$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: 73JLGuw0kt+kEJTvMadwLCKvxOE4u7w511dltYnY22o= Subject key identifier: ED:D2:BD:3B:BD:5F:C2:6E:D1:94:38:D5:B9:47:AA:20:63:F2:D6:EC Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 53099BCD0D68EE17B42D2BCE13A7B5C241C65953 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 055C Signing time: Wed 18 Mar 2026 11:51:24 +0000 Manifest this update: Wed 18 Mar 2026 11:46:24 +0000 Manifest next update: Sat 21 Mar 2026 19:50:24 +0000 Files and hashes: 1: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: EA2Sl5WMtKICQdylXouL6OKPCulKqqH5HAUlEZwH2X8=) 2: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 3: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 4: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 5: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 19:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:09:9b:cd:0d:68:ee:17:b4:2d:2b:ce:13:a7:b5:c2:41:c6:59:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Mar 18 11:46:24 2026 GMT Not After : Mar 21 19:50:24 2026 GMT Subject: CN=EDD2BD3BBD5FC26ED19438D5B947AA2063F2D6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:fb:ba:2a:61:ea:c1:d9:84:56:d2:d5:0c: 53:9c:72:fd:18:5f:0f:c0:b7:e0:a0:6e:b4:0a:8b: 77:46:d7:b3:0c:0e:3f:2f:ae:fd:44:26:47:fb:4f: 50:70:72:45:70:e6:b0:0a:b7:32:75:f0:8e:22:85: d7:5c:1d:01:df:e5:7d:a8:be:27:40:7f:e5:4e:4f: 50:d9:f3:45:3f:6f:3f:87:b1:11:fb:66:78:2e:7b: e4:17:45:91:01:13:17:16:7d:7e:a5:56:b5:69:b5: c4:a8:3d:64:c9:63:aa:68:98:c8:14:46:8d:f1:c9: 86:10:ef:58:41:04:c7:88:eb:60:ec:01:a2:6d:c8: 05:a9:59:23:55:30:48:1f:6a:03:ef:ed:10:66:ae: 48:50:7e:ce:5d:97:76:6e:69:48:98:ba:9e:65:07: 83:76:8e:45:83:8f:53:a1:9f:09:21:ae:1d:68:e8: 04:44:10:93:82:76:be:61:df:02:3e:df:6a:33:b0: 58:be:4f:b0:da:c6:9c:0f:a2:89:3b:14:1e:14:6d: 00:32:81:71:4c:f8:67:c3:29:9c:ef:52:fa:0c:33: 80:a6:ce:d4:d6:8e:64:cd:4f:3f:41:a3:03:b9:69: ee:20:8b:f2:ea:fd:6c:7a:96:4a:2b:13:a8:94:61: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D2:BD:3B:BD:5F:C2:6E:D1:94:38:D5:B9:47:AA:20:63:F2:D6:EC X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cf:fa:e4:e3:65:2e:9e:df:01:d7:e4:d4:46:9a:17:93:c5: f0:45:38:cb:98:e3:eb:e3:20:5d:3a:16:f0:c6:96:47:f4:13: 81:11:64:28:ee:0f:74:c4:12:1b:2c:02:c7:c2:cb:09:50:62: 10:ca:97:53:a2:4e:c3:ed:bf:51:cb:24:b6:f4:27:39:61:34: d4:19:42:d1:68:ff:c7:62:3e:0b:cb:bc:b0:71:ff:6a:0f:be: 48:d8:09:f9:37:71:08:17:4d:f1:17:2d:5a:a5:02:d2:94:e5: 8d:94:9d:50:20:c4:a9:84:8b:48:e6:13:2b:98:5f:34:59:68: 3b:21:db:fb:72:b2:5d:71:ee:bf:5f:58:99:bf:3b:d9:82:d3: 26:cf:02:5d:d9:5e:b5:f5:1b:e6:00:7b:3d:f0:75:d8:bd:f8: e1:53:4f:e1:ed:05:65:17:90:5e:ef:9f:54:f6:0a:2f:75:9e: 21:22:73:93:f6:c3:e0:1d:dd:10:6a:ca:56:7a:a4:e1:28:9e: 2b:52:cb:09:f0:38:b0:54:53:cc:7c:8f:ab:37:6c:38:7b:ca: 01:25:19:ef:7a:69:4e:32:7e:ed:56:6c:fd:88:93:31:6d:19: 8b:70:93:cd:84:57:e0:6e:3e:32:76:c9:23:89:df:03:d1:66: 86:17:9e:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwmbzQ1o7he0LSvOE6e1wkHGWVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNjAzMTgxMTQ2MjRaFw0yNjAzMjExOTUwMjRaMDMxMTAvBgNV BAMTKEVERDJCRDNCQkQ1RkMyNkVEMTk0MzhENUI5NDdBQTIwNjNGMkQ2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKPu6KmHqwdmEVtLVDFOccv0Y Xw/At+CgbrQKi3dG17MMDj8vrv1EJkf7T1BwckVw5rAKtzJ18I4ihddcHQHf5X2o vidAf+VOT1DZ80U/bz+HsRH7Zngue+QXRZEBExcWfX6lVrVptcSoPWTJY6pomMgU Ro3xyYYQ71hBBMeI62DsAaJtyAWpWSNVMEgfagPv7RBmrkhQfs5dl3ZuaUiYup5l B4N2jkWDj1Ohnwkhrh1o6AREEJOCdr5h3wI+32ozsFi+T7DaxpwPook7FB4UbQAy gXFM+GfDKZzvUvoMM4CmztTWjmTNTz9BowO5ae4gi/Lq/Wx6lkorE6iUYfGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7dK9O71fwm7RlDjVuUeqIGPy1uwwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnP+uTjZS6e3wHX5NRGmheTxfBFOMuY4+vj IF06FvDGlkf0E4ERZCjuD3TEEhssAsfCywlQYhDKl1OiTsPtv1HLJLb0JzlhNNQZ QtFo/8diPgvLvLBx/2oPvkjYCfk3cQgXTfEXLVqlAtKU5Y2UnVAgxKmEi0jmEyuY XzRZaDsh2/tysl1x7r9fWJm/O9mC0ybPAl3ZXrX1G+YAez3wddi9+OFTT+HtBWUX kF7vn1T2Ci91niEic5P2w+Ad3RBqylZ6pOEonitSywnwOLBUU8x8j6s3bDh7ygEl Ge96aU4yfu1WbP2IkzFtGYtwk82EV+BuPjJ2ySOJ3wPRZoYXnt4= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:31 2026 by rpki-client