$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: INArNKMqSBVYIbu+ra3KSR6n1qUIvdptVsatx3JmSWY= Subject key identifier: E7:FB:1A:78:DF:79:54:21:EF:62:9F:64:B5:B8:40:81:24:10:13:B0 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 48F4479DF4238368FFD6B40852ADFD227FA4C0AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 0108 Signing time: Thu 05 Mar 2026 21:12:11 +0000 Manifest this update: Thu 05 Mar 2026 21:07:11 +0000 Manifest next update: Mon 09 Mar 2026 00:36:11 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: PgLKAmGYiY9C5iDKVcpU3ARF2eM8CV4EIKn8Q6HF8HM=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f4:47:9d:f4:23:83:68:ff:d6:b4:08:52:ad:fd:22:7f:a4:c0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Mar 5 21:07:11 2026 GMT Not After : Mar 9 00:36:11 2026 GMT Subject: CN=E7FB1A78DF795421EF629F64B5B84081241013B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:f2:47:ad:66:34:37:b0:5a:0a:83:94:1a: 77:91:5e:cb:6b:b5:c0:4f:68:01:c1:b5:a3:15:18: 6a:b3:78:88:8c:3b:95:81:3e:73:6f:44:da:e8:cd: 60:96:f2:da:d3:fb:59:fc:2b:99:7d:0d:94:9e:ac: 9b:31:e5:1e:ca:8b:71:89:c8:f6:e7:80:b9:6b:d4: 27:99:d8:a4:2e:97:48:09:de:aa:9e:f6:42:0e:68: d9:84:bc:66:94:ed:fd:c3:61:4e:bf:e0:01:96:19: 92:dc:8f:9d:44:e9:d1:b2:6f:95:3a:3e:94:b2:6e: 1d:d8:da:a2:31:7b:87:40:fd:17:c7:81:78:d7:84: 35:f4:e0:ee:5f:6c:ff:9f:c5:45:92:1e:44:26:4a: b0:40:1b:15:9f:34:76:19:34:84:a9:8f:67:30:a2: f8:0c:1d:fc:58:73:ed:72:97:07:d6:14:77:8a:23: 6a:f4:af:db:7c:14:a0:19:cd:87:94:75:c1:b9:2e: 52:24:3c:4a:d3:03:fa:55:b7:8f:bc:f6:38:c0:ae: cf:fd:e7:5b:9a:f1:d1:c1:1f:bd:1d:9e:db:ba:b8: 64:ca:a4:7e:c1:c8:50:1f:bb:89:db:15:94:c5:ef: ff:33:47:3c:10:7b:38:c8:57:30:e6:c1:ee:ab:aa: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:1A:78:DF:79:54:21:EF:62:9F:64:B5:B8:40:81:24:10:13:B0 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0f:77:d9:6e:cc:48:97:67:c8:8f:3f:dd:e5:a1:04:c5:93: 6c:3f:d5:c0:cf:89:0a:7d:d8:f8:f2:a9:8b:db:e7:2c:ba:88: dc:33:22:9d:93:b1:1f:13:bd:f5:11:b5:39:1d:70:d3:e0:7b: 90:2b:fa:fc:28:79:40:d1:9d:89:87:f2:16:8f:14:fe:17:c7: 67:f2:fd:3c:c4:d7:4a:cc:d4:62:41:af:56:70:6c:f4:78:02: be:28:6d:3b:ee:73:a6:c5:f0:b6:03:d2:3d:c9:66:fe:f2:9d: 0c:36:02:ad:e5:1e:dc:f1:49:81:c4:87:10:61:17:46:e2:f3: 80:d7:54:40:54:80:2e:09:6d:29:20:48:0a:1c:49:a6:11:ed: 54:16:45:ba:aa:f5:41:f8:77:88:0d:31:fd:bc:8a:6a:f4:1c: 46:a1:df:b8:e1:bb:90:f9:d4:ea:f6:f5:44:ee:fa:78:4c:0e: 9b:b5:1b:53:e8:70:d6:ac:af:31:1a:29:eb:3a:6f:3a:0c:3b: 61:f5:6e:c5:9a:9e:2c:7b:e8:02:6c:2d:12:29:ba:d5:b7:d1: 67:a6:77:df:b7:6d:06:a3:ec:78:a9:da:74:56:69:2a:99:61: 72:eb:25:31:1e:eb:aa:42:c1:bf:d5:28:be:94:8e:e1:6d:fe: 68:74:22:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPRHnfQjg2j/1rQIUq39In+kwK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNjAzMDUyMTA3MTFaFw0yNjAzMDkwMDM2MTFaMDMxMTAvBgNV BAMTKEU3RkIxQTc4REY3OTU0MjFFRjYyOUY2NEI1Qjg0MDgxMjQxMDEzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsvJHrWY0N7BaCoOUGneRXstr tcBPaAHBtaMVGGqzeIiMO5WBPnNvRNrozWCW8trT+1n8K5l9DZSerJsx5R7Ki3GJ yPbngLlr1CeZ2KQul0gJ3qqe9kIOaNmEvGaU7f3DYU6/4AGWGZLcj51E6dGyb5U6 PpSybh3Y2qIxe4dA/RfHgXjXhDX04O5fbP+fxUWSHkQmSrBAGxWfNHYZNISpj2cw ovgMHfxYc+1ylwfWFHeKI2r0r9t8FKAZzYeUdcG5LlIkPErTA/pVt4+89jjArs/9 51ua8dHBH70dntu6uGTKpH7ByFAfu4nbFZTF7/8zRzwQezjIVzDmwe6rqp/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/saeN95VCHvYp9ktbhAgSQQE7AwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEPd9luzEiXZ8iPP93loQTFk2w/1cDPiQp9 2PjyqYvb5yy6iNwzIp2TsR8TvfURtTkdcNPge5Ar+vwoeUDRnYmH8haPFP4Xx2fy /TzE10rM1GJBr1ZwbPR4Ar4obTvuc6bF8LYD0j3JZv7ynQw2Aq3lHtzxSYHEhxBh F0bi84DXVEBUgC4JbSkgSAocSaYR7VQWRbqq9UH4d4gNMf28imr0HEah37jhu5D5 1Or29UTu+nhMDpu1G1PocNasrzEaKes6bzoMO2H1bsWanix76AJsLRIputW30Wem d9+3bQaj7Hip2nRWaSqZYXLrJTEe66pCwb/VKL6UjuFt/mh0InQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:52:18 2026 by rpki-client