$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: 5rXHHFEPaL+zr8FMrdQsCo8BkIc4XW9gCydWwMjCfcU= Subject key identifier: CF:1D:6D:7E:CF:22:C5:BB:59:4E:6F:29:19:10:5F:AB:50:16:FE:BE Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 426828B55A8B120B8A1CBDB46D15CF3C903243C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 01BF Signing time: Sat 28 Feb 2026 02:32:03 +0000 Manifest this update: Sat 28 Feb 2026 02:27:03 +0000 Manifest next update: Tue 03 Mar 2026 11:15:03 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 2: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 3: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: deHAlezBTBIicdEzlcThfkATE3NqwfKs1VF8kx9tlnM=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:68:28:b5:5a:8b:12:0b:8a:1c:bd:b4:6d:15:cf:3c:90:32:43:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Feb 28 02:27:03 2026 GMT Not After : Mar 3 11:15:03 2026 GMT Subject: CN=CF1D6D7ECF22C5BB594E6F2919105FAB5016FEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:36:6c:94:85:59:7e:ea:d5:f0:85:ee:f3: a9:c9:29:d1:0d:f5:31:fa:bd:4b:35:53:59:bf:4b: d0:70:31:4b:4a:ca:45:4d:20:5e:fe:6f:d1:0e:62: 8c:d3:17:7b:05:26:0a:f5:ff:c2:d5:72:ee:69:9f: a1:0b:a0:47:7b:9c:53:5d:89:f8:ed:b0:70:a7:7f: f5:38:35:17:a2:1a:b3:22:b5:41:74:2c:fc:4a:7f: db:09:eb:0e:92:8e:63:4a:e6:37:fa:4c:99:92:f9: a4:65:b2:16:d1:a0:82:a4:d3:6f:a9:32:ae:d2:ef: f0:80:34:ae:49:86:62:09:4d:18:7f:03:25:2f:14: 28:6b:fc:5e:0a:05:45:22:d2:eb:d4:97:9a:48:df: c7:08:0e:df:5d:56:12:d0:91:dd:23:bd:77:da:a1: 14:74:f9:61:84:1e:e8:db:9f:97:e9:e4:6a:8d:63: c3:8f:a3:25:23:a2:d1:f8:aa:29:97:33:66:03:5b: 70:c8:91:4c:cd:db:3b:0e:ce:b8:42:9b:b7:ca:c7: 20:98:f4:9f:88:6f:a6:51:2b:6d:7b:72:b9:c0:36: 0c:81:d1:ad:68:29:44:47:f7:75:26:b7:ae:b7:af: af:16:27:e3:d8:b0:6f:1b:84:2a:23:eb:38:8b:4b: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1D:6D:7E:CF:22:C5:BB:59:4E:6F:29:19:10:5F:AB:50:16:FE:BE X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:74:85:b1:a6:b5:fa:b0:08:cc:35:2b:32:5c:60:69:36:9a: 91:b5:68:f8:18:cb:7f:b5:87:23:63:21:4f:d9:54:21:5b:1a: 72:48:94:d6:2e:28:e2:ab:e4:e0:06:b4:79:2f:4d:58:3f:aa: 59:69:0d:ce:3d:29:89:b1:29:9f:34:e6:33:f7:b3:08:fc:43: 62:e6:85:bb:93:58:fb:5a:dd:c8:a5:3d:e1:77:49:a6:5f:bc: 4a:01:8c:e0:9c:75:be:3e:f3:20:c2:18:57:23:48:17:b1:9d: a0:ce:55:bf:c0:fe:bb:f9:65:a6:d5:de:f6:87:d8:e1:93:f8: 91:ff:bc:f7:9b:29:8a:2a:fb:84:15:1d:10:99:b7:5d:59:b2: 97:4c:8c:3b:80:f1:de:6f:d7:8a:88:2a:6e:94:a8:eb:2c:20: 9d:72:5f:8e:0b:e1:0b:5d:41:c2:b3:c0:a7:cb:8b:23:4c:d2: d4:90:cd:71:15:f6:ed:07:c8:c9:46:b4:1e:b8:ab:7d:80:59: ad:22:bc:67:af:a5:93:10:21:89:67:a3:fb:e9:68:aa:c5:46: 21:2e:7f:85:8f:a8:92:47:6a:14:46:4a:c1:01:47:75:bf:2f: d7:73:27:67:79:29:25:55:53:fa:07:79:70:44:09:f1:6e:99: 4d:fd:66:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmgotVqLEguKHL20bRXPPJAyQ8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNjAyMjgwMjI3MDNaFw0yNjAzMDMxMTE1MDNaMDMxMTAvBgNV BAMTKENGMUQ2RDdFQ0YyMkM1QkI1OTRFNkYyOTE5MTA1RkFCNTAxNkZFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqDZslIVZfurV8IXu86nJKdEN 9TH6vUs1U1m/S9BwMUtKykVNIF7+b9EOYozTF3sFJgr1/8LVcu5pn6ELoEd7nFNd ifjtsHCnf/U4NReiGrMitUF0LPxKf9sJ6w6SjmNK5jf6TJmS+aRlshbRoIKk02+p Mq7S7/CANK5JhmIJTRh/AyUvFChr/F4KBUUi0uvUl5pI38cIDt9dVhLQkd0jvXfa oRR0+WGEHujbn5fp5GqNY8OPoyUjotH4qimXM2YDW3DIkUzN2zsOzrhCm7fKxyCY 9J+Ib6ZRK217crnANgyB0a1oKURH93Umt663r68WJ+PYsG8bhCoj6ziLS+FVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzx1tfs8ixbtZTm8pGRBfq1AW/r4wHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH90hbGmtfqwCMw1KzJcYGk2mpG1aPgYy3+1 hyNjIU/ZVCFbGnJIlNYuKOKr5OAGtHkvTVg/qllpDc49KYmxKZ805jP3swj8Q2Lm hbuTWPta3cilPeF3SaZfvEoBjOCcdb4+8yDCGFcjSBexnaDOVb/A/rv5ZabV3vaH 2OGT+JH/vPebKYoq+4QVHRCZt11ZspdMjDuA8d5v14qIKm6UqOssIJ1yX44L4Qtd QcKzwKfLiyNM0tSQzXEV9u0HyMlGtB64q32AWa0ivGevpZMQIYlno/vpaKrFRiEu f4WPqJJHahRGSsEBR3W/L9dzJ2d5KSVVU/oHeXBECfFumU39ZmQ= -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:42 2026 by rpki-client