$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: i3EJdmImqWVtSYhs/MKijqKCirZCZ3m1hXW7HmYB4D0= Subject key identifier: 19:77:FD:72:03:82:5B:DC:55:2C:DA:59:50:A2:98:63:FD:6A:D4:0C Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 51701757A9D7DC28996A9F35E64C816F9C88AAE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 0238 Signing time: Thu 19 Mar 2026 12:01:54 +0000 Manifest this update: Thu 19 Mar 2026 11:56:54 +0000 Manifest next update: Sun 22 Mar 2026 20:09:54 +0000 Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: Vrmcu03T647sbP3GWEBBWylAAxqciaCOgVn/2H7+uB8=) 2: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: 8cX6tUGI3uBqFb4PivR5tUSFUQedfDUC5VBRvT5QIZM=) 3: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) 4: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) 5: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 20:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:70:17:57:a9:d7:dc:28:99:6a:9f:35:e6:4c:81:6f:9c:88:aa:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Mar 19 11:56:54 2026 GMT Not After : Mar 22 20:09:54 2026 GMT Subject: CN=1977FD7203825BDC552CDA5950A29863FD6AD40C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:c0:61:01:4e:e9:20:f7:0f:4e:db:8f:95: bc:75:cf:ef:33:c6:20:75:4e:27:7a:db:ec:a3:3e: 7b:21:4d:85:b6:08:55:19:6a:a9:e6:6f:f6:2e:dd: 74:cb:8e:3d:ff:11:21:92:b1:c7:99:54:bb:97:b7: 20:9b:bf:67:6d:3b:0c:5d:66:21:68:40:45:83:45: 8a:70:6f:15:ab:77:20:e4:2f:ba:3d:69:cd:3f:27: 56:19:72:8f:09:e2:54:b4:f6:ac:ab:9e:e5:e2:b3: 7f:1f:b3:04:c4:85:54:a4:88:1b:82:5d:79:4a:bd: a5:70:15:f9:23:11:ab:b7:8f:2a:7d:c8:bf:2e:ac: d9:aa:62:f1:ac:39:a6:ea:20:70:d8:55:a5:e5:97: f6:00:59:64:ba:f9:39:eb:9e:0a:e5:e0:64:68:97: 2d:61:d0:86:0b:6a:40:84:e8:5a:df:28:2f:84:ef: ec:a7:ef:1e:c5:c2:0e:a5:17:1b:69:81:74:59:ee: a9:e6:b2:32:db:2d:3a:64:1b:32:f6:e9:31:e6:8d: 8f:46:30:97:41:48:ae:34:54:f9:64:2c:f6:ac:86: df:3c:25:20:fc:6b:a2:11:07:d3:bc:a0:45:ec:13: 41:88:a4:9f:ca:9a:07:d8:ab:15:97:28:a5:f7:69: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:77:FD:72:03:82:5B:DC:55:2C:DA:59:50:A2:98:63:FD:6A:D4:0C X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4b:89:a6:a6:68:22:c8:ad:4a:4f:70:91:01:d4:79:74:7a: 96:30:7d:dc:aa:78:10:8d:47:a7:93:a2:9f:b3:c1:3b:66:7c: b1:bf:33:ea:03:2c:e5:15:34:1e:5d:62:94:d9:6b:db:5f:1e: de:97:6c:09:65:12:1d:e4:5b:e8:65:56:e9:a2:6b:13:ec:40: 2c:41:ea:e6:a0:5d:58:b4:a9:4e:86:18:f4:72:c5:8b:1a:c7: 2c:d9:77:34:4f:30:f0:64:0c:ee:92:26:aa:56:01:ea:c7:73: 70:af:f6:a1:4d:06:eb:a5:4f:fc:9f:ab:0e:d0:01:17:50:b1: d7:57:75:9e:75:c1:71:9e:2c:72:6e:58:b4:fa:f4:36:c9:aa: 68:19:79:ec:53:20:3a:0c:a5:90:f3:72:d7:d2:87:68:8d:ca: 85:7c:bd:52:8c:37:02:8a:7a:c4:bc:db:fd:31:b1:99:b2:61: 7c:20:a4:a1:db:ad:12:1b:69:5f:4f:17:5e:f2:5c:a0:59:8d: 5a:5e:85:59:e3:e6:54:eb:85:98:72:02:6a:fa:b7:33:b3:21: df:94:a1:ac:92:e4:7a:72:7f:f2:4e:7c:29:14:5c:e1:53:d9: 56:8f:1f:24:15:f9:c5:9c:5c:b3:a4:8b:72:aa:40:c2:f8:3c: fc:d8:70:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXAXV6nX3CiZap815kyBb5yIquIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNjAzMTkxMTU2NTRaFw0yNjAzMjIyMDA5NTRaMDMxMTAvBgNV BAMTKDE5NzdGRDcyMDM4MjVCREM1NTJDREE1OTUwQTI5ODYzRkQ2QUQ0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiM8BhAU7pIPcPTtuPlbx1z+8z xiB1Tid62+yjPnshTYW2CFUZaqnmb/Yu3XTLjj3/ESGSsceZVLuXtyCbv2dtOwxd ZiFoQEWDRYpwbxWrdyDkL7o9ac0/J1YZco8J4lS09qyrnuXis38fswTEhVSkiBuC XXlKvaVwFfkjEau3jyp9yL8urNmqYvGsOabqIHDYVaXll/YAWWS6+Tnrngrl4GRo ly1h0IYLakCE6FrfKC+E7+yn7x7Fwg6lFxtpgXRZ7qnmsjLbLTpkGzL26THmjY9G MJdBSK40VPlkLPasht88JSD8a6IRB9O8oEXsE0GIpJ/KmgfYqxWXKKX3aV2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXf9cgOCW9xVLNpZUKKYY/1q1AwwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERLiaamaCLIrUpPcJEB1Hl0epYwfdyqeBCN R6eTop+zwTtmfLG/M+oDLOUVNB5dYpTZa9tfHt6XbAllEh3kW+hlVumiaxPsQCxB 6uagXVi0qU6GGPRyxYsaxyzZdzRPMPBkDO6SJqpWAerHc3Cv9qFNBuulT/yfqw7Q ARdQsddXdZ51wXGeLHJuWLT69DbJqmgZeexTIDoMpZDzctfSh2iNyoV8vVKMNwKK esS82/0xsZmyYXwgpKHbrRIbaV9PF17yXKBZjVpehVnj5lTrhZhyAmr6tzOzId+U oayS5Hpyf/JOfCkUXOFT2VaPHyQV+cWcXLOki3KqQML4PPzYcIg= -----END CERTIFICATE-----Generated at Sat Mar 21 01:33:36 2026 by rpki-client