$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: qLSeMnec5CS0BYa0RXOmXRzsbRL0WTUyn8jAto6vOxE= Subject key identifier: 17:53:44:7A:45:27:60:8B:21:67:EF:71:8C:CA:FE:7A:A9:D7:A7:DE Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 2BC561231C12D5967FDC4E1FC6B31098D1591909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 017F Signing time: Sat 28 Feb 2026 18:41:25 +0000 Manifest this update: Sat 28 Feb 2026 18:36:25 +0000 Manifest next update: Tue 03 Mar 2026 22:44:25 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=) 2: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: 1mu3kC1UmEqlJX0AdpteFdxS29K3XZZrHgGdcSiVJ9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c5:61:23:1c:12:d5:96:7f:dc:4e:1f:c6:b3:10:98:d1:59:19:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Feb 28 18:36:25 2026 GMT Not After : Mar 3 22:44:25 2026 GMT Subject: CN=1753447A4527608B2167EF718CCAFE7AA9D7A7DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:69:1d:8e:32:7d:ac:3e:56:93:5d:92:ba: dd:6e:6e:af:70:d2:5c:61:9b:91:fc:bc:b2:d1:52: e7:09:94:de:36:fa:d9:25:b9:f1:51:6e:60:3d:22: f7:30:b7:91:fe:87:29:d8:6a:b7:5f:43:13:2f:69: 60:ac:6b:9d:2c:de:c4:e0:a1:80:51:0b:b8:8b:78: ef:28:4f:8d:e9:9e:8a:c1:e6:08:11:f4:a9:53:b4: 00:8c:d4:32:48:5c:03:d0:d9:08:fb:e9:8a:65:ee: c4:75:12:86:25:c8:c4:b3:d3:66:40:2f:9b:f8:2f: bf:8f:a2:2f:3d:f1:fb:a9:36:36:ac:98:17:1d:5d: 69:6f:ce:50:5f:da:21:db:ef:a5:f0:03:71:2a:bb: cf:e9:c5:54:0d:19:4b:78:19:33:9f:ee:18:ed:e3: 33:57:0b:ea:1d:b6:aa:66:8f:99:73:c6:9e:a7:8f: 9b:7c:6b:54:84:85:a5:91:91:ee:9f:e2:c5:8f:92: 05:12:49:66:49:da:a1:ac:ef:b2:9e:cc:7b:fb:51: c4:4f:aa:67:9d:48:d6:91:8e:fd:d5:1f:b2:9b:79: 9f:fe:37:30:82:56:e5:cf:d6:6e:62:d9:6c:9c:a0: 51:00:fb:89:cf:ce:be:7e:b9:82:25:89:b6:bd:16: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:53:44:7A:45:27:60:8B:21:67:EF:71:8C:CA:FE:7A:A9:D7:A7:DE X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b7:ab:63:48:dc:8e:bc:b3:9c:b2:89:4f:6c:a9:c2:bf:f3: ca:35:0d:9f:67:00:54:55:5e:92:11:d6:0c:0f:2e:d0:00:8c: 07:10:4c:eb:73:cd:a6:30:3d:00:26:c5:cf:e1:54:88:4f:f3: bc:ae:39:0c:da:c1:bd:22:87:58:73:e9:09:84:b9:29:ac:30: 28:91:34:29:99:72:75:13:ab:e8:70:ed:f8:3a:4e:fb:3b:ad: 46:bb:7e:35:87:c0:15:a1:2b:d4:7f:62:53:83:9a:6a:f0:5e: 68:57:fc:0a:17:95:30:6d:91:34:03:01:09:47:03:f7:3a:a1: 16:ad:ad:78:b9:c7:d7:d9:1d:d6:ba:54:01:1d:ca:37:04:a0: e1:d6:45:61:f6:94:be:90:a2:10:91:85:44:09:af:c8:4c:93: 66:40:2b:f8:f9:5f:8c:d7:1e:6c:1f:5a:cb:a3:45:ac:35:e7: f3:e7:6a:71:b2:2f:db:80:ee:8a:b7:6d:c6:5f:f3:cf:de:63: 5e:19:1e:ed:11:56:cc:c1:62:2a:87:19:80:f1:8e:37:54:3d: 25:a2:09:1a:a6:4c:0e:77:f5:02:c0:37:28:c3:2e:7d:0c:ca: 9e:e0:2b:05:be:77:b0:7d:74:ac:4e:a7:36:df:ff:0b:a8:e0: 35:be:31:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8VhIxwS1ZZ/3E4fxrMQmNFZGQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNjAyMjgxODM2MjVaFw0yNjAzMDMyMjQ0MjVaMDMxMTAvBgNV BAMTKDE3NTM0NDdBNDUyNzYwOEIyMTY3RUY3MThDQ0FGRTdBQTlEN0E3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+2kdjjJ9rD5Wk12Sut1ubq9w 0lxhm5H8vLLRUucJlN42+tklufFRbmA9Ivcwt5H+hynYardfQxMvaWCsa50s3sTg oYBRC7iLeO8oT43pnorB5ggR9KlTtACM1DJIXAPQ2Qj76Ypl7sR1EoYlyMSz02ZA L5v4L7+Poi898fupNjasmBcdXWlvzlBf2iHb76XwA3Equ8/pxVQNGUt4GTOf7hjt 4zNXC+odtqpmj5lzxp6nj5t8a1SEhaWRke6f4sWPkgUSSWZJ2qGs77KezHv7UcRP qmedSNaRjv3VH7KbeZ/+NzCCVuXP1m5i2WycoFEA+4nPzr5+uYIliba9FtFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF1NEekUnYIshZ+9xjMr+eqnXp94wHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu3q2NI3I68s5yyiU9sqcK/88o1DZ9nAFRV XpIR1gwPLtAAjAcQTOtzzaYwPQAmxc/hVIhP87yuOQzawb0ih1hz6QmEuSmsMCiR NCmZcnUTq+hw7fg6Tvs7rUa7fjWHwBWhK9R/YlODmmrwXmhX/AoXlTBtkTQDAQlH A/c6oRatrXi5x9fZHda6VAEdyjcEoOHWRWH2lL6QohCRhUQJr8hMk2ZAK/j5X4zX HmwfWsujRaw15/PnanGyL9uA7oq3bcZf88/eY14ZHu0RVszBYiqHGYDxjjdUPSWi CRqmTA539QLANyjDLn0Myp7gKwW+d7B9dKxOpzbf/wuo4DW+MSk= -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:39 2026 by rpki-client