$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: qZz0c8w8riLud7QpgrnwoBFz7nbSI3Ay/WeGyHxiQis= Subject key identifier: DB:D4:C6:99:7A:36:3D:51:39:3D:91:96:99:E7:2D:56:98:25:DB:D3 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 2182B4D65530907DF4C5B16E4C04D445AF43562A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 01D5 Signing time: Thu 16 Apr 2026 21:52:09 +0000 Manifest this update: Thu 16 Apr 2026 21:47:09 +0000 Manifest next update: Sun 19 Apr 2026 23:43:09 +0000 Files and hashes: 1: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: XFjYoizQj1m0JauKYXs+x7Y0UhLNjevzce0hM+cKPkc=) 2: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: dOsg1NquFUOOp9EP16mqQPlHlKCMBlOxEwxrPFA6kwE=) 3: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: lX7hQlJeRcZ+gsTgjHlrDPxZb7NRV7+p4hILddhebUs=) 4: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: o1UGgLrYpGF/8t4HBvB/dOfi8G0yQMGfokHklcajpzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:82:b4:d6:55:30:90:7d:f4:c5:b1:6e:4c:04:d4:45:af:43:56:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Apr 16 21:47:09 2026 GMT Not After : Apr 19 23:43:09 2026 GMT Subject: CN=DBD4C6997A363D51393D919699E72D569825DBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:4f:19:6a:37:f5:16:b3:8a:da:ed:29:73: 74:88:f9:2b:8a:7e:3b:61:b2:93:38:ba:89:06:34: 7f:89:5f:df:dc:dd:ef:71:d9:4f:c9:84:f3:24:3d: df:ec:7e:8b:ca:98:f6:82:e8:a5:5c:8e:37:0b:75: 50:44:01:c8:d5:b9:15:43:5b:3f:3b:b6:f0:ac:84: 00:95:b6:0a:93:87:fe:78:df:00:ee:9a:34:1c:18: 10:b2:50:61:a8:74:d5:e3:68:d2:45:5c:28:8e:c3: 42:79:8c:4e:dc:ba:75:64:9c:4b:63:c3:f4:c8:e0: 8d:69:69:ac:37:b3:bf:ec:cd:0e:fb:c5:be:e9:3a: 7c:78:f3:5e:85:55:02:36:c1:af:4c:79:e6:ef:df: 33:50:85:d3:13:cb:7f:fe:82:ba:7f:6c:13:f1:73: fb:6b:e9:c9:eb:1c:46:18:91:56:52:b5:aa:84:d3: 94:f3:88:22:d0:b0:4f:15:d7:78:e2:08:03:74:3e: 19:ff:a7:61:78:e8:21:7e:2b:2f:5b:86:b4:3e:15: 29:39:e0:13:61:38:98:3c:69:c6:1d:4f:2a:a6:8c: 7b:9c:74:ea:d7:b3:66:c0:fb:2b:19:4b:9a:6b:f4: a8:84:33:7e:b5:fb:ec:fc:ec:e6:cc:d9:04:29:9b: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D4:C6:99:7A:36:3D:51:39:3D:91:96:99:E7:2D:56:98:25:DB:D3 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1b:43:b0:17:16:ac:01:68:d0:b4:7d:c2:02:67:5a:d7:01: 2c:d0:32:d1:15:30:a3:46:41:ef:cf:07:a6:b6:02:6a:2f:d8: 55:3c:f9:8a:bb:4e:20:88:8d:fd:53:52:8e:b4:57:7e:62:5c: a3:a1:5e:5a:92:ae:ce:69:f7:0a:5b:9e:fe:7b:a9:03:ca:3a: 50:62:54:cb:3d:db:2a:bb:a1:4e:97:d7:37:ca:30:7e:f7:3e: 99:49:89:0d:be:e3:93:a6:1d:3c:0c:93:71:5c:28:db:a8:a5: fe:74:64:a9:98:37:67:02:15:df:93:4b:64:5e:c8:51:99:a2: ba:a4:93:34:11:9c:f7:7a:83:73:24:6b:d4:cd:35:7a:9e:c7: 3b:b6:9a:b1:0e:de:3e:77:60:c3:92:00:03:91:ad:f0:eb:a1: 8f:6e:8d:bb:00:60:36:7f:5c:7f:98:0a:79:c0:e2:56:15:cf: b2:47:da:67:d1:03:e3:81:37:a8:93:69:7b:11:67:30:96:8d: 21:b9:7f:68:5d:91:48:7b:e9:9c:21:d3:b9:77:53:b6:1f:42: 12:6d:8f:cd:69:f6:d4:78:63:20:14:8e:03:0b:8c:7f:3c:77: 6b:c8:34:44:24:10:55:01:c7:8c:d8:d9:79:f9:33:7e:86:ae: 03:c5:11:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYK01lUwkH30xbFuTATURa9DViowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNjA0MTYyMTQ3MDlaFw0yNjA0MTkyMzQzMDlaMDMxMTAvBgNV BAMTKERCRDRDNjk5N0EzNjNENTEzOTNEOTE5Njk5RTcyRDU2OTgyNURCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jE8Zajf1FrOK2u0pc3SI+SuK fjthspM4uokGNH+JX9/c3e9x2U/JhPMkPd/sfovKmPaC6KVcjjcLdVBEAcjVuRVD Wz87tvCshACVtgqTh/543wDumjQcGBCyUGGodNXjaNJFXCiOw0J5jE7cunVknEtj w/TI4I1paaw3s7/szQ77xb7pOnx4816FVQI2wa9Meebv3zNQhdMTy3/+grp/bBPx c/tr6cnrHEYYkVZStaqE05TziCLQsE8V13jiCAN0Phn/p2F46CF+Ky9bhrQ+FSk5 4BNhOJg8acYdTyqmjHucdOrXs2bA+ysZS5pr9KiEM361++z87ObM2QQpmxhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU29TGmXo2PVE5PZGWmectVpgl29MwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAbQ7AXFqwBaNC0fcICZ1rXASzQMtEVMKNG Qe/PB6a2Amov2FU8+Yq7TiCIjf1TUo60V35iXKOhXlqSrs5p9wpbnv57qQPKOlBi VMs92yq7oU6X1zfKMH73PplJiQ2+45OmHTwMk3FcKNuopf50ZKmYN2cCFd+TS2Re yFGZorqkkzQRnPd6g3Mka9TNNXqexzu2mrEO3j53YMOSAAORrfDroY9ujbsAYDZ/ XH+YCnnA4lYVz7JH2mfRA+OBN6iTaXsRZzCWjSG5f2hdkUh76Zwh07l3U7YfQhJt j81p9tR4YyAUjgMLjH88d2vINEQkEFUBx4zY2Xn5M36GrgPFEfs= -----END CERTIFICATE-----Generated at Sat Apr 18 01:07:13 2026 by rpki-client