$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: XEk96ED3pMcw/R7SiHjBgxiOj9uGEH5jo2xNXCvdddo= Subject key identifier: 1F:68:DF:B9:BC:A5:F9:98:4B:C5:3C:ED:99:BC:A7:75:79:16:B1:EF Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 28AAF40181CA3EB3A9A248B03BC63D78CA22ED4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 03A6 Signing time: Thu 26 Mar 2026 00:52:17 +0000 Manifest this update: Thu 26 Mar 2026 00:47:17 +0000 Manifest next update: Sun 29 Mar 2026 08:04:17 +0000 Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) 2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: im4BG/ry7IuzZ2DCPTV//77/KQ6DOGh15Hq6I7WRuRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:f4:01:81:ca:3e:b3:a9:a2:48:b0:3b:c6:3d:78:ca:22:ed:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Mar 26 00:47:17 2026 GMT Not After : Mar 29 08:04:17 2026 GMT Subject: CN=1F68DFB9BCA5F9984BC53CED99BCA7757916B1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:9d:61:6c:c5:38:bb:fc:c5:51:8e:15:fa: 3a:38:d7:7d:bc:45:7f:a2:64:25:3c:2e:c8:6f:71: 13:f1:fa:d0:c2:95:c6:37:84:88:d3:c3:ff:c8:ad: 2d:1a:d9:0c:7d:1a:ad:22:7b:3e:e2:ed:8c:93:23: eb:13:26:76:62:1d:46:e8:c6:69:e1:68:c6:7b:55: b3:84:80:fd:32:5a:bc:d2:6c:de:43:ce:fb:de:ad: 9d:29:96:04:11:79:a6:fa:54:a3:e6:f7:61:8b:47: c4:14:8a:92:1c:cf:72:38:4e:4e:c5:8d:c0:49:bf: 9b:38:36:85:68:65:f2:9f:57:2e:cf:51:63:75:85: d1:40:a8:f9:fb:ed:ee:98:57:fe:42:7b:b4:48:6d: d6:60:f5:bf:0a:fa:85:b6:98:98:b3:fe:96:a3:df: 23:9a:9a:35:6f:35:2c:f7:c4:22:2b:98:57:ae:05: 86:17:6b:a3:7c:17:a0:83:4d:ab:30:b4:51:4b:b6: 95:7c:0f:5f:98:2f:a4:ba:9e:28:07:fa:ee:28:84: d4:3d:8c:91:e5:c9:2a:e9:88:3f:41:5a:8e:62:5a: 98:df:bc:67:fa:90:37:87:97:b8:04:06:77:ed:db: a6:65:72:a4:e8:db:c6:34:f2:ba:aa:44:3e:6f:b8: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:68:DF:B9:BC:A5:F9:98:4B:C5:3C:ED:99:BC:A7:75:79:16:B1:EF X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:86:92:72:cd:4f:d7:d1:a2:e6:14:ce:08:3c:4b:f1:19:f7: 33:80:3c:f0:0b:47:98:b0:26:51:24:3b:b2:9d:b2:1d:5c:32: 9a:fc:75:85:ea:b3:03:1c:2c:93:1c:1f:aa:bf:1b:f1:c0:33: 73:99:2f:c5:c8:64:e3:5f:fd:d2:1b:1b:0f:61:8f:98:cb:df: 96:57:c5:3f:95:79:15:29:00:17:56:a3:86:78:60:0f:03:b0: 39:26:3a:03:b1:7b:ac:a4:66:28:78:63:8d:a8:e5:ec:f3:f1: 13:61:15:71:ec:34:e9:09:b4:20:24:5c:de:39:6b:bd:51:43: e8:ca:4d:70:a6:fd:9e:ae:97:ef:08:e2:96:7c:f0:2f:32:c5: 7d:2f:59:8f:42:21:32:7f:7b:86:ff:d4:5d:ee:f7:2c:58:b3: 12:a1:7c:56:7f:5d:4a:4e:f6:41:91:d2:79:89:43:33:78:bd: 0a:d3:e7:80:5c:40:a5:c0:46:f6:3e:e4:95:a9:0f:ce:60:fe: 5f:f1:46:7e:f9:cf:c8:e3:f3:54:86:c6:c0:e8:72:f9:e1:a3: 28:6b:58:f3:7f:89:8f:b6:13:ac:8b:ed:93:d0:18:76:13:88: 90:a9:fe:1e:39:c1:df:af:57:0b:bd:19:8c:3e:e6:41:60:a4: c5:ac:d3:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKr0AYHKPrOpokiwO8Y9eMoi7UowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNjAzMjYwMDQ3MTdaFw0yNjAzMjkwODA0MTdaMDMxMTAvBgNV BAMTKDFGNjhERkI5QkNBNUY5OTg0QkM1M0NFRDk5QkNBNzc1NzkxNkIxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bp1hbMU4u/zFUY4V+jo41328 RX+iZCU8LshvcRPx+tDClcY3hIjTw//IrS0a2Qx9Gq0iez7i7YyTI+sTJnZiHUbo xmnhaMZ7VbOEgP0yWrzSbN5DzvverZ0plgQReab6VKPm92GLR8QUipIcz3I4Tk7F jcBJv5s4NoVoZfKfVy7PUWN1hdFAqPn77e6YV/5Ce7RIbdZg9b8K+oW2mJiz/paj 3yOamjVvNSz3xCIrmFeuBYYXa6N8F6CDTaswtFFLtpV8D1+YL6S6nigH+u4ohNQ9 jJHlySrpiD9BWo5iWpjfvGf6kDeHl7gEBnft26ZlcqTo28Y08rqqRD5vuIlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH2jfubyl+ZhLxTztmbyndXkWse8wHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaGknLNT9fRouYUzgg8S/EZ9zOAPPALR5iw JlEkO7Kdsh1cMpr8dYXqswMcLJMcH6q/G/HAM3OZL8XIZONf/dIbGw9hj5jL35ZX xT+VeRUpABdWo4Z4YA8DsDkmOgOxe6ykZih4Y42o5ezz8RNhFXHsNOkJtCAkXN45 a71RQ+jKTXCm/Z6ul+8I4pZ88C8yxX0vWY9CITJ/e4b/1F3u9yxYsxKhfFZ/XUpO 9kGR0nmJQzN4vQrT54BcQKXARvY+5JWpD85g/l/xRn75z8jj81SGxsDocvnhoyhr WPN/iY+2E6yL7ZPQGHYTiJCp/h45wd+vVwu9GYw+5kFgpMWs048= -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:04 2026 by rpki-client