$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: QFvifqXQg3lO1Mq8jpIyyTz7KwwkKpv8OLe2rKsv1Oc= Subject key identifier: 5A:A0:08:E6:66:5A:9D:D0:9D:51:20:BB:F9:56:74:C6:91:60:E6:42 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 350C63435311900E5DBD2F103B1B24D6F0B58E13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 0134 Signing time: Sat 07 Mar 2026 02:11:50 +0000 Manifest this update: Sat 07 Mar 2026 02:06:50 +0000 Manifest next update: Tue 10 Mar 2026 08:20:50 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: YxhLfw6i7SWEHbJY3gXD00tXqjSx6epRz2LNc0wDLWM=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: X7ETbrXLlsb1gErfsePddYhE1xdzeHTt/6mH7d4q/24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0c:63:43:53:11:90:0e:5d:bd:2f:10:3b:1b:24:d6:f0:b5:8e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Mar 7 02:06:50 2026 GMT Not After : Mar 10 08:20:50 2026 GMT Subject: CN=5AA008E6665A9DD09D5120BBF95674C69160E642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:62:ce:c7:6a:64:8d:2a:47:d5:6d:70:dd: cc:e7:4d:c9:ed:b7:7a:9c:ff:30:46:5e:8e:4a:83: 67:64:ce:5f:31:1e:a1:f5:3d:29:8a:d5:55:81:98: 62:c5:b3:e0:f8:66:45:97:a3:39:5f:4b:3b:be:63: 84:4f:f8:73:5c:c1:05:19:b9:11:22:7a:05:a3:ae: a1:5c:7f:9a:8d:7c:09:52:a0:c9:7c:e6:10:34:49: 60:5c:9b:11:54:9c:7a:8b:d2:24:b8:c4:8c:d3:ee: 78:72:92:7f:22:eb:d0:b1:ee:c5:a1:ad:50:05:a1: e1:1e:35:68:0f:a6:7c:dd:45:11:07:67:a7:d1:33: a8:ea:6f:f4:b0:53:66:65:b8:52:12:8a:c7:8d:92: a9:09:1f:fe:49:b0:36:65:58:29:b6:22:a5:1f:88: f6:7f:d7:35:24:b3:05:41:d9:72:29:96:74:49:d6: 2b:80:09:91:dc:44:6c:e3:da:d5:03:7a:c1:03:a8: 9b:e9:9c:e5:fa:51:77:d3:a7:34:74:c5:cb:18:60: 80:9e:39:91:fd:8c:f9:da:32:02:2a:23:2e:21:75: f2:e1:77:d6:50:b8:d1:ce:51:e3:2e:25:8f:4d:b9: 8e:f4:09:03:1e:fe:0f:6e:3c:22:68:2c:e2:bc:3f: 83:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:08:E6:66:5A:9D:D0:9D:51:20:BB:F9:56:74:C6:91:60:E6:42 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2a:3b:d9:21:d0:39:5b:e6:18:5b:72:6c:db:ae:89:b3:30: 55:1e:78:fe:f1:96:f6:35:ec:84:b6:7d:e1:f1:84:ee:da:1c: 2a:c9:36:99:1b:fa:34:57:66:34:14:ef:08:54:b8:75:cf:98: 2b:07:9c:84:df:c8:31:52:5f:77:a9:20:52:b5:e0:83:de:f1: b3:8e:33:bd:6d:18:92:68:1d:4d:e0:85:a8:4f:e3:73:9c:be: c8:dd:ad:8c:3f:1d:2a:79:37:9f:44:6e:8f:45:68:45:7d:5f: a0:41:a6:3e:d2:9a:31:f4:1e:0a:62:b8:5e:7e:53:46:63:2e: bc:cd:74:8d:d2:89:59:9a:ae:42:9d:94:c4:f0:52:0e:73:fb: 8b:3d:d7:2d:fb:f5:64:ef:74:cc:50:9d:9d:0d:f2:b1:9a:ab: d5:83:2e:8f:06:c0:6d:a1:d9:06:6d:9d:d1:58:95:a8:cd:b6: 84:26:19:85:00:6b:f4:07:61:e4:29:96:ad:81:20:e2:cc:57: 1c:1e:94:b3:78:a4:ff:b2:f6:d7:c4:0a:ed:7c:62:9a:4f:64: 65:1d:9b:f9:32:18:e6:d6:31:9e:09:35:4a:ff:ac:d1:c9:4a: fd:ae:73:b9:3d:04:3d:60:fe:2d:97:75:3c:cf:d8:9d:97:52: 86:53:70:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQxjQ1MRkA5dvS8QOxsk1vC1jhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNjAzMDcwMjA2NTBaFw0yNjAzMTAwODIwNTBaMDMxMTAvBgNV BAMTKDVBQTAwOEU2NjY1QTlERDA5RDUxMjBCQkY5NTY3NEM2OTE2MEU2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubmLOx2pkjSpH1W1w3cznTcnt t3qc/zBGXo5Kg2dkzl8xHqH1PSmK1VWBmGLFs+D4ZkWXozlfSzu+Y4RP+HNcwQUZ uREiegWjrqFcf5qNfAlSoMl85hA0SWBcmxFUnHqL0iS4xIzT7nhykn8i69Cx7sWh rVAFoeEeNWgPpnzdRREHZ6fRM6jqb/SwU2ZluFISiseNkqkJH/5JsDZlWCm2IqUf iPZ/1zUkswVB2XIplnRJ1iuACZHcRGzj2tUDesEDqJvpnOX6UXfTpzR0xcsYYICe OZH9jPnaMgIqIy4hdfLhd9ZQuNHOUeMuJY9NuY70CQMe/g9uPCJoLOK8P4PTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqAI5mZandCdUSC7+VZ0xpFg5kIwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIqO9kh0Dlb5hhbcmzbromzMFUeeP7xlvY1 7IS2feHxhO7aHCrJNpkb+jRXZjQU7whUuHXPmCsHnITfyDFSX3epIFK14IPe8bOO M71tGJJoHU3ghahP43OcvsjdrYw/HSp5N59Ebo9FaEV9X6BBpj7SmjH0HgpiuF5+ U0ZjLrzNdI3SiVmarkKdlMTwUg5z+4s91y379WTvdMxQnZ0N8rGaq9WDLo8GwG2h 2QZtndFYlajNtoQmGYUAa/QHYeQplq2BIOLMVxwelLN4pP+y9tfECu18YppPZGUd m/kyGObWMZ4JNUr/rNHJSv2uc7k9BD1g/i2XdTzP2J2XUoZTcLs= -----END CERTIFICATE-----Generated at Sun Mar 8 00:40:12 2026 by rpki-client