$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: rQb8EMddl5rtEbrYq9o+0TEGWuA0NtE3dXa0J8wsApI= Subject key identifier: 28:CD:D7:F3:49:BB:EC:77:31:14:DC:40:30:70:33:77:F1:06:40:C5 Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 6FD4B06B763D5C7BB5F5922C5F762345A6BE2AB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 0509 Signing time: Sun 01 Mar 2026 01:52:45 +0000 Manifest this update: Sun 01 Mar 2026 01:47:45 +0000 Manifest next update: Wed 04 Mar 2026 09:04:45 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) 2: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: T2aC8ENtzhq5RldyXNxCsFZRvvykU+kP/bxWEGJxr80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d4:b0:6b:76:3d:5c:7b:b5:f5:92:2c:5f:76:23:45:a6:be:2a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Mar 1 01:47:45 2026 GMT Not After : Mar 4 09:04:45 2026 GMT Subject: CN=28CDD7F349BBEC773114DC4030703377F10640C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:68:02:3b:ac:7a:00:2c:6a:7b:57:96:8c: 3b:fa:10:53:35:6c:6c:03:f6:78:06:5b:90:86:16: 07:44:ea:b6:c6:17:76:ea:12:46:12:25:f0:3d:b0: 0f:13:19:8a:85:24:81:db:22:7b:1b:a4:c2:ae:e2: c7:86:34:89:09:8f:3b:63:10:b0:46:85:83:2d:ab: 97:43:43:97:47:af:9c:ce:4f:fe:4c:02:db:e1:f8: 83:20:59:b9:94:75:2b:f4:54:ab:13:72:d6:4f:55: 5a:4b:2a:49:02:b6:47:6a:ea:6e:df:46:98:a8:79: 1f:68:e2:41:0d:83:c2:54:d1:1c:7f:a5:05:ce:09: a6:49:bc:2d:d0:a3:c2:90:fa:1a:d7:c0:f9:79:2d: 2d:ce:07:b6:82:28:ed:a0:d6:ba:a6:67:4d:bb:ff: 3a:a6:a1:02:ac:9e:f9:ca:a9:f4:65:35:a4:e8:49: 48:11:de:d1:24:eb:21:eb:27:27:08:61:f8:12:33: 80:5b:33:2e:ca:7c:f9:4c:81:3c:e3:0f:b7:17:ea: d3:f5:74:a0:48:38:ba:cb:da:02:d1:56:14:81:d8: b4:97:7f:b4:09:25:65:b5:89:61:ee:1b:1d:f1:7a: a3:f2:c8:b5:b8:6d:08:a0:e8:94:4a:25:ca:be:12: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CD:D7:F3:49:BB:EC:77:31:14:DC:40:30:70:33:77:F1:06:40:C5 X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9d:22:b9:5c:70:04:af:97:27:dd:82:88:f5:f9:c5:ea:61: 81:b5:df:37:a1:a6:b1:69:82:d3:eb:81:f0:64:f9:71:aa:8f: 01:97:9d:da:eb:77:be:6c:f1:2d:de:c1:d6:75:ae:9d:72:65: 9a:45:9d:f8:d4:b2:fe:ac:89:b8:93:fd:25:c7:f9:82:16:d7: 6a:c4:e3:e3:6e:5e:9e:e9:50:87:6d:7a:29:ce:72:07:06:6b: f4:b8:3a:0d:5b:e6:d9:63:f2:aa:d7:39:05:61:e2:50:5c:1b: 18:9b:c9:05:5f:17:f2:a5:f1:7e:d8:b0:f8:9e:14:33:3e:07: 60:a7:e4:61:e7:e9:05:5f:64:bb:c6:ca:ae:e3:7c:bc:e6:dd: cc:fe:98:6d:5c:95:d5:7a:a4:c4:1a:78:26:ed:fa:e1:00:e2: 93:d6:67:df:9c:dc:9e:3e:a7:18:85:af:54:de:66:6c:53:2a: f6:8e:30:8c:bd:b1:45:6b:7a:c6:63:f1:e1:51:9d:41:a5:fb: d6:1f:ee:bf:4e:a0:af:a1:96:cc:a8:18:e5:5b:36:49:76:cc: b7:93:82:70:11:d7:36:da:17:81:ae:46:f7:2e:96:37:4c:27: fc:1b:fe:1a:69:69:ec:40:11:7d:47:b5:11:94:38:32:b9:93: 49:f4:da:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9Swa3Y9XHu19ZIsX3YjRaa+KrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNjAzMDEwMTQ3NDVaFw0yNjAzMDQwOTA0NDVaMDMxMTAvBgNV BAMTKDI4Q0REN0YzNDlCQkVDNzczMTE0REM0MDMwNzAzMzc3RjEwNjQwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35GgCO6x6ACxqe1eWjDv6EFM1 bGwD9ngGW5CGFgdE6rbGF3bqEkYSJfA9sA8TGYqFJIHbInsbpMKu4seGNIkJjztj ELBGhYMtq5dDQ5dHr5zOT/5MAtvh+IMgWbmUdSv0VKsTctZPVVpLKkkCtkdq6m7f RpioeR9o4kENg8JU0Rx/pQXOCaZJvC3Qo8KQ+hrXwPl5LS3OB7aCKO2g1rqmZ027 /zqmoQKsnvnKqfRlNaToSUgR3tEk6yHrJycIYfgSM4BbMy7KfPlMgTzjD7cX6tP1 dKBIOLrL2gLRVhSB2LSXf7QJJWW1iWHuGx3xeqPyyLW4bQig6JRKJcq+EspJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKM3X80m77HcxFNxAMHAzd/EGQMUwHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFudIrlccASvlyfdgoj1+cXqYYG13zehprFp gtPrgfBk+XGqjwGXndrrd75s8S3ewdZ1rp1yZZpFnfjUsv6sibiT/SXH+YIW12rE 4+NuXp7pUIdteinOcgcGa/S4Og1b5tlj8qrXOQVh4lBcGxibyQVfF/Kl8X7YsPie FDM+B2Cn5GHn6QVfZLvGyq7jfLzm3cz+mG1cldV6pMQaeCbt+uEA4pPWZ9+c3J4+ pxiFr1TeZmxTKvaOMIy9sUVresZj8eFRnUGl+9Yf7r9OoK+hlsyoGOVbNkl2zLeT gnAR1zbaF4GuRvculjdMJ/wb/hppaexAEX1HtRGUODK5k0n02uc= -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:25 2026 by rpki-client