$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: 1p4cvizHWDWafZXcurmBC+RKk2nO9Ohwsn4EBL1qpc0= Subject key identifier: 26:C4:E7:87:09:BC:11:5D:D3:80:20:9C:5C:EE:CD:1B:5A:D4:DF:FD Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 386ACF6E7EB0057AC7674D90D221938486DFFC89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 029E Signing time: Sun 05 Apr 2026 08:21:41 +0000 Manifest this update: Sun 05 Apr 2026 08:16:41 +0000 Manifest next update: Wed 08 Apr 2026 13:00:41 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=) 2: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: h+aPzPW6qsn9vI4g+UYVNobnSpxJh/OAfE3lBp0tSoA=) 3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: YGbtlM42GpeXJWwNS5HnaEAi9mnZKsNiOe/sp7sIMh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6a:cf:6e:7e:b0:05:7a:c7:67:4d:90:d2:21:93:84:86:df:fc:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Apr 5 08:16:41 2026 GMT Not After : Apr 8 13:00:41 2026 GMT Subject: CN=26C4E78709BC115DD380209C5CEECD1B5AD4DFFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:93:fb:16:69:df:e2:d4:e4:fd:a7:ea:0c: 1a:65:75:89:8c:49:bf:39:9b:d9:9b:c4:83:80:62: 96:2c:b0:4d:f1:27:8b:7f:33:e4:1c:3e:fa:4e:61: b2:2d:41:a5:4e:fe:ce:97:c7:d5:cd:c8:1e:af:c4: c3:b4:b9:5a:87:b9:a4:a9:e2:44:22:f6:14:51:b3: 43:cf:77:11:9d:5c:80:30:65:76:4a:9e:0a:90:a6: 1e:09:2a:b8:63:37:1d:a4:1c:d1:10:c6:82:03:de: 2e:a8:2d:6e:a4:83:f0:1d:9d:6c:0f:94:8c:91:11: 5a:a0:5d:a6:49:0b:c3:c6:3a:a1:3c:39:60:e9:83: 7a:c9:67:6b:3e:32:80:fb:0a:c2:d2:c9:08:3a:04: 85:22:01:4b:14:bb:bf:32:07:b3:ef:f4:f2:b2:54: dd:69:55:56:76:49:43:e9:6c:47:0a:73:29:d9:a8: 61:04:b1:5f:0c:31:33:75:ff:e5:94:1f:e8:19:59: a9:13:da:09:dc:c7:67:4a:13:eb:ac:13:83:bb:d1: ba:ad:13:53:b4:26:bb:98:47:b6:bd:e0:9b:ab:2d: 61:21:16:86:25:54:1a:7d:e3:cb:b8:ba:75:bd:23: d3:e7:77:74:dc:c4:03:54:e2:f5:6e:34:48:be:a9: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C4:E7:87:09:BC:11:5D:D3:80:20:9C:5C:EE:CD:1B:5A:D4:DF:FD X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f0:be:6d:e6:c3:d1:09:0f:f1:f0:ba:ca:a2:51:6b:4f:f0: 7b:2d:09:a3:fb:fa:47:03:92:97:b3:23:3c:0c:01:25:e1:b1: 59:40:6f:35:c9:3c:b2:30:45:52:77:b8:46:6b:13:b0:09:51: 2f:af:f2:0c:66:4f:4d:f0:72:8a:95:d0:42:a9:80:41:c7:83: 8e:4e:73:6b:6a:e5:92:44:a4:df:77:d3:e1:1a:6b:31:31:da: a2:d1:ab:9c:88:69:b2:f2:7c:cc:20:32:05:69:49:8d:11:56: 78:b8:2f:35:b7:88:0b:14:1b:c2:b5:89:fb:75:59:b0:ca:71: e5:23:b3:5f:f3:26:08:e5:16:c5:2f:79:f9:a5:3b:cd:f7:bd: 96:f8:1c:6a:de:2e:65:a5:eb:6e:e5:59:e2:57:5a:e6:68:fa: fd:f4:10:e5:1c:7b:39:1e:59:be:2e:57:1c:39:22:47:6d:d7: dc:8d:0e:ca:bd:60:ca:18:80:92:da:a0:eb:b6:12:bd:6f:5f: cb:92:fe:60:29:8f:87:f1:ce:c3:42:50:fb:87:d7:34:18:d8: 71:c3:6f:7c:d0:73:c4:f4:ec:cb:92:94:0e:70:ff:cc:7e:8b: 89:32:f4:2b:11:a7:95:78:75:f0:9f:cb:4d:02:c8:31:d4:b2: 51:1c:da:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGrPbn6wBXrHZ02Q0iGThIbf/IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNjA0MDUwODE2NDFaFw0yNjA0MDgxMzAwNDFaMDMxMTAvBgNV BAMTKDI2QzRFNzg3MDlCQzExNUREMzgwMjA5QzVDRUVDRDFCNUFENERGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSZP7Fmnf4tTk/afqDBpldYmM Sb85m9mbxIOAYpYssE3xJ4t/M+QcPvpOYbItQaVO/s6Xx9XNyB6vxMO0uVqHuaSp 4kQi9hRRs0PPdxGdXIAwZXZKngqQph4JKrhjNx2kHNEQxoID3i6oLW6kg/AdnWwP lIyREVqgXaZJC8PGOqE8OWDpg3rJZ2s+MoD7CsLSyQg6BIUiAUsUu78yB7Pv9PKy VN1pVVZ2SUPpbEcKcynZqGEEsV8MMTN1/+WUH+gZWakT2gncx2dKE+usE4O70bqt E1O0JruYR7a94JurLWEhFoYlVBp948u4unW9I9Pnd3TcxANU4vVuNEi+qX5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJsTnhwm8EV3TgCCcXO7NG1rU3/0wHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDwvm3mw9EJD/HwusqiUWtP8HstCaP7+kcD kpezIzwMASXhsVlAbzXJPLIwRVJ3uEZrE7AJUS+v8gxmT03wcoqV0EKpgEHHg45O c2tq5ZJEpN930+EaazEx2qLRq5yIabLyfMwgMgVpSY0RVni4LzW3iAsUG8K1ift1 WbDKceUjs1/zJgjlFsUvefmlO833vZb4HGreLmWl627lWeJXWuZo+v30EOUcezke Wb4uVxw5Ikdt19yNDsq9YMoYgJLaoOu2Er1vX8uS/mApj4fxzsNCUPuH1zQY2HHD b3zQc8T07MuSlA5w/8x+i4ky9CsRp5V4dfCfy00CyDHUslEc2j0= -----END CERTIFICATE-----Generated at Tue Apr 7 08:22:44 2026 by rpki-client