$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: BxpyzbmXBFPKpFd7frHWNI3nxpYTMNtU7++ht8LXZzw= Subject key identifier: 2A:52:E5:C5:1F:84:7F:FE:2F:59:89:F2:D6:7E:1E:A7:C0:6A:D6:97 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 55D5BA7507CD59414127FCEBF7F6D2BD74A16D13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: FB Signing time: Fri 06 Mar 2026 03:01:12 +0000 Manifest this update: Fri 06 Mar 2026 02:56:12 +0000 Manifest next update: Mon 09 Mar 2026 14:45:12 +0000 Files and hashes: 1: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) 2: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: CIHwT0OxD5KKIg0+goWWtDXeEBLHNp5bmMVpLN4M0BQ=) 3: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d5:ba:75:07:cd:59:41:41:27:fc:eb:f7:f6:d2:bd:74:a1:6d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Mar 6 02:56:12 2026 GMT Not After : Mar 9 14:45:12 2026 GMT Subject: CN=2A52E5C51F847FFE2F5989F2D67E1EA7C06AD697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:e3:40:c8:f3:ce:2b:09:21:45:2b:76:0f: 82:80:c2:8e:a5:21:79:2e:60:7a:26:7b:c8:08:25: de:2f:05:6e:ea:1c:23:2c:81:f0:75:44:66:13:ab: 3c:f3:ea:09:9d:a6:b3:6a:b9:39:b1:34:76:80:eb: f1:8b:6d:fd:9f:63:55:01:0f:54:85:a3:ef:03:60: c4:de:98:39:c9:fa:6f:e3:68:6b:9e:b6:da:41:10: 70:0e:31:83:be:1d:93:72:3d:f3:34:fe:14:f4:49: 2d:c5:4d:f0:bd:8a:60:2e:38:88:19:18:8d:a0:bd: b0:4c:92:71:03:cf:e3:62:68:f3:1e:2d:e9:5e:6a: d8:d1:a4:5b:68:dc:2d:8e:02:6e:21:ca:0a:07:37: a0:9c:2b:7f:30:05:18:44:b2:30:57:1f:eb:53:6a: 13:13:10:ec:8a:63:05:af:b6:8f:46:63:78:33:9a: d1:f3:f9:6a:da:e0:d7:19:f4:c3:f4:95:3a:88:15: b8:de:f8:1a:c2:53:f7:b4:19:74:6b:88:45:7f:21: f3:71:b4:ce:f3:38:73:d5:db:9d:d2:ec:3e:51:90: cc:3a:ed:8f:80:25:f9:2e:c5:26:54:07:50:5f:26: c9:90:18:e9:0b:f7:ba:ae:65:0c:2f:a7:bf:b2:fd: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:E5:C5:1F:84:7F:FE:2F:59:89:F2:D6:7E:1E:A7:C0:6A:D6:97 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:84:1c:0d:59:2d:a7:38:fe:0f:7a:26:43:76:a8:d7:43:da: 36:4c:54:81:90:81:53:b1:a2:62:84:41:60:50:27:07:db:85: 3d:92:9b:01:68:a0:62:6a:8c:62:26:4a:16:0a:e9:60:f4:b5: 5d:2c:bd:51:a2:2d:08:42:13:9f:2f:d5:a9:12:e3:5a:99:fe: c9:ee:79:47:f5:bc:a8:3b:86:16:02:67:aa:79:2c:42:dd:b4: ab:a5:04:2f:bd:ff:eb:1f:12:9f:38:4a:13:ab:7a:ec:25:cb: 90:1f:c0:9a:ec:9a:18:c1:08:95:8b:22:f1:da:83:5b:fc:97: 25:f5:bf:de:7e:fe:db:50:67:00:ae:2d:d7:21:54:6d:2d:3f: d8:b1:63:be:bc:1e:b3:f8:c7:28:b7:2f:0c:fd:77:96:31:77: b1:a4:4f:fc:93:a9:86:a8:cf:f1:33:2e:da:41:44:28:24:17: 0b:3f:73:06:3e:49:1b:4d:a1:2e:9f:9b:a2:38:67:43:ee:d6: 0d:f1:1a:68:8a:82:60:c1:66:45:6e:3e:84:ae:96:1b:09:be: e9:6e:b7:ee:c1:ef:37:c8:62:5e:eb:65:2d:9e:ab:26:d6:25: 83:ab:10:e7:c6:23:29:fd:ff:08:0e:7b:5e:3d:3d:96:65:9d: 9b:10:f5:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdW6dQfNWUFBJ/zr9/bSvXShbRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNjAzMDYwMjU2MTJaFw0yNjAzMDkxNDQ1MTJaMDMxMTAvBgNV BAMTKDJBNTJFNUM1MUY4NDdGRkUyRjU5ODlGMkQ2N0UxRUE3QzA2QUQ2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5uNAyPPOKwkhRSt2D4KAwo6l IXkuYHome8gIJd4vBW7qHCMsgfB1RGYTqzzz6gmdprNquTmxNHaA6/GLbf2fY1UB D1SFo+8DYMTemDnJ+m/jaGuettpBEHAOMYO+HZNyPfM0/hT0SS3FTfC9imAuOIgZ GI2gvbBMknEDz+NiaPMeLeleatjRpFto3C2OAm4hygoHN6CcK38wBRhEsjBXH+tT ahMTEOyKYwWvto9GY3gzmtHz+Wra4NcZ9MP0lTqIFbje+BrCU/e0GXRriEV/IfNx tM7zOHPV253S7D5RkMw67Y+AJfkuxSZUB1BfJsmQGOkL97quZQwvp7+y/ReBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKlLlxR+Ef/4vWYny1n4ep8Bq1pcwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCEHA1ZLac4/g96JkN2qNdD2jZMVIGQgVOx omKEQWBQJwfbhT2SmwFooGJqjGImShYK6WD0tV0svVGiLQhCE58v1akS41qZ/snu eUf1vKg7hhYCZ6p5LELdtKulBC+9/+sfEp84ShOreuwly5AfwJrsmhjBCJWLIvHa g1v8lyX1v95+/ttQZwCuLdchVG0tP9ixY768HrP4xyi3Lwz9d5Yxd7GkT/yTqYao z/EzLtpBRCgkFws/cwY+SRtNoS6fm6I4Z0Pu1g3xGmiKgmDBZkVuPoSulhsJvulu t+7B7zfIYl7rZS2eqybWJYOrEOfGIyn9/wgOe149PZZlnZsQ9Uo= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:33 2026 by rpki-client