$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: xwat+eZr2Csss7YTRjCO9Ou7515HZICry4y7nwhDKdc= Subject key identifier: 77:E0:24:9C:78:05:10:F6:70:A2:E1:B1:C1:98:BA:21:39:A8:9E:6F Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 47861D25BBF0FFDC40CE29C3AAAE856FA4E5ED0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 0263 Signing time: Thu 19 Mar 2026 19:41:45 +0000 Manifest this update: Thu 19 Mar 2026 19:36:45 +0000 Manifest next update: Mon 23 Mar 2026 06:41:45 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: QJHSht5GJtI7qEQnk/OwEcWLZGBbld33rt0C4bBOVnI=) 2: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: 6c1EwuD4JZq8QFfQ79hPwWv9Jx/MpQyohaK+0jMrywQ=) 3: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: EGwoINQVOI9gFtFuDWwGL5rRPIo++Hddw3luUUPg8Qw=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: HpXZ6Mb1GcnAb+11U+HXGOj36jg3/8aHSC+es16QFSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 06:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:86:1d:25:bb:f0:ff:dc:40:ce:29:c3:aa:ae:85:6f:a4:e5:ed:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Mar 19 19:36:45 2026 GMT Not After : Mar 23 06:41:45 2026 GMT Subject: CN=77E0249C780510F670A2E1B1C198BA2139A89E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:e0:ed:1c:23:6d:83:d0:2b:e4:78:98:0d: 09:d4:49:a7:0d:86:3c:34:81:2c:e2:5b:50:4d:99: 96:4e:c7:3d:2e:7f:0c:07:ea:41:da:11:5f:94:dd: 09:e9:e2:5e:a4:f7:92:b9:06:30:b6:7d:a8:71:3b: b6:55:1a:c2:02:18:b9:aa:9f:49:e2:7e:59:e4:d6: 69:d1:86:3b:3d:ec:96:7e:1d:4b:7a:46:af:7b:41: 60:a9:59:81:bd:ba:83:70:a8:c5:f2:8c:ea:34:1a: 8f:9b:a7:b6:84:be:78:c3:69:15:79:70:6b:46:2d: 5e:55:32:af:f3:95:7f:0a:77:d8:11:ff:b3:03:31: fc:f3:f4:2a:8a:98:c1:5e:2e:e4:dd:03:d5:50:c3: 9c:5b:f6:85:71:6a:78:2f:2d:0d:ec:12:bd:a9:1a: 22:5c:4c:31:ff:bf:4d:8c:a9:2a:54:c9:2e:39:56: 29:9f:a4:8c:aa:10:85:92:22:c8:a7:66:5f:bc:c8: 50:92:16:e7:91:af:cc:de:37:d5:a9:f4:5a:65:09: 3a:04:e8:6a:08:89:ca:ff:5b:09:ba:c9:2a:83:0c: 26:9c:73:74:f9:a5:18:51:2c:19:66:b4:41:af:27: e5:3b:23:55:e8:7f:39:fb:a3:c2:ca:45:d8:7e:aa: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E0:24:9C:78:05:10:F6:70:A2:E1:B1:C1:98:BA:21:39:A8:9E:6F X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f5:ea:2d:32:d7:74:fd:f2:8e:2f:0f:5f:db:e9:65:0b:7a: c0:6a:97:28:51:f3:a3:18:43:0e:5e:48:f3:d4:bc:f0:0a:c5: 1b:ad:af:81:30:45:4d:e1:b8:cb:47:6e:60:0a:a0:91:f0:65: 11:e3:b3:b5:70:82:53:03:94:59:e3:c1:83:f8:18:88:94:d0: 7d:53:22:9f:cc:55:12:7d:67:cf:c4:82:a3:70:08:ae:ed:22: 98:2c:fd:3f:71:18:15:be:8c:f9:c8:0a:50:3a:38:1d:d9:d3: 63:a3:d8:38:15:17:e7:12:bc:a5:d5:77:5e:ae:49:a9:b2:b7: df:c0:c1:0a:e7:ef:93:b1:3c:3d:e7:ac:db:02:a2:70:93:2d: 42:ba:84:ee:1b:23:fd:50:5b:2f:c8:4f:e4:ec:1b:d7:04:00: b7:89:83:31:66:c9:30:bc:fc:0c:de:c7:54:ae:1a:d4:fc:5d: b1:d3:6f:9a:78:9b:3f:ce:c8:c2:fd:b8:e4:1b:b5:9c:98:13: a9:7c:24:10:e0:d8:e0:74:bf:63:48:7e:8e:1a:0b:71:8b:6c: 53:3d:35:9a:9d:d3:16:3e:5c:66:03:81:bc:7a:8b:ab:46:2d: b9:a8:e4:1d:bd:22:d5:95:42:5e:8d:49:ac:9c:38:11:69:0d: eb:4c:6b:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4YdJbvw/9xAzinDqq6Fb6Tl7Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNjAzMTkxOTM2NDVaFw0yNjAzMjMwNjQxNDVaMDMxMTAvBgNV BAMTKDc3RTAyNDlDNzgwNTEwRjY3MEEyRTFCMUMxOThCQTIxMzlBODlFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LuDtHCNtg9Ar5HiYDQnUSacN hjw0gSziW1BNmZZOxz0ufwwH6kHaEV+U3Qnp4l6k95K5BjC2fahxO7ZVGsICGLmq n0niflnk1mnRhjs97JZ+HUt6Rq97QWCpWYG9uoNwqMXyjOo0Go+bp7aEvnjDaRV5 cGtGLV5VMq/zlX8Kd9gR/7MDMfzz9CqKmMFeLuTdA9VQw5xb9oVxangvLQ3sEr2p GiJcTDH/v02MqSpUyS45VimfpIyqEIWSIsinZl+8yFCSFueRr8zeN9Wp9FplCToE 6GoIicr/Wwm6ySqDDCacc3T5pRhRLBlmtEGvJ+U7I1Xofzn7o8LKRdh+qtxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd+AknHgFEPZwouGxwZi6ITmonm8wHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj16i0y13T98o4vD1/b6WULesBqlyhR86MY Qw5eSPPUvPAKxRutr4EwRU3huMtHbmAKoJHwZRHjs7VwglMDlFnjwYP4GIiU0H1T Ip/MVRJ9Z8/EgqNwCK7tIpgs/T9xGBW+jPnIClA6OB3Z02Oj2DgVF+cSvKXVd16u Samyt9/AwQrn75OxPD3nrNsConCTLUK6hO4bI/1QWy/IT+TsG9cEALeJgzFmyTC8 /Azex1SuGtT8XbHTb5p4mz/OyML9uOQbtZyYE6l8JBDg2OB0v2NIfo4aC3GLbFM9 NZqd0xY+XGYDgbx6i6tGLbmo5B29ItWVQl6NSaycOBFpDetMa7A= -----END CERTIFICATE-----Generated at Fri Mar 20 12:41:32 2026 by rpki-client