$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: HDvmVP+6tILq4fKoHPYR32iZL97Z3Snf+v3atypUIKI= Subject key identifier: FD:7A:C0:7D:D6:3F:E5:2C:BF:BF:9F:84:5D:67:DE:FE:85:9B:02:E1 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 03FA57740F03095A8844888138E748C97A6DCA11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 06:00:46 +0000 Manifest this update: Wed 25 Mar 2026 05:55:46 +0000 Manifest next update: Sat 28 Mar 2026 07:35:46 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 2: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 3: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 4: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: xrhQ8NUd35TDbHmr7zgldrOJSp3eCwsTZc8aBbVbKfo=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fa:57:74:0f:03:09:5a:88:44:88:81:38:e7:48:c9:7a:6d:ca:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Mar 25 05:55:46 2026 GMT Not After : Mar 28 07:35:46 2026 GMT Subject: CN=FD7AC07DD63FE52CBFBF9F845D67DEFE859B02E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:c2:5f:e9:b1:3e:dd:36:79:3e:a5:b1:ed: b7:35:c7:71:6d:3a:ff:f2:32:77:05:eb:02:b0:d6: 39:1b:88:54:1f:85:56:09:5d:c5:69:ff:77:e3:f4: 3d:f1:0f:91:3a:95:51:fa:a0:20:d3:70:ad:51:fe: 09:b4:f7:44:0a:91:93:a5:32:2b:ce:b4:c3:f5:79: a1:c6:57:54:55:a5:de:22:3e:32:31:20:9a:2b:f4: 93:b5:a7:61:35:63:63:d6:90:6e:7b:f9:e7:4e:fd: f5:e7:cb:72:e2:50:57:f0:93:01:ad:9c:39:7e:67: a8:f2:81:f8:43:c0:41:e1:ae:02:38:2d:b7:12:7e: 27:91:87:64:15:26:e8:97:c8:07:33:40:30:c1:ff: 41:1a:a1:1d:54:3f:bf:43:dd:c4:4d:d8:d7:d7:5d: a4:a1:e6:99:a2:4f:d7:7e:c8:b2:be:fa:f4:69:55: 1c:71:62:5b:27:d6:c0:1f:a0:a2:bc:59:56:f6:72: f0:9e:ab:e1:5e:ac:31:3d:fb:e5:15:e1:20:8a:d5: b4:95:21:c0:0d:f4:cb:a1:78:5b:b7:20:d7:14:ed: 36:01:7f:32:47:01:59:68:3b:e4:87:b5:2b:59:14: 2b:35:62:47:9e:60:26:1c:3c:5a:30:5e:14:bc:b3: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7A:C0:7D:D6:3F:E5:2C:BF:BF:9F:84:5D:67:DE:FE:85:9B:02:E1 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:86:94:6d:0a:6c:4a:92:b1:73:fe:6e:d9:e7:46:81:79:50: 60:07:d6:5a:84:73:44:07:d7:81:06:6e:ee:81:d8:1e:d7:dc: 37:02:a6:1b:bc:35:cd:10:a7:70:45:03:35:4d:34:b4:69:0a: c6:65:dc:47:85:57:fd:88:d7:02:c2:44:9c:48:f2:14:14:39: d8:56:04:68:38:fc:cf:4b:f3:d3:22:13:f8:64:c7:9a:7c:c0: d8:d0:0d:02:7e:d6:39:e7:f4:c3:9d:be:56:0d:99:51:02:d4: f4:7b:dc:1e:90:58:79:6a:93:d7:86:91:7f:04:d7:03:f1:32: d2:75:ff:58:06:f7:bb:35:6b:83:52:73:69:f1:ad:59:15:77: 90:c3:72:31:d5:28:32:f1:56:39:c1:e6:ea:52:73:f5:6b:5d: e5:c9:23:61:37:9f:29:fd:02:d6:62:f0:4e:3c:9c:a4:2b:87: e9:e2:82:a9:4a:7a:f6:1d:88:d4:29:c8:7c:5b:7d:02:02:a7: 23:77:c8:ca:fe:b8:88:2a:cb:50:04:f5:00:1b:f9:d5:3b:a3: 1d:cb:7a:f3:1d:e2:f9:11:3b:0d:bd:a6:b6:d8:ae:2d:7e:cf: 11:23:ee:7b:19:6c:40:db:63:7d:15:90:a1:fb:59:fb:66:ea: 50:f6:4c:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/pXdA8DCVqIRIiBOOdIyXptyhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNjAzMjUwNTU1NDZaFw0yNjAzMjgwNzM1NDZaMDMxMTAvBgNV BAMTKEZEN0FDMDdERDYzRkU1MkNCRkJGOUY4NDVENjdERUZFODU5QjAyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8msJf6bE+3TZ5PqWx7bc1x3Ft Ov/yMncF6wKw1jkbiFQfhVYJXcVp/3fj9D3xD5E6lVH6oCDTcK1R/gm090QKkZOl MivOtMP1eaHGV1RVpd4iPjIxIJor9JO1p2E1Y2PWkG57+edO/fXny3LiUFfwkwGt nDl+Z6jygfhDwEHhrgI4LbcSfieRh2QVJuiXyAczQDDB/0EaoR1UP79D3cRN2NfX XaSh5pmiT9d+yLK++vRpVRxxYlsn1sAfoKK8WVb2cvCeq+FerDE9++UV4SCK1bSV IcAN9MuheFu3INcU7TYBfzJHAVloO+SHtStZFCs1YkeeYCYcPFowXhS8s6lZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XrAfdY/5Sy/v5+EXWfe/oWbAuEwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqGlG0KbEqSsXP+btnnRoF5UGAH1lqEc0QH 14EGbu6B2B7X3DcCphu8Nc0Qp3BFAzVNNLRpCsZl3EeFV/2I1wLCRJxI8hQUOdhW BGg4/M9L89MiE/hkx5p8wNjQDQJ+1jnn9MOdvlYNmVEC1PR73B6QWHlqk9eGkX8E 1wPxMtJ1/1gG97s1a4NSc2nxrVkVd5DDcjHVKDLxVjnB5upSc/VrXeXJI2E3nyn9 AtZi8E48nKQrh+nigqlKevYdiNQpyHxbfQICpyN3yMr+uIgqy1AE9QAb+dU7ox3L evMd4vkROw29prbYri1+zxEj7nsZbEDbY30VkKH7Wftm6lD2TEE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:27:28 2026 by rpki-client