$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: qeSRh0ia/4MlBznIeBgA2NgIPgz81o0rfAtVQJnNNx0= Subject key identifier: 7B:52:1F:1C:3A:A7:7F:BB:47:D7:2E:EE:28:99:BB:AA:11:EB:1A:FD Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 6BA84A710D8E3A5D683BF2F27EFB5EDB4DEBE8D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 02D4 Signing time: Fri 20 Mar 2026 16:11:38 +0000 Manifest this update: Fri 20 Mar 2026 16:06:38 +0000 Manifest next update: Tue 24 Mar 2026 01:15:38 +0000 Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: eg8s9xHBF/B26x+jlhZTpZglP/w9nhmv9b/06Vyav5w=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: TPHc8hMgpG4lNB1VT7M46EhAo2F9SEdX4ITwbrTmfrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a8:4a:71:0d:8e:3a:5d:68:3b:f2:f2:7e:fb:5e:db:4d:eb:e8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Mar 20 16:06:38 2026 GMT Not After : Mar 24 01:15:38 2026 GMT Subject: CN=7B521F1C3AA77FBB47D72EEE2899BBAA11EB1AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:62:5f:5b:50:b9:5a:d7:2e:00:47:aa:10: d9:f8:b2:fe:18:30:15:d4:08:e9:4e:66:15:f5:23: d3:ce:26:af:f4:73:3a:e3:2f:fc:d9:ad:3f:93:0f: ea:38:37:21:3e:6e:8b:e1:7f:96:12:4b:1d:ab:19: f2:f3:05:ab:a4:f1:52:d2:dd:78:7f:a2:d8:bc:80: 18:ab:71:2e:67:d8:2c:fb:a1:97:db:14:96:1a:14: 68:12:06:64:68:14:3c:fd:54:0e:90:f2:e6:80:eb: e6:4b:89:86:d5:1e:16:b6:3c:0a:f0:ab:9b:64:67: a6:97:14:d9:9f:88:bc:ba:7e:5c:51:2c:96:58:02: bb:65:ab:38:bb:01:e7:43:bd:b7:b2:a2:d6:04:b5: 99:a3:c5:6b:f7:3c:35:1d:3a:73:23:98:0a:21:3e: 4c:f9:cb:8c:32:46:ef:30:b1:45:ab:70:6b:84:ae: e2:3e:4e:43:21:2e:ac:90:d5:83:35:70:3e:69:9b: 5b:43:51:4f:20:5c:fc:9c:5e:86:5a:f1:7a:d3:d3: 80:0b:d1:ad:70:06:de:9a:45:66:bf:d3:a8:c5:f5: d3:3d:56:0f:2b:ab:e7:03:f3:fa:b8:0b:2f:c3:52: 12:98:08:07:46:4d:df:e7:93:bd:11:bb:28:9e:c4: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:52:1F:1C:3A:A7:7F:BB:47:D7:2E:EE:28:99:BB:AA:11:EB:1A:FD X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e3:d2:8c:02:70:a8:d8:34:80:3c:8e:19:e1:7c:a8:c9:db: 7f:c6:46:31:39:48:59:d1:18:b6:0f:de:5f:15:f4:08:33:d3: ee:46:f2:cf:7c:df:28:58:13:8d:63:95:38:4f:6b:6c:98:3e: 5b:53:0f:f9:2d:bd:8a:ee:72:7e:48:22:de:11:b4:fa:80:a1: 64:c3:8d:3c:e0:65:ab:46:24:8f:d3:82:42:50:03:86:52:38: 9e:5b:c4:f5:1d:28:63:b8:82:ec:ee:6c:e8:ca:3f:47:33:76: 24:72:82:d7:ba:5c:c8:ed:68:c7:11:e8:43:ee:9e:5e:2d:8d: 89:de:84:8d:5c:89:89:e5:b8:96:36:a1:b6:fd:cc:13:97:15: a7:80:b9:40:5e:83:ee:c9:f3:89:88:a8:2f:f6:46:14:b5:65: 6e:f7:69:4a:94:ae:e6:88:1b:9b:08:ae:2f:ba:38:25:fc:00: 50:b7:cd:48:1e:88:45:11:70:e3:16:cf:5c:a8:a7:f4:ac:64: ac:35:34:87:fb:ef:a6:95:62:6d:86:53:ac:af:ac:3f:5c:10: 35:84:63:fe:62:73:54:51:24:9a:ad:9b:78:5f:9c:5e:44:08: 9b:47:e4:af:59:10:f9:6c:5c:d5:ef:e7:86:dd:75:64:99:b5: 6e:f8:4f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6hKcQ2OOl1oO/Lyfvte203r6NEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNjAzMjAxNjA2MzhaFw0yNjAzMjQwMTE1MzhaMDMxMTAvBgNV BAMTKDdCNTIxRjFDM0FBNzdGQkI0N0Q3MkVFRTI4OTlCQkFBMTFFQjFBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQGJfW1C5WtcuAEeqENn4sv4Y MBXUCOlOZhX1I9POJq/0czrjL/zZrT+TD+o4NyE+bovhf5YSSx2rGfLzBauk8VLS 3Xh/oti8gBircS5n2Cz7oZfbFJYaFGgSBmRoFDz9VA6Q8uaA6+ZLiYbVHha2PArw q5tkZ6aXFNmfiLy6flxRLJZYArtlqzi7AedDvbeyotYEtZmjxWv3PDUdOnMjmAoh Pkz5y4wyRu8wsUWrcGuEruI+TkMhLqyQ1YM1cD5pm1tDUU8gXPycXoZa8XrT04AL 0a1wBt6aRWa/06jF9dM9Vg8rq+cD8/q4Cy/DUhKYCAdGTd/nk70RuyiexMzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe1IfHDqnf7tH1y7uKJm7qhHrGv0wHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrj0owCcKjYNIA8jhnhfKjJ23/GRjE5SFnR GLYP3l8V9Agz0+5G8s983yhYE41jlThPa2yYPltTD/ktvYrucn5IIt4RtPqAoWTD jTzgZatGJI/TgkJQA4ZSOJ5bxPUdKGO4guzubOjKP0czdiRygte6XMjtaMcR6EPu nl4tjYnehI1ciYnluJY2obb9zBOXFaeAuUBeg+7J84mIqC/2RhS1ZW73aUqUruaI G5sIri+6OCX8AFC3zUgeiEURcOMWz1yop/SsZKw1NIf776aVYm2GU6yvrD9cEDWE Y/5ic1RRJJqtm3hfnF5ECJtH5K9ZEPlsXNXv54bddWSZtW74Tx4= -----END CERTIFICATE-----Generated at Fri Mar 20 22:11:31 2026 by rpki-client