$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: ps5A6Yr4u9cEhvCeFbLPEF/fAES8deHMfH7O2qrdquo= Subject key identifier: 5B:6F:6B:A2:E5:4B:74:E9:8C:DB:4C:E3:BC:62:30:C8:BC:E7:6A:C3 Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 01F26AAC2D9339B6A558721CA5B1F59C9441A89C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 051E Signing time: Sat 18 Apr 2026 22:12:47 +0000 Manifest this update: Sat 18 Apr 2026 22:07:47 +0000 Manifest next update: Wed 22 Apr 2026 02:03:47 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) 2: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: 9c2/pWqCcBeuiFbGYBlblSN3S+5WVOk7Nig6zBtEKKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 02:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f2:6a:ac:2d:93:39:b6:a5:58:72:1c:a5:b1:f5:9c:94:41:a8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Apr 18 22:07:47 2026 GMT Not After : Apr 22 02:03:47 2026 GMT Subject: CN=5B6F6BA2E54B74E98CDB4CE3BC6230C8BCE76AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:7b:ed:37:0e:f1:93:e1:8e:69:dc:33:90: f1:a6:53:ce:7b:3d:24:cc:f3:be:e8:e8:10:ef:7d: 28:d1:96:dd:b5:14:29:fc:0e:ff:09:ce:39:ba:04: 61:1e:bf:81:43:67:c4:0c:73:6d:e8:fe:67:3b:d4: ec:50:5b:81:b8:d4:d0:ef:e1:95:6c:f4:ee:c3:ad: 4e:41:11:55:4f:e1:f3:a8:6d:45:00:3f:0e:a3:13: 49:47:58:be:08:fd:ae:f9:f8:7c:4c:22:2a:23:1b: ac:41:8e:ac:88:33:cf:55:11:b3:82:a5:25:a8:84: 08:23:66:cd:14:9b:0a:1b:c6:05:6a:89:13:bf:c8: 13:4d:48:42:82:ee:b6:79:9b:b7:26:19:10:5c:c9: c6:60:10:54:3e:aa:74:9c:79:ff:fa:3a:0d:78:ab: 63:bd:56:0b:0e:01:28:55:f4:0f:a0:0e:5f:52:5f: bd:c7:6f:5c:49:c7:67:2e:f5:5b:47:f4:81:65:8d: 44:ca:82:29:85:ac:cd:8d:26:17:d3:4b:3b:36:10: 0e:98:d1:9f:55:3d:a4:24:bd:6c:0c:3a:85:5a:7c: 77:76:38:b8:5a:86:6f:a3:5e:51:a3:26:7b:e3:46: 7f:94:dc:bb:0b:2d:20:b3:11:a4:d7:d4:a0:ec:b3: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:6B:A2:E5:4B:74:E9:8C:DB:4C:E3:BC:62:30:C8:BC:E7:6A:C3 X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ce:da:ea:83:e2:c1:59:39:cf:31:36:2a:0c:8b:fd:5f:89: 27:e7:72:87:5d:f3:7f:d9:79:0d:78:9b:7d:fd:bd:2a:ca:f9: 41:d4:35:1f:37:d9:28:0b:ec:f8:66:4a:74:82:f6:67:c6:a3: 74:af:dc:5e:c4:4f:6b:c8:ca:1f:eb:0d:ab:c1:4d:dd:ee:d7: a3:4c:be:1f:b8:65:12:b1:2f:2b:d5:03:6a:b9:c5:55:9d:83: 03:0f:54:29:31:ae:04:00:11:da:0c:26:d3:59:40:b7:93:bc: ea:e9:51:90:45:97:8e:66:58:49:3e:91:a6:e7:c1:84:b9:9e: 40:1f:02:5e:c8:6f:a6:5d:3f:8a:64:02:ca:65:66:56:07:e2: 2e:1b:20:76:bf:5b:ce:74:5d:19:a5:ee:85:bc:56:42:df:35: c7:6b:09:9b:2b:e9:0f:61:1b:bc:01:61:28:49:c8:50:e4:fd: ca:10:0f:b3:29:16:69:39:c3:41:a3:70:80:03:b4:1a:08:be: d1:4f:7e:8a:ed:dd:fe:07:b7:80:36:55:1e:31:f8:ea:36:62: 69:f3:67:65:f7:c1:a8:f5:30:23:45:97:e1:e9:9f:97:ac:86: 64:4f:8e:c9:87:d2:53:e0:eb:e0:e0:ca:6b:84:b8:79:9b:69: 01:a9:83:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfJqrC2TObalWHIcpbH1nJRBqJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNjA0MTgyMjA3NDdaFw0yNjA0MjIwMjAzNDdaMDMxMTAvBgNV BAMTKDVCNkY2QkEyRTU0Qjc0RTk4Q0RCNENFM0JDNjIzMEM4QkNFNzZBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcHvtNw7xk+GOadwzkPGmU857 PSTM877o6BDvfSjRlt21FCn8Dv8Jzjm6BGEev4FDZ8QMc23o/mc71OxQW4G41NDv 4ZVs9O7DrU5BEVVP4fOobUUAPw6jE0lHWL4I/a75+HxMIiojG6xBjqyIM89VEbOC pSWohAgjZs0UmwobxgVqiRO/yBNNSEKC7rZ5m7cmGRBcycZgEFQ+qnScef/6Og14 q2O9VgsOAShV9A+gDl9SX73Hb1xJx2cu9VtH9IFljUTKgimFrM2NJhfTSzs2EA6Y 0Z9VPaQkvWwMOoVafHd2OLhahm+jXlGjJnvjRn+U3LsLLSCzEaTX1KDss28VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW29rouVLdOmM20zjvGIwyLznasMwHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErO2uqD4sFZOc8xNioMi/1fiSfncodd83/Z eQ14m339vSrK+UHUNR832SgL7PhmSnSC9mfGo3Sv3F7ET2vIyh/rDavBTd3u16NM vh+4ZRKxLyvVA2q5xVWdgwMPVCkxrgQAEdoMJtNZQLeTvOrpUZBFl45mWEk+kabn wYS5nkAfAl7Ib6ZdP4pkAsplZlYH4i4bIHa/W850XRml7oW8VkLfNcdrCZsr6Q9h G7wBYShJyFDk/coQD7MpFmk5w0GjcIADtBoIvtFPfort3f4Ht4A2VR4x+Oo2Ymnz Z2X3waj1MCNFl+Hpn5eshmRPjsmH0lPg6+DgymuEuHmbaQGpg84= -----END CERTIFICATE-----Generated at Sun Apr 19 16:58:29 2026 by rpki-client