$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: QXAuGxuohNlVVoK7SmbOS0/5sjxzH3FsmdF8rk1su4o= Subject key identifier: CD:50:2F:FA:9F:D9:D1:FE:83:11:EC:A9:D7:54:8B:A1:B5:7F:EA:86 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 1F608F589FF03B32929986F3EBF647290C72BBA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: 0104 Signing time: Thu 26 Mar 2026 09:01:13 +0000 Manifest this update: Thu 26 Mar 2026 08:56:13 +0000 Manifest next update: Sun 29 Mar 2026 09:55:13 +0000 Files and hashes: 1: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) 2: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: cIVjMKwWIQy4b74i/2M64vxbT+nbDZGbew85MNPDZjs=) 3: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:60:8f:58:9f:f0:3b:32:92:99:86:f3:eb:f6:47:29:0c:72:bb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Mar 26 08:56:13 2026 GMT Not After : Mar 29 09:55:13 2026 GMT Subject: CN=CD502FFA9FD9D1FE8311ECA9D7548BA1B57FEA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:ec:c1:d6:28:3c:a6:4d:c9:06:b8:d2:46: 14:56:4a:19:9e:1c:75:11:1b:b9:83:17:3e:b6:c1: a5:0b:61:21:a9:f3:ac:73:a6:7f:fe:3e:fb:e6:4e: 4a:b5:28:63:50:fe:8b:b5:90:67:44:c9:16:de:2f: d4:c1:95:4d:06:77:89:8b:9a:a1:61:86:bd:69:4a: 1f:ca:b4:e5:ae:5a:cc:6d:de:24:a7:38:e2:45:36: 63:f0:7f:ef:2a:d9:f8:4c:fe:d4:c4:a2:d1:a0:af: dd:fa:ef:6e:5c:4f:a1:cb:f2:ec:21:19:ec:21:37: 2a:f9:0c:78:df:36:a8:e2:63:5b:d3:92:a3:e9:1c: 34:3f:92:33:dc:1c:db:5e:0e:54:a4:18:8a:b6:ff: 66:74:07:31:b6:7c:93:5e:4c:3d:c7:27:a0:df:8d: 2b:2d:d8:9b:ae:a1:7b:78:6a:6c:a9:71:07:00:54: 4f:78:a5:75:36:e2:6a:f6:3b:3a:2b:84:31:5f:df: 33:c9:ea:03:ff:16:d7:ff:84:1b:3e:6c:f6:3b:3a: f6:d0:96:09:86:f6:27:7b:12:40:45:82:f3:02:ff: 47:51:1d:d1:09:29:c0:ab:d5:dd:ed:46:52:be:a6: c9:12:a8:42:63:33:32:f0:a4:ca:e2:ad:c5:6e:bd: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:2F:FA:9F:D9:D1:FE:83:11:EC:A9:D7:54:8B:A1:B5:7F:EA:86 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:22:1e:e8:9d:b4:ad:8c:99:1e:38:d9:e1:71:df:d7:9b:13: b9:b9:02:9d:64:17:7e:27:0f:d8:3d:d3:b2:14:7c:7c:0e:84: 48:ad:a0:65:78:81:34:51:96:d0:af:ce:a7:26:b7:5a:64:0d: f2:22:9d:c5:cb:e4:99:05:3e:2a:7e:a4:c8:3c:d4:9f:b2:0c: 7b:4d:d1:98:99:83:24:d3:38:5b:7e:13:98:73:bd:e0:b3:9c: 8a:84:4d:51:9a:e5:de:58:4b:3f:89:86:eb:af:85:4d:1b:98: 78:65:d2:30:a2:79:b6:be:79:b9:36:77:ee:80:27:a4:b9:08: 50:8b:71:f3:46:d7:fa:87:10:48:71:c0:30:a2:53:3d:9b:e5: 3c:1d:04:73:07:d8:9f:eb:95:e6:90:ed:1b:ec:f9:33:ee:39: 37:10:f8:24:66:d4:08:72:2e:7d:29:2b:e9:28:08:07:7c:57: 7e:3b:e7:66:56:5b:ba:c6:e4:77:b8:ec:e0:51:a7:5c:82:eb: 53:50:37:02:4f:3a:21:dd:8b:fd:70:29:cb:52:06:ba:cf:7b: 51:2e:37:79:38:10:aa:2e:d1:b8:fa:a0:bb:36:9d:98:34:b1: d8:14:79:04:a4:e2:17:e0:ab:fb:c9:37:aa:47:e5:61:d2:2d: 88:05:7f:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2CPWJ/wOzKSmYbz6/ZHKQxyu6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNjAzMjYwODU2MTNaFw0yNjAzMjkwOTU1MTNaMDMxMTAvBgNV BAMTKENENTAyRkZBOUZEOUQxRkU4MzExRUNBOUQ3NTQ4QkExQjU3RkVBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7+zB1ig8pk3JBrjSRhRWShme HHURG7mDFz62waULYSGp86xzpn/+PvvmTkq1KGNQ/ou1kGdEyRbeL9TBlU0Gd4mL mqFhhr1pSh/KtOWuWsxt3iSnOOJFNmPwf+8q2fhM/tTEotGgr936725cT6HL8uwh GewhNyr5DHjfNqjiY1vTkqPpHDQ/kjPcHNteDlSkGIq2/2Z0BzG2fJNeTD3HJ6Df jSst2JuuoXt4amypcQcAVE94pXU24mr2OzorhDFf3zPJ6gP/Ftf/hBs+bPY7OvbQ lgmG9id7EkBFgvMC/0dRHdEJKcCr1d3tRlK+pskSqEJjMzLwpMrircVuvbvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVAv+p/Z0f6DEeyp11SLobV/6oYwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQiHuidtK2MmR442eFx39ebE7m5Ap1kF34n D9g907IUfHwOhEitoGV4gTRRltCvzqcmt1pkDfIincXL5JkFPip+pMg81J+yDHtN 0ZiZgyTTOFt+E5hzveCznIqETVGa5d5YSz+JhuuvhU0bmHhl0jCieba+ebk2d+6A J6S5CFCLcfNG1/qHEEhxwDCiUz2b5TwdBHMH2J/rleaQ7Rvs+TPuOTcQ+CRm1Ahy Ln0pK+koCAd8V34752ZWW7rG5He47OBRp1yC61NQNwJPOiHdi/1wKctSBrrPe1Eu N3k4EKou0bj6oLs2nZg0sdgUeQSk4hfgq/vJN6pH5WHSLYgFf9s= -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:57 2026 by rpki-client