$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: /Ni4yCkcVY+Dkrfs0SOlLDfE1KsD2HKtShFBorpoRQI= Subject key identifier: FD:C5:9C:AD:8D:88:72:12:DA:FF:91:B1:EF:D8:4B:4E:7C:1C:C4:22 Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 7326ABF4255050FACA95D8B7D4CA68E50A32A337 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: 0115 Signing time: Wed 25 Mar 2026 14:41:48 +0000 Manifest this update: Wed 25 Mar 2026 14:36:48 +0000 Manifest next update: Sat 28 Mar 2026 22:51:48 +0000 Files and hashes: 1: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=) 2: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=) 3: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: l/+a71zZbAwPEtqHnYg8b218NaWPPWiZ1ycg6tmtgbk=) 4: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:26:ab:f4:25:50:50:fa:ca:95:d8:b7:d4:ca:68:e5:0a:32:a3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Mar 25 14:36:48 2026 GMT Not After : Mar 28 22:51:48 2026 GMT Subject: CN=FDC59CAD8D887212DAFF91B1EFD84B4E7C1CC422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:22:74:e0:25:a8:9b:f3:bc:5c:36:ba:bd: 76:e1:5a:9d:62:ac:25:b8:4b:3d:17:9a:07:8e:72: 03:51:e1:0a:e8:c4:56:3b:c7:f1:d6:04:f9:4a:a0: d4:c9:25:c5:21:88:9c:88:93:01:86:b2:8b:eb:44: 96:3f:e2:e0:4e:6e:77:c8:95:bf:f2:81:6c:24:1f: 53:fa:be:1f:fd:5a:f8:30:7e:c5:b9:75:a6:9b:42: 02:96:37:f5:0d:02:8a:70:5a:19:13:e1:e8:56:b5: a2:38:c4:4f:1d:53:ea:84:ad:2d:18:ef:d6:d0:31: 50:e2:f7:e4:37:db:db:c9:fe:99:31:78:de:fc:72: 65:0b:43:71:7a:84:ab:93:09:5f:80:67:90:0a:9d: 21:5a:f9:63:e4:4e:c7:fb:b8:16:8c:08:84:6b:57: 77:10:1b:9c:25:2a:4d:b7:49:66:ef:a3:78:f6:4f: e1:35:85:7a:47:a8:83:69:5b:67:2b:a7:49:e8:c5: 10:32:83:35:ad:7d:14:00:b6:a6:bf:cf:91:ca:02: 27:1a:98:14:51:6e:d0:bc:5b:46:40:42:d5:26:7d: f6:88:d8:de:73:76:bd:1a:e0:de:e1:39:c2:7b:8b: 7e:66:6e:82:08:a0:6c:42:98:b3:32:c4:3d:4a:98: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C5:9C:AD:8D:88:72:12:DA:FF:91:B1:EF:D8:4B:4E:7C:1C:C4:22 X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:15:b0:87:e1:04:ba:55:6d:76:d8:c0:a1:7d:55:77:e6:45: 60:4b:58:95:fe:37:e5:ac:d2:38:a6:16:36:aa:a6:b7:3e:19: 08:d2:db:83:6c:2e:9a:db:bb:bf:d1:90:89:bd:9d:7b:36:b8: 91:d6:9a:30:6e:b9:cf:5f:57:b9:b4:5b:ec:6d:7a:d1:98:84: 34:8a:ca:25:b6:d2:d4:b1:04:d7:5f:a2:5d:45:c4:f7:41:b2: 4a:54:31:d9:62:78:de:c8:9f:43:23:dd:89:0d:68:cb:33:17: 11:09:19:28:a3:9a:82:6c:d2:13:5c:8f:08:9f:68:cf:da:d4: 01:e1:74:b7:0b:2e:0c:18:c1:e4:c9:28:93:af:ab:25:86:a3: cd:ae:72:24:28:aa:c2:57:f9:61:fa:80:27:2f:18:70:db:a6: 76:e1:86:4c:51:b8:af:f2:0f:dc:59:13:8a:ee:9a:43:fc:e7: a8:0c:cd:a7:4b:f3:c3:6d:fe:eb:0b:9b:92:a4:fc:30:e7:db: 33:4c:b5:2e:95:e7:c5:1e:a0:93:07:10:89:2c:60:83:a1:71: be:81:4f:ed:cb:87:aa:b8:c6:0f:b9:d5:f1:fe:46:70:cd:a1: 20:31:f9:67:30:30:ed:88:2d:b8:63:8c:c0:e1:73:93:85:a9: 53:d9:f9:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyar9CVQUPrKldi31Mpo5QoyozcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNjAzMjUxNDM2NDhaFw0yNjAzMjgyMjUxNDhaMDMxMTAvBgNV BAMTKEZEQzU5Q0FEOEQ4ODcyMTJEQUZGOTFCMUVGRDg0QjRFN0MxQ0M0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwCJ04CWom/O8XDa6vXbhWp1i rCW4Sz0XmgeOcgNR4QroxFY7x/HWBPlKoNTJJcUhiJyIkwGGsovrRJY/4uBObnfI lb/ygWwkH1P6vh/9WvgwfsW5daabQgKWN/UNAopwWhkT4ehWtaI4xE8dU+qErS0Y 79bQMVDi9+Q329vJ/pkxeN78cmULQ3F6hKuTCV+AZ5AKnSFa+WPkTsf7uBaMCIRr V3cQG5wlKk23SWbvo3j2T+E1hXpHqINpW2crp0noxRAygzWtfRQAtqa/z5HKAica mBRRbtC8W0ZAQtUmffaI2N5zdr0a4N7hOcJ7i35mboIIoGxCmLMyxD1KmMhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/cWcrY2IchLa/5Gx79hLTnwcxCIwHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8VsIfhBLpVbXbYwKF9VXfmRWBLWJX+N+Ws 0jimFjaqprc+GQjS24NsLprbu7/RkIm9nXs2uJHWmjBuuc9fV7m0W+xtetGYhDSK yiW20tSxBNdfol1FxPdBskpUMdlieN7In0Mj3YkNaMszFxEJGSijmoJs0hNcjwif aM/a1AHhdLcLLgwYweTJKJOvqyWGo82uciQoqsJX+WH6gCcvGHDbpnbhhkxRuK/y D9xZE4rumkP856gMzadL88Nt/usLm5Kk/DDn2zNMtS6V58UeoJMHEIksYIOhcb6B T+3Lh6q4xg+51fH+RnDNoSAx+WcwMO2ILbhjjMDhc5OFqVPZ+Uk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:24:55 2026 by rpki-client