$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: 4fpD3zBfrp2lmDb9z3o0gi8ObaQVJlOudAVEUM3Zq9U= Subject key identifier: E6:9E:5F:E6:AD:BD:51:B9:EE:02:3B:68:09:BA:C8:12:54:5D:1D:4B Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 56A8F4B9016D2CF6FD654782472B4793D8F0A946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 038C Signing time: Sun 01 Mar 2026 20:10:44 +0000 Manifest this update: Sun 01 Mar 2026 20:05:44 +0000 Manifest next update: Thu 05 Mar 2026 01:47:44 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 3: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 4: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: ZoCnuRJMqn2nh8SASb9EyPuzage7JTkr0dKV5ByNfcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a8:f4:b9:01:6d:2c:f6:fd:65:47:82:47:2b:47:93:d8:f0:a9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Mar 1 20:05:44 2026 GMT Not After : Mar 5 01:47:44 2026 GMT Subject: CN=E69E5FE6ADBD51B9EE023B6809BAC812545D1D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:7c:55:1d:53:cf:82:dc:97:df:25:ee:65: e2:95:7e:04:81:85:ea:03:97:78:ce:8d:b2:93:89: 92:fa:fc:be:e3:33:92:f4:3f:dc:f8:70:94:31:58: 27:7c:08:8a:1c:24:de:e5:3c:a4:80:f8:d0:f9:52: 54:ca:55:5d:fe:61:f9:37:61:c7:3e:4f:7d:db:7f: cb:ef:e6:bd:f1:ea:fe:35:95:3f:24:6d:90:d2:9d: 85:b7:5f:9b:ee:98:63:62:86:45:8e:be:15:55:2f: f6:2e:e3:4b:31:80:2f:fe:33:30:cb:ea:d2:ef:4a: 64:6b:37:e7:77:6e:90:db:b2:5e:65:70:fe:19:25: 18:5e:79:82:3a:0d:fe:73:f9:ba:26:a8:11:6a:e9: 7e:ea:97:87:6b:d5:59:f7:34:19:5d:89:43:7f:16: 6a:63:39:14:41:af:d0:78:17:e5:4d:a1:ce:00:25: 4d:89:a2:a3:1c:89:c1:e5:ae:3b:e6:cb:46:59:47: 32:8f:f2:97:21:af:bb:89:dc:65:f7:4d:11:03:18: 41:05:1a:78:2e:d7:bd:21:fd:ea:13:4e:b2:47:6b: 28:38:d0:03:6f:31:32:c4:fb:04:7a:f6:9f:25:21: 82:b2:55:b5:0e:45:b6:03:1c:de:8a:7e:c7:f9:d5: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9E:5F:E6:AD:BD:51:B9:EE:02:3B:68:09:BA:C8:12:54:5D:1D:4B X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f1:3f:5c:f1:d3:d8:6f:43:23:2c:7c:05:60:58:b9:95:fc: 07:48:23:11:9b:b1:06:14:bf:f7:f4:3b:1d:ab:32:0c:f4:61: 89:39:2c:03:23:83:c9:77:94:f6:7e:a7:77:68:f2:88:b2:9c: 83:ca:3f:ba:e7:a6:44:4a:b8:64:18:a1:b0:9d:a1:9d:e8:c3: 8c:39:a2:90:e3:be:81:aa:e8:ab:69:51:36:ba:fe:a4:e5:17: 51:21:10:ee:7e:d5:e9:05:7d:d9:33:8e:ec:f4:93:87:0d:50: 37:d2:a7:a9:bd:5d:ba:82:0e:31:22:92:13:e4:65:a2:eb:69: 2e:7d:da:36:73:08:30:a9:3c:a8:ce:f9:2d:1f:07:9e:a5:2c: c6:56:aa:9e:56:ba:32:17:bb:32:40:c3:47:77:70:75:36:a2: 39:ae:84:f4:c8:aa:09:1d:6c:84:8b:5e:a5:3a:b6:22:8d:bd: 8b:f7:d9:9d:1b:d1:cf:60:4e:35:93:a4:3d:59:d8:83:24:93: 8e:c5:94:52:c0:f1:ea:77:12:1a:8e:9c:24:0c:ff:7e:ef:db: bd:84:54:9f:71:eb:67:4d:57:ca:24:3f:e3:34:fd:54:72:af: 07:83:5c:20:f4:9b:a0:4c:51:4c:b7:a5:9f:0d:54:81:4a:17: 5b:5e:27:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqj0uQFtLPb9ZUeCRytHk9jwqUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNjAzMDEyMDA1NDRaFw0yNjAzMDUwMTQ3NDRaMDMxMTAvBgNV BAMTKEU2OUU1RkU2QURCRDUxQjlFRTAyM0I2ODA5QkFDODEyNTQ1RDFENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHb3xVHVPPgtyX3yXuZeKVfgSB heoDl3jOjbKTiZL6/L7jM5L0P9z4cJQxWCd8CIocJN7lPKSA+ND5UlTKVV3+Yfk3 Ycc+T33bf8vv5r3x6v41lT8kbZDSnYW3X5vumGNihkWOvhVVL/Yu40sxgC/+MzDL 6tLvSmRrN+d3bpDbsl5lcP4ZJRheeYI6Df5z+bomqBFq6X7ql4dr1Vn3NBldiUN/ FmpjORRBr9B4F+VNoc4AJU2JoqMcicHlrjvmy0ZZRzKP8pchr7uJ3GX3TREDGEEF Gngu170h/eoTTrJHayg40ANvMTLE+wR69p8lIYKyVbUORbYDHN6Kfsf51SqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5p5f5q29UbnuAjtoCbrIElRdHUswHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHxP1zx09hvQyMsfAVgWLmV/AdIIxGbsQYU v/f0Ox2rMgz0YYk5LAMjg8l3lPZ+p3do8oiynIPKP7rnpkRKuGQYobCdoZ3ow4w5 opDjvoGq6KtpUTa6/qTlF1EhEO5+1ekFfdkzjuz0k4cNUDfSp6m9XbqCDjEikhPk ZaLraS592jZzCDCpPKjO+S0fB56lLMZWqp5WujIXuzJAw0d3cHU2ojmuhPTIqgkd bISLXqU6tiKNvYv32Z0b0c9gTjWTpD1Z2IMkk47FlFLA8ep3EhqOnCQM/37v272E VJ9x62dNV8okP+M0/VRyrweDXCD0m6BMUUy3pZ8NVIFKF1teJ9Q= -----END CERTIFICATE-----Generated at Mon Mar 2 15:35:17 2026 by rpki-client