$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: LzYms6ZfGxVpZHfBSgyYMnXzL61J3HI9gL/oB63R860= Subject key identifier: 1A:11:D1:67:26:4F:E7:A5:9E:BF:E1:21:9F:E0:57:26:D8:04:1A:63 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 5C90CC3AAB99A628FEADE28BD2CD4F989EA452AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 03B1 Signing time: Sun 19 Apr 2026 07:22:18 +0000 Manifest this update: Sun 19 Apr 2026 07:17:18 +0000 Manifest next update: Wed 22 Apr 2026 15:52:18 +0000 Files and hashes: 1: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: 6iH7a2Ez+qCtkm3Og8bZwsZeRWNUirxExJ7tyRnTMEk=) 2: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: ScswL9bUHxklIocgroijXKfEDJTzVxzTBZjvmh8mZng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 15:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:cc:3a:ab:99:a6:28:fe:ad:e2:8b:d2:cd:4f:98:9e:a4:52:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Apr 19 07:17:18 2026 GMT Not After : Apr 22 15:52:18 2026 GMT Subject: CN=1A11D167264FE7A59EBFE1219FE05726D8041A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:9f:8e:44:74:3e:b7:48:09:04:21:ff:eb: f3:82:ee:5e:6b:58:59:a7:e7:7e:b8:d2:c5:ca:da: 50:8c:d3:08:e1:2f:28:ba:9a:8c:64:30:01:88:c4: a5:41:68:1e:a4:8e:66:a0:fc:ba:ad:12:21:1f:f9: 30:3c:2b:06:5f:27:6d:d6:7d:e1:d9:ae:b7:8d:17: 79:74:89:a0:95:70:ed:44:bc:3a:d2:1e:52:7a:e6: a2:2d:a0:85:81:d5:9b:0c:c4:9b:99:1a:e9:fd:d3: 96:4b:53:ed:2f:b5:a9:0f:6f:d3:a2:b1:7a:67:70: 7d:41:45:f6:d8:be:ad:06:02:e6:c3:fc:bf:c5:4c: f4:af:d4:8a:e9:3e:3e:7e:c5:d1:c3:0d:60:c3:ca: 12:71:8e:8e:77:eb:0b:0e:d4:e0:57:fd:7b:7c:ff: 85:0d:d8:a6:1f:a9:b9:c9:c2:2b:d1:5f:67:44:19: 0b:aa:c2:63:98:3a:f8:75:e7:bb:c2:f8:a6:d1:f7: a5:ba:b4:6f:27:8d:fd:06:35:05:4d:18:55:9f:a0: 93:a8:61:a1:75:f2:5e:08:84:20:19:dd:40:e4:af: 3a:72:95:70:b4:1d:e7:45:2f:a9:0d:97:97:f5:64: 8e:1f:f6:5a:86:de:cb:f6:d0:e0:3c:dd:b9:e8:41: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:D1:67:26:4F:E7:A5:9E:BF:E1:21:9F:E0:57:26:D8:04:1A:63 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1b:24:45:12:cc:68:4e:5e:ad:87:b9:3b:e4:d5:d1:c0:68: 6c:43:94:5e:d5:ab:ed:39:45:2a:31:da:28:17:97:b8:4c:d6: 7e:c9:44:cd:70:69:16:36:c3:91:ab:bd:21:b7:e8:2b:a4:9b: b1:05:8a:03:3a:20:d3:5f:55:21:41:98:b8:ef:7d:c7:5a:3e: fe:8f:ee:c7:2a:40:3a:c5:10:66:cc:40:f4:c6:ee:36:6d:5f: f0:1c:a9:a7:26:f6:cb:3a:bf:7c:c3:1d:20:3e:4a:ea:02:bb: 23:d3:09:fa:98:25:f9:26:1c:31:71:e7:4f:4c:b7:f0:5f:5e: a0:6f:79:e5:a6:99:58:54:3a:f2:4f:50:c9:dd:4c:b3:61:1e: 45:9b:30:44:08:a4:d1:98:7d:ae:5b:47:a6:bd:62:80:88:d5: ca:fd:1e:98:10:8e:49:31:44:b0:f7:7a:52:c6:2c:78:bb:87: bd:75:60:2b:7b:16:66:76:d2:6b:99:2a:5c:b5:1a:94:1f:d4: 2c:d2:6c:43:4f:5b:63:5d:fd:86:aa:c6:99:5e:5f:4d:bf:3c: c7:b1:d2:ad:d8:0a:0c:95:f9:36:5a:59:14:79:21:6e:9d:45: 9b:ff:11:7e:a8:93:84:a5:43:3b:da:cd:53:73:ea:aa:68:08: a8:04:a1:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJDMOquZpij+reKL0s1PmJ6kUq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNjA0MTkwNzE3MThaFw0yNjA0MjIxNTUyMThaMDMxMTAvBgNV BAMTKDFBMTFEMTY3MjY0RkU3QTU5RUJGRTEyMTlGRTA1NzI2RDgwNDFBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW25+ORHQ+t0gJBCH/6/OC7l5r WFmn53640sXK2lCM0wjhLyi6moxkMAGIxKVBaB6kjmag/LqtEiEf+TA8KwZfJ23W feHZrreNF3l0iaCVcO1EvDrSHlJ65qItoIWB1ZsMxJuZGun905ZLU+0vtakPb9Oi sXpncH1BRfbYvq0GAubD/L/FTPSv1IrpPj5+xdHDDWDDyhJxjo536wsO1OBX/Xt8 /4UN2KYfqbnJwivRX2dEGQuqwmOYOvh157vC+KbR96W6tG8njf0GNQVNGFWfoJOo YaF18l4IhCAZ3UDkrzpylXC0HedFL6kNl5f1ZI4f9lqG3sv20OA83bnoQVSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhHRZyZP56Wev+Ehn+BXJtgEGmMwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAbJEUSzGhOXq2HuTvk1dHAaGxDlF7Vq+05 RSox2igXl7hM1n7JRM1waRY2w5GrvSG36Cukm7EFigM6INNfVSFBmLjvfcdaPv6P 7scqQDrFEGbMQPTG7jZtX/Acqacm9ss6v3zDHSA+SuoCuyPTCfqYJfkmHDFx509M t/BfXqBveeWmmVhUOvJPUMndTLNhHkWbMEQIpNGYfa5bR6a9YoCI1cr9HpgQjkkx RLD3elLGLHi7h711YCt7FmZ20muZKly1GpQf1CzSbENPW2Nd/YaqxpleX02/PMex 0q3YCgyV+TZaWRR5IW6dRZv/EX6ok4SlQzvazVNz6qpoCKgEobY= -----END CERTIFICATE-----Generated at Mon Apr 20 09:39:12 2026 by rpki-client