$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: xhHDs/WzDCu/XGf1Tp95YRmial9dmGISBUnS/h3PF9w= Subject key identifier: FC:B8:DF:D6:1A:5B:47:2B:1E:48:37:C9:6B:56:0F:52:76:F5:0F:60 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 3EB2F28A5B94D84BE915920944BADA0E3FC5B794 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 017F Signing time: Mon 20 Apr 2026 06:30:45 +0000 Manifest this update: Mon 20 Apr 2026 06:25:45 +0000 Manifest next update: Thu 23 Apr 2026 16:15:45 +0000 Files and hashes: 1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=) 2: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=) 3: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=) 4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: x2JlRm12QtihL+eMouYDEQj+Nf3k2TlwFkTm+7THnu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b2:f2:8a:5b:94:d8:4b:e9:15:92:09:44:ba:da:0e:3f:c5:b7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Apr 20 06:25:45 2026 GMT Not After : Apr 23 16:15:45 2026 GMT Subject: CN=FCB8DFD61A5B472B1E4837C96B560F5276F50F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:6d:50:17:b8:29:78:53:cf:d6:8e:d0:c5: ed:e2:22:28:75:bf:2a:c6:7b:04:19:e4:7b:06:51: 20:43:30:f6:52:d1:e2:60:aa:3d:12:9c:57:50:84: 64:e6:73:dc:a5:be:83:41:47:d4:7e:12:f5:59:14: 31:6e:c5:f7:b6:5c:0a:41:0d:e9:fb:07:ac:9c:e1: 8a:eb:dc:6f:af:77:18:de:96:7b:33:a8:d4:36:d2: 58:6d:5d:9e:6a:f3:29:46:aa:5c:e3:f4:bc:f3:f3: 29:a1:a0:c2:30:74:28:b8:a6:1a:a3:57:9f:df:d2: 09:e0:29:49:70:65:bf:4d:e8:76:b1:83:10:d3:4a: 28:7a:ca:b2:fa:fc:9b:54:e0:c2:85:bd:39:1d:ef: 76:dd:20:29:95:65:79:08:ef:af:00:b7:0f:5a:14: 15:f0:d8:c8:08:65:50:f1:fe:71:f7:d4:0e:1d:25: 48:c0:57:08:7b:40:4b:c2:46:90:f5:66:b9:fa:e2: 9e:79:6e:db:a9:ab:97:94:4a:e0:1f:0e:81:71:e2: f8:86:0e:28:2a:8c:cd:11:6b:fc:7c:3f:51:5f:64: 9c:6d:c2:b6:39:88:f8:85:77:8e:3e:95:3a:b5:53: 32:25:f3:ba:ec:e5:c1:aa:3c:d5:6e:20:0a:fc:84: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:DF:D6:1A:5B:47:2B:1E:48:37:C9:6B:56:0F:52:76:F5:0F:60 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b8:d8:4a:7c:88:8d:36:da:73:d9:a1:3a:13:07:b9:33:f2: 10:4b:95:48:aa:84:b2:3c:bc:dc:66:32:9e:02:fa:49:4e:1d: ad:e9:ba:bc:bd:ce:4f:fe:9b:d9:9f:b6:65:aa:7d:a9:f8:a3: a5:9b:b3:4b:de:bb:04:58:79:59:c7:15:4f:80:27:63:84:67: f8:da:16:46:16:02:f4:87:98:d4:43:48:c2:53:2b:66:fe:44: 74:b1:fa:21:57:0e:20:4f:06:52:d6:f5:87:77:a4:19:78:74: c3:ab:23:cc:9d:74:e7:71:9c:24:8e:e4:0f:b0:82:b2:1d:94: 32:04:b8:83:4c:7c:13:c4:7d:ec:53:a6:1f:c2:e9:2f:b8:1d: e9:3f:60:89:38:7f:ab:a1:1c:db:56:de:dd:2b:20:e8:e3:cc: b9:f4:e1:ff:08:83:78:56:d9:c2:96:83:8d:62:65:e8:58:a8: ab:5e:ba:82:1b:cf:05:97:fb:24:0b:9d:81:81:07:f3:2a:fe: e6:3f:36:5e:2f:6a:8b:1d:ea:ae:c5:05:2b:b8:1b:1b:0d:57: 28:94:14:a8:c8:86:8b:da:ca:ee:ca:8a:50:c9:d0:df:15:3b: ed:ad:87:9e:bd:94:ba:89:b7:8c:a2:76:f8:b9:5e:4f:a9:a9: d0:7c:0f:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrLyiluU2EvpFZIJRLraDj/Ft5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNjA0MjAwNjI1NDVaFw0yNjA0MjMxNjE1NDVaMDMxMTAvBgNV BAMTKEZDQjhERkQ2MUE1QjQ3MkIxRTQ4MzdDOTZCNTYwRjUyNzZGNTBGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNP21QF7gpeFPP1o7Qxe3iIih1 vyrGewQZ5HsGUSBDMPZS0eJgqj0SnFdQhGTmc9ylvoNBR9R+EvVZFDFuxfe2XApB Den7B6yc4Yrr3G+vdxjelnszqNQ20lhtXZ5q8ylGqlzj9Lzz8ymhoMIwdCi4phqj V5/f0gngKUlwZb9N6HaxgxDTSih6yrL6/JtU4MKFvTkd73bdICmVZXkI768Atw9a FBXw2MgIZVDx/nH31A4dJUjAVwh7QEvCRpD1Zrn64p55btupq5eUSuAfDoFx4viG DigqjM0Ra/x8P1FfZJxtwrY5iPiFd44+lTq1UzIl87rs5cGqPNVuIAr8hHOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Ljf1hpbRyseSDfJa1YPUnb1D2AwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW42Ep8iI022nPZoToTB7kz8hBLlUiqhLI8 vNxmMp4C+klOHa3pury9zk/+m9mftmWqfan4o6Wbs0veuwRYeVnHFU+AJ2OEZ/ja FkYWAvSHmNRDSMJTK2b+RHSx+iFXDiBPBlLW9Yd3pBl4dMOrI8yddOdxnCSO5A+w grIdlDIEuINMfBPEfexTph/C6S+4Hek/YIk4f6uhHNtW3t0rIOjjzLn04f8Ig3hW 2cKWg41iZehYqKteuoIbzwWX+yQLnYGBB/Mq/uY/Nl4vaosd6q7FBSu4GxsNVyiU FKjIhovayu7KilDJ0N8VO+2th569lLqJt4yidvi5Xk+pqdB8D5E= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:16 2026 by rpki-client