$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: le/rY2Yi1zqkLpcfJd/5l3E/mzpcUCAgd9UUajESEOE= Subject key identifier: CB:B8:E3:F0:46:1D:57:E2:06:C5:60:B1:FA:FF:28:1E:B7:0B:8A:51 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 78C0CAD48509272E2AC7F94D338B8421D5EBAC3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 055E Signing time: Tue 17 Mar 2026 08:52:39 +0000 Manifest this update: Tue 17 Mar 2026 08:47:39 +0000 Manifest next update: Fri 20 Mar 2026 16:22:39 +0000 Files and hashes: 1: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: JUV8ebwlg/s9YhjyDPz4fQpTg886+guaL6LgK6TOhOI=) 2: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) 3: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 4: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 5: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 16:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c0:ca:d4:85:09:27:2e:2a:c7:f9:4d:33:8b:84:21:d5:eb:ac:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Mar 17 08:47:39 2026 GMT Not After : Mar 20 16:22:39 2026 GMT Subject: CN=CBB8E3F0461D57E206C560B1FAFF281EB70B8A51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:86:4a:57:11:ba:35:36:32:cc:b1:8d:16: ab:0c:84:9e:78:3c:17:a7:c3:13:91:c8:45:28:c9: 55:de:cb:1c:9c:56:9b:a8:c8:2a:22:b3:81:bc:0e: a5:ab:66:42:3b:29:59:e1:4f:f1:2a:fd:4c:39:59: ce:7d:fc:62:6d:d9:c8:67:b4:b4:b0:4a:23:16:27: 99:3b:cc:de:79:83:25:5e:0d:53:96:2a:3d:34:49: c5:99:ca:5c:59:ea:1e:89:48:f5:26:3b:18:cb:ce: 67:03:10:a1:14:e4:15:81:be:59:ee:3c:12:e1:83: f0:c2:18:5d:1e:1d:ef:ca:18:4d:52:5d:c5:62:88: 8f:58:fb:34:42:e4:37:3f:89:32:81:e6:50:f9:a5: 4d:84:65:bb:b7:fb:cc:ee:ac:96:25:7b:0d:84:64: 6c:89:51:89:d8:0a:33:44:ea:af:17:06:f4:c1:2c: 59:89:f1:d8:2f:ad:f5:71:f1:f6:03:a8:85:b1:cc: ea:de:d8:cf:42:73:ec:cd:47:e9:de:30:30:99:b5: f4:6a:52:fe:97:8d:9f:34:09:70:92:f2:f0:58:17: 7e:24:30:71:60:86:99:0c:7b:db:da:c4:4f:67:ef: 78:7b:0c:5e:41:55:7c:28:4f:62:22:f7:02:b4:6e: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B8:E3:F0:46:1D:57:E2:06:C5:60:B1:FA:FF:28:1E:B7:0B:8A:51 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9d:6b:47:70:a1:16:29:b3:09:13:e9:7d:62:86:9d:0f:21: 94:1d:ac:e0:db:30:66:ce:d9:94:bc:13:bc:60:76:b6:16:9b: 05:fa:d5:cd:45:d6:b2:df:19:43:2d:23:3d:da:85:c7:0f:d8: 1e:16:1e:fe:86:27:f6:fe:b8:56:61:1a:ef:3f:98:e3:79:9a: d8:85:11:b9:42:83:4a:41:5c:d3:3b:14:52:37:c1:d2:90:81: aa:c4:2a:65:b4:0e:2d:3b:7b:e2:54:af:4c:20:9e:d5:37:23: 1b:e3:09:db:1e:1e:b1:65:53:6d:44:82:85:a2:bb:91:9f:38: b1:d4:32:f1:95:4b:c6:74:a8:1e:77:56:42:ae:ed:e6:8b:54: ca:c0:5c:a3:b5:91:70:f5:59:6f:57:f0:9b:64:e5:50:6d:4e: 75:18:f0:d4:2c:22:3c:85:bb:89:ac:04:2c:46:40:52:ac:60: 0a:8b:5c:9f:c0:62:11:93:66:26:54:5d:5e:07:5d:0d:c0:4b: b7:48:3d:2f:ea:7f:28:78:2f:17:7e:ed:24:7d:99:42:4e:51: 81:25:6c:fc:68:5f:e3:28:21:0d:b2:ac:cf:07:5b:b0:88:0b: a9:04:ea:2d:d1:05:58:fe:68:2f:f8:ab:e7:dd:26:24:27:53: 58:c7:38:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMDK1IUJJy4qx/lNM4uEIdXrrDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNjAzMTcwODQ3MzlaFw0yNjAzMjAxNjIyMzlaMDMxMTAvBgNV BAMTKENCQjhFM0YwNDYxRDU3RTIwNkM1NjBCMUZBRkYyODFFQjcwQjhBNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80oZKVxG6NTYyzLGNFqsMhJ54 PBenwxORyEUoyVXeyxycVpuoyCois4G8DqWrZkI7KVnhT/Eq/Uw5Wc59/GJt2chn tLSwSiMWJ5k7zN55gyVeDVOWKj00ScWZylxZ6h6JSPUmOxjLzmcDEKEU5BWBvlnu PBLhg/DCGF0eHe/KGE1SXcViiI9Y+zRC5Dc/iTKB5lD5pU2EZbu3+8zurJYlew2E ZGyJUYnYCjNE6q8XBvTBLFmJ8dgvrfVx8fYDqIWxzOre2M9Cc+zNR+neMDCZtfRq Uv6XjZ80CXCS8vBYF34kMHFghpkMe9vaxE9n73h7DF5BVXwoT2Ii9wK0brd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7jj8EYdV+IGxWCx+v8oHrcLilEwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHida0dwoRYpswkT6X1ihp0PIZQdrODbMGbO 2ZS8E7xgdrYWmwX61c1F1rLfGUMtIz3ahccP2B4WHv6GJ/b+uFZhGu8/mON5mtiF EblCg0pBXNM7FFI3wdKQgarEKmW0Di07e+JUr0wgntU3IxvjCdseHrFlU21EgoWi u5GfOLHUMvGVS8Z0qB53VkKu7eaLVMrAXKO1kXD1WW9X8Jtk5VBtTnUY8NQsIjyF u4msBCxGQFKsYAqLXJ/AYhGTZiZUXV4HXQ3AS7dIPS/qfyh4Lxd+7SR9mUJOUYEl bPxoX+MoIQ2yrM8HW7CIC6kE6i3RBVj+aC/4q+fdJiQnU1jHOEw= -----END CERTIFICATE-----Generated at Thu Mar 19 09:24:09 2026 by rpki-client