$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: xKwfu/yWwBKd40XMnsErJlwwOFzAlzP+LOp7ijYu8AM= Subject key identifier: 75:7C:91:1D:1B:9F:6A:80:09:8C:DA:50:7A:24:78:47:0E:3B:0E:6D Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 25C8B96FB08B64A069C9C2EEB225335336C77363 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 0510 Signing time: Tue 17 Mar 2026 20:32:42 +0000 Manifest this update: Tue 17 Mar 2026 20:27:42 +0000 Manifest next update: Sat 21 Mar 2026 01:48:42 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) 2: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: sXVEyoTJGaNm6mjyqPa8VEHNyNQ8cO+kwRSro1kf7sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 01:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c8:b9:6f:b0:8b:64:a0:69:c9:c2:ee:b2:25:33:53:36:c7:73:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Mar 17 20:27:42 2026 GMT Not After : Mar 21 01:48:42 2026 GMT Subject: CN=757C911D1B9F6A80098CDA507A2478470E3B0E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:01:4f:3b:3d:7d:89:72:e0:1d:e5:22:ff: 2b:ef:03:5e:8e:8f:26:3d:1c:03:19:9b:99:c6:20: a8:97:f4:af:ea:71:cd:42:e0:93:6e:c5:a5:7c:be: 12:ef:62:f9:b4:5d:aa:71:27:0c:ea:46:55:5b:2a: cc:ae:ba:eb:d8:71:6a:e5:62:d5:2d:33:56:96:89: 8f:57:08:a3:8b:90:d0:1f:46:54:0f:40:d8:5d:c3: bc:a2:d1:0d:bf:4c:81:d2:20:b7:1c:81:e5:0e:01: 31:da:e8:1e:8f:4b:37:39:a3:0b:98:7e:e3:2d:0a: a0:91:90:1a:c1:4e:7f:fd:eb:96:db:ac:93:d0:c1: 80:5e:43:a3:fd:ff:e5:f0:96:82:45:b3:f9:db:2f: 26:e7:02:cc:83:92:00:b4:ab:cf:59:7b:c8:9e:e1: 1c:89:a6:42:d9:f3:4a:d0:4d:16:22:d4:9e:d2:60: 66:6c:a1:95:78:82:c6:ea:d6:e8:51:b2:5b:03:9a: b5:c4:af:94:a7:ac:63:88:1f:56:c6:74:da:e7:f8: cf:a5:96:0b:20:d4:f1:4e:8f:66:9e:7f:db:b5:83: 5f:8e:1d:e3:2d:f7:31:a1:27:89:c6:0e:14:0a:fe: 7b:0b:d5:22:8b:2a:90:40:4b:f5:91:ea:ce:0b:74: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7C:91:1D:1B:9F:6A:80:09:8C:DA:50:7A:24:78:47:0E:3B:0E:6D X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b5:32:87:a1:1b:57:c3:47:bb:45:e8:a3:63:09:c9:86:a2: 9d:66:15:06:9f:cd:90:8d:16:7e:20:44:0e:71:b1:aa:b1:ae: 62:37:70:b2:29:10:6e:f3:15:b8:8e:0e:3a:88:ee:e2:42:28: 59:06:4b:5a:bf:9a:36:e7:43:50:ec:61:23:2f:18:93:c1:00: 09:a1:1b:c3:d7:55:36:3e:cf:c5:53:a0:ac:89:ae:75:05:7a: 6d:ef:e6:bf:6b:65:34:c6:46:56:5e:4f:d6:bd:01:f8:d6:61: 90:af:65:c8:67:d6:ce:ab:81:9b:7a:86:58:6d:81:a2:66:c8: 0b:73:8f:fd:4d:d8:60:66:40:46:2b:2b:6e:2b:13:74:e5:31: 2f:3d:13:7a:84:48:83:00:4c:c4:0a:8b:54:ee:ad:42:ab:8a: b9:4d:fe:bc:ea:8a:04:df:3d:0e:93:f0:d8:1c:27:79:ab:8a: 3b:72:06:4a:5c:26:90:a7:4b:a9:53:01:d5:32:24:26:0d:f9: 51:14:ac:f1:4d:f6:b8:04:b7:f2:9b:52:46:db:b1:af:ed:62: 05:a3:8c:5b:7d:8f:5a:87:94:bf:2f:bb:cd:f0:2c:95:d8:20: ac:ee:fb:fc:b9:14:b0:5c:9f:e7:6e:d8:cc:48:2a:27:35:54: 05:4e:b4:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJci5b7CLZKBpycLusiUzUzbHc2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNjAzMTcyMDI3NDJaFw0yNjAzMjEwMTQ4NDJaMDMxMTAvBgNV BAMTKDc1N0M5MTFEMUI5RjZBODAwOThDREE1MDdBMjQ3ODQ3MEUzQjBFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAwFPOz19iXLgHeUi/yvvA16O jyY9HAMZm5nGIKiX9K/qcc1C4JNuxaV8vhLvYvm0XapxJwzqRlVbKsyuuuvYcWrl YtUtM1aWiY9XCKOLkNAfRlQPQNhdw7yi0Q2/TIHSILccgeUOATHa6B6PSzc5owuY fuMtCqCRkBrBTn/965bbrJPQwYBeQ6P9/+XwloJFs/nbLybnAsyDkgC0q89Ze8ie 4RyJpkLZ80rQTRYi1J7SYGZsoZV4gsbq1uhRslsDmrXEr5SnrGOIH1bGdNrn+M+l lgsg1PFOj2aef9u1g1+OHeMt9zGhJ4nGDhQK/nsL1SKLKpBAS/WR6s4LdPPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdXyRHRufaoAJjNpQeiR4Rw47Dm0wHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIK1MoehG1fDR7tF6KNjCcmGop1mFQafzZCN Fn4gRA5xsaqxrmI3cLIpEG7zFbiODjqI7uJCKFkGS1q/mjbnQ1DsYSMvGJPBAAmh G8PXVTY+z8VToKyJrnUFem3v5r9rZTTGRlZeT9a9AfjWYZCvZchn1s6rgZt6hlht gaJmyAtzj/1N2GBmQEYrK24rE3TlMS89E3qESIMATMQKi1TurUKrirlN/rzqigTf PQ6T8NgcJ3mrijtyBkpcJpCnS6lTAdUyJCYN+VEUrPFN9rgEt/KbUkbbsa/tYgWj jFt9j1qHlL8vu83wLJXYIKzu+/y5FLBcn+du2MxIKic1VAVOtDY= -----END CERTIFICATE-----Generated at Thu Mar 19 09:59:28 2026 by rpki-client