$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: t47F6Pw3+0qaaUkefYoNVljOKdOukUhszJUWKmEGkDI= Subject key identifier: DA:65:DD:AF:4A:77:9B:7B:53:D7:DF:0B:DE:C6:99:4D:E0:BE:98:78 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 5FBF01BA002BA45B6B9BA4CD979C41B82CBE5591 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 0121 Signing time: Mon 02 Mar 2026 07:12:12 +0000 Manifest this update: Mon 02 Mar 2026 07:07:12 +0000 Manifest next update: Thu 05 Mar 2026 15:18:12 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: bV6Uf2KkJDclR/6tcJ5jr02dSH4GrxY4VqyLR6EwGIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bf:01:ba:00:2b:a4:5b:6b:9b:a4:cd:97:9c:41:b8:2c:be:55:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Mar 2 07:07:12 2026 GMT Not After : Mar 5 15:18:12 2026 GMT Subject: CN=DA65DDAF4A779B7B53D7DF0BDEC6994DE0BE9878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:2c:7f:70:d2:35:f7:64:03:de:c7:43:c8: 2b:bb:f6:45:c9:84:41:07:da:9b:96:74:ba:bf:d0: 83:63:03:a7:7a:29:b5:48:54:b0:a1:c7:c0:62:fa: 4f:1b:c0:a3:86:a6:a6:8a:4a:8d:28:34:d3:d6:f3: 08:4b:5f:43:a6:49:69:d9:ef:d4:eb:e6:13:c9:10: 77:3b:aa:e2:75:1e:b6:da:c1:1e:aa:46:a9:7d:b6: e5:a2:1a:77:79:76:af:2f:97:98:a0:b5:bd:f5:73: 33:ba:28:7f:e2:6e:3e:ab:a5:bd:8c:d8:9f:6d:a3: b9:f4:f3:ec:42:ed:c4:89:34:de:56:bb:ed:49:ad: 05:46:8d:4e:44:b8:58:9d:db:cd:d5:9e:d3:91:0e: 00:c7:e2:10:c1:15:8b:f8:68:7b:f3:05:96:62:88: 6b:fd:1e:e1:f2:ae:84:45:80:fe:dc:2c:b2:a8:18: 22:2f:5c:bf:7b:4a:d4:bc:8a:22:1a:cb:5e:fa:68: 8b:f5:95:a3:a9:fb:15:e5:f6:38:42:9d:e3:a4:13: 61:80:3a:bd:7f:ba:65:e6:d2:fe:9f:1a:ec:ac:e5: e0:e9:d4:3f:92:66:78:7f:61:96:2a:eb:84:f2:e3: dd:00:8d:c0:65:a2:15:08:06:5f:3c:a5:08:9b:84: 07:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:65:DD:AF:4A:77:9B:7B:53:D7:DF:0B:DE:C6:99:4D:E0:BE:98:78 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ec:8a:af:78:cd:a0:fc:a2:76:56:3d:01:b4:29:3a:9c:00: f7:ee:5e:d8:18:9c:dc:24:06:37:3a:16:07:eb:3f:1b:b4:5c: f8:a4:a7:01:f7:71:20:80:56:b4:22:dc:eb:27:43:f3:42:68: f2:9e:e9:46:4e:b8:b9:dc:8d:83:c4:77:15:1a:1b:30:ae:ce: d0:98:ee:e8:3c:17:f3:1a:50:f3:97:4b:34:77:c8:25:18:23: 80:10:25:b0:b5:21:9c:81:30:4b:f2:48:82:6e:1f:2b:ce:4f: c8:04:a6:b5:c7:18:22:4e:b6:5a:44:95:e1:df:49:10:18:22: bf:4c:35:2b:ba:7c:57:8f:40:1b:d0:76:62:34:34:ba:36:cd: e0:c1:7d:e5:49:c7:38:38:87:da:67:b8:e6:37:40:16:84:32: 6b:0a:72:38:88:a4:cc:88:4d:55:52:e1:55:1b:3d:2c:b6:72: 10:8a:b4:85:a2:20:7a:b1:d3:e0:40:71:66:d3:56:b8:b0:15: 05:b0:e4:35:f7:55:e9:62:c3:d7:e1:df:e0:e7:e2:ed:df:29: 06:d4:fb:e7:ce:af:b3:7b:a0:63:97:57:9e:01:e7:9d:b1:39: 19:7c:87:0c:c2:f2:97:a3:d3:c3:6b:a1:47:72:d2:9b:71:36: 0f:25:6f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX78BugArpFtrm6TNl5xBuCy+VZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNjAzMDIwNzA3MTJaFw0yNjAzMDUxNTE4MTJaMDMxMTAvBgNV BAMTKERBNjVEREFGNEE3NzlCN0I1M0Q3REYwQkRFQzY5OTRERTBCRTk4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLyx/cNI192QD3sdDyCu79kXJ hEEH2puWdLq/0INjA6d6KbVIVLChx8Bi+k8bwKOGpqaKSo0oNNPW8whLX0OmSWnZ 79Tr5hPJEHc7quJ1HrbawR6qRql9tuWiGnd5dq8vl5igtb31czO6KH/ibj6rpb2M 2J9to7n08+xC7cSJNN5Wu+1JrQVGjU5EuFid283VntORDgDH4hDBFYv4aHvzBZZi iGv9HuHyroRFgP7cLLKoGCIvXL97StS8iiIay176aIv1laOp+xXl9jhCneOkE2GA Or1/umXm0v6fGuys5eDp1D+SZnh/YZYq64Ty490AjcBlohUIBl88pQibhAd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mXdr0p3m3tT198L3saZTeC+mHgwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7siq94zaD8onZWPQG0KTqcAPfuXtgYnNwk Bjc6FgfrPxu0XPikpwH3cSCAVrQi3OsnQ/NCaPKe6UZOuLncjYPEdxUaGzCuztCY 7ug8F/MaUPOXSzR3yCUYI4AQJbC1IZyBMEvySIJuHyvOT8gEprXHGCJOtlpEleHf SRAYIr9MNSu6fFePQBvQdmI0NLo2zeDBfeVJxzg4h9pnuOY3QBaEMmsKcjiIpMyI TVVS4VUbPSy2chCKtIWiIHqx0+BAcWbTVriwFQWw5DX3Veliw9fh3+Dn4u3fKQbU ++fOr7N7oGOXV54B552xORl8hwzC8pej08NroUdy0ptxNg8lb4E= -----END CERTIFICATE-----Generated at Mon Mar 2 18:51:52 2026 by rpki-client