$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json) Hash identifier: 8NvoTaNPSASmq5APCUazIN9gibAedl2G5FRFEBvF8l4= Subject key identifier: F9:B7:7B:A5:69:DA:0C:8E:03:11:57:AD:0E:99:AB:B8:A0:E8:05:FF Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Certificate serial: 13EFA7379EDE33197A0C59CAA5BCFC84BCD6A205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft Manifest number: 012E Signing time: Wed 25 Mar 2026 13:01:10 +0000 Manifest this update: Wed 25 Mar 2026 12:56:10 +0000 Manifest next update: Sat 28 Mar 2026 20:05:10 +0000 Files and hashes: 1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: kg0hS5WVmmpYRWbdfL7SGsHNbdnD8NF+clSnWXU7jw0=) 2: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: LqU+buv/p8gKGmfwOQBpwGrYmydSWwhfqpNRT3zh6r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ef:a7:37:9e:de:33:19:7a:0c:59:ca:a5:bc:fc:84:bc:d6:a2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Validity Not Before: Mar 25 12:56:10 2026 GMT Not After : Mar 28 20:05:10 2026 GMT Subject: CN=F9B77BA569DA0C8E031157AD0E99ABB8A0E805FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:13:bc:26:3b:48:1b:cd:8f:03:fc:71:ce: 0c:b1:e3:ef:05:e9:f1:d1:f2:75:5d:ca:67:cf:10: d9:da:cd:bc:01:e8:00:d6:c3:41:14:ab:6a:0b:24: 59:c4:a4:fe:a6:51:b4:52:dd:f3:07:eb:29:d0:38: fb:6e:e0:73:2e:bc:46:aa:f6:70:61:5e:ba:2a:29: eb:0a:da:b8:08:0c:48:1f:e5:8d:dc:b6:2b:0f:25: 71:a4:67:22:31:e1:93:a3:44:70:08:6e:50:83:03: 8a:d9:60:56:26:79:e8:fa:dd:05:e2:f0:ec:7c:2c: 56:74:23:dc:7b:d9:7b:f3:a2:a1:34:bc:1a:d8:06: 19:d0:f8:28:aa:ba:c6:27:54:4b:17:1b:5d:f2:3b: 3c:3b:e5:65:51:94:50:39:f9:9f:45:73:b4:54:9f: 4c:82:a2:bb:f6:4c:8b:8c:bb:3a:94:0c:2b:35:86: b7:fa:82:02:83:8f:ba:8d:79:75:e3:4c:e0:c3:03: a4:96:4d:72:a1:0b:fa:b7:ac:00:7e:7a:0e:1c:b4: b0:23:bb:06:df:bc:77:e6:fc:89:96:99:c9:9e:3a: 7b:8d:7d:b5:c3:38:0b:ef:6e:23:92:63:54:ff:c5: 35:e1:7d:fe:04:1c:a4:18:5c:12:75:f5:10:a2:78: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B7:7B:A5:69:DA:0C:8E:03:11:57:AD:0E:99:AB:B8:A0:E8:05:FF X509v3 Authority Key Identifier: keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:41:bb:22:d7:36:78:08:55:73:30:f2:7b:84:93:b0:9d:22: f4:8c:63:bf:9d:fb:5d:56:4f:25:3d:05:94:ac:6d:cc:52:d0: e4:1b:7a:93:b6:65:c4:12:9a:85:b5:13:39:ea:69:82:65:6a: 44:66:9c:43:77:2b:19:2a:db:b7:d7:66:1c:70:a3:6c:aa:6f: cb:75:b0:6b:82:17:9f:6b:d7:5d:81:c4:af:66:17:15:3e:63: 67:2d:7d:7d:7b:ac:9c:16:29:af:0a:a3:f6:2d:a5:8c:85:d2: 5b:4a:2c:84:f2:24:0d:00:60:3e:09:9f:b3:62:32:3f:59:4c: 5f:ca:ca:c6:44:b0:a5:17:f4:d2:78:53:c0:92:16:a3:a1:b0: 07:8c:52:88:06:06:30:84:22:4c:5d:e8:8b:68:55:7a:1a:be: 0d:94:cd:9b:25:45:dd:89:7f:ee:34:57:91:9b:82:4d:b3:bc: 73:a5:00:92:ea:b5:ad:fc:1a:b0:a2:4f:74:4f:c6:a7:5c:3a: 50:df:9c:dd:32:d9:1b:6c:f9:e7:73:38:ce:8d:82:ad:ad:85: 6d:bc:c5:1d:31:f0:44:b5:43:8e:d8:4a:81:8b:02:cd:64:95: bc:39:8f:9b:dc:bb:35:ec:02:46:27:e0:bf:26:ba:86:34:41: a1:18:37:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE++nN57eMxl6DFnKpbz8hLzWogUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE NEE5ODRFQjAeFw0yNjAzMjUxMjU2MTBaFw0yNjAzMjgyMDA1MTBaMDMxMTAvBgNV BAMTKEY5Qjc3QkE1NjlEQTBDOEUwMzExNTdBRDBFOTlBQkI4QTBFODA1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKRO8JjtIG82PA/xxzgyx4+8F 6fHR8nVdymfPENnazbwB6ADWw0EUq2oLJFnEpP6mUbRS3fMH6ynQOPtu4HMuvEaq 9nBhXroqKesK2rgIDEgf5Y3ctisPJXGkZyIx4ZOjRHAIblCDA4rZYFYmeej63QXi 8Ox8LFZ0I9x72XvzoqE0vBrYBhnQ+CiqusYnVEsXG13yOzw75WVRlFA5+Z9Fc7RU n0yCorv2TIuMuzqUDCs1hrf6ggKDj7qNeXXjTODDA6SWTXKhC/q3rAB+eg4ctLAj uwbfvHfm/ImWmcmeOnuNfbXDOAvvbiOSY1T/xTXhff4EHKQYXBJ19RCieAgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+bd7pWnaDI4DEVetDpmruKDoBf8wHwYDVR0j BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5 ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdBuyLXNngIVXMw8nuEk7CdIvSMY7+d+11W TyU9BZSsbcxS0OQbepO2ZcQSmoW1EznqaYJlakRmnEN3Kxkq27fXZhxwo2yqb8t1 sGuCF59r112BxK9mFxU+Y2ctfX17rJwWKa8Ko/YtpYyF0ltKLITyJA0AYD4Jn7Ni Mj9ZTF/KysZEsKUX9NJ4U8CSFqOhsAeMUogGBjCEIkxd6ItoVXoavg2UzZslRd2J f+40V5Gbgk2zvHOlAJLqta38GrCiT3RPxqdcOlDfnN0y2Rts+edzOM6Ngq2thW28 xR0x8ES1Q47YSoGLAs1klbw5j5vcuzXsAkYn4L8muoY0QaEYN3A= -----END CERTIFICATE-----Generated at Fri Mar 27 00:34:45 2026 by rpki-client