$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: Xw/ToRisluvNZ8VyffDj85FBxTH7LOURUVK2DfQawxs= Subject key identifier: 9C:AD:1E:B8:18:B5:B5:4F:9F:95:A2:98:B0:20:2A:3C:DC:8E:E7:F4 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 0BCAD5668BB7BD9D4453E27802AC5C7B78837059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 0148 Signing time: Mon 20 Apr 2026 19:51:53 +0000 Manifest this update: Mon 20 Apr 2026 19:46:53 +0000 Manifest next update: Fri 24 Apr 2026 02:08:53 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: QGJlZqa35CIInehsN5Z9XykfM6jjFwpvG0rW6zeBGdU=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: X7ETbrXLlsb1gErfsePddYhE1xdzeHTt/6mH7d4q/24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ca:d5:66:8b:b7:bd:9d:44:53:e2:78:02:ac:5c:7b:78:83:70:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Apr 20 19:46:53 2026 GMT Not After : Apr 24 02:08:53 2026 GMT Subject: CN=9CAD1EB818B5B54F9F95A298B0202A3CDC8EE7F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:29:aa:04:d5:4e:19:fc:7e:de:2d:9d:83: 91:f0:5f:4b:a5:04:a5:e8:74:eb:7a:91:b5:0f:76: 41:21:2b:53:f5:1c:4d:86:aa:11:09:ac:63:eb:37: 10:85:69:cd:62:68:c8:61:cf:f2:02:24:71:0d:b3: de:19:a5:ef:d4:5b:2f:ce:73:84:1f:c9:30:25:50: 3f:3e:1b:2e:99:b4:40:59:b3:08:6d:57:29:28:94: 22:5c:c2:bf:0d:65:cb:30:d0:18:73:a7:84:fe:57: b5:bd:a0:39:dd:8b:72:00:3f:20:d2:82:b4:72:f0: a5:18:6c:a7:82:ab:d6:2f:74:f4:95:4f:64:d9:72: 96:15:00:3a:b1:87:a7:0f:2b:01:f5:42:d5:a9:e3: 60:d5:f0:b3:90:bb:62:79:8e:bb:49:74:fd:4d:96: f0:27:3d:a1:85:b4:5b:71:72:47:46:7c:14:e7:13: a8:9d:42:06:76:d6:ec:75:08:de:da:2a:12:ed:2a: 8f:d0:51:99:d7:73:f2:a1:be:57:92:e1:a3:26:94: 97:bf:82:d5:a7:cb:7c:5c:57:17:7a:31:38:64:e4: ea:e3:d4:56:1c:b8:20:24:d3:43:47:e9:c8:70:fc: 62:d9:2e:c2:e6:9d:3a:90:1b:92:58:34:c0:2d:28: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:1E:B8:18:B5:B5:4F:9F:95:A2:98:B0:20:2A:3C:DC:8E:E7:F4 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:f6:59:74:4b:c9:ad:d8:73:6f:e1:14:9c:92:31:9c:75: 0b:a2:bc:27:96:6f:01:34:90:8b:83:f5:f5:b8:06:40:21:95: 0c:f9:87:61:4f:7e:43:e6:42:93:39:de:61:53:47:04:a8:54: 0e:5f:64:23:d3:35:84:e8:b0:6f:74:0c:84:58:94:e8:0b:ad: db:0f:c9:e8:4f:cc:5b:f1:0b:45:41:06:e3:e3:eb:7c:23:b6: 4f:8a:73:aa:c5:75:e8:41:8c:c1:8e:1f:39:fe:f7:1e:6c:54: 21:92:9b:e5:4c:03:e1:6b:00:38:cf:1a:0d:17:e1:3b:8c:8d: 0f:a2:76:25:08:30:72:e0:55:49:2b:a6:f6:e2:80:dc:51:06: fd:42:6e:aa:7f:0b:ae:c9:f6:02:a0:06:51:8f:dc:0c:d4:22: 98:ec:60:3e:5c:8d:12:47:51:30:13:a9:f5:ff:e9:81:91:12: ea:4b:20:a5:5f:9b:b0:57:37:91:d6:3f:8d:43:8a:f1:91:17: 7b:62:2b:79:6b:2d:c6:21:93:32:4e:8c:81:79:ba:08:bd:ab: 40:3d:e0:e5:e9:f3:71:47:3c:91:c6:6d:6b:5d:01:80:3b:6f: 4d:76:f5:2a:40:c0:77:39:e7:36:62:8f:4e:50:2c:3d:d7:dc: cc:86:19:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8rVZou3vZ1EU+J4Aqxce3iDcFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNjA0MjAxOTQ2NTNaFw0yNjA0MjQwMjA4NTNaMDMxMTAvBgNV BAMTKDlDQUQxRUI4MThCNUI1NEY5Rjk1QTI5OEIwMjAyQTNDREM4RUU3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLimqBNVOGfx+3i2dg5HwX0ul BKXodOt6kbUPdkEhK1P1HE2GqhEJrGPrNxCFac1iaMhhz/ICJHENs94Zpe/UWy/O c4QfyTAlUD8+Gy6ZtEBZswhtVykolCJcwr8NZcsw0Bhzp4T+V7W9oDndi3IAPyDS grRy8KUYbKeCq9YvdPSVT2TZcpYVADqxh6cPKwH1QtWp42DV8LOQu2J5jrtJdP1N lvAnPaGFtFtxckdGfBTnE6idQgZ21ux1CN7aKhLtKo/QUZnXc/KhvleS4aMmlJe/ gtWny3xcVxd6MThk5Orj1FYcuCAk00NH6chw/GLZLsLmnTqQG5JYNMAtKDq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnK0euBi1tU+flaKYsCAqPNyO5/QwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBx9ll0S8mt2HNv4RSckjGcdQuivCeWbwE0 kIuD9fW4BkAhlQz5h2FPfkPmQpM53mFTRwSoVA5fZCPTNYTosG90DIRYlOgLrdsP yehPzFvxC0VBBuPj63wjtk+Kc6rFdehBjMGOHzn+9x5sVCGSm+VMA+FrADjPGg0X 4TuMjQ+idiUIMHLgVUkrpvbigNxRBv1Cbqp/C67J9gKgBlGP3AzUIpjsYD5cjRJH UTATqfX/6YGREupLIKVfm7BXN5HWP41DivGRF3tiK3lrLcYhkzJOjIF5ugi9q0A9 4OXp83FHPJHGbWtdAYA7b0129SpAwHc55zZij05QLD3X3MyGGUI= -----END CERTIFICATE-----Generated at Wed Apr 22 11:45:00 2026 by rpki-client