$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft File: F5BC050A20C516FEBC061A1B70E488BB426444BC.mft (raw, json) Hash identifier: fdeYEFO+zyan3+1DUpSwNy6LJ74il0pWisf/2X/dxuI= Subject key identifier: 2A:CD:F7:E5:46:84:89:99:86:B5:34:52:FC:6D:9B:24:4B:8A:E6:A2 Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Certificate issuer: /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Certificate serial: 185968D99ADE2DFECE388E22C9ACD01C2F867DFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft Manifest number: EA Signing time: Tue 21 Apr 2026 03:41:38 +0000 Manifest this update: Tue 21 Apr 2026 03:36:38 +0000 Manifest next update: Fri 24 Apr 2026 10:22:38 +0000 Files and hashes: 1: F5BC050A20C516FEBC061A1B70E488BB426444BC.crl (hash: Cnn8PIgg34+gSU++kCHi6TX43bz1jge24FnRVL0I3/E=) 2: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: KkvJQplnBjbukv95T8BQ0d/19OGrj7A1kqwSs2880GU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 10:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:59:68:d9:9a:de:2d:fe:ce:38:8e:22:c9:ac:d0:1c:2f:86:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Validity Not Before: Apr 21 03:36:38 2026 GMT Not After : Apr 24 10:22:38 2026 GMT Subject: CN=2ACDF7E54684899986B53452FC6D9B244B8AE6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:79:4a:33:0c:3d:69:47:ee:9f:75:a3:32: 47:b3:f4:cf:43:07:61:70:18:8f:c6:a0:bb:3b:72: 9c:0b:7c:0f:5f:02:9c:ee:5f:72:16:46:96:63:56: f0:d0:36:fd:21:b4:c1:ff:0c:41:f6:fe:b2:b2:27: c7:be:1a:e1:1f:3d:59:7d:c6:ca:d8:16:56:0b:e4: 05:bb:0a:5a:a5:24:6b:bf:60:95:68:18:f7:12:0a: ef:c9:f9:96:ee:bd:49:67:6c:96:65:f1:1f:06:c6: 7e:2e:08:25:72:cb:0c:1f:60:21:15:57:85:a3:a9: 23:ab:8d:7c:bd:b2:f6:d4:26:2e:12:0e:0b:d0:bc: fc:4f:fe:a8:73:1d:2c:b5:f1:9b:6a:68:ff:49:29: 68:8c:a1:f8:29:0c:24:51:69:72:e5:69:e1:93:b1: 97:1c:43:95:94:b8:e3:95:38:d0:13:47:ff:93:71: 94:a3:3b:e9:16:e7:b7:d4:b3:46:be:a9:ca:b2:10: 45:a1:a2:0c:db:4b:d9:bd:ad:ec:9c:a3:bb:dc:29: 94:71:fb:69:81:65:c3:96:15:25:16:8e:57:af:ab: 41:89:cf:cb:26:48:58:ea:9f:90:b9:54:ad:6b:10: 5b:ad:73:71:06:c3:aa:7b:89:57:44:c4:99:5b:13: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:F7:E5:46:84:89:99:86:B5:34:52:FC:6D:9B:24:4B:8A:E6:A2 X509v3 Authority Key Identifier: keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a5:e2:ca:e3:eb:be:1f:3a:27:34:28:e0:2e:a6:8b:9a:a6: 5c:91:f2:69:dd:a6:20:41:5e:41:48:c7:b0:83:00:49:7f:56: 69:27:fd:df:05:1b:e5:db:d3:c8:ec:0a:00:33:b9:4c:60:2d: 41:36:73:a7:2b:e1:3a:0e:14:2f:33:5f:05:d9:a3:74:df:63: 34:3a:91:27:4a:a7:1b:57:04:e5:0a:7c:e1:ad:1d:3f:9f:8c: d1:7d:bf:f2:ce:73:b2:78:92:ce:b0:05:3f:be:b9:bf:de:b7: ef:88:19:78:fc:71:f9:51:dc:03:b3:57:f6:0b:35:2c:77:06: 53:8a:2d:dc:68:b4:2a:26:15:9d:61:87:51:18:b9:47:e8:e5: 67:fd:f5:9f:f2:1b:bc:84:5c:91:c8:b3:b2:6a:b9:77:9c:08: b8:fe:f1:bd:d9:25:e5:26:af:17:23:b6:36:42:b2:df:1b:71: 33:74:bc:b3:c3:7d:03:d6:db:4e:09:be:83:70:4b:0c:b8:b4: 0a:51:27:67:09:27:8f:b4:d5:ca:fe:62:03:f3:30:9e:b9:9e: c6:2c:9e:fd:6e:f0:53:55:af:6e:e5:bd:f6:14:57:ae:7b:e9: 13:f3:2f:5a:d4:87:99:bf:75:ad:25:1a:e8:dc:79:ae:42:17: 64:fa:1d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFlo2ZreLf7OOI4iyazQHC+Gff0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0 MjY0NDRCQzAeFw0yNjA0MjEwMzM2MzhaFw0yNjA0MjQxMDIyMzhaMDMxMTAvBgNV BAMTKDJBQ0RGN0U1NDY4NDg5OTk4NkI1MzQ1MkZDNkQ5QjI0NEI4QUU2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vXlKMww9aUfun3WjMkez9M9D B2FwGI/GoLs7cpwLfA9fApzuX3IWRpZjVvDQNv0htMH/DEH2/rKyJ8e+GuEfPVl9 xsrYFlYL5AW7ClqlJGu/YJVoGPcSCu/J+ZbuvUlnbJZl8R8Gxn4uCCVyywwfYCEV V4WjqSOrjXy9svbUJi4SDgvQvPxP/qhzHSy18ZtqaP9JKWiMofgpDCRRaXLlaeGT sZccQ5WUuOOVONATR/+TcZSjO+kW57fUs0a+qcqyEEWhogzbS9m9reyco7vcKZRx +2mBZcOWFSUWjlevq0GJz8smSFjqn5C5VK1rEFutc3EGw6p7iVdExJlbE+m/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKs335UaEiZmGtTRS/G2bJEuK5qIwHwYDVR0j BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0 NDRCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4 QkI0MjY0NDRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyl4srj674fOic0KOAupouaplyR8mndpiBB XkFIx7CDAEl/Vmkn/d8FG+Xb08jsCgAzuUxgLUE2c6cr4ToOFC8zXwXZo3TfYzQ6 kSdKpxtXBOUKfOGtHT+fjNF9v/LOc7J4ks6wBT++ub/et++IGXj8cflR3AOzV/YL NSx3BlOKLdxotComFZ1hh1EYuUfo5Wf99Z/yG7yEXJHIs7JquXecCLj+8b3ZJeUm rxcjtjZCst8bcTN0vLPDfQPW204JvoNwSwy4tApRJ2cJJ4+01cr+YgPzMJ65nsYs nv1u8FNVr27lvfYUV6576RPzL1rUh5m/da0lGujcea5CF2T6HVE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:46 2026 by rpki-client