$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: WgNbtt+HE0qlPcmsHypRdE4KbEiD4V1EY0lXtMtobgE= Subject key identifier: FB:53:5B:CE:92:29:D5:4D:B8:20:32:26:D7:03:67:31:93:4B:45:2B Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 78E88E6DC44B68E277E0352A6B7AD3F22773947A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 056D Signing time: Wed 15 Apr 2026 22:11:57 +0000 Manifest this update: Wed 15 Apr 2026 22:06:57 +0000 Manifest next update: Sun 19 Apr 2026 01:47:57 +0000 Files and hashes: 1: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: YXWfOqz7FoUP0N0Csn65ngsVIXpNVA0+IKhpOLonR5o=) 2: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 4: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 5: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: PR6tCmOpsN34UaTOcKKylyBUbEJHRGhqi70NsXysHs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e8:8e:6d:c4:4b:68:e2:77:e0:35:2a:6b:7a:d3:f2:27:73:94:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Apr 15 22:06:57 2026 GMT Not After : Apr 19 01:47:57 2026 GMT Subject: CN=FB535BCE9229D54DB8203226D7036731934B452B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:f2:f5:de:2b:47:97:20:22:83:a2:dc:f2: 07:1c:3a:96:a7:4b:c3:24:2f:80:c9:30:6c:3a:41: 8a:85:a1:fb:2c:1b:6b:42:f7:b2:c2:93:5c:b3:cc: aa:d9:65:f9:00:5c:57:cf:20:bc:6a:a1:37:20:dd: fc:83:68:ad:9b:4b:f2:89:b8:ac:b3:39:92:26:a3: 69:88:e1:1f:3b:ca:33:4c:64:f6:95:fc:2f:87:73: 15:04:be:01:ab:70:89:4c:b9:06:71:58:c1:3d:1b: d0:60:68:a7:f5:02:85:f8:3a:ca:74:a6:69:20:3d: a9:f9:4b:68:7e:ea:ec:b7:fd:e5:d2:3a:5c:d4:22: 5f:e6:87:6b:21:7e:13:ba:78:22:96:98:c3:54:95: 33:8f:bf:34:77:b8:dd:c8:fc:94:04:7a:e0:0d:5a: b2:5c:d0:05:8b:a5:d0:79:f8:e4:cb:a2:65:c0:72: 0c:b8:ec:e7:ff:0f:93:bb:d3:8c:36:89:c3:d6:ab: fd:fa:99:e9:6f:64:30:9c:44:53:7d:05:17:68:5b: 13:d8:87:23:59:a6:ae:68:20:a2:9d:d0:7b:d0:14: 5c:a8:65:bd:ae:52:ff:4c:ad:86:37:17:86:57:31: 90:ac:e6:c6:32:0d:43:cf:04:7d:b5:2d:b5:69:fb: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:53:5B:CE:92:29:D5:4D:B8:20:32:26:D7:03:67:31:93:4B:45:2B X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6e:7c:fb:1b:64:28:d2:dc:5c:4f:57:36:e6:21:f5:45:db: 7d:dd:33:b5:d7:cf:1c:77:22:39:2a:5f:b9:bc:9d:3a:64:a5: 27:b8:04:1f:a2:18:91:9c:4c:e8:39:e8:e4:74:1d:be:4f:a7: e2:b6:6c:20:76:21:84:13:29:18:2c:f0:4b:3d:73:cd:be:cb: 9a:03:35:84:7c:f2:73:19:e5:f9:f6:48:bc:18:cd:c2:b2:99: d4:9f:0d:0f:b0:ae:09:85:2c:59:aa:5c:13:0d:04:88:9c:7d: 80:a1:a2:84:08:0f:cc:1c:7a:89:ec:76:b3:02:a6:dd:4b:b0: 46:7f:f4:4f:5d:dd:1f:67:4a:cd:a3:d8:cf:8f:f0:b3:b9:5e: 76:95:3d:84:b5:82:db:bf:dd:f6:f6:e4:1b:6c:35:6d:32:91: 27:46:b9:94:34:33:58:b6:09:47:42:d8:87:23:6f:19:5c:25: 13:41:68:22:e8:19:7b:bc:fc:39:f7:73:6f:b9:8c:b1:da:8d: a2:52:ae:45:db:3d:43:a3:0e:ef:34:66:1f:5f:49:11:2b:fd: 19:ff:e8:34:df:f6:07:64:a2:8d:88:5c:ff:81:ac:29:ee:1f: eb:3f:41:3c:33:89:0a:68:83:ec:84:a4:f8:96:1b:59:b0:b4: 14:3c:22:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOiObcRLaOJ34DUqa3rT8idzlHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNjA0MTUyMjA2NTdaFw0yNjA0MTkwMTQ3NTdaMDMxMTAvBgNV BAMTKEZCNTM1QkNFOTIyOUQ1NERCODIwMzIyNkQ3MDM2NzMxOTM0QjQ1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZ/L13itHlyAig6Lc8gccOpan S8MkL4DJMGw6QYqFofssG2tC97LCk1yzzKrZZfkAXFfPILxqoTcg3fyDaK2bS/KJ uKyzOZImo2mI4R87yjNMZPaV/C+HcxUEvgGrcIlMuQZxWME9G9BgaKf1AoX4Osp0 pmkgPan5S2h+6uy3/eXSOlzUIl/mh2shfhO6eCKWmMNUlTOPvzR3uN3I/JQEeuAN WrJc0AWLpdB5+OTLomXAcgy47Of/D5O704w2icPWq/36melvZDCcRFN9BRdoWxPY hyNZpq5oIKKd0HvQFFyoZb2uUv9MrYY3F4ZXMZCs5sYyDUPPBH21LbVp+6gRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1NbzpIp1U24IDIm1wNnMZNLRSswHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZufPsbZCjS3FxPVzbmIfVF233dM7XXzxx3 IjkqX7m8nTpkpSe4BB+iGJGcTOg56OR0Hb5Pp+K2bCB2IYQTKRgs8Es9c82+y5oD NYR88nMZ5fn2SLwYzcKymdSfDQ+wrgmFLFmqXBMNBIicfYChooQID8wceonsdrMC pt1LsEZ/9E9d3R9nSs2j2M+P8LO5XnaVPYS1gtu/3fb25BtsNW0ykSdGuZQ0M1i2 CUdC2IcjbxlcJRNBaCLoGXu8/Dn3c2+5jLHajaJSrkXbPUOjDu80Zh9fSREr/Rn/ 6DTf9gdkoo2IXP+BrCnuH+s/QTwziQpog+yEpPiWG1mwtBQ8Ipo= -----END CERTIFICATE-----Generated at Fri Apr 17 16:41:32 2026 by rpki-client