$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: f9WjtukAGHKiGdnrfaO6Sgjpt8zysgQSxvksW1+nYLA= Subject key identifier: 72:18:0A:D0:44:42:A6:A1:B8:0B:7F:A3:83:FA:39:93:61:B0:D3:EE Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 38EDEA167F63B1BF938291106DF0921153F798D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 0290 Signing time: Tue 21 Apr 2026 09:32:00 +0000 Manifest this update: Tue 21 Apr 2026 09:27:00 +0000 Manifest next update: Fri 24 Apr 2026 16:34:00 +0000 Files and hashes: 1: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: zNJv1QUhUzOTOEHHZCRJRlOjmSzt57PuZJkeSUFwNrA=) 2: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: T1f7dNSYjAbcvcuyeAw6EBv4NiafNrH6GWCU3X7QDSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ed:ea:16:7f:63:b1:bf:93:82:91:10:6d:f0:92:11:53:f7:98:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Apr 21 09:27:00 2026 GMT Not After : Apr 24 16:34:00 2026 GMT Subject: CN=72180AD04442A6A1B80B7FA383FA399361B0D3EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d8:9c:5c:a6:c7:49:e7:25:41:69:64:8d:af: e7:8c:98:56:75:26:70:1d:cd:b5:52:84:97:33:da: a2:93:80:d6:65:83:c5:49:17:33:91:9a:b2:3d:7d: ae:da:97:c9:b4:37:74:d7:5a:af:97:13:27:97:5c: fd:9d:38:88:df:b9:96:fc:47:8b:b2:e7:eb:3b:0a: bb:49:84:d8:f5:01:2d:66:cf:0c:99:e4:7b:2f:44: 6b:7d:9d:dc:38:1b:e6:9f:9d:10:78:80:d3:b8:2f: 8b:41:ff:a0:15:47:47:84:bc:cb:13:e5:e5:60:33: 25:0c:d0:a3:2a:48:2c:d1:6c:75:0d:9b:14:b4:71: ad:be:18:ba:7d:22:16:32:d8:52:fe:2a:8e:8f:3c: 0a:1c:49:f2:ec:a9:35:71:fc:59:ea:73:f6:77:6d: c9:2f:b1:dc:9e:cf:d9:f4:4b:6f:c8:f7:5d:6a:10: 57:25:a0:d0:15:2e:98:90:91:b0:87:32:4c:1a:de: 72:2e:20:73:39:b5:2d:48:a2:d0:d3:c5:fc:fc:fe: 7c:5b:87:92:9e:75:07:f8:34:d1:09:2d:28:0d:b4: f0:56:60:01:b0:b2:93:25:ad:b5:66:7f:11:d3:e3: fc:5a:35:cb:eb:9d:c3:a8:7c:15:38:95:25:65:4b: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:18:0A:D0:44:42:A6:A1:B8:0B:7F:A3:83:FA:39:93:61:B0:D3:EE X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6e:d7:b4:7d:88:df:d7:4f:e3:f9:91:92:fe:a1:4c:18:59: b8:94:76:0c:bd:f7:d7:4e:8a:df:d2:4e:08:38:9d:5d:52:38: 16:30:19:60:1d:3f:43:cc:ad:e1:c7:a3:bc:b7:6c:54:f2:6f: cf:66:ae:21:64:04:19:8c:7e:d0:69:46:f2:c3:3f:fa:0d:5b: 21:48:81:35:e0:ad:22:19:fe:84:13:23:b0:9f:66:66:c4:1b: 0d:3e:9d:d4:3f:7d:85:bb:36:93:9a:be:25:32:de:7d:8d:fd: 84:6b:04:9e:b4:ab:58:b4:00:9a:53:c6:55:68:cd:3e:a6:ce: e5:77:b0:0c:94:b8:ab:66:e5:15:73:c0:65:a9:de:c1:7f:ce: a9:a7:d8:58:a1:fa:5b:d3:9e:72:23:f9:d4:8e:28:39:08:d5: 4b:1a:15:92:1c:bc:c3:5c:2c:d5:4e:14:df:99:39:34:ba:49: 23:b0:54:10:cb:b3:ef:f1:b2:e4:64:0f:a8:36:bd:6a:61:c3: 77:48:c4:60:92:a1:93:82:30:62:46:20:ed:d7:bc:18:34:2c: ef:12:92:e9:d4:67:98:1c:da:fc:49:32:4d:81:0b:3a:3b:e3: f3:e5:c2:44:ec:34:a1:9e:0a:f3:c0:c0:c2:b5:e3:64:60:86: 71:ae:71:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOO3qFn9jsb+TgpEQbfCSEVP3mNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNjA0MjEwOTI3MDBaFw0yNjA0MjQxNjM0MDBaMDMxMTAvBgNV BAMTKDcyMTgwQUQwNDQ0MkE2QTFCODBCN0ZBMzgzRkEzOTkzNjFCMEQzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2JxcpsdJ5yVBaWSNr+eMmFZ1 JnAdzbVShJcz2qKTgNZlg8VJFzORmrI9fa7al8m0N3TXWq+XEyeXXP2dOIjfuZb8 R4uy5+s7CrtJhNj1AS1mzwyZ5HsvRGt9ndw4G+afnRB4gNO4L4tB/6AVR0eEvMsT 5eVgMyUM0KMqSCzRbHUNmxS0ca2+GLp9IhYy2FL+Ko6PPAocSfLsqTVx/Fnqc/Z3 bckvsdyez9n0S2/I911qEFcloNAVLpiQkbCHMkwa3nIuIHM5tS1IotDTxfz8/nxb h5KedQf4NNEJLSgNtPBWYAGwspMlrbVmfxHT4/xaNcvrncOofBU4lSVlS+FjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchgK0ERCpqG4C3+jg/o5k2Gw0+4wHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5u17R9iN/XT+P5kZL+oUwYWbiUdgy999dO it/STgg4nV1SOBYwGWAdP0PMreHHo7y3bFTyb89mriFkBBmMftBpRvLDP/oNWyFI gTXgrSIZ/oQTI7CfZmbEGw0+ndQ/fYW7NpOaviUy3n2N/YRrBJ60q1i0AJpTxlVo zT6mzuV3sAyUuKtm5RVzwGWp3sF/zqmn2Fih+lvTnnIj+dSOKDkI1UsaFZIcvMNc LNVOFN+ZOTS6SSOwVBDLs+/xsuRkD6g2vWphw3dIxGCSoZOCMGJGIO3XvBg0LO8S kunUZ5gc2vxJMk2BCzo74/PlwkTsNKGeCvPAwMK142RghnGuceA= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:24 2026 by rpki-client