$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: 1+2JXLLNE0WdD9uyOq6P64tMrjtVq6p9zY8p1wC9DPQ= Subject key identifier: 9D:C1:90:94:46:7B:61:E3:38:0E:AA:9B:78:2F:5D:4C:A4:F4:7C:F6 Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: 2FCD453CF69CCEE7477C671ADB1975F42E6170F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: 015E Signing time: Tue 24 Mar 2026 16:51:40 +0000 Manifest this update: Tue 24 Mar 2026 16:46:40 +0000 Manifest next update: Fri 27 Mar 2026 19:11:40 +0000 Files and hashes: 1: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: 8xfRx9MZGkH92Zff8J4Nr3OmwGLb5AXht8a/SjIeEKY=) 2: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: mpA7r4n5AsM3pCamORvl0shKqIyo/JWeKgRAvasmRM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cd:45:3c:f6:9c:ce:e7:47:7c:67:1a:db:19:75:f4:2e:61:70:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Mar 24 16:46:40 2026 GMT Not After : Mar 27 19:11:40 2026 GMT Subject: CN=9DC19094467B61E3380EAA9B782F5D4CA4F47CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:0b:89:a6:87:70:40:29:ec:41:23:9d:47: c6:48:86:e6:d0:d0:b5:41:bb:41:fb:65:64:4b:16: 78:44:d6:69:62:b2:74:03:54:fa:40:33:8b:39:05: 11:28:38:47:27:71:d8:6a:0e:5f:48:47:69:63:7e: f3:a3:88:b8:c9:a1:12:77:5a:5f:58:ba:10:0e:96: c5:9b:35:27:7a:e5:29:b0:4c:bf:4c:7e:4c:76:cd: f9:c1:7f:fb:d4:71:51:06:0e:6d:db:37:5a:44:aa: 3b:98:3b:cf:74:91:36:25:92:b6:ca:59:37:5e:48: c9:97:64:6d:50:d6:f5:0d:c7:65:26:70:b0:1a:12: 33:99:c6:df:53:6b:74:c7:06:c7:a1:f3:a0:d0:81: ad:39:6d:d1:30:ee:e2:b5:6b:84:0d:65:a0:da:88: 1b:04:9b:c5:d0:79:8b:ce:3b:66:a2:03:8a:cf:eb: bd:81:e3:98:97:83:1b:db:74:7a:7b:88:3c:0d:79: fc:9b:e5:1c:ee:2c:be:fb:0d:8c:e4:e4:48:6a:be: 69:7d:7e:51:54:dc:f5:8a:a0:3a:6d:d3:38:89:87: c3:7e:ab:a8:20:80:64:39:4a:9d:5a:b2:b9:e1:17: 82:ce:ee:04:c8:f5:13:86:96:86:62:78:b6:2f:ca: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C1:90:94:46:7B:61:E3:38:0E:AA:9B:78:2F:5D:4C:A4:F4:7C:F6 X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:68:90:ae:f4:41:fc:f6:42:9d:6b:30:73:f6:e4:1c:7b:95: 10:a9:38:f4:fd:76:b1:9d:6b:f3:8b:e0:2d:82:82:fc:df:65: 35:99:6a:1d:07:3d:52:25:04:50:c9:47:31:71:b7:7b:7b:dc: e2:de:a3:ff:13:73:1e:90:d0:20:8c:3a:75:aa:aa:f1:c7:6b: a6:54:fa:a4:a5:61:79:89:88:61:12:1d:d2:f0:1e:f4:ef:9e: 97:4a:bb:84:e5:9e:ed:b9:72:5d:20:d2:6f:cf:fc:c2:79:54: 32:76:51:64:56:bb:b6:b1:12:30:21:df:c2:57:fa:42:30:0d: eb:d1:31:93:72:cd:b2:c6:7e:b5:63:63:ec:16:dc:8c:9a:75: 98:57:01:92:7d:50:ed:93:ad:89:58:b3:c7:f3:c7:ec:48:03: 10:8d:16:55:66:d4:ac:e2:53:e4:8a:89:29:a4:49:7c:3b:af: 86:69:fd:c2:bd:5f:86:82:3f:6c:24:9c:61:c5:52:a2:d8:ce: d0:c9:ff:ed:95:e9:39:de:76:a8:b5:f1:38:03:c8:e2:16:18: b9:b0:6c:e5:00:b9:8f:45:60:11:03:3a:ac:56:06:c1:84:50: 00:ed:f6:24:18:6d:72:c3:0c:c1:2b:59:ee:a3:8d:8e:e5:f4: 3b:6a:f4:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL81FPPaczudHfGca2xl19C5hcPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNjAzMjQxNjQ2NDBaFw0yNjAzMjcxOTExNDBaMDMxMTAvBgNV BAMTKDlEQzE5MDk0NDY3QjYxRTMzODBFQUE5Qjc4MkY1RDRDQTRGNDdDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzAuJpodwQCnsQSOdR8ZIhubQ 0LVBu0H7ZWRLFnhE1mlisnQDVPpAM4s5BREoOEcncdhqDl9IR2ljfvOjiLjJoRJ3 Wl9YuhAOlsWbNSd65SmwTL9Mfkx2zfnBf/vUcVEGDm3bN1pEqjuYO890kTYlkrbK WTdeSMmXZG1Q1vUNx2UmcLAaEjOZxt9Ta3THBseh86DQga05bdEw7uK1a4QNZaDa iBsEm8XQeYvOO2aiA4rP672B45iXgxvbdHp7iDwNefyb5RzuLL77DYzk5Ehqvml9 flFU3PWKoDpt0ziJh8N+q6gggGQ5Sp1asrnhF4LO7gTI9ROGloZieLYvytMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUncGQlEZ7YeM4DqqbeC9dTKT0fPYwHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5okK70Qfz2Qp1rMHP25Bx7lRCpOPT9drGd a/OL4C2CgvzfZTWZah0HPVIlBFDJRzFxt3t73OLeo/8Tcx6Q0CCMOnWqqvHHa6ZU +qSlYXmJiGESHdLwHvTvnpdKu4Tlnu25cl0g0m/P/MJ5VDJ2UWRWu7axEjAh38JX +kIwDevRMZNyzbLGfrVjY+wW3IyadZhXAZJ9UO2TrYlYs8fzx+xIAxCNFlVm1Kzi U+SKiSmkSXw7r4Zp/cK9X4aCP2wknGHFUqLYztDJ/+2V6Tnedqi18TgDyOIWGLmw bOUAuY9FYBEDOqxWBsGEUADt9iQYbXLDDMErWe6jjY7l9Dtq9FQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:23 2026 by rpki-client