$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: wd9Tj2pEvBydYVJVltUYgJ2M1ghof2pUcKAQhf1AODM= Subject key identifier: 8A:F5:B7:0D:14:B7:DA:DB:C5:0D:1C:E6:F3:84:1D:4A:3C:92:B6:84 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 1B8C249FDFE94AEB2333D2EDB5902E82A8609D73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0174 Signing time: Thu 26 Mar 2026 00:10:43 +0000 Manifest this update: Thu 26 Mar 2026 00:05:43 +0000 Manifest next update: Sun 29 Mar 2026 07:44:43 +0000 Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=) 2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=) 4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: SviBju0noRohJQomcigOr3bZpDmU8BJe2DqQ21PBdTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8c:24:9f:df:e9:4a:eb:23:33:d2:ed:b5:90:2e:82:a8:60:9d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Mar 26 00:05:43 2026 GMT Not After : Mar 29 07:44:43 2026 GMT Subject: CN=8AF5B70D14B7DADBC50D1CE6F3841D4A3C92B684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:4b:84:73:d3:ad:20:cd:15:23:9e:7a:19: 30:43:f9:0e:dc:11:6a:db:ea:c9:11:30:69:46:7f: cb:d7:2f:e1:23:55:2f:81:8b:06:8d:36:37:85:7c: 63:6a:fb:97:7c:d0:3c:4f:30:b7:88:0e:a9:0b:57: f3:96:00:9d:73:cb:a2:e0:2d:38:3c:ff:ae:a4:2c: 7f:51:a8:ef:12:a8:3f:5a:44:6b:05:64:8b:8a:70: c4:28:92:19:3d:55:a4:5d:4f:af:6a:fd:3a:55:d4: 7e:54:63:de:81:0c:1f:49:b1:a3:6d:09:66:a9:45: 73:21:d4:78:c4:25:37:6e:2a:22:15:0b:35:7e:ee: 0a:1b:14:ad:ea:13:30:f1:42:c4:86:23:e5:90:39: 25:7f:af:b4:56:46:c9:62:1d:09:32:00:e8:c0:6f: 97:a3:ff:d5:cc:ec:99:34:98:a9:69:67:80:88:28: 9c:b0:5d:ce:81:e1:35:f8:5e:f4:54:a8:f2:df:fd: 3f:a4:48:64:e9:01:b6:49:d4:46:a3:c1:c2:d1:15: ba:1b:42:97:f1:be:d9:51:29:25:89:a7:6a:58:ee: 1c:75:ee:cf:d6:a3:b1:31:dd:06:d1:2b:69:17:cb: ad:80:31:68:ec:a1:5e:31:7a:33:0e:89:3f:e7:3c: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F5:B7:0D:14:B7:DA:DB:C5:0D:1C:E6:F3:84:1D:4A:3C:92:B6:84 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0e:e4:ee:0f:b3:e8:0a:bc:2f:0b:33:a0:71:14:5c:18:50: 39:b4:2a:cf:09:17:d4:27:7e:ee:8e:ec:06:47:28:2b:49:79: 79:f3:77:2f:6a:14:7f:b2:70:bc:7c:9d:e9:7b:9b:99:61:0a: d5:22:ec:f3:a5:f0:5c:a5:61:91:cd:dc:9f:28:48:cc:8b:fe: 92:5e:3e:58:4d:2b:21:30:05:8c:84:d0:a7:6a:16:06:2c:e2: 81:7e:2d:9a:cc:22:a7:08:7e:30:c8:04:c2:6b:f7:20:9a:04: 19:9b:1a:c5:d5:67:32:b9:82:64:3f:23:6a:37:87:ae:03:cf: 33:f5:57:b9:77:18:f3:73:1a:ca:d8:11:ac:a1:1f:23:84:d5: 2e:38:c9:58:b8:2f:75:1e:13:3a:10:c5:fd:13:f4:ac:c4:4f: 0c:46:8b:c9:f4:54:ef:c9:d8:fa:ec:6d:69:33:36:c8:c4:34: 06:6a:0c:03:b9:76:e9:61:8c:28:53:34:f9:bb:a4:74:79:c7: 00:f1:24:19:21:44:3b:0a:80:12:e0:46:1d:d0:65:76:9d:f0: 16:69:25:1a:bf:d2:6e:3d:7b:f6:6f:d7:6d:73:90:f6:af:a0: 38:43:33:b1:67:25:02:2d:05:c0:2c:02:35:11:d7:5b:e8:05: 0e:fd:77:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4wkn9/pSusjM9LttZAugqhgnXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNjAzMjYwMDA1NDNaFw0yNjAzMjkwNzQ0NDNaMDMxMTAvBgNV BAMTKDhBRjVCNzBEMTRCN0RBREJDNTBEMUNFNkYzODQxRDRBM0M5MkI2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjXkuEc9OtIM0VI556GTBD+Q7c EWrb6skRMGlGf8vXL+EjVS+BiwaNNjeFfGNq+5d80DxPMLeIDqkLV/OWAJ1zy6Lg LTg8/66kLH9RqO8SqD9aRGsFZIuKcMQokhk9VaRdT69q/TpV1H5UY96BDB9JsaNt CWapRXMh1HjEJTduKiIVCzV+7gobFK3qEzDxQsSGI+WQOSV/r7RWRsliHQkyAOjA b5ej/9XM7Jk0mKlpZ4CIKJywXc6B4TX4XvRUqPLf/T+kSGTpAbZJ1EajwcLRFbob QpfxvtlRKSWJp2pY7hx17s/Wo7Ex3QbRK2kXy62AMWjsoV4xejMOiT/nPOkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivW3DRS32tvFDRzm84QdSjyStoQwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIO5O4Ps+gKvC8LM6BxFFwYUDm0Ks8JF9Qn fu6O7AZHKCtJeXnzdy9qFH+ycLx8nel7m5lhCtUi7POl8FylYZHN3J8oSMyL/pJe PlhNKyEwBYyE0KdqFgYs4oF+LZrMIqcIfjDIBMJr9yCaBBmbGsXVZzK5gmQ/I2o3 h64DzzP1V7l3GPNzGsrYEayhHyOE1S44yVi4L3UeEzoQxf0T9KzETwxGi8n0VO/J 2PrsbWkzNsjENAZqDAO5dulhjChTNPm7pHR5xwDxJBkhRDsKgBLgRh3QZXad8BZp JRq/0m49e/Zv121zkPavoDhDM7FnJQItBcAsAjUR11voBQ79dyQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:45 2026 by rpki-client