$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: RNx1ajy+n4htTVnOjXbKlnY5cKfbKBjGbkti/2fKfk4= Subject key identifier: 05:C3:74:8E:B5:5E:22:95:1D:6A:4B:01:D7:19:B1:29:DC:E9:F6:48 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 0470638B47ABEE1CB399008BC326D87F57B4420F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 016B Signing time: Thu 05 Mar 2026 17:50:43 +0000 Manifest this update: Thu 05 Mar 2026 17:45:43 +0000 Manifest next update: Mon 09 Mar 2026 01:09:43 +0000 Files and hashes: 1: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: ik+ClLJJrZiQBj3nC27SD2EaaC1LQhY6FvWrLDAJdmU=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:70:63:8b:47:ab:ee:1c:b3:99:00:8b:c3:26:d8:7f:57:b4:42:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Mar 5 17:45:43 2026 GMT Not After : Mar 9 01:09:43 2026 GMT Subject: CN=05C3748EB55E22951D6A4B01D719B129DCE9F648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:b0:78:e4:22:09:6c:c7:50:45:55:e9:51: 54:94:77:da:08:93:32:f4:cf:3e:82:19:eb:41:c9: e8:b1:25:66:e8:5e:65:2b:2a:f7:a0:52:e8:29:9a: 67:6f:f0:0c:ec:0b:c2:c5:fd:9b:04:10:0b:14:01: 20:39:26:fc:a6:66:1d:5c:ba:1c:da:a9:68:06:26: 95:08:fe:1e:7c:86:6a:e9:e1:e2:4e:4e:98:fb:45: 3c:f8:7d:8e:de:f5:8f:a5:6b:65:e6:7f:92:36:b6: c7:29:01:60:f5:b0:2c:ac:d6:6e:f5:fb:45:34:bf: 0d:57:0a:fc:61:8e:ce:89:25:ea:3c:f5:25:59:2d: 2f:b4:7d:19:9f:21:a8:5a:82:ce:79:4f:87:60:09: 50:5c:d4:4b:ab:16:af:dd:9a:8d:bb:60:13:bb:c6: b4:f7:3f:11:82:c4:31:9e:54:d8:8b:fd:9f:8b:95: b4:05:49:6c:e6:74:45:dd:1c:31:78:9a:d2:6a:d6: 72:1d:d4:31:5b:12:1c:7c:5d:f4:25:52:c2:1a:6b: df:f0:7a:90:e3:5b:1e:d6:6c:8b:b8:41:72:5f:c4: 69:07:cb:da:4a:67:19:b6:5a:3a:a5:31:b0:f2:f1: ab:f6:c0:ed:5c:41:bc:95:ca:3a:a2:77:4d:4e:94: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C3:74:8E:B5:5E:22:95:1D:6A:4B:01:D7:19:B1:29:DC:E9:F6:48 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ab:d5:79:79:6c:03:23:84:56:f7:0d:b1:b0:d1:c2:1f:09: 0f:18:d5:14:20:a9:62:f8:b2:53:49:59:11:2c:5f:30:ac:85: e3:0d:79:08:16:15:9b:a5:97:74:61:ee:87:bf:83:22:fe:f1: a8:6b:56:b6:7e:fe:ab:fe:1a:98:42:07:f8:ff:c8:ea:f3:97: a2:08:00:a8:08:5b:4f:b9:ac:df:cb:f2:cc:dc:bf:0a:8f:bb: f1:71:9f:01:2c:80:7b:7b:70:a2:b1:41:f3:65:e5:ef:78:fd: 2f:df:aa:0d:91:b4:15:cb:99:45:90:a6:b3:7c:5e:17:10:01: db:ae:6c:5e:3f:66:11:5b:be:f2:3b:f3:da:e8:7e:65:99:eb: 6a:b2:e0:96:55:53:57:e3:4a:cc:5b:96:9e:48:65:22:2f:7f: 32:22:6c:3c:c2:7c:24:38:d9:65:a2:e8:e6:64:8a:72:5b:09: 75:48:fb:5b:6e:29:39:47:f6:c7:8f:03:24:90:42:92:ca:33: 2e:2d:b2:e5:a2:d2:d7:b0:7c:ce:d7:a5:33:d6:2c:eb:2a:2e: 78:b9:3b:f0:4f:26:55:a6:c9:26:01:de:90:85:8c:21:ee:29: d3:24:09:7c:b4:17:b1:46:4f:18:dd:0a:81:0f:2f:c7:f3:e9: 6a:b5:0f:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHBji0er7hyzmQCLwybYf1e0Qg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNjAzMDUxNzQ1NDNaFw0yNjAzMDkwMTA5NDNaMDMxMTAvBgNV BAMTKDA1QzM3NDhFQjU1RTIyOTUxRDZBNEIwMUQ3MTlCMTI5RENFOUY2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDLB45CIJbMdQRVXpUVSUd9oI kzL0zz6CGetByeixJWboXmUrKvegUugpmmdv8AzsC8LF/ZsEEAsUASA5JvymZh1c uhzaqWgGJpUI/h58hmrp4eJOTpj7RTz4fY7e9Y+la2Xmf5I2tscpAWD1sCys1m71 +0U0vw1XCvxhjs6JJeo89SVZLS+0fRmfIahags55T4dgCVBc1EurFq/dmo27YBO7 xrT3PxGCxDGeVNiL/Z+LlbQFSWzmdEXdHDF4mtJq1nId1DFbEhx8XfQlUsIaa9/w epDjWx7WbIu4QXJfxGkHy9pKZxm2WjqlMbDy8av2wO1cQbyVyjqid01OlNxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcN0jrVeIpUdaksB1xmxKdzp9kgwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+r1Xl5bAMjhFb3DbGw0cIfCQ8Y1RQgqWL4 slNJWREsXzCsheMNeQgWFZull3Rh7oe/gyL+8ahrVrZ+/qv+GphCB/j/yOrzl6II AKgIW0+5rN/L8szcvwqPu/FxnwEsgHt7cKKxQfNl5e94/S/fqg2RtBXLmUWQprN8 XhcQAduubF4/ZhFbvvI789rofmWZ62qy4JZVU1fjSsxblp5IZSIvfzIibDzCfCQ4 2WWi6OZkinJbCXVI+1tuKTlH9sePAySQQpLKMy4tsuWi0tewfM7XpTPWLOsqLni5 O/BPJlWmySYB3pCFjCHuKdMkCXy0F7FGTxjdCoEPL8fz6Wq1D+k= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:42 2026 by rpki-client