$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json) Hash identifier: csJgoba5HQnIBH9DEu8AgYDtQ/1DYgmnj3ZSjmTd4FI= Subject key identifier: F0:78:31:DA:16:C0:6A:40:2D:E3:6D:A8:8C:4D:37:F6:F9:92:EA:2F Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Certificate serial: 25A071E90174E3178F5695104F5C3ADDB92D11C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft Manifest number: 0126 Signing time: Sat 07 Mar 2026 06:01:10 +0000 Manifest this update: Sat 07 Mar 2026 05:56:10 +0000 Manifest next update: Tue 10 Mar 2026 14:18:10 +0000 Files and hashes: 1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: 4USC1AQzGKvJLoaILHyi8/vcN8nVPul2782sFf1fdxE=) 2: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: GF2/6eSQ7+gowdcPeu7yqzIbZcXwDO9WPng4HdWocsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a0:71:e9:01:74:e3:17:8f:56:95:10:4f:5c:3a:dd:b9:2d:11:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Validity Not Before: Mar 7 05:56:10 2026 GMT Not After : Mar 10 14:18:10 2026 GMT Subject: CN=F07831DA16C06A402DE36DA88C4D37F6F992EA2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:3a:5f:a5:33:2e:14:d3:cf:2e:2c:3f:5a: 47:39:82:2d:62:e4:32:e3:51:11:eb:46:24:d8:6f: 30:39:2c:46:6a:e1:c7:a3:bf:5a:38:1e:c0:93:39: 80:4b:04:87:5c:9e:a3:32:13:c5:ec:ab:b5:f8:7f: 96:13:73:37:3a:ec:0e:d3:2c:ae:f3:5d:5e:e4:89: 32:e6:1a:5e:70:da:43:9a:c9:88:03:4a:a8:66:cc: dd:eb:34:bb:fc:37:93:74:79:7f:bf:14:81:a6:83: ca:57:18:9d:ef:ae:34:71:c5:95:77:c7:29:15:cf: f8:20:24:e6:b6:c5:ae:47:e1:7b:54:94:d9:3c:18: 0b:75:65:45:56:50:af:0a:a6:dc:db:54:03:f3:15: 08:c9:08:0a:e3:37:89:2c:7f:4f:07:fa:a3:4a:ce: ce:38:f8:db:41:2f:82:55:80:a1:bb:41:0a:f8:b4: 90:a1:2c:8d:e8:97:d9:89:f2:6b:6e:d0:b7:e8:40: 64:8f:b5:15:7d:ad:19:34:0a:fb:48:50:53:c6:24: c8:5e:81:17:92:1f:4a:91:2a:58:fa:c0:c6:95:38: c2:3f:94:8f:27:73:fc:2c:24:ef:de:f7:e0:83:43: 34:1c:a5:77:d9:c8:8e:36:98:c3:cc:dc:2a:b3:2b: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:31:DA:16:C0:6A:40:2D:E3:6D:A8:8C:4D:37:F6:F9:92:EA:2F X509v3 Authority Key Identifier: keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ea:8c:cb:bf:2c:1a:f0:d1:cc:d2:b4:68:55:31:34:bd:c5: 02:18:82:d1:e3:7b:78:90:27:70:e8:cf:6b:a6:6f:a3:d3:6e: 5b:e7:bb:c1:b7:66:6a:f8:6e:6d:92:eb:ce:b6:bb:e4:95:c3: 19:3e:50:49:2d:67:0f:fe:d5:95:55:fc:0d:c3:e6:27:1a:f0: 13:7f:7a:c5:2d:a2:62:41:e2:b5:22:cc:02:c5:2f:f8:c8:5e: 28:af:aa:0a:cc:51:05:c1:65:3b:8e:bb:e2:b7:05:87:0d:0b: 20:86:13:aa:17:52:50:05:95:65:8b:d7:08:df:73:14:3e:31: 6f:dc:41:b4:8b:cb:2e:b2:96:0f:d1:f3:bd:2c:d6:d1:76:aa: 1a:6f:7a:84:1f:c7:2b:85:d1:14:7f:c6:a5:cf:1b:6c:49:34: fa:19:c2:68:74:19:f6:94:1c:fe:ba:a3:37:1b:90:b7:07:65: cc:c9:85:0b:af:48:0a:55:b8:df:53:9c:a7:64:a6:dd:86:5d: 47:e3:00:93:14:c7:a5:c5:02:22:4a:d1:d5:fa:cf:bd:33:77: a6:33:61:44:4a:10:5e:e4:63:a9:00:70:cf:47:d5:d9:f2:6b: 8e:ba:fa:0d:a4:20:e3:77:e7:2a:24:c4:b2:b5:c9:40:34:23: 7e:71:19:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJaBx6QF04xePVpUQT1w63bktEcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE NEE5ODRFQjAeFw0yNjAzMDcwNTU2MTBaFw0yNjAzMTAxNDE4MTBaMDMxMTAvBgNV BAMTKEYwNzgzMURBMTZDMDZBNDAyREUzNkRBODhDNEQzN0Y2Rjk5MkVBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLzpfpTMuFNPPLiw/Wkc5gi1i 5DLjURHrRiTYbzA5LEZq4cejv1o4HsCTOYBLBIdcnqMyE8Xsq7X4f5YTczc67A7T LK7zXV7kiTLmGl5w2kOayYgDSqhmzN3rNLv8N5N0eX+/FIGmg8pXGJ3vrjRxxZV3 xykVz/ggJOa2xa5H4XtUlNk8GAt1ZUVWUK8KptzbVAPzFQjJCArjN4ksf08H+qNK zs44+NtBL4JVgKG7QQr4tJChLI3ol9mJ8mtu0LfoQGSPtRV9rRk0CvtIUFPGJMhe gReSH0qRKlj6wMaVOMI/lI8nc/wsJO/e9+CDQzQcpXfZyI42mMPM3CqzKyGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Hgx2hbAakAt422ojE039vmS6i8wHwYDVR0j BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5 ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjqjMu/LBrw0czStGhVMTS9xQIYgtHje3iQ J3Doz2umb6PTblvnu8G3Zmr4bm2S6862u+SVwxk+UEktZw/+1ZVV/A3D5ica8BN/ esUtomJB4rUizALFL/jIXiivqgrMUQXBZTuOu+K3BYcNCyCGE6oXUlAFlWWL1wjf cxQ+MW/cQbSLyy6ylg/R870s1tF2qhpveoQfxyuF0RR/xqXPG2xJNPoZwmh0GfaU HP66ozcbkLcHZczJhQuvSApVuN9TnKdkpt2GXUfjAJMUx6XFAiJK0dX6z70zd6Yz YURKEF7kY6kAcM9H1dnya466+g2kION35yokxLK1yUA0I35xGV8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:43 2026 by rpki-client