$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: /9SKBpltB0szXVxkebA8rOaV0guCCgQ1Umyb28z3s00= Subject key identifier: 4B:9E:A8:84:2E:94:62:43:14:18:F8:B8:69:33:BC:6C:CE:E2:0B:8D Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 60264936197D64BF19560282B267C79A05751ACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 0106 Signing time: Sun 01 Mar 2026 07:32:10 +0000 Manifest this update: Sun 01 Mar 2026 07:27:10 +0000 Manifest next update: Wed 04 Mar 2026 18:23:10 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: FT5KLpcGktDH8KHENdQ6HPGEn7TvMzHAz1TO8DRPRuE=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:26:49:36:19:7d:64:bf:19:56:02:82:b2:67:c7:9a:05:75:1a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Mar 1 07:27:10 2026 GMT Not After : Mar 4 18:23:10 2026 GMT Subject: CN=4B9EA8842E9462431418F8B86933BC6CCEE20B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:3b:a4:9c:52:0a:08:fc:bb:54:74:ba:bd: 8e:52:bf:31:ac:57:5c:66:d9:7d:5a:7c:45:e1:52: 7d:f3:15:f8:97:13:6e:5e:bc:d6:a8:21:87:96:ea: a1:bb:8f:ce:1c:c6:2b:8b:ad:09:de:06:43:dd:81: 02:55:49:7d:a0:05:9c:fc:16:0e:1d:17:cc:eb:dd: 44:67:af:27:6b:b3:69:81:19:a1:31:6f:d4:ce:6a: b7:74:b0:3a:44:9e:47:6d:de:a8:9d:07:1a:d4:79: 3a:2e:80:25:3b:96:8c:27:9f:fc:86:6c:84:cc:60: 8b:b2:82:63:bd:95:d8:cd:eb:18:12:8e:84:5a:ec: 64:0d:76:bd:67:72:05:7a:e4:5d:62:35:b8:3b:77: 18:fb:11:91:1a:be:f0:1d:10:63:27:e1:f2:c6:22: fd:22:4c:f0:33:ca:04:00:50:16:93:67:ea:51:a8: ed:3a:4a:ca:39:43:aa:f5:20:ee:d5:1f:9d:b0:20: 5d:e7:f6:c1:1f:7d:73:24:2b:80:96:8d:bf:b4:af: 4d:bb:60:b3:98:07:10:ae:c1:71:47:4f:74:39:66: 8d:8c:d5:d6:04:0b:b8:6b:ae:0b:46:fd:6d:27:16: 07:9a:f9:3f:50:e6:8c:60:3b:77:f7:90:13:cb:7d: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9E:A8:84:2E:94:62:43:14:18:F8:B8:69:33:BC:6C:CE:E2:0B:8D X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:38:7f:49:82:bb:8b:2b:62:15:bf:50:2f:da:5b:9c:76:32: d8:43:ad:6a:0d:08:64:56:16:41:4a:58:d5:9a:9c:22:ff:74: 7d:63:3e:f2:21:6f:c9:9e:93:e9:54:0c:d8:27:70:64:03:1d: d9:b1:b6:1a:9c:24:b9:60:15:2c:ab:d4:dd:9c:88:18:45:82: bc:48:5b:d8:17:af:f0:2b:e6:7b:27:a4:f9:ee:56:d8:7b:d7: 87:b5:fa:a6:87:dd:bd:3c:5c:b6:15:fa:53:29:ba:82:41:76: 61:66:71:7f:aa:77:c2:f1:de:4e:d0:dc:9a:ba:8e:9a:87:27: ef:14:79:d7:4f:da:e2:c1:0b:8a:0e:f0:c8:de:ca:a8:09:3f: 05:57:a2:c7:23:06:a3:2c:c4:e3:5d:de:23:33:ef:75:df:30: 18:47:ff:49:c9:f8:34:58:d8:28:65:3d:3c:4f:22:fa:ba:03: b5:e6:99:22:eb:a8:bc:aa:7b:17:42:67:b2:12:2e:cc:e8:80: 21:8f:3a:df:dc:c3:35:68:64:49:0e:d0:61:86:b1:f2:4c:c1: 04:3b:e8:09:b7:26:bb:76:b4:8f:81:fe:67:87:13:79:6e:cb: 26:a4:2e:83:a9:5d:50:f7:1d:b7:26:8f:fb:b8:27:ad:ca:a9: dc:87:91:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCZJNhl9ZL8ZVgKCsmfHmgV1GswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNjAzMDEwNzI3MTBaFw0yNjAzMDQxODIzMTBaMDMxMTAvBgNV BAMTKDRCOUVBODg0MkU5NDYyNDMxNDE4RjhCODY5MzNCQzZDQ0VFMjBCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wzuknFIKCPy7VHS6vY5SvzGs V1xm2X1afEXhUn3zFfiXE25evNaoIYeW6qG7j84cxiuLrQneBkPdgQJVSX2gBZz8 Fg4dF8zr3URnrydrs2mBGaExb9TOard0sDpEnkdt3qidBxrUeTougCU7lownn/yG bITMYIuygmO9ldjN6xgSjoRa7GQNdr1ncgV65F1iNbg7dxj7EZEavvAdEGMn4fLG Iv0iTPAzygQAUBaTZ+pRqO06Sso5Q6r1IO7VH52wIF3n9sEffXMkK4CWjb+0r027 YLOYBxCuwXFHT3Q5Zo2M1dYEC7hrrgtG/W0nFgea+T9Q5oxgO3f3kBPLfZftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS56ohC6UYkMUGPi4aTO8bM7iC40wHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOk4f0mCu4srYhW/UC/aW5x2MthDrWoNCGRW FkFKWNWanCL/dH1jPvIhb8mek+lUDNgncGQDHdmxthqcJLlgFSyr1N2ciBhFgrxI W9gXr/Ar5nsnpPnuVth714e1+qaH3b08XLYV+lMpuoJBdmFmcX+qd8Lx3k7Q3Jq6 jpqHJ+8UeddP2uLBC4oO8MjeyqgJPwVXoscjBqMsxONd3iMz73XfMBhH/0nJ+DRY 2ChlPTxPIvq6A7XmmSLrqLyqexdCZ7ISLszogCGPOt/cwzVoZEkO0GGGsfJMwQQ7 6Am3Jrt2tI+B/meHE3luyyakLoOpXVD3Hbcmj/u4J63KqdyHkbM= -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:45 2026 by rpki-client