$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft File: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json) Hash identifier: h373qcfdFMRsaljVzeqEERmirc6s3ahIoMQrk2BYAXE= Subject key identifier: 49:84:70:DB:0E:4E:B4:03:83:57:26:51:0E:04:46:86:59:54:FB:66 Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Certificate serial: 6FAF94298D427567FFA7D61CF94C3B50DD482CA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 19:20:01 +0000 Manifest this update: Tue 24 Mar 2026 19:15:01 +0000 Manifest next update: Fri 27 Mar 2026 23:16:01 +0000 Files and hashes: 1: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=) 2: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=) 3: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=) 4: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=) 5: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=) 6: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=) 7: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=) 8: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=) 9: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=) 10: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: Fc8VJ2K1WSvg5VNCXZGLkCOZTmbFw8ZwrbHaExoiCmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:af:94:29:8d:42:75:67:ff:a7:d6:1c:f9:4c:3b:50:dd:48:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Validity Not Before: Mar 24 19:15:01 2026 GMT Not After : Mar 27 23:16:01 2026 GMT Subject: CN=498470DB0E4EB403835726510E0446865954FB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:19:92:c2:8c:1c:9b:d0:89:d3:6e:23:f8: b0:80:df:4a:47:7b:e2:e1:6a:46:ff:b2:27:03:4e: b1:d5:ed:b7:22:d3:46:33:3f:5d:90:34:21:a8:4e: 7a:0f:52:2d:37:e5:fe:d6:84:94:3a:46:60:f6:8f: a2:c6:36:05:36:a7:9c:7d:25:a9:73:71:24:c8:37: e3:e1:93:9e:ba:36:cc:03:53:99:95:17:8e:77:96: 83:43:52:64:45:09:1e:ef:5f:ff:0f:98:56:7b:01: 20:55:c1:c4:9c:7a:22:65:ee:7d:50:30:75:8b:f9: 1a:9a:c8:ea:8f:bf:f2:5b:78:49:1d:d2:f5:8f:71: 00:9c:5d:92:06:6a:b6:78:1d:1d:11:8f:26:eb:d8: de:35:a5:c4:b2:f5:d8:40:02:82:46:fa:8d:a8:31: fa:e8:2b:3b:05:a2:83:f5:43:a7:42:d3:dd:3c:fa: 32:fe:d8:55:82:77:bc:4f:70:c3:21:b6:90:00:53: 0b:e2:79:b2:6d:70:23:e9:e3:5f:5c:5a:f6:e3:01: 92:a7:17:cf:1a:14:ce:70:71:85:b5:14:1d:7c:cd: 31:52:e8:e3:7e:50:42:e5:9d:51:4c:e0:af:a3:f0: e9:c4:f7:55:87:72:ea:57:31:9c:15:87:49:7c:7e: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:84:70:DB:0E:4E:B4:03:83:57:26:51:0E:04:46:86:59:54:FB:66 X509v3 Authority Key Identifier: keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d6:7c:48:12:69:4a:62:73:63:9a:cd:a9:1a:a5:88:d7:a7: 8b:3b:82:dc:f7:c0:f3:62:c0:b0:ff:70:20:c2:61:e3:e2:2b: 08:43:8f:a8:e9:c3:7d:fd:91:eb:45:37:72:43:a2:d2:28:cc: 91:1a:03:75:66:31:43:9b:e5:93:1b:c8:c8:8a:27:35:20:56: 55:b4:86:2f:81:a5:72:25:ed:3f:98:17:02:18:74:ea:87:ef: 03:17:47:16:3f:37:b5:e0:c5:7a:10:a5:34:1a:2e:ac:9e:70: 0a:0f:e0:04:8e:11:f8:21:25:05:61:d1:e9:49:ac:7b:4f:94: 47:ec:d9:e7:52:d8:16:91:65:91:ad:6f:41:62:0f:14:ad:c8: d6:99:4d:6e:0d:8a:86:f3:3e:b6:41:ae:cc:e5:c7:11:99:1a: 48:78:61:e5:48:48:ea:04:26:f7:87:97:0d:48:fd:eb:74:ea: 15:b5:72:97:cd:ac:1a:b9:cb:4f:fa:5b:b2:3c:aa:91:ed:99: 9d:f3:a8:cc:2b:29:4e:52:c4:15:59:b4:c1:4c:38:0d:55:ee: 13:e2:c8:d0:66:13:c9:19:66:67:c8:16:b7:7d:a9:29:8c:19: af:3c:a4:90:f5:c6:39:9e:c6:3f:6d:32:37:13:4d:c9:62:07: 2e:3d:4e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6+UKY1CdWf/p9Yc+Uw7UN1ILKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1 REUwRUEwQzAeFw0yNjAzMjQxOTE1MDFaFw0yNjAzMjcyMzE2MDFaMDMxMTAvBgNV BAMTKDQ5ODQ3MERCMEU0RUI0MDM4MzU3MjY1MTBFMDQ0Njg2NTk1NEZCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZERmSwowcm9CJ024j+LCA30pH e+Lhakb/sicDTrHV7bci00YzP12QNCGoTnoPUi035f7WhJQ6RmD2j6LGNgU2p5x9 JalzcSTIN+Phk566NswDU5mVF453loNDUmRFCR7vX/8PmFZ7ASBVwcSceiJl7n1Q MHWL+RqayOqPv/JbeEkd0vWPcQCcXZIGarZ4HR0Rjybr2N41pcSy9dhAAoJG+o2o MfroKzsFooP1Q6dC0908+jL+2FWCd7xPcMMhtpAAUwviebJtcCPp419cWvbjAZKn F88aFM5wcYW1FB18zTFS6ON+UELlnVFM4K+j8OnE91WHcupXMZwVh0l8fpCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSYRw2w5OtAODVyZRDgRGhllU+2YwHwYDVR0j BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw RUEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy OTgtNWUzM2JlMWY4NjA0LzAvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3 OUU1REUwRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzWfEgSaUpic2OazakapYjXp4s7gtz3wPNi wLD/cCDCYePiKwhDj6jpw339ketFN3JDotIozJEaA3VmMUOb5ZMbyMiKJzUgVlW0 hi+BpXIl7T+YFwIYdOqH7wMXRxY/N7XgxXoQpTQaLqyecAoP4ASOEfghJQVh0elJ rHtPlEfs2edS2BaRZZGtb0FiDxStyNaZTW4NiobzPrZBrszlxxGZGkh4YeVISOoE JveHlw1I/et06hW1cpfNrBq5y0/6W7I8qpHtmZ3zqMwrKU5SxBVZtMFMOA1V7hPi yNBmE8kZZmfIFrd9qSmMGa88pJD1xjmexj9tMjcTTcliBy49TtQ= -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:27 2026 by rpki-client