$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: uCYDn5KeoPNTZtMZo/NXFMfTlceAUt+bIpDkIrEv5U4= Subject key identifier: D3:EB:FC:55:62:8A:7E:CA:FE:52:FA:5C:73:EE:46:CC:31:39:5E:A0 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 54F638C24A927EB252C2D628C8261BF5EBA2C5B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 011D Signing time: Tue 21 Apr 2026 10:42:16 +0000 Manifest this update: Tue 21 Apr 2026 10:37:16 +0000 Manifest next update: Fri 24 Apr 2026 12:59:16 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: N9h8xnFrAWO4RvryXgLOIrClIQNdotUqQuyLwTs200c=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 12:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f6:38:c2:4a:92:7e:b2:52:c2:d6:28:c8:26:1b:f5:eb:a2:c5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Apr 21 10:37:16 2026 GMT Not After : Apr 24 12:59:16 2026 GMT Subject: CN=D3EBFC55628A7ECAFE52FA5C73EE46CC31395EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:b9:1d:83:16:fd:6f:b0:c7:7c:26:70:a0: 05:c4:90:72:69:7d:af:8b:02:70:57:23:12:d4:30: cc:b7:eb:aa:8b:38:4c:01:23:f8:cf:ef:86:e4:24: 93:d1:3d:23:1a:63:34:f4:d1:0f:ee:28:6c:36:39: bb:46:3d:52:3e:60:60:ad:e4:b6:cc:3f:fc:32:de: ae:a0:70:d7:9e:56:fb:fa:0e:73:ab:f9:19:f7:f9: ee:e8:41:60:17:d4:cb:50:96:50:a5:fc:f4:f9:51: 6f:d2:fa:a6:1b:66:af:87:48:20:e4:9b:c5:58:6c: d5:0d:46:33:ac:f8:dd:c0:4c:51:3a:49:c3:97:ec: de:52:bb:42:30:e9:0b:23:59:8e:91:f3:cd:6f:c3: 86:f8:7e:69:1f:f3:c6:b6:91:81:6f:66:8f:c2:ad: 0c:98:a5:66:3a:a0:e7:1c:05:0e:e0:b8:b1:33:f2: 5e:01:84:e5:2e:65:8c:d5:f7:52:1e:8b:92:ba:ef: 80:0c:9f:53:96:85:27:63:52:ee:81:86:ba:58:c7: cb:d1:40:89:e8:e3:c7:77:0a:98:5c:5b:fa:9a:49: a5:a0:1b:a9:cf:00:c6:67:c2:db:dc:f5:8b:8a:f5: d9:06:3a:6d:02:3e:04:25:23:11:78:3c:0c:98:31: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EB:FC:55:62:8A:7E:CA:FE:52:FA:5C:73:EE:46:CC:31:39:5E:A0 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:03:0c:6b:6b:5f:5e:8b:91:23:62:b3:45:83:75:06:81:3f: de:2e:cf:64:28:04:dd:de:5b:4f:7e:24:2e:58:98:d0:8d:61: b5:09:aa:4c:44:d3:ab:84:76:b1:74:23:35:e9:70:df:25:9b: d1:b9:43:7f:74:85:cf:f3:71:2a:00:88:60:9c:a7:9b:62:d8: 96:b9:a0:24:66:82:8b:dd:66:da:ac:ae:e6:5b:46:37:28:36: 54:53:7a:34:eb:b0:6e:92:63:66:c7:4b:7a:79:83:35:a9:c2: fe:31:0a:22:63:ae:73:fd:23:12:a1:6b:0c:d1:b4:b7:37:0e: b7:58:b3:f0:f8:22:f8:2f:e9:af:71:6b:73:3e:fd:e1:4f:68: 66:47:1e:1f:6c:76:5e:32:34:f7:9a:91:3e:6f:7a:ac:97:05: c7:a3:ff:d8:20:8c:c2:79:ac:c5:a8:40:6c:73:78:e0:db:fc: 0f:07:73:cf:e7:51:3f:e2:90:33:6b:97:bf:a9:96:4e:ee:00: ce:18:61:db:46:0b:2b:3d:6e:91:d9:47:77:5b:fc:14:90:17: 70:a3:60:14:3c:d0:93:a7:54:2f:8f:08:65:1c:e8:a7:c2:e9: 44:01:20:f7:4e:21:72:19:e1:96:92:ba:9a:e7:87:a0:f1:98: 75:6a:39:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPY4wkqSfrJSwtYoyCYb9euixbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNjA0MjExMDM3MTZaFw0yNjA0MjQxMjU5MTZaMDMxMTAvBgNV BAMTKEQzRUJGQzU1NjI4QTdFQ0FGRTUyRkE1QzczRUU0NkNDMzEzOTVFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABrkdgxb9b7DHfCZwoAXEkHJp fa+LAnBXIxLUMMy366qLOEwBI/jP74bkJJPRPSMaYzT00Q/uKGw2ObtGPVI+YGCt 5LbMP/wy3q6gcNeeVvv6DnOr+Rn3+e7oQWAX1MtQllCl/PT5UW/S+qYbZq+HSCDk m8VYbNUNRjOs+N3ATFE6ScOX7N5Su0Iw6QsjWY6R881vw4b4fmkf88a2kYFvZo/C rQyYpWY6oOccBQ7guLEz8l4BhOUuZYzV91Iei5K674AMn1OWhSdjUu6BhrpYx8vR QIno48d3CphcW/qaSaWgG6nPAMZnwtvc9YuK9dkGOm0CPgQlIxF4PAyYMV6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+v8VWKKfsr+Uvpcc+5GzDE5XqAwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsDDGtrX16LkSNis0WDdQaBP94uz2QoBN3e W09+JC5YmNCNYbUJqkxE06uEdrF0IzXpcN8lm9G5Q390hc/zcSoAiGCcp5ti2Ja5 oCRmgovdZtqsruZbRjcoNlRTejTrsG6SY2bHS3p5gzWpwv4xCiJjrnP9IxKhawzR tLc3DrdYs/D4Ivgv6a9xa3M+/eFPaGZHHh9sdl4yNPeakT5veqyXBcej/9ggjMJ5 rMWoQGxzeODb/A8Hc8/nUT/ikDNrl7+plk7uAM4YYdtGCys9bpHZR3db/BSQF3Cj YBQ80JOnVC+PCGUc6KfC6UQBIPdOIXIZ4ZaSuprnh6DxmHVqOUs= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:22 2026 by rpki-client