$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft File: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft (raw, json) Hash identifier: KOR6ngJDOh9ni/ak2OdVzV5me3vtaZ7PCL9tKzA7RSo= Subject key identifier: BE:EC:C2:EC:70:00:71:79:A0:F3:FA:59:E9:27:52:D8:B9:D4:C3:EE Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Certificate serial: 05443D71CDE3967B4B25BD518A94F43569D67D4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft Manifest number: 0566 Signing time: Wed 15 Apr 2026 09:32:06 +0000 Manifest this update: Wed 15 Apr 2026 09:27:06 +0000 Manifest next update: Sat 18 Apr 2026 17:26:06 +0000 Files and hashes: 1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: oPq0eksRu+Qj6e9d7D3QHko1LMTQ6v8EettFrsXT3rc=) 2: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl (hash: L4RcVAvYeyLOxyD3Umqzfmek74WPDwvuiljRsY9glXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:44:3d:71:cd:e3:96:7b:4b:25:bd:51:8a:94:f4:35:69:d6:7d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Validity Not Before: Apr 15 09:27:06 2026 GMT Not After : Apr 18 17:26:06 2026 GMT Subject: CN=BEECC2EC70007179A0F3FA59E92752D8B9D4C3EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:e7:85:db:6b:2b:d7:8b:5b:9d:5f:3b:d9: ac:af:e7:fd:59:3e:01:37:6e:af:a7:1e:7f:6c:f2: 70:70:66:96:d8:ad:ce:a8:ee:cc:43:b0:d7:a3:85: 46:3b:ef:b1:9e:d2:0e:75:bd:8b:96:59:5a:a0:7d: 34:3e:5f:d2:be:fd:7d:af:7d:bd:a4:0e:6f:a4:c0: a6:b0:7e:1f:83:0e:87:16:43:93:8b:38:a4:88:08: c0:60:18:cb:79:93:22:01:78:65:37:64:19:09:c8: 04:9e:2d:40:95:93:d0:48:1e:22:68:5a:9f:3a:c4: 3d:b3:11:5a:ce:d8:8e:91:ae:18:90:4c:c7:93:5f: 1f:ff:31:41:42:ae:ae:d7:58:58:41:b4:29:78:4e: a3:4b:18:0b:42:c5:9a:78:ee:39:4e:10:6a:29:4c: 88:6c:f1:e3:2d:b1:a9:9d:55:9c:6d:ab:e0:1e:9c: f1:d3:c2:67:ad:f9:90:dc:24:b1:23:02:d3:ec:39: b0:ba:dc:4a:c9:4d:a9:14:d4:8d:ee:ee:e0:19:bd: c3:49:d7:8e:1c:08:40:99:3b:3d:b6:8e:48:39:d2: 0f:cf:18:94:6f:f2:15:01:43:0a:38:0f:f2:8c:5f: 89:05:d1:8a:2d:cc:cc:29:2e:b1:e2:3e:86:41:b5: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EC:C2:EC:70:00:71:79:A0:F3:FA:59:E9:27:52:D8:B9:D4:C3:EE X509v3 Authority Key Identifier: keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:72:8b:0a:fc:ed:c5:d8:73:cc:df:ef:eb:a2:14:33:01:48: f6:77:24:cc:d6:5c:67:01:20:45:36:9d:a5:af:3d:a0:a6:70: a4:39:54:d3:4c:6d:0b:23:c3:53:47:87:46:bd:3f:1b:24:b5: d0:cc:1a:dd:fc:c7:14:00:e5:54:ce:69:4a:b6:47:30:20:9d: 2a:5a:8d:7f:2e:bf:68:bf:66:19:9b:9c:cd:59:38:0e:19:2b: aa:92:a7:77:3a:de:62:83:90:cf:2e:91:bd:b6:5b:8f:59:0b: ae:1f:10:ff:ca:87:69:9e:4f:38:6b:de:a2:fc:0e:85:f9:25: ae:9d:3f:dc:82:3c:6a:bf:02:e4:be:d8:3a:5f:44:ac:19:2a: 9a:fe:fe:f6:2e:c2:13:7d:c1:7e:8a:8f:ef:ce:00:0d:00:d4: 81:b4:bc:7e:d2:52:50:57:a2:dd:13:8a:d0:f4:45:32:6b:e8: b5:32:1f:d2:10:f7:b4:45:bc:4c:82:2d:4b:f5:5a:18:a3:a5: 77:15:0a:23:67:ee:65:5e:86:c8:9b:de:5a:a7:8f:81:49:1f: 6a:b9:c1:b7:b4:ff:fc:49:7d:6e:dc:aa:5b:0a:ff:d9:13:65: d0:7b:ba:f6:dd:ae:e7:6e:5e:94:86:1c:87:79:9d:07:87:7b: 59:84:ea:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUQ9cc3jlntLJb1RipT0NWnWfUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5 QkYzQjlGMDAeFw0yNjA0MTUwOTI3MDZaFw0yNjA0MTgxNzI2MDZaMDMxMTAvBgNV BAMTKEJFRUNDMkVDNzAwMDcxNzlBMEYzRkE1OUU5Mjc1MkQ4QjlENEMzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9weeF22sr14tbnV872ayv5/1Z PgE3bq+nHn9s8nBwZpbYrc6o7sxDsNejhUY777Ge0g51vYuWWVqgfTQ+X9K+/X2v fb2kDm+kwKawfh+DDocWQ5OLOKSICMBgGMt5kyIBeGU3ZBkJyASeLUCVk9BIHiJo Wp86xD2zEVrO2I6RrhiQTMeTXx//MUFCrq7XWFhBtCl4TqNLGAtCxZp47jlOEGop TIhs8eMtsamdVZxtq+AenPHTwmet+ZDcJLEjAtPsObC63ErJTakU1I3u7uAZvcNJ 144cCECZOz22jkg50g/PGJRv8hUBQwo4D/KMX4kF0YotzMwpLrHiPoZBtb8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvuzC7HAAcXmg8/pZ6SdS2LnUw+4wHwYDVR0j BBgwFoAUXn5KY8cVspbVl7WqP+gAYJvzufAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU2Y2Q0MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMC81RTdFNEE2M0M3 MTVCMjk2RDU5N0I1QUEzRkU4MDA2MDlCRjNCOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5QkYz QjlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlNmNkNDEtMmU0Yy00Y2MyLTg4 MWUtYmFiNDRhODg0ZmQ0LzAvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAw NjA5QkYzQjlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNyiwr87cXYc8zf7+uiFDMBSPZ3JMzWXGcB IEU2naWvPaCmcKQ5VNNMbQsjw1NHh0a9PxsktdDMGt38xxQA5VTOaUq2RzAgnSpa jX8uv2i/ZhmbnM1ZOA4ZK6qSp3c63mKDkM8ukb22W49ZC64fEP/Kh2meTzhr3qL8 DoX5Ja6dP9yCPGq/AuS+2DpfRKwZKpr+/vYuwhN9wX6Kj+/OAA0A1IG0vH7SUlBX ot0TitD0RTJr6LUyH9IQ97RFvEyCLUv1WhijpXcVCiNn7mVehsib3lqnj4FJH2q5 wbe0//xJfW7cqlsK/9kTZdB7uvbdruduXpSGHId5nQeHe1mE6hM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:19:32 2026 by rpki-client