$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: 7uelPE583i54B/FjlgzUfCBA4bQvlBoh5gYEJTEljQc= Subject key identifier: 5E:15:9E:12:05:8E:3F:32:EE:56:6B:B5:D0:FB:71:29:A4:47:14:94 Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 29C09125E8CEC5D39314EA255B16365C23DBE0A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 0236 Signing time: Wed 25 Mar 2026 01:31:19 +0000 Manifest this update: Wed 25 Mar 2026 01:26:19 +0000 Manifest next update: Sat 28 Mar 2026 09:53:19 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: 77asK98Y6FwjqdnTI49OxJf732MTRMb0e9/FzCcCblc=) 3: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: reDE2xKpjiJgLhbTHdkd9eJppq/zOElwRB2BK4bdPG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c0:91:25:e8:ce:c5:d3:93:14:ea:25:5b:16:36:5c:23:db:e0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Mar 25 01:26:19 2026 GMT Not After : Mar 28 09:53:19 2026 GMT Subject: CN=5E159E12058E3F32EE566BB5D0FB7129A4471494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:26:12:89:f8:48:00:90:96:b7:8b:f2:3e:0b: de:37:46:8d:cb:fb:0a:d4:aa:86:85:51:c5:34:7b: 8c:4c:b4:15:f2:e4:ca:fc:fc:38:f6:c6:ee:eb:45: 0e:cd:5c:2b:74:8d:d8:36:bb:eb:69:85:11:3b:0b: 44:71:70:c6:75:d8:d5:27:0a:94:9d:b4:58:1a:fe: dd:38:57:9b:7d:fa:27:20:53:dd:08:a6:a1:e1:a7: ae:e1:26:c9:2c:be:c2:6b:4a:40:65:82:2c:38:1a: c0:dc:2c:4d:1e:f6:4a:3d:f9:c1:cc:57:a7:51:b9: 87:90:e6:17:8d:b2:f7:d3:a4:d1:3f:dd:e2:0a:93: 2d:d5:1e:81:67:4d:0d:00:c1:fa:52:05:7e:38:eb: 24:98:53:69:4b:3d:43:a6:0e:cb:43:d0:53:eb:bc: 2e:78:aa:9d:48:99:4b:8e:6e:ab:e8:8c:2f:ae:77: 6e:a8:41:b8:f1:86:e2:ae:ad:6a:45:4e:4b:e7:a9: 4f:28:bd:d7:05:5b:5e:69:a8:b1:b8:d0:37:11:bf: 3f:ce:77:35:e2:6d:c2:e3:a1:13:02:4c:64:df:5a: c0:8d:f1:8e:12:5a:89:b3:ab:1d:79:4e:ad:36:2e: e5:8e:fa:c8:cd:63:8b:72:59:cf:97:ce:c6:49:e0: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:15:9E:12:05:8E:3F:32:EE:56:6B:B5:D0:FB:71:29:A4:47:14:94 X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c1:0d:c2:11:a6:06:98:ea:44:36:7b:24:39:7e:8f:f8:7f: 4e:16:ae:83:86:b4:9e:a5:01:23:82:34:f9:60:35:8a:3b:41: 04:0a:f7:80:ee:dd:39:c8:03:3d:2f:58:04:5a:39:9e:39:d4: a5:98:f9:4a:63:d5:73:66:45:46:2a:32:2d:84:ec:69:ea:87: 1c:01:7a:46:a7:a1:9c:cf:5e:52:36:8d:10:72:95:c2:27:98: cd:59:b1:c4:fc:92:de:3b:d1:94:22:c4:83:f8:a5:2c:24:77: 54:86:b3:ae:d8:c3:08:97:34:de:e6:44:97:5a:1b:88:af:2d: 37:81:b4:d1:6f:27:eb:85:ae:20:28:61:cf:2e:ea:c1:26:83: d0:44:2f:5a:d1:19:42:5b:0a:fa:43:3c:c2:cc:2e:99:b6:46: 0c:46:b8:02:1b:c9:46:d8:2b:2f:2b:8b:c9:9d:21:d3:56:dc: d8:d9:f9:f8:30:a5:39:78:dd:8b:b1:a3:6b:d8:15:e8:82:aa: 46:f9:a9:65:8f:7a:1f:21:49:6f:27:3a:81:f4:e7:03:a9:e5: 79:b7:5e:8b:7f:f1:cc:ca:6f:bf:19:9c:04:32:f9:00:c1:eb: e6:b0:37:b7:f4:6a:e2:e9:20:3d:8f:6f:66:ca:b9:80:8a:0d: 7c:7b:d3:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcCRJejOxdOTFOolWxY2XCPb4KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNjAzMjUwMTI2MTlaFw0yNjAzMjgwOTUzMTlaMDMxMTAvBgNV BAMTKDVFMTU5RTEyMDU4RTNGMzJFRTU2NkJCNUQwRkI3MTI5QTQ0NzE0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJhKJ+EgAkJa3i/I+C943Ro3L +wrUqoaFUcU0e4xMtBXy5Mr8/Dj2xu7rRQ7NXCt0jdg2u+tphRE7C0RxcMZ12NUn CpSdtFga/t04V5t9+icgU90IpqHhp67hJsksvsJrSkBlgiw4GsDcLE0e9ko9+cHM V6dRuYeQ5heNsvfTpNE/3eIKky3VHoFnTQ0AwfpSBX446ySYU2lLPUOmDstD0FPr vC54qp1ImUuObqvojC+ud26oQbjxhuKurWpFTkvnqU8ovdcFW15pqLG40DcRvz/O dzXibcLjoRMCTGTfWsCN8Y4SWomzqx15Tq02LuWO+sjNY4tyWc+XzsZJ4JmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXhWeEgWOPzLuVmu10PtxKaRHFJQwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTBDcIRpgaY6kQ2eyQ5fo/4f04WroOGtJ6l ASOCNPlgNYo7QQQK94Du3TnIAz0vWARaOZ451KWY+Upj1XNmRUYqMi2E7GnqhxwB ekanoZzPXlI2jRBylcInmM1ZscT8kt470ZQixIP4pSwkd1SGs67YwwiXNN7mRJda G4ivLTeBtNFvJ+uFriAoYc8u6sEmg9BEL1rRGUJbCvpDPMLMLpm2RgxGuAIbyUbY Ky8ri8mdIdNW3NjZ+fgwpTl43Yuxo2vYFeiCqkb5qWWPeh8hSW8nOoH05wOp5Xm3 Xot/8czKb78ZnAQy+QDB6+awN7f0auLpID2Pb2bKuYCKDXx701k= -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:56 2026 by rpki-client