$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: TU+KPRh2TmNpK7pN8f8ZhMhSY9lqWre9porzgSIj26c= Subject key identifier: D3:1E:05:41:03:8D:34:FB:7C:C1:2E:E1:AF:67:A3:34:66:C2:DD:B8 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 64551E936A86EDF0454CCB813EEC4E7FDB23AC18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0561 Signing time: Thu 19 Mar 2026 03:01:57 +0000 Manifest this update: Thu 19 Mar 2026 02:56:57 +0000 Manifest next update: Sun 22 Mar 2026 06:19:57 +0000 Files and hashes: 1: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: rGpgGVvcbVh7bxuj9F7G5CzYbAFrSFxMUYWsoLbxZYU=) 2: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: PR6tCmOpsN34UaTOcKKylyBUbEJHRGhqi70NsXysHs0=) 5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 06:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:55:1e:93:6a:86:ed:f0:45:4c:cb:81:3e:ec:4e:7f:db:23:ac:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Mar 19 02:56:57 2026 GMT Not After : Mar 22 06:19:57 2026 GMT Subject: CN=D31E0541038D34FB7CC12EE1AF67A33466C2DDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:ff:c9:29:6e:64:02:68:52:e0:74:53:7f: a0:de:b0:77:4d:f6:85:32:c2:fb:05:13:be:28:07: be:ad:68:0f:ef:b1:42:72:25:76:d7:39:96:ff:a0: 57:63:71:dd:a6:fe:9c:10:80:57:5e:60:88:dc:64: ec:87:52:d8:6c:a0:e5:45:13:86:4e:00:92:16:37: ce:3b:6f:b3:0f:7f:23:9a:05:a9:16:64:14:12:ba: 9f:a5:5a:46:67:6b:a7:db:cb:a9:4c:6c:07:57:c7: 89:ae:87:19:10:19:72:d0:07:c3:8a:47:4d:b1:f0: 5d:0b:fa:a9:35:21:de:a4:51:11:14:20:fe:fa:d2: 02:8e:f1:20:f4:5b:a0:42:d9:5e:78:54:e4:c2:a0: a6:6c:95:e9:9d:bd:57:03:ae:08:8e:f3:fb:5b:43: 57:59:f4:c4:3c:e8:6c:dd:7c:0f:20:65:55:76:19: 26:28:a9:78:91:9d:88:07:2e:3c:a9:ac:89:67:48: 22:51:2f:ae:a3:0d:12:6f:42:7e:2d:b8:a0:11:85: 6b:1e:40:32:9a:cb:8b:b6:4e:61:bd:f4:ec:b3:c5: 62:16:3a:56:7d:41:ca:b5:2a:bb:1a:6d:a5:66:79: 4d:7f:5d:18:49:47:22:b1:0b:8c:3c:e8:dc:77:f0: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1E:05:41:03:8D:34:FB:7C:C1:2E:E1:AF:67:A3:34:66:C2:DD:B8 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ee:6f:c9:94:ed:4f:7d:9b:49:0e:47:5f:a6:dd:41:e6:25: 48:36:0a:23:d0:38:74:56:dd:6e:37:ff:61:b2:7d:71:48:e1: 04:1e:73:ae:aa:f0:d6:cc:4f:af:a7:c4:67:16:17:4f:a8:5d: fd:24:fe:35:d2:aa:e2:4e:83:f7:85:f5:ac:60:73:04:79:01: 20:30:de:d6:07:8f:2f:1c:90:ee:06:9f:69:28:52:52:46:a2: b7:e6:d0:43:38:08:80:1c:88:b4:ad:bb:57:96:d4:0e:f6:06: 0c:2b:2d:4b:45:e8:0d:4b:b8:30:5d:8c:4d:bd:09:29:90:48: be:8e:fb:44:e9:99:d6:e2:ab:0c:91:c7:7a:b3:5e:ee:c0:56: 5f:a6:3e:42:b7:3e:8b:17:58:5f:a8:c2:af:21:1d:06:5f:c9: 98:51:c8:96:f1:af:93:57:a4:1e:05:d4:37:bd:1c:3f:67:a9: f4:07:a3:17:4c:36:f0:d2:1b:bc:0f:90:02:1c:c2:66:24:4c: 7a:ce:b6:f2:04:ff:f4:9c:c7:6b:9f:aa:58:81:b0:05:55:65: 7e:bc:bc:f6:3f:90:bc:6f:f4:1b:0a:5a:5f:dc:35:fe:69:07: 24:ed:0a:b0:3e:75:1a:c6:d8:9f:81:9b:65:9a:d7:7e:e6:86: c8:6c:79:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFUek2qG7fBFTMuBPuxOf9sjrBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNjAzMTkwMjU2NTdaFw0yNjAzMjIwNjE5NTdaMDMxMTAvBgNV BAMTKEQzMUUwNTQxMDM4RDM0RkI3Q0MxMkVFMUFGNjdBMzM0NjZDMkREQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CP/JKW5kAmhS4HRTf6DesHdN 9oUywvsFE74oB76taA/vsUJyJXbXOZb/oFdjcd2m/pwQgFdeYIjcZOyHUthsoOVF E4ZOAJIWN847b7MPfyOaBakWZBQSup+lWkZna6fby6lMbAdXx4muhxkQGXLQB8OK R02x8F0L+qk1Id6kUREUIP760gKO8SD0W6BC2V54VOTCoKZslemdvVcDrgiO8/tb Q1dZ9MQ86GzdfA8gZVV2GSYoqXiRnYgHLjyprIlnSCJRL66jDRJvQn4tuKARhWse QDKay4u2TmG99OyzxWIWOlZ9Qcq1KrsabaVmeU1/XRhJRyKxC4w86Nx38LhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0x4FQQONNPt8wS7hr2ejNGbC3bgwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPub8mU7U99m0kOR1+m3UHmJUg2CiPQOHRW 3W43/2GyfXFI4QQec66q8NbMT6+nxGcWF0+oXf0k/jXSquJOg/eF9axgcwR5ASAw 3tYHjy8ckO4Gn2koUlJGorfm0EM4CIAciLStu1eW1A72BgwrLUtF6A1LuDBdjE29 CSmQSL6O+0TpmdbiqwyRx3qzXu7AVl+mPkK3PosXWF+owq8hHQZfyZhRyJbxr5NX pB4F1De9HD9nqfQHoxdMNvDSG7wPkAIcwmYkTHrOtvIE//Scx2ufqliBsAVVZX68 vPY/kLxv9BsKWl/cNf5pByTtCrA+dRrG2J+Bm2Wa137mhshseUo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:28 2026 by rpki-client