$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: Xiew8n0UFelrNkxJm5t1M1L4D1U5ZcJZ3QvwLsNHlUk= Subject key identifier: 01:BD:33:4E:B8:75:1A:F6:12:4C:E0:4C:B3:16:F8:C8:F5:84:6E:67 Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 335817A3B44411ED53A4AC0E275E150AC26618 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 01DA Signing time: Tue 24 Mar 2026 15:02:12 +0000 Manifest this update: Tue 24 Mar 2026 14:57:12 +0000 Manifest next update: Fri 27 Mar 2026 19:25:12 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: 4QQfBRG/zK6XTbFi6KwuP6iiwsFSqNAzi8B2JV+ch6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:58:17:a3:b4:44:11:ed:53:a4:ac:0e:27:5e:15:0a:c2:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Mar 24 14:57:12 2026 GMT Not After : Mar 27 19:25:12 2026 GMT Subject: CN=01BD334EB8751AF6124CE04CB316F8C8F5846E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:c4:7d:e9:a4:7e:3e:0e:fa:6a:ff:c1:83: 84:6f:cd:f8:5f:e1:86:b9:07:0c:db:bf:94:d4:e6: bd:19:45:ab:61:c2:ca:35:fa:6e:47:cd:44:82:66: 4f:84:b6:64:59:9c:4a:2c:d6:d5:c1:86:ad:64:0b: f6:1f:32:f7:a1:36:de:9b:03:cc:cd:cc:40:68:84: 8c:17:0e:01:75:9c:7f:79:e7:da:d5:34:8c:e7:fb: 74:a3:53:9c:73:71:1e:21:81:4c:f7:1d:e1:06:67: c6:16:15:d1:a4:59:fb:55:06:5b:23:50:27:f6:4e: 7e:6f:00:cc:7c:66:41:90:9b:7c:8d:2a:8d:33:c6: d9:65:44:3f:a2:60:b4:a6:05:c6:aa:48:e9:6e:dc: 0f:96:14:0c:e2:34:dc:78:e3:51:aa:f7:1b:8c:ac: cf:76:fb:e6:1a:84:59:5d:39:3e:94:4b:da:c6:95: 60:d5:df:67:e7:18:fa:19:6c:aa:a4:30:24:37:68: 21:04:4b:1c:ad:91:13:09:6d:31:bf:a4:6e:fe:68: ac:fc:7d:05:fd:65:1c:f4:5c:e0:51:05:9e:85:25: d7:fe:0e:bb:ed:d8:be:9a:eb:1a:b5:70:8a:71:19: 1a:aa:38:8f:30:37:63:b0:96:20:22:96:6f:80:19: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:33:4E:B8:75:1A:F6:12:4C:E0:4C:B3:16:F8:C8:F5:84:6E:67 X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8a:63:3c:a0:da:c2:48:6c:24:1a:87:55:9e:00:34:5b:f1: f4:27:c6:24:ae:df:80:99:27:9e:5d:60:43:20:35:a6:e1:ba: 46:26:70:ae:67:a7:b9:81:64:c2:29:fb:ff:51:b7:5b:2c:80: d1:41:a4:3a:04:d8:64:66:d8:5b:e6:d8:d3:ed:ca:a8:ae:70: 8c:d1:99:b7:d5:52:2d:65:52:8f:2b:f3:c4:69:f1:ba:4d:fd: 1e:ac:72:c2:1d:90:32:d4:d3:27:83:72:d2:16:82:60:a1:48: 5a:dc:7d:13:ff:78:b8:1b:9f:4b:af:6b:3c:8f:b2:ca:1b:50: 2f:d6:54:09:26:a6:8f:e1:aa:43:e8:82:a7:6c:90:91:e2:ff: 2b:37:23:e4:6a:f0:8a:c8:66:42:c1:31:3f:ac:dc:dd:f8:70: a1:2d:15:b1:2d:b1:3d:86:3e:62:4f:aa:c8:28:60:f6:3d:1e: 43:44:8e:3d:47:42:f2:34:f6:a9:18:4f:86:1c:fd:54:16:1b: 1c:55:c0:ae:9e:a2:85:3f:fa:9a:ff:56:d3:60:b6:28:6d:e8: 0c:6c:ab:b1:e2:54:aa:a6:cb:ec:d1:2f:a7:15:2d:9a:2b:97: 5c:aa:97:d1:78:3b:4a:bb:c4:86:76:b4:cb:a4:28:93:d9:43: d2:03:59:0a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITM1gXo7REEe1TpKwOJ14VCsJmGDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDNUE2MzAyRDgyOEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2 OEUwRTRGMB4XDTI2MDMyNDE0NTcxMloXDTI2MDMyNzE5MjUxMlowMzExMC8GA1UE AxMoMDFCRDMzNEVCODc1MUFGNjEyNENFMDRDQjMxNkY4QzhGNTg0NkU2NzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANmIxH3ppH4+Dvpq/8GDhG/N+F/h hrkHDNu/lNTmvRlFq2HCyjX6bkfNRIJmT4S2ZFmcSizW1cGGrWQL9h8y96E23psD zM3MQGiEjBcOAXWcf3nn2tU0jOf7dKNTnHNxHiGBTPcd4QZnxhYV0aRZ+1UGWyNQ J/ZOfm8AzHxmQZCbfI0qjTPG2WVEP6JgtKYFxqpI6W7cD5YUDOI03HjjUar3G4ys z3b75hqEWV05PpRL2saVYNXfZ+cY+hlsqqQwJDdoIQRLHK2REwltMb+kbv5orPx9 Bf1lHPRc4FEFnoUl1/4Ou+3YvprrGrVwinEZGqo4jzA3Y7CWICKWb4AZ5mECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQBvTNOuHUa9hJM4EyzFvjI9YRuZzAfBgNVHSME GDAWgBTFpjAtgors4fFKNbqPrP7rJo4OTzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Ni NDNmNzg2LTgyMzUtNGE5MC04YTA3LTVkZjljNmQ2NDQ0MC8wL0M1QTYzMDJEODI4 QUVDRTFGMTRBMzVCQThGQUNGRUVCMjY4RTBFNEYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DNUE2MzAyRDgyOEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUw RTRGLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9jYjQzZjc4Ni04MjM1LTRhOTAtOGEw Ny01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgyOEFFQ0UxRjE0QTM1QkE4RkFDRkVF QjI2OEUwRTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAWIpjPKDawkhsJBqHVZ4ANFvx9CfGJK7fgJkn nl1gQyA1puG6RiZwrmenuYFkwin7/1G3WyyA0UGkOgTYZGbYW+bY0+3KqK5wjNGZ t9VSLWVSjyvzxGnxuk39Hqxywh2QMtTTJ4Ny0haCYKFIWtx9E/94uBufS69rPI+y yhtQL9ZUCSamj+GqQ+iCp2yQkeL/Kzcj5GrwishmQsExP6zc3fhwoS0VsS2xPYY+ Yk+qyChg9j0eQ0SOPUdC8jT2qRhPhhz9VBYbHFXArp6ihT/6mv9W02C2KG3oDGyr seJUqqbL7NEvpxUtmiuXXKqX0Xg7SrvEhna0y6Qok9lD0gNZCg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:02 2026 by rpki-client