$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: L+zwO/t71wVC08bChtG+Y1XXAbF+UjHpJWh2uoczas8= Subject key identifier: D5:CD:F6:B3:4B:A0:97:BC:11:48:1B:7F:27:D9:02:A0:78:C7:9C:23 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 4D774BD4A747390A2469B8B329B88FAD72C2D9FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 03A1 Signing time: Fri 17 Apr 2026 13:50:44 +0000 Manifest this update: Fri 17 Apr 2026 13:45:44 +0000 Manifest next update: Mon 20 Apr 2026 20:55:44 +0000 Files and hashes: 1: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: srUe6ki5AzGfeosOMn9EAdsn6JFVCHbiHYU/PguItQM=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: hMbf9jb+uOpmKgTWNZ78lbBHNdoxZJUhsCBWsTukCp0=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: LA8ZmdYo2RF2jFCHXutIqHVSr5NNz7pMK57XGb1dIXo=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: RtmvtUA3xRWC9VT0xTAk68Lh95SXsOw+zLbR9Rhj3Sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:77:4b:d4:a7:47:39:0a:24:69:b8:b3:29:b8:8f:ad:72:c2:d9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Apr 17 13:45:44 2026 GMT Not After : Apr 20 20:55:44 2026 GMT Subject: CN=D5CDF6B34BA097BC11481B7F27D902A078C79C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:d4:71:0d:39:fa:d3:1c:ba:f0:13:b2:e6: 98:f8:9e:fb:a7:35:58:03:ea:c4:5a:d5:b5:fd:66: 51:a5:e5:f4:f5:17:0b:d1:7a:51:ab:14:41:fb:e4: 52:68:5e:a5:20:a6:ba:99:b3:57:d6:72:b7:c3:ce: be:b1:0b:88:eb:b3:86:f9:e5:31:69:c4:83:3e:87: 9d:f0:2b:e3:07:7a:80:0d:3a:16:9b:4d:30:2f:4a: 97:12:2a:25:74:de:5f:e3:db:db:23:73:4e:fc:d6: be:a0:68:fc:82:bb:d8:fb:ed:d8:65:37:cd:54:a5: 41:0c:9d:34:19:eb:1f:1d:db:fd:ff:76:4d:5b:6a: b3:55:81:19:21:9f:e6:11:f2:2d:38:69:17:ca:6c: 9e:e2:37:da:45:84:9e:ea:0c:ff:3f:3b:2b:18:6b: 83:43:cb:53:ff:58:c2:cc:a3:9f:09:07:00:b8:6f: 96:e7:c2:5f:10:43:35:95:5c:6d:c9:0f:31:02:fe: 83:16:d3:73:84:2f:1b:99:96:0d:b7:bd:eb:a7:f2: dd:be:6a:7a:6c:a2:19:c2:6a:d2:e7:be:a1:e1:8d: d4:f8:95:62:10:47:ec:9c:b2:eb:35:61:64:19:d3: 53:55:df:aa:04:19:e3:9f:43:9c:eb:61:df:f4:5b: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CD:F6:B3:4B:A0:97:BC:11:48:1B:7F:27:D9:02:A0:78:C7:9C:23 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:7d:e6:52:99:91:5a:98:93:ed:be:e3:70:d7:ad:22:b4:39: 2f:ae:ca:9d:27:22:da:8c:f6:52:d3:4a:67:cf:c2:98:07:95: 04:6a:ba:4a:98:3a:1f:47:8b:2b:7e:d4:d9:87:73:c7:23:34: 3d:10:ff:74:05:c0:ff:b9:1c:f7:c3:71:4f:1a:58:80:b0:78: 78:8f:ba:f3:3e:26:3b:06:59:bd:f6:3b:da:27:97:4b:eb:57: 99:23:92:aa:f8:b7:05:11:35:90:4e:4b:89:19:0c:1f:49:6d: bf:48:ec:a2:88:25:d5:2f:b5:f8:64:1e:fb:f9:a4:e6:1a:d8: 87:32:bd:34:33:24:e9:87:26:b5:59:a7:21:e1:fd:44:24:2e: 8f:6d:7d:74:9b:a8:d4:23:44:64:2a:28:a6:26:30:83:b6:84: 01:84:ad:83:29:ef:36:78:71:d1:c4:0f:be:a7:36:6d:0d:da: 9f:36:d2:27:e2:d0:f7:2c:75:74:e6:d1:21:d6:49:da:73:78: 2e:2b:ad:71:09:bf:b0:df:5c:ef:15:fb:cf:2b:9d:f9:e8:ba: 88:38:91:f2:32:54:a2:09:47:cf:d4:cf:ed:70:a6:16:03:1e: de:65:b5:0e:40:53:93:35:a5:9e:9d:c1:08:69:55:ba:97:87: 7a:2c:1f:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXdL1KdHOQokabizKbiPrXLC2f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNjA0MTcxMzQ1NDRaFw0yNjA0MjAyMDU1NDRaMDMxMTAvBgNV BAMTKEQ1Q0RGNkIzNEJBMDk3QkMxMTQ4MUI3RjI3RDkwMkEwNzhDNzlDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClE9RxDTn60xy68BOy5pj4nvun NVgD6sRa1bX9ZlGl5fT1FwvRelGrFEH75FJoXqUgprqZs1fWcrfDzr6xC4jrs4b5 5TFpxIM+h53wK+MHeoANOhabTTAvSpcSKiV03l/j29sjc0781r6gaPyCu9j77dhl N81UpUEMnTQZ6x8d2/3/dk1barNVgRkhn+YR8i04aRfKbJ7iN9pFhJ7qDP8/OysY a4NDy1P/WMLMo58JBwC4b5bnwl8QQzWVXG3JDzEC/oMW03OELxuZlg23veun8t2+ anpsohnCatLnvqHhjdT4lWIQR+ycsus1YWQZ01NV36oEGeOfQ5zrYd/0WwFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1c32s0ugl7wRSBt/J9kCoHjHnCMwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMx95lKZkVqYk+2+43DXrSK0OS+uyp0nItqM 9lLTSmfPwpgHlQRqukqYOh9Hiyt+1NmHc8cjND0Q/3QFwP+5HPfDcU8aWICweHiP uvM+JjsGWb32O9onl0vrV5kjkqr4twURNZBOS4kZDB9Jbb9I7KKIJdUvtfhkHvv5 pOYa2IcyvTQzJOmHJrVZpyHh/UQkLo9tfXSbqNQjRGQqKKYmMIO2hAGErYMp7zZ4 cdHED76nNm0N2p820ifi0PcsdXTm0SHWSdpzeC4rrXEJv7DfXO8V+88rnfnouog4 kfIyVKIJR8/Uz+1wphYDHt5ltQ5AU5M1pZ6dwQhpVbqXh3osHww= -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:55 2026 by rpki-client