$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: bOA4NJdFy77yw9Y4qgAtVQHySrOWSr9P4A9tqbrvuMY= Subject key identifier: BD:E3:A8:96:FD:6D:6C:CC:E9:9B:AB:B9:C8:86:E5:36:0E:FD:84:FD Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 5237D55B46C9F4944016243D0D6CAC44A70C9ED2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 0569 Signing time: Thu 16 Apr 2026 17:21:27 +0000 Manifest this update: Thu 16 Apr 2026 17:16:27 +0000 Manifest next update: Mon 20 Apr 2026 01:00:27 +0000 Files and hashes: 1: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 2: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 3: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) 4: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: rkOs7ag7bdyjzRkoPvAJoT6mQAuTLgrM35UiSzm7G04=) 5: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:37:d5:5b:46:c9:f4:94:40:16:24:3d:0d:6c:ac:44:a7:0c:9e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Apr 16 17:16:27 2026 GMT Not After : Apr 20 01:00:27 2026 GMT Subject: CN=BDE3A896FD6D6CCCE99BABB9C886E5360EFD84FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:a3:be:40:37:0d:5a:56:73:e6:0e:7a:c9: c9:97:fc:d8:7a:09:79:5f:bf:65:40:ef:a3:92:ee: 2a:72:d9:1b:6e:1a:49:cc:a9:49:5b:15:bf:eb:a3: 05:ae:14:1a:7a:c3:07:78:8e:f0:ad:e1:a0:55:27: 06:3b:96:cf:33:13:26:9a:b1:74:e9:7f:62:ea:6b: ac:be:e6:6b:18:ea:4d:92:11:42:54:d1:53:a8:18: c3:de:95:4e:1a:18:87:3c:71:9f:2d:bb:99:d9:32: aa:fa:ee:3d:be:28:d1:2c:c2:8e:1a:90:a2:d3:e8: af:c8:bf:7c:51:a2:a5:dc:2b:45:33:e1:0f:81:98: bd:1d:29:31:85:37:f0:4b:84:ad:02:44:a0:db:60: 8a:ef:3f:7e:f6:0f:03:e4:40:99:64:bb:45:b7:b6: cb:e1:d9:c3:56:61:7d:04:dd:3e:b6:68:68:e8:3e: d0:a2:9d:3a:8b:2b:88:03:82:bd:49:9d:2f:04:bc: 5b:54:8c:71:10:b7:43:b4:27:36:2a:fb:8d:cc:3d: 6a:2f:fb:97:5f:19:6c:d4:fa:e1:39:87:2b:8e:29: bf:63:fe:4d:a7:82:39:33:9c:6f:79:69:e6:d6:a4: 5d:c8:6f:d3:82:d2:cd:3b:ae:29:f3:31:3a:30:2a: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:A8:96:FD:6D:6C:CC:E9:9B:AB:B9:C8:86:E5:36:0E:FD:84:FD X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2f:85:b8:e2:9a:c5:27:3a:f9:ea:54:40:5f:14:94:dc:55: 6f:2d:81:37:61:32:6a:35:c1:ae:1e:32:30:b8:5b:74:0c:a0: 9d:8f:af:b0:70:40:a7:f4:7b:3f:3b:cc:98:2f:15:d9:25:82: 9f:8f:ff:39:dd:bb:dd:52:0b:7d:a0:53:05:2f:17:45:a3:c4: cf:bd:8c:64:cc:78:5e:bc:81:48:25:34:63:ce:b1:76:24:b9: 41:38:10:fa:5b:e4:32:e2:44:79:91:a7:36:4e:2a:3a:d5:39: 96:bb:59:f5:7b:f8:6c:85:3d:a9:05:ab:e4:0c:66:64:a8:72: ee:ef:7d:00:ad:9f:31:89:e2:bb:c4:2c:b3:80:73:dd:7a:be: dc:65:26:7f:3b:1d:59:c0:42:e2:d4:5d:80:8f:dc:45:53:4f: 87:f5:b1:12:6e:e1:45:7a:c4:9a:e9:a3:9e:6c:cc:44:fd:f2: 9e:9b:d8:c6:9f:7b:9e:0f:15:4b:3f:b7:9a:87:ae:1b:83:b1: ef:e7:33:30:e7:15:dd:7d:a6:ae:59:49:14:bc:1c:8e:bf:60: 36:24:6e:68:85:02:a0:cd:71:cc:85:b6:35:c1:97:a6:77:74: 69:a6:98:59:17:fc:d9:09:b0:32:8a:a0:26:b5:3a:af:89:10: 63:5d:a7:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjfVW0bJ9JRAFiQ9DWysRKcMntIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNjA0MTYxNzE2MjdaFw0yNjA0MjAwMTAwMjdaMDMxMTAvBgNV BAMTKEJERTNBODk2RkQ2RDZDQ0NFOTlCQUJCOUM4ODZFNTM2MEVGRDg0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+qO+QDcNWlZz5g56ycmX/Nh6 CXlfv2VA76OS7ipy2RtuGknMqUlbFb/rowWuFBp6wwd4jvCt4aBVJwY7ls8zEyaa sXTpf2Lqa6y+5msY6k2SEUJU0VOoGMPelU4aGIc8cZ8tu5nZMqr67j2+KNEswo4a kKLT6K/Iv3xRoqXcK0Uz4Q+BmL0dKTGFN/BLhK0CRKDbYIrvP372DwPkQJlku0W3 tsvh2cNWYX0E3T62aGjoPtCinTqLK4gDgr1JnS8EvFtUjHEQt0O0JzYq+43MPWov +5dfGWzU+uE5hyuOKb9j/k2ngjkznG95aebWpF3Ib9OC0s07rinzMTowKpMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUveOolv1tbMzpm6u5yIblNg79hP0wHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUvhbjimsUnOvnqVEBfFJTcVW8tgTdhMmo1 wa4eMjC4W3QMoJ2Pr7BwQKf0ez87zJgvFdklgp+P/zndu91SC32gUwUvF0WjxM+9 jGTMeF68gUglNGPOsXYkuUE4EPpb5DLiRHmRpzZOKjrVOZa7WfV7+GyFPakFq+QM ZmSocu7vfQCtnzGJ4rvELLOAc916vtxlJn87HVnAQuLUXYCP3EVTT4f1sRJu4UV6 xJrpo55szET98p6b2Mafe54PFUs/t5qHrhuDse/nMzDnFd19pq5ZSRS8HI6/YDYk bmiFAqDNccyFtjXBl6Z3dGmmmFkX/NkJsDKKoCa1Oq+JEGNdp6g= -----END CERTIFICATE-----Generated at Fri Apr 17 22:45:02 2026 by rpki-client