$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: a6jaceijvkxNou0AaWtm3lDmyjDmOHNhWlZ4XXLSypM= Subject key identifier: 74:73:69:FA:A8:E2:5C:C9:A0:51:7D:42:FC:FE:6B:A0:35:4D:24:CD Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 54E014286F9D15E349EF6E08E4B8BCA172017819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 02ED Signing time: Thu 16 Apr 2026 06:40:58 +0000 Manifest this update: Thu 16 Apr 2026 06:35:58 +0000 Manifest next update: Sun 19 Apr 2026 08:06:58 +0000 Files and hashes: 1: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: bcZ9qQT0HvAnyExnxlI05eaei51KPs6LOG2hjtNqzjc=) 2: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: SLqsA4eKiyVBUfVeUzsWnkxSjjpZR1KOircBn/XEi/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e0:14:28:6f:9d:15:e3:49:ef:6e:08:e4:b8:bc:a1:72:01:78:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Apr 16 06:35:58 2026 GMT Not After : Apr 19 08:06:58 2026 GMT Subject: CN=747369FAA8E25CC9A0517D42FCFE6BA0354D24CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5d:81:e0:0b:b8:4a:3a:f0:7e:fa:45:32:28: d7:07:ea:74:8d:01:25:d5:08:c6:aa:c4:bb:2b:4f: 9e:ff:f1:d6:7b:22:25:4b:39:68:6e:6a:65:ab:09: 23:28:73:1e:59:78:b9:88:a7:c6:f8:80:f5:c8:6c: b1:fb:cb:aa:04:e9:36:03:52:5e:50:7d:64:5e:fe: 6a:c8:e6:cf:96:8f:e2:89:fb:d4:d7:4e:ac:7d:c3: 7b:c1:d4:c4:39:a4:9e:02:86:7a:a6:99:c3:05:a4: a9:3a:53:b2:fb:e4:8d:02:14:a5:6c:44:c7:c3:5a: 9a:ca:f0:3a:99:d5:1d:70:e8:3d:6d:98:b1:7b:bc: ed:5e:0e:5b:d0:57:bf:d6:54:5c:f3:9b:d8:ea:6c: 3a:55:c2:77:b4:a0:c6:bc:cb:fa:be:c1:86:45:5c: 10:e8:ab:02:16:65:ce:2f:b2:3a:0a:3f:52:4e:6f: 30:30:36:c9:de:74:3f:36:79:3a:68:90:d7:66:6f: 5d:36:8b:13:26:cd:6c:c4:c3:dd:b9:c5:c9:d6:83: b6:e4:75:c2:cd:ac:38:60:f9:3d:67:e9:db:3b:84: 11:26:02:dc:ac:44:c5:39:92:b5:40:fb:33:1a:b9: 62:9c:e3:57:13:ae:e0:ff:71:06:5e:6c:7c:ac:81: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:73:69:FA:A8:E2:5C:C9:A0:51:7D:42:FC:FE:6B:A0:35:4D:24:CD X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d0:1e:76:10:20:d1:37:16:6d:cd:5d:d9:b3:be:a4:4f:01: 44:7d:e8:e6:93:60:a0:b6:a9:ab:2f:b6:1c:70:ed:c0:e9:60: a8:2e:3c:90:36:00:5f:dd:35:88:b1:4d:34:fb:0e:67:8b:65: 4b:67:e5:05:fa:94:a3:29:98:09:dd:fb:2e:6a:ca:9e:6f:b5: a5:e2:7e:fd:8f:34:c0:e1:1e:37:68:db:5d:57:a6:b7:2b:08: 09:bb:69:e0:9a:94:57:0c:10:37:6d:f2:9a:32:b6:0b:94:8a: d1:2b:6e:04:20:06:ab:00:68:31:fd:12:a9:fc:6f:ff:81:98: d4:84:ba:92:6c:01:62:0e:8d:4c:d9:d4:26:43:21:93:b3:e6: fa:08:13:c6:fb:8c:b7:bd:a9:66:fe:73:13:eb:a5:72:ab:f0: 31:8b:e7:72:87:60:fd:d0:e4:3f:2f:31:03:89:de:28:b1:6f: 97:15:e6:fb:8e:7c:ad:1c:a3:32:c1:73:50:82:f6:43:ce:ba: af:9b:e3:d7:97:8d:4f:32:16:b3:03:9c:7e:d7:15:08:76:f5: 4b:07:19:d0:a9:9d:55:15:fe:1b:99:26:09:8c:5f:63:d7:59: 55:2d:14:39:f5:70:db:14:13:1a:34:70:c6:51:77:1b:e9:80: a9:29:64:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOAUKG+dFeNJ724I5Li8oXIBeBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNjA0MTYwNjM1NThaFw0yNjA0MTkwODA2NThaMDMxMTAvBgNV BAMTKDc0NzM2OUZBQThFMjVDQzlBMDUxN0Q0MkZDRkU2QkEwMzU0RDI0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoXYHgC7hKOvB++kUyKNcH6nSN ASXVCMaqxLsrT57/8dZ7IiVLOWhuamWrCSMocx5ZeLmIp8b4gPXIbLH7y6oE6TYD Ul5QfWRe/mrI5s+Wj+KJ+9TXTqx9w3vB1MQ5pJ4ChnqmmcMFpKk6U7L75I0CFKVs RMfDWprK8DqZ1R1w6D1tmLF7vO1eDlvQV7/WVFzzm9jqbDpVwne0oMa8y/q+wYZF XBDoqwIWZc4vsjoKP1JObzAwNsnedD82eTpokNdmb102ixMmzWzEw925xcnWg7bk dcLNrDhg+T1n6ds7hBEmAtysRMU5krVA+zMauWKc41cTruD/cQZebHysgVl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdHNp+qjiXMmgUX1C/P5roDVNJM0wHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7QHnYQINE3Fm3NXdmzvqRPAUR96OaTYKC2 qasvthxw7cDpYKguPJA2AF/dNYixTTT7DmeLZUtn5QX6lKMpmAnd+y5qyp5vtaXi fv2PNMDhHjdo211XprcrCAm7aeCalFcMEDdt8poytguUitErbgQgBqsAaDH9Eqn8 b/+BmNSEupJsAWIOjUzZ1CZDIZOz5voIE8b7jLe9qWb+cxPrpXKr8DGL53KHYP3Q 5D8vMQOJ3iixb5cV5vuOfK0cozLBc1CC9kPOuq+b49eXjU8yFrMDnH7XFQh29UsH GdCpnVUV/huZJgmMX2PXWVUtFDn1cNsUExo0cMZRdxvpgKkpZP4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:18:34 2026 by rpki-client