$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: t6ASJFWsbS8vKoXQs4v3xzVWW815u6PyEW6zqOtIYcs= Subject key identifier: C1:72:FE:D4:CC:B5:63:F5:A3:E9:EB:9E:87:F4:5A:6B:A9:4A:AF:76 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 0AE5C346EE1EEC2E9B17A52153DE3C73611C1CFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0559 Signing time: Sat 28 Feb 2026 22:11:55 +0000 Manifest this update: Sat 28 Feb 2026 22:06:55 +0000 Manifest next update: Wed 04 Mar 2026 09:07:55 +0000 Files and hashes: 1: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: HjXqtHPzGldwQsz79zOJ9dovTAEuDlrgBAdyZjFq1c4=) 2: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 3: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 4: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 5: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: PR6tCmOpsN34UaTOcKKylyBUbEJHRGhqi70NsXysHs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e5:c3:46:ee:1e:ec:2e:9b:17:a5:21:53:de:3c:73:61:1c:1c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Feb 28 22:06:55 2026 GMT Not After : Mar 4 09:07:55 2026 GMT Subject: CN=C172FED4CCB563F5A3E9EB9E87F45A6BA94AAF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:9d:1d:98:9e:87:d3:7f:a5:05:81:eb:84: 98:94:bc:27:dc:40:e6:9b:df:66:ca:3f:63:5d:4a: 82:c2:b7:19:c7:e0:28:b2:dd:9e:f0:27:c9:61:25: 16:54:7d:33:d0:d2:4a:a8:8a:81:9f:63:5d:54:85: 78:ef:2c:3e:84:3d:1c:e3:2c:59:ce:60:c4:3b:de: ea:ef:39:ee:cc:8c:dd:55:58:a0:36:09:df:82:35: a1:24:69:aa:5f:e0:ae:70:14:9b:fe:3c:94:67:ea: 15:cd:a0:5d:47:80:21:05:56:89:95:86:a4:66:87: fb:d1:24:f2:75:72:e2:36:a1:5e:52:39:14:3a:ef: 29:61:a7:7d:c9:41:75:eb:e3:d5:07:e0:ad:40:48: 85:69:eb:dd:16:07:f0:26:9a:dd:76:58:2e:d3:1d: d7:8c:e4:0d:81:0a:99:9f:be:3b:f9:e0:ce:cb:36: e4:3b:32:93:db:25:9d:20:d6:e4:d1:37:dc:09:00: 79:ee:f2:cf:ee:7e:86:13:22:4c:07:21:7d:88:9e: 6f:35:96:e3:00:23:75:12:0f:3c:fa:e7:4a:e0:17: 8c:fa:62:f8:32:8b:c3:19:e8:eb:33:96:1c:3b:17: 50:00:b2:5c:fe:0a:e4:69:7d:84:9d:a1:da:4a:5b: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:72:FE:D4:CC:B5:63:F5:A3:E9:EB:9E:87:F4:5A:6B:A9:4A:AF:76 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:58:51:03:67:fe:1e:bd:3b:11:42:a4:33:eb:16:4e:a1:c7: e8:33:8a:c2:fd:91:f6:b5:48:45:83:bc:ca:9f:72:f7:dd:e8: f0:12:4d:9a:70:cf:cf:72:89:37:45:0a:bd:bd:c1:85:f1:f2: fa:f0:ab:58:5c:a7:9a:44:a7:45:4f:36:54:f5:42:ea:92:35: fc:29:4d:f7:02:fd:5b:85:8b:b9:64:cd:91:c3:37:97:d2:21: 11:a9:99:07:3a:75:ce:cc:8f:04:53:1e:3d:19:13:a7:0e:31: eb:83:84:25:2e:bb:d8:e8:68:c3:97:77:d4:e2:cf:79:5d:62: 0d:fe:5b:d7:35:10:58:26:fb:65:ca:b4:10:19:a2:80:1f:67: e0:5e:74:95:f2:04:97:22:b2:fd:eb:43:15:50:00:00:fd:b8: 8d:34:8d:93:17:5c:69:ab:87:b3:4a:25:ac:f7:92:8b:b4:6d: dd:c2:ad:a9:0f:c8:2e:b0:ca:b8:0e:12:a7:9e:0d:24:b9:c9: 71:90:18:d4:c3:f2:23:bb:cd:23:ff:5d:07:23:37:b8:3e:b0: 91:d1:b4:77:4c:a2:03:6b:52:91:13:03:a2:b9:f4:a3:c7:e5: a8:29:49:fe:48:97:2f:78:0c:75:42:1f:39:ee:73:2c:95:de: 68:e3:37:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuXDRu4e7C6bF6UhU948c2EcHP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNjAyMjgyMjA2NTVaFw0yNjAzMDQwOTA3NTVaMDMxMTAvBgNV BAMTKEMxNzJGRUQ0Q0NCNTYzRjVBM0U5RUI5RTg3RjQ1QTZCQTk0QUFGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Sp0dmJ6H03+lBYHrhJiUvCfc QOab32bKP2NdSoLCtxnH4Ciy3Z7wJ8lhJRZUfTPQ0kqoioGfY11UhXjvLD6EPRzj LFnOYMQ73urvOe7MjN1VWKA2Cd+CNaEkaapf4K5wFJv+PJRn6hXNoF1HgCEFVomV hqRmh/vRJPJ1cuI2oV5SORQ67ylhp33JQXXr49UH4K1ASIVp690WB/Ammt12WC7T HdeM5A2BCpmfvjv54M7LNuQ7MpPbJZ0g1uTRN9wJAHnu8s/ufoYTIkwHIX2Inm81 luMAI3USDzz650rgF4z6Yvgyi8MZ6Oszlhw7F1AAslz+CuRpfYSdodpKWzhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwXL+1My1Y/Wj6eueh/Raa6lKr3YwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpYUQNn/h69OxFCpDPrFk6hx+gzisL9kfa1 SEWDvMqfcvfd6PASTZpwz89yiTdFCr29wYXx8vrwq1hcp5pEp0VPNlT1QuqSNfwp TfcC/VuFi7lkzZHDN5fSIRGpmQc6dc7MjwRTHj0ZE6cOMeuDhCUuu9joaMOXd9Ti z3ldYg3+W9c1EFgm+2XKtBAZooAfZ+BedJXyBJcisv3rQxVQAAD9uI00jZMXXGmr h7NKJaz3kou0bd3CrakPyC6wyrgOEqeeDSS5yXGQGNTD8iO7zSP/XQcjN7g+sJHR tHdMogNrUpETA6K59KPH5agpSf5Ily94DHVCHznucyyV3mjjNy8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:57 2026 by rpki-client