$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json) Hash identifier: HbRbcHmQ81pro7GWi2htb4IdmsXWNBG0NZK7l4VTCXc= Subject key identifier: 20:BB:39:39:9C:C4:F4:C4:4F:6B:0F:B4:A5:A1:E8:12:EB:40:E3:6D Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Certificate serial: 673D9C47BBC3EFB564E0B48882E0A9937DD9A540 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft Manifest number: 5B Signing time: Fri 17 Apr 2026 04:21:11 +0000 Manifest this update: Fri 17 Apr 2026 04:16:11 +0000 Manifest next update: Mon 20 Apr 2026 05:12:11 +0000 Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=) 2: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: rEZqIYxMRZwtzKWRG/JlHg5uk+d09+sln6anlhrCBDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3d:9c:47:bb:c3:ef:b5:64:e0:b4:88:82:e0:a9:93:7d:d9:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Validity Not Before: Apr 17 04:16:11 2026 GMT Not After : Apr 20 05:12:11 2026 GMT Subject: CN=20BB39399CC4F4C44F6B0FB4A5A1E812EB40E36D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:60:73:fd:c2:b3:08:1e:52:7b:85:fa:54: 1a:6a:07:4f:9b:c7:04:20:4a:b3:59:5c:0a:19:71: 44:25:58:cc:36:3f:70:c0:bd:57:45:1c:a4:8d:4e: 6a:46:c3:d9:b9:75:0b:ee:59:50:4b:bc:55:af:3e: f3:05:19:88:74:a2:79:c6:a1:4c:f4:b6:34:7f:a8: 6a:ae:08:c6:5e:67:e9:7f:33:86:18:2c:fc:11:59: 10:c1:5b:1a:41:68:39:97:0c:6a:e1:e4:6a:2c:a8: 20:b6:ec:bb:86:64:6b:c8:8b:ba:d2:86:36:75:45: 5b:75:9e:c1:0c:4e:a6:8a:50:af:1d:3d:ff:03:44: e1:4c:b1:91:c9:40:56:cb:10:f8:d6:07:f7:fc:7a: 4a:63:42:51:6e:7d:0f:74:4d:7f:8c:e4:96:ad:46: ad:c1:01:a7:f9:fe:40:f0:d4:00:59:d2:39:88:08: cc:e1:ed:46:30:9b:3e:7a:1f:03:3d:01:a0:34:75: cd:89:fb:c9:44:0e:e1:e9:80:98:c4:d5:58:5b:bd: 32:ff:d8:18:ae:82:f7:1c:86:d5:ae:ab:df:69:77: 53:bd:74:1c:c9:33:bf:fd:31:7a:87:07:40:87:7d: 6f:0a:bf:63:a6:d5:a0:1c:74:c5:91:df:7b:3f:71: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:39:39:9C:C4:F4:C4:4F:6B:0F:B4:A5:A1:E8:12:EB:40:E3:6D X509v3 Authority Key Identifier: keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e4:f8:51:a1:93:53:f2:e5:a6:88:28:e0:ee:8f:e1:df:38: f8:22:37:80:7e:0b:83:24:8e:59:69:af:89:a4:12:67:19:f7: e1:df:84:51:b5:40:30:e9:82:a8:b1:3b:14:85:86:97:09:3e: 29:f7:87:42:d0:0f:ef:36:5c:8d:c6:7d:ea:72:cf:44:6b:8f: de:87:24:56:3b:39:4b:7b:02:7e:5e:5d:e3:59:61:3a:22:04: 68:22:56:66:b8:12:b8:b9:f5:f1:4c:36:42:cc:0b:d0:81:7c: 60:cc:8c:57:29:54:f8:4a:e6:9e:88:ad:cf:a1:88:a5:ba:75: db:7d:c0:3d:b2:98:b0:51:9d:81:e0:78:8e:e7:b9:81:bc:e3: 22:bb:a6:80:9a:e6:b8:71:c5:80:98:9f:da:d1:c6:fc:d9:34: 4f:5b:0e:43:53:ad:e1:4d:0f:06:12:48:3f:57:37:ad:ac:30: dd:82:5e:eb:65:f3:0d:19:95:a9:9f:55:f1:fe:f8:27:d5:0a: e8:72:58:b3:f3:cc:88:5d:50:2b:0a:16:fa:ea:ac:a5:a5:c0: 96:6d:46:5d:2c:71:05:00:92:4e:a1:ce:11:91:5f:b9:3b:03: 7d:f5:f7:49:c2:44:25:8d:ce:e4:64:e3:ce:81:ce:76:e2:52: 9e:57:e1:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZz2cR7vD77Vk4LSIguCpk33ZpUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdB OTZGMzZDRTAeFw0yNjA0MTcwNDE2MTFaFw0yNjA0MjAwNTEyMTFaMDMxMTAvBgNV BAMTKDIwQkIzOTM5OUNDNEY0QzQ0RjZCMEZCNEE1QTFFODEyRUI0MEUzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGe2Bz/cKzCB5Se4X6VBpqB0+b xwQgSrNZXAoZcUQlWMw2P3DAvVdFHKSNTmpGw9m5dQvuWVBLvFWvPvMFGYh0onnG oUz0tjR/qGquCMZeZ+l/M4YYLPwRWRDBWxpBaDmXDGrh5GosqCC27LuGZGvIi7rS hjZ1RVt1nsEMTqaKUK8dPf8DROFMsZHJQFbLEPjWB/f8ekpjQlFufQ90TX+M5Jat Rq3BAaf5/kDw1ABZ0jmICMzh7UYwmz56HwM9AaA0dc2J+8lEDuHpgJjE1VhbvTL/ 2BiugvcchtWuq99pd1O9dBzJM7/9MXqHB0CHfW8Kv2Om1aAcdMWR33s/cVpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUILs5OZzE9MRPaw+0paHoEutA420wHwYDVR0j BBgwFoAUXyLSCE93S2jZ3pdjOXtWV6lvNs4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWIxYTc5MC1kY2VkLTQ2NGEtODk1ZC05MDM1YTBjYzVmMmYvMC81RjIyRDIwODRG Nzc0QjY4RDlERTk3NjMzOTdCNTY1N0E5NkYzNkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdBOTZG MzZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2 NTdBOTZGMzZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7k+FGhk1Py5aaIKODuj+HfOPgiN4B+C4Mk jllpr4mkEmcZ9+HfhFG1QDDpgqixOxSFhpcJPin3h0LQD+82XI3Gfepyz0Rrj96H JFY7OUt7An5eXeNZYToiBGgiVma4Eri59fFMNkLMC9CBfGDMjFcpVPhK5p6Irc+h iKW6ddt9wD2ymLBRnYHgeI7nuYG84yK7poCa5rhxxYCYn9rRxvzZNE9bDkNTreFN DwYSSD9XN62sMN2CXutl8w0ZlamfVfH++CfVCuhyWLPzzIhdUCsKFvrqrKWlwJZt Rl0scQUAkk6hzhGRX7k7A33190nCRCWNzuRk486BznbiUp5X4RM= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:12 2026 by rpki-client