$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: J6tZJKE3q40kVDmIAyu3qra1VnAuPv6BIFc/S8+G4tU= Subject key identifier: 29:84:B6:DB:94:6C:E5:FC:59:1E:03:B5:01:BC:6A:72:A7:3C:87:4E Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 33726737989AC212B7DF97FA0056846EA3B887E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 021D Signing time: Thu 26 Mar 2026 04:11:13 +0000 Manifest this update: Thu 26 Mar 2026 04:06:13 +0000 Manifest next update: Sun 29 Mar 2026 12:37:13 +0000 Files and hashes: 1: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: OlSEaMFgO7PKKnmIhsUPpO1TcfNohwlH/C3NH/NvhZg=) 2: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: Q0sdI538bqLXgnrBYrBtGstVACSTdutrOG89ABXFyQ8=) 3: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=) 4: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:72:67:37:98:9a:c2:12:b7:df:97:fa:00:56:84:6e:a3:b8:87:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Mar 26 04:06:13 2026 GMT Not After : Mar 29 12:37:13 2026 GMT Subject: CN=2984B6DB946CE5FC591E03B501BC6A72A73C874E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:c6:5e:da:6b:80:a8:1f:86:1b:89:1c:37:6f: 7a:b5:71:5c:b3:77:37:bf:bc:60:0e:d2:b3:9c:90: 96:d9:fe:34:77:1c:ec:87:d3:e1:f7:04:cb:ba:28: 2d:52:28:5c:16:ee:2d:f7:e2:b4:41:98:2f:84:57: 6c:29:c1:01:04:ca:a6:0d:39:6f:ab:4a:a5:d5:78: 48:8a:fe:8b:3f:e0:23:30:bc:a8:01:53:68:ee:fb: 7a:a2:b1:40:2a:1e:3e:60:d6:01:39:8e:33:4d:9d: 5f:44:54:9c:55:0c:c9:1e:c0:76:18:e8:9a:38:b4: 70:9e:23:1a:3f:61:19:40:ba:6b:3f:83:44:9d:a3: 23:d8:7a:da:e4:4b:8b:ce:75:d3:a7:6f:10:21:68: a9:ef:16:ec:d1:c5:b0:a8:62:92:0d:ae:e9:e3:58: bf:cb:be:71:ef:b5:9e:ec:06:9a:1e:c7:df:7c:80: 0d:d3:fb:9d:1d:5b:1f:fe:c3:f4:7f:ad:a6:cb:87: 93:d3:7a:65:14:49:2a:1f:52:94:81:b3:39:f1:72: 0f:67:06:ab:49:39:2a:4e:04:f3:dc:0b:c3:f1:2b: f3:dc:48:e9:bd:4f:48:ed:da:4c:cb:f8:9b:7d:78: 2d:1e:2a:88:59:d0:b7:a1:df:46:8d:ae:0a:e5:f2: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:B6:DB:94:6C:E5:FC:59:1E:03:B5:01:BC:6A:72:A7:3C:87:4E X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:dc:12:5f:2b:56:ce:b4:a6:18:9f:09:eb:05:b9:a9:10:5b: 7f:41:f7:84:43:a9:f9:08:60:da:af:bf:59:c1:31:d0:1a:3a: e0:27:b9:d7:63:25:79:58:15:9e:a3:07:00:4c:b5:0a:7d:4a: 4b:d8:ab:97:d4:38:ec:b7:7f:17:ea:45:44:e7:9c:95:7c:2c: 8b:44:86:77:28:da:e3:a8:e4:e5:57:b5:a4:0d:f1:a3:7a:82: 71:64:85:8c:86:9d:7a:2f:bb:68:5f:81:44:31:4f:16:18:76: 65:00:67:d2:a2:c6:89:5d:6f:7f:b3:35:30:77:c3:84:26:db: 41:10:22:8f:2a:7a:7b:65:03:03:84:d6:96:c9:48:15:d0:eb: 91:32:4a:24:38:66:3b:33:14:7a:14:73:a0:fc:72:d8:fb:61: 3a:a2:d0:d7:dd:46:f7:67:1c:f1:27:7d:66:c2:7e:45:b0:1e: 8f:2c:89:79:ef:a0:f2:cf:74:12:34:e8:1d:e4:c5:07:88:d8: 4e:3a:6d:86:44:3a:3f:63:f9:cc:95:b0:15:a0:a6:8f:96:0c: 47:c5:fe:17:e2:48:98:8c:4c:56:6d:fc:da:62:0f:5d:e8:de: bc:75:1e:a1:bc:92:ad:9a:e1:ee:67:3a:8f:fc:dd:1c:42:82: 4a:62:c8:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3JnN5iawhK335f6AFaEbqO4h+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNjAzMjYwNDA2MTNaFw0yNjAzMjkxMjM3MTNaMDMxMTAvBgNV BAMTKDI5ODRCNkRCOTQ2Q0U1RkM1OTFFMDNCNTAxQkM2QTcyQTczQzg3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8xl7aa4CoH4YbiRw3b3q1cVyz dze/vGAO0rOckJbZ/jR3HOyH0+H3BMu6KC1SKFwW7i334rRBmC+EV2wpwQEEyqYN OW+rSqXVeEiK/os/4CMwvKgBU2ju+3qisUAqHj5g1gE5jjNNnV9EVJxVDMkewHYY 6Jo4tHCeIxo/YRlAums/g0SdoyPYetrkS4vOddOnbxAhaKnvFuzRxbCoYpINrunj WL/LvnHvtZ7sBpoex998gA3T+50dWx/+w/R/rabLh5PTemUUSSofUpSBsznxcg9n BqtJOSpOBPPcC8PxK/PcSOm9T0jt2kzL+Jt9eC0eKohZ0Leh30aNrgrl8lzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYS225Rs5fxZHgO1Abxqcqc8h04wHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLcEl8rVs60phifCesFuakQW39B94RDqfkI YNqvv1nBMdAaOuAnuddjJXlYFZ6jBwBMtQp9SkvYq5fUOOy3fxfqRUTnnJV8LItE hnco2uOo5OVXtaQN8aN6gnFkhYyGnXovu2hfgUQxTxYYdmUAZ9Kixoldb3+zNTB3 w4Qm20EQIo8qentlAwOE1pbJSBXQ65EySiQ4ZjszFHoUc6D8ctj7YTqi0NfdRvdn HPEnfWbCfkWwHo8siXnvoPLPdBI06B3kxQeI2E46bYZEOj9j+cyVsBWgpo+WDEfF /hfiSJiMTFZt/NpiD13o3rx1HqG8kq2a4e5nOo/83RxCgkpiyKA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:02 2026 by rpki-client