$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: m2AJTI57hhAfOwGhbM/0bPwvczy88CAAAa1SzQ389gU= Subject key identifier: 7C:C0:B7:D0:CE:C1:A8:1E:A3:B0:E9:B3:8F:34:68:CF:20:1F:32:08 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 0B12B07EBFA8C951ED88F3277FDC0063663E1B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: 0133 Signing time: Mon 20 Apr 2026 12:51:17 +0000 Manifest this update: Mon 20 Apr 2026 12:46:17 +0000 Manifest next update: Thu 23 Apr 2026 16:13:17 +0000 Files and hashes: 1: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: wxW1z2DRvnAF95DobfcRYO9Zk2By/yeyzYEwqp0wl/k=) 2: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: biMLC4wOitkgGs3RHy61vEna5qJFiujzkfEQVq781lM=) 3: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: azsz9z1KEsnyuF15yUQXq8B2sogEjx41kyrRUx9ZzNg=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: 4lKv5nLnJSCkxv4U2mXX8DZ/Ypxjw06U+yW2HXaeuyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:12:b0:7e:bf:a8:c9:51:ed:88:f3:27:7f:dc:00:63:66:3e:1b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Apr 20 12:46:17 2026 GMT Not After : Apr 23 16:13:17 2026 GMT Subject: CN=7CC0B7D0CEC1A81EA3B0E9B38F3468CF201F3208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:29:0b:1a:5c:7e:ab:b3:3e:9c:0a:34:0d: 6f:ca:2a:fc:72:b2:bd:c4:e9:c7:9e:d3:d6:eb:f3: 07:1b:5d:70:85:3d:53:48:6d:f9:40:b8:2c:76:ee: 3b:b6:0f:b1:35:6b:ae:26:9e:4b:f2:59:26:07:7d: 4e:20:88:ee:b6:99:d1:0c:33:8a:7b:49:dc:39:b1: 5c:8d:42:1f:4f:03:0d:92:99:89:23:18:6f:79:c4: 8f:2c:08:8e:56:69:00:14:af:3f:e3:97:8b:7f:38: 29:f5:4d:70:04:da:5a:56:00:c8:eb:78:eb:67:d5: b3:14:17:69:e3:cc:95:b2:9f:6e:a6:b0:19:60:48: f3:93:4a:55:3b:d8:99:24:9c:ff:97:e4:8b:25:de: 0c:e2:0f:46:7d:f0:c5:c7:de:ac:60:e1:31:b2:46: e9:01:df:7b:fd:ca:dc:00:89:4e:17:a1:53:47:2b: 3e:98:37:1e:8a:76:43:42:33:fd:84:dc:ee:f8:1e: 90:02:41:dc:06:dc:81:e4:81:3e:30:10:bd:f7:25: d0:22:a0:b5:77:f9:95:d4:2b:f7:78:ce:7d:17:0e: 98:aa:9f:3b:e4:3c:39:f1:ab:d1:69:ea:0a:54:77: f5:23:8c:af:a5:ae:26:06:ad:a5:a8:12:fb:fb:36: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C0:B7:D0:CE:C1:A8:1E:A3:B0:E9:B3:8F:34:68:CF:20:1F:32:08 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ac:23:75:8e:67:c0:47:2f:6d:ba:70:7a:d2:d0:c8:98:fd: db:b1:86:9f:d2:aa:50:b3:dd:46:f3:05:57:24:0b:fe:81:2e: 9e:c7:df:7d:4b:3e:70:2e:d1:c4:7e:34:5d:e8:75:b2:a5:f0: 93:72:7e:f8:f9:b5:f9:fd:04:0e:68:6a:e6:6c:4b:82:fd:e0: fa:4d:41:40:42:f5:88:ec:70:19:17:99:c8:d8:d5:85:2d:23: e1:67:cb:6c:fd:34:56:90:94:20:f5:04:78:dd:48:7e:ec:67: ed:81:bd:50:15:03:ed:52:f3:e7:f2:05:34:c4:5f:a6:ec:64: 47:77:f4:fa:6a:fb:0b:9d:9f:e1:27:25:8a:35:96:9d:d0:81: 4a:2b:5c:d0:0d:57:e8:bd:ef:45:9c:60:ff:b6:65:b5:25:cf: 6c:be:77:8d:1c:05:8b:d2:b7:0e:fc:9e:90:87:21:90:e3:42: 58:d1:e6:a5:e2:df:61:5f:77:17:20:a8:89:0e:0d:52:7e:6f: d3:23:63:3b:26:d5:94:06:72:25:27:8d:1c:6c:f9:e3:b8:08: fa:69:36:8f:4c:a1:71:c9:91:21:92:0e:59:dd:70:51:32:70: 3c:d3:b3:02:57:ce:b9:2d:86:0b:c1:53:f1:14:93:18:97:d3: 0c:04:39:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxKwfr+oyVHtiPMnf9wAY2Y+G5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNjA0MjAxMjQ2MTdaFw0yNjA0MjMxNjEzMTdaMDMxMTAvBgNV BAMTKDdDQzBCN0QwQ0VDMUE4MUVBM0IwRTlCMzhGMzQ2OENGMjAxRjMyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhSkLGlx+q7M+nAo0DW/KKvxy sr3E6cee09br8wcbXXCFPVNIbflAuCx27ju2D7E1a64mnkvyWSYHfU4giO62mdEM M4p7Sdw5sVyNQh9PAw2SmYkjGG95xI8sCI5WaQAUrz/jl4t/OCn1TXAE2lpWAMjr eOtn1bMUF2njzJWyn26msBlgSPOTSlU72JkknP+X5Isl3gziD0Z98MXH3qxg4TGy RukB33v9ytwAiU4XoVNHKz6YNx6KdkNCM/2E3O74HpACQdwG3IHkgT4wEL33JdAi oLV3+ZXUK/d4zn0XDpiqnzvkPDnxq9Fp6gpUd/UjjK+lriYGraWoEvv7NqOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMC30M7BqB6jsOmzjzRozyAfMggwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACusI3WOZ8BHL226cHrS0MiY/duxhp/SqlCz 3UbzBVckC/6BLp7H331LPnAu0cR+NF3odbKl8JNyfvj5tfn9BA5oauZsS4L94PpN QUBC9YjscBkXmcjY1YUtI+Fny2z9NFaQlCD1BHjdSH7sZ+2BvVAVA+1S8+fyBTTE X6bsZEd39Ppq+wudn+EnJYo1lp3QgUorXNANV+i970WcYP+2ZbUlz2y+d40cBYvS tw78npCHIZDjQljR5qXi32FfdxcgqIkODVJ+b9MjYzsm1ZQGciUnjRxs+eO4CPpp No9MoXHJkSGSDlndcFEycDzTswJXzrkthgvBU/EUkxiX0wwEOVY= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:54 2026 by rpki-client