$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: I55NvreyNVij8X04pEg0wQck7nTo82MBluoE/zn9nmc= Subject key identifier: 4E:5F:72:AB:6F:67:86:25:FF:C1:4A:79:BD:39:7A:01:2F:95:DE:A6 Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 2C9695E623FAA1646A65BBA1223BF69E7E82D7B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 02D8 Signing time: Sat 28 Feb 2026 21:20:58 +0000 Manifest this update: Sat 28 Feb 2026 21:15:58 +0000 Manifest next update: Wed 04 Mar 2026 03:25:58 +0000 Files and hashes: 1: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 3ytI4WNdkarTA98AKzILbdHeDtsgun+xePSvAI/3j/w=) 2: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: L73ttwDPqEn7eQJ8LoD2C8CoV//yIMQfCWt7NDDV/FQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:96:95:e6:23:fa:a1:64:6a:65:bb:a1:22:3b:f6:9e:7e:82:d7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Feb 28 21:15:58 2026 GMT Not After : Mar 4 03:25:58 2026 GMT Subject: CN=4E5F72AB6F678625FFC14A79BD397A012F95DEA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:83:eb:41:65:de:45:37:f4:cf:1b:19:a2: d6:8e:12:83:ce:27:56:0f:db:6e:62:26:82:00:bf: 64:cc:0f:c5:cd:9f:11:ad:97:c3:04:cd:5f:45:75: 9b:94:79:60:6d:d6:3c:c9:c5:87:b9:9c:46:40:3d: d8:3a:0a:74:dd:99:b0:13:cd:95:46:af:2e:7c:ec: a2:ec:83:23:6e:91:fd:25:71:2a:74:dd:2d:2f:be: 6f:ce:7f:68:82:55:30:f1:f2:64:b6:1a:7b:1e:d0: 4c:37:d1:6e:0f:41:26:74:c5:b3:21:35:f9:74:53: 44:a2:55:a0:29:59:ac:c7:61:dc:65:eb:60:22:ae: d8:d7:81:07:5f:39:47:ec:d7:ba:08:b3:e9:2f:5c: 0d:a8:23:91:7e:2c:05:c3:e0:5f:6d:9c:07:8a:5b: 47:ae:bb:5b:55:f6:50:c2:6c:39:ed:8d:a8:29:9e: 89:ca:c5:e1:ec:20:d4:b7:84:28:1d:11:e8:25:3f: d2:5f:45:bf:2b:73:f8:91:fc:0c:3e:06:cf:16:09: ea:93:27:17:97:e1:3a:ac:92:69:95:99:04:10:5d: 19:96:d8:db:2d:23:78:f7:bd:7e:83:9b:4e:17:f3: 87:f1:0e:45:e3:fb:72:66:5c:8a:b4:92:5c:86:fa: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:72:AB:6F:67:86:25:FF:C1:4A:79:BD:39:7A:01:2F:95:DE:A6 X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:62:cb:48:f2:04:fe:2c:24:31:5f:fe:b9:a5:28:fd:4e:0d: 44:d0:e0:df:5b:47:ff:1a:1e:9c:87:08:96:ec:ae:b1:88:2a: 82:f8:05:84:b1:2c:81:4a:d4:2e:c8:fb:1e:2a:fe:92:d1:4d: 85:2c:b9:d1:9a:ff:ca:e6:33:17:f3:99:ae:f9:ae:16:7a:bf: fd:df:23:41:0a:15:cd:32:bb:dd:21:53:60:28:ad:e7:ff:44: 88:5d:73:0f:5a:2c:e9:93:db:f1:b9:2c:1e:fa:56:8f:3e:60: 4e:74:aa:0a:29:ba:59:a9:97:fc:9f:ef:87:8e:50:6b:21:cc: 7e:06:00:a9:fc:78:e4:6e:fd:d1:30:fc:22:bb:46:af:46:82: 55:9f:25:0a:93:ec:89:7d:f5:cc:72:67:4d:9d:fd:1e:f6:e7: f8:e0:49:eb:a3:fc:c2:74:eb:61:3f:43:26:da:77:33:6f:05: 39:a3:f9:d8:2b:d1:ac:69:2b:28:76:59:ba:e6:c6:df:20:f0: 5e:82:df:da:a8:1f:ab:3b:41:53:2b:bd:a1:ca:66:75:55:e6: 1f:26:d7:1e:b0:63:cb:26:1f:5b:7c:98:cb:14:73:ce:96:73: cb:58:78:85:e9:f8:77:33:42:5d:6e:55:e7:ae:02:b6:e6:d8: 36:1e:5c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJaV5iP6oWRqZbuhIjv2nn6C17IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNjAyMjgyMTE1NThaFw0yNjAzMDQwMzI1NThaMDMxMTAvBgNV BAMTKDRFNUY3MkFCNkY2Nzg2MjVGRkMxNEE3OUJEMzk3QTAxMkY5NURFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRH4PrQWXeRTf0zxsZotaOEoPO J1YP225iJoIAv2TMD8XNnxGtl8MEzV9FdZuUeWBt1jzJxYe5nEZAPdg6CnTdmbAT zZVGry587KLsgyNukf0lcSp03S0vvm/Of2iCVTDx8mS2Gnse0Ew30W4PQSZ0xbMh Nfl0U0SiVaApWazHYdxl62AirtjXgQdfOUfs17oIs+kvXA2oI5F+LAXD4F9tnAeK W0euu1tV9lDCbDntjagpnonKxeHsINS3hCgdEeglP9JfRb8rc/iR/Aw+Bs8WCeqT JxeX4TqskmmVmQQQXRmW2NstI3j3vX6Dm04X84fxDkXj+3JmXIq0klyG+nQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTl9yq29nhiX/wUp5vTl6AS+V3qYwHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxiy0jyBP4sJDFf/rmlKP1ODUTQ4N9bR/8a HpyHCJbsrrGIKoL4BYSxLIFK1C7I+x4q/pLRTYUsudGa/8rmMxfzma75rhZ6v/3f I0EKFc0yu90hU2Aoref/RIhdcw9aLOmT2/G5LB76Vo8+YE50qgopulmpl/yf74eO UGshzH4GAKn8eORu/dEw/CK7Rq9GglWfJQqT7Il99cxyZ02d/R725/jgSeuj/MJ0 62E/QybadzNvBTmj+dgr0axpKyh2Wbrmxt8g8F6C39qoH6s7QVMrvaHKZnVV5h8m 1x6wY8smH1t8mMsUc86Wc8tYeIXp+HczQl1uVeeuArbm2DYeXCU= -----END CERTIFICATE-----Generated at Mon Mar 2 06:24:19 2026 by rpki-client