$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: 5m64o525SV4E+exVJ+HS0feHkMV1rSxN29EATeDAwxQ= Subject key identifier: 18:48:64:DE:AA:4E:A1:FD:B4:EF:54:90:4E:46:F8:59:42:91:76:A1 Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 433775A49AF64F95A86F76B5AE9E5D08773F55B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 025A Signing time: Tue 17 Mar 2026 05:41:56 +0000 Manifest this update: Tue 17 Mar 2026 05:36:56 +0000 Manifest next update: Fri 20 Mar 2026 07:45:56 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: 6HtYLh5GI3r511Ob5FE+jEi2dg9UjM9YU5Ybc88XF+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 07:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:37:75:a4:9a:f6:4f:95:a8:6f:76:b5:ae:9e:5d:08:77:3f:55:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Mar 17 05:36:56 2026 GMT Not After : Mar 20 07:45:56 2026 GMT Subject: CN=184864DEAA4EA1FDB4EF54904E46F859429176A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:dc:0c:6a:95:d5:d6:a1:04:14:0e:37:b3: fa:59:a2:b9:d1:6b:bf:e3:d8:73:83:55:85:dc:6b: 71:b5:c3:07:1e:0c:5e:da:b6:31:66:47:1d:13:09: ed:b7:63:63:cf:dc:89:40:5c:4e:50:03:ee:3c:06: 29:71:c2:d1:9e:60:f3:71:e9:7a:bc:e8:a5:cf:42: 17:cf:c0:c9:65:a3:29:14:62:0d:4a:21:ff:c9:ed: 9b:8b:a0:88:e4:89:81:d0:4f:fc:71:91:bf:7e:1c: d6:54:5a:0e:48:83:95:90:02:7e:c4:42:dc:d8:5a: 60:e6:94:88:05:31:68:62:d0:e9:e1:9f:ea:3d:b3: 2d:e2:36:18:c2:5a:b3:f5:28:23:c4:3e:4b:cf:94: 41:5c:46:64:58:71:53:02:f3:d4:fc:2f:04:25:51: ce:e0:0d:6c:c6:52:63:f3:4f:aa:e0:a4:b4:ed:b2: b1:e9:b7:83:aa:7b:33:74:d1:cf:48:fb:81:0c:3d: f9:07:07:a5:7e:0d:e7:e9:84:dd:dc:de:f0:2c:03: 5a:ce:42:b9:f3:e2:5b:c7:77:0d:9c:99:23:da:90: 0c:aa:1f:5c:6d:d6:b8:70:df:33:a5:1e:83:cd:34: 28:aa:c2:da:d1:07:8e:35:bc:96:96:0e:bc:15:ab: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:48:64:DE:AA:4E:A1:FD:B4:EF:54:90:4E:46:F8:59:42:91:76:A1 X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f1:c1:7e:37:13:4a:60:3a:bc:51:8e:98:e4:dd:d3:93:4c: e7:8b:3a:7b:f8:6a:82:b0:5c:1e:7d:bd:5c:32:47:f1:ef:00: c1:d1:db:ba:c9:06:4a:da:fc:b1:b8:07:fe:cb:3b:10:78:52: 26:87:41:c6:ed:39:32:37:6c:89:b2:fb:41:cf:c6:4d:8b:c4: a4:d0:81:3b:38:22:39:e8:64:8f:6c:7d:b1:be:bf:5f:11:d4: 49:be:f8:00:de:37:47:a8:59:20:84:4e:c0:f4:54:5f:78:50: b1:e9:41:24:76:b4:b0:31:75:d3:d5:df:08:07:ae:38:59:3e: 23:db:5f:c2:08:34:55:b9:ae:47:bc:f8:ef:8c:44:2a:02:58: 3d:d3:f1:38:f2:85:b8:06:58:1a:93:90:75:f9:c3:39:32:d0: 48:6f:5e:3a:bc:09:60:c3:aa:55:96:e3:26:54:09:8a:0c:0c: a5:e8:2a:58:8e:31:b9:f5:26:d4:05:7c:c4:bd:df:06:9d:90: 0c:b1:86:77:7d:97:a8:7f:69:36:7b:04:10:c5:1d:8b:2e:8f: 70:24:0c:f7:cf:e7:e6:4e:5c:26:c4:44:8a:d8:88:7e:b4:0b: 55:5d:06:16:14:2d:2e:7d:ba:23:80:74:de:36:d2:5e:e9:97: 7f:3f:60:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzd1pJr2T5Wob3a1rp5dCHc/VbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNjAzMTcwNTM2NTZaFw0yNjAzMjAwNzQ1NTZaMDMxMTAvBgNV BAMTKDE4NDg2NERFQUE0RUExRkRCNEVGNTQ5MDRFNDZGODU5NDI5MTc2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3k9wMapXV1qEEFA43s/pZornR a7/j2HODVYXca3G1wwceDF7atjFmRx0TCe23Y2PP3IlAXE5QA+48BilxwtGeYPNx 6Xq86KXPQhfPwMlloykUYg1KIf/J7ZuLoIjkiYHQT/xxkb9+HNZUWg5Ig5WQAn7E QtzYWmDmlIgFMWhi0Onhn+o9sy3iNhjCWrP1KCPEPkvPlEFcRmRYcVMC89T8LwQl Uc7gDWzGUmPzT6rgpLTtsrHpt4OqezN00c9I+4EMPfkHB6V+DefphN3c3vAsA1rO Qrnz4lvHdw2cmSPakAyqH1xt1rhw3zOlHoPNNCiqwtrRB441vJaWDrwVqwGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGEhk3qpOof2071SQTkb4WUKRdqEwHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXxwX43E0pgOrxRjpjk3dOTTOeLOnv4aoKw XB59vVwyR/HvAMHR27rJBkra/LG4B/7LOxB4UiaHQcbtOTI3bImy+0HPxk2LxKTQ gTs4IjnoZI9sfbG+v18R1Em++ADeN0eoWSCETsD0VF94ULHpQSR2tLAxddPV3wgH rjhZPiPbX8IINFW5rke8+O+MRCoCWD3T8TjyhbgGWBqTkHX5wzky0EhvXjq8CWDD qlWW4yZUCYoMDKXoKliOMbn1JtQFfMS93wadkAyxhnd9l6h/aTZ7BBDFHYsuj3Ak DPfP5+ZOXCbERIrYiH60C1VdBhYULS59uiOAdN420l7pl38/YH8= -----END CERTIFICATE-----Generated at Thu Mar 19 09:31:52 2026 by rpki-client