mar 2026 04:46:25 +0000 Manifest next update: Fri 27 Mar 2026 12:40:25 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: JcyJGXrkDzZYGDVWiWKqyvJgziPinc2h6VYRNuXSfWc=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: fLSt4OmsorwQGSOaGglnH8ttitbrl6AJWQaVzHo2NOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:61:b0:75:83:9d:af:a3:50:cb:98:09:5d:22:58:74:22:d9:11:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Mar 24 04:46:25 2026 GMT Not After : Mar 27 12:40:25 2026 GMT Subject: CN=D567837C1FCFE4B438573006D435C26E1AFADFAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:b2:90:d1:a9:02:dc:9d:70:d2:72:5a:00: b4:7f:af:a0:04:7a:c4:d2:cb:36:c5:ec:eb:34:31: b3:67:37:14:d3:86:5e:65:d4:e6:80:65:f9:62:91: 81:37:63:15:2f:e3:e7:b5:32:1d:06:d1:77:cd:b3: e5:77:34:00:5c:94:5b:21:10:86:39:81:ee:bd:d4: 3d:54:1e:9a:29:d1:6a:8a:5b:d4:26:ea:0b:9b:10: bc:3f:46:85:2b:dd:79:0f:c2:d3:1d:b0:c3:10:eb: 50:b2:74:e7:de:8a:c4:a4:86:e1:78:42:be:95:ec: 35:19:0a:6a:43:c9:c4:d9:c1:92:16:af:4f:30:74: 0d:9c:4d:5e:6f:e5:b8:a8:0d:c3:9b:a5:be:d4:52: 38:14:9f:ac:96:b6:22:f8:1d:53:05:0e:9d:ba:bc: 8d:8e:26:41:cd:d2:15:42:aa:0e:6f:7b:1c:48:ad: 69:31:56:a4:6f:bf:04:d6:d6:45:f6:c3:2d:87:cd: ac:ac:36:77:45:6f:a5:ad:f2:30:9e:96:41:c9:99: 5a:9e:13:f0:d0:51:85:e9:d6:e5:84:f9:af:91:e8: 1f:d1:bc:04:21:0d:8c:94:66:7b:04:0c:0a:b1:eb: e3:72:e3:0d:1a:1f:81:69:88:ae:46:73:31:28:ee: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:83:7C:1F:CF:E4:B4:38:57:30:06:D4:35:C2:6E:1A:FA:DF:AD X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:89:91:88:db:05:dc:2e:df:12:e2:f6:9f:fa:b4:90:84:b4: ba:9b:cf:41:94:38:60:f9:65:32:13:eb:fc:1e:f0:39:2c:85: af:11:f9:49:d4:89:67:c6:cf:4b:a5:8a:03:5e:aa:4d:cc:53: 25:04:8a:20:a4:49:ae:8c:fc:ef:86:b9:cb:ee:b1:2a:6e:f1: 3a:c7:ca:9d:cf:4e:cc:c9:51:2c:aa:e8:07:32:0b:d1:7f:01: 97:55:7d:f5:c6:39:72:4a:e1:45:64:eb:58:58:e6:e9:db:0b: b5:1c:d7:00:51:57:9e:d2:b4:e3:f1:a9:34:1c:8d:1e:f5:41: 46:2e:58:80:19:8d:e7:66:b2:12:f4:11:2c:f5:f6:02:a3:da: 6e:ab:c8:e3:c6:4a:62:e6:0c:b8:0c:ce:9c:a1:de:84:81:80: 1c:a0:2a:aa:90:74:1f:34:e0:03:1b:6a:8c:1d:39:3b:4c:ab: 9f:88:1f:f5:41:4d:5a:ca:6e:0d:0c:54:a5:3f:56:d7:64:e2: 20:ce:51:43:31:9a:5a:20:43:73:84:ef:a8:b2:c1:c1:e4:58: 47:05:90:f3:be:61:0f:e6:d2:65:54:fc:d9:7d:85:5e:61:34: 55:12:d6:2f:33:22:9b:c7:b3:50:a6:cd:cc:16:4d:3f:a7:b1: 9f:94:f5:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2GwdYOdr6NQy5gJXSJYdCLZEeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNjAzMjQwNDQ2MjVaFw0yNjAzMjcxMjQwMjVaMDMxMTAvBgNV BAMTKEQ1Njc4MzdDMUZDRkU0QjQzODU3MzAwNkQ0MzVDMjZFMUFGQURGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BrKQ0akC3J1w0nJaALR/r6AE esTSyzbF7Os0MbNnNxTThl5l1OaAZflikYE3YxUv4+e1Mh0G0XfNs+V3NABclFsh EIY5ge691D1UHpop0WqKW9Qm6gubELw/RoUr3XkPwtMdsMMQ61CydOfeisSkhuF4 Qr6V7DUZCmpDycTZwZIWr08wdA2cTV5v5bioDcObpb7UUjgUn6yWtiL4HVMFDp26 vI2OJkHN0hVCqg5vexxIrWkxVqRvvwTW1kX2wy2HzaysNndFb6Wt8jCelkHJmVqe E/DQUYXp1uWE+a+R6B/RvAQhDYyUZnsEDAqx6+Ny4w0aH4FpiK5GczEo7qDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1WeDfB/P5LQ4VzAG1DXCbhr6360wHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuJkYjbBdwu3xLi9p/6tJCEtLqbz0GUOGD5 ZTIT6/we8Dksha8R+UnUiWfGz0uligNeqk3MUyUEiiCkSa6M/O+GucvusSpu8TrH yp3PTszJUSyq6AcyC9F/AZdVffXGOXJK4UVk61hY5unbC7Uc1wBRV57StOPxqTQc jR71QUYuWIAZjedmshL0ESz19gKj2m6ryOPGSmLmDLgMzpyh3oSBgBygKqqQdB80 4AMbaowdOTtMq5+IH/VBTVrKbg0MVKU/Vtdk4iDOUUMxmlogQ3OE76iywcHkWEcF kPO+YQ/m0mVU/Nl9hV5hNFUS1i8zIpvHs1CmzcwWTT+nsZ+U9WI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:43:50 2026 by rpki-client