$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: e/451x/N0hllGgA1eip6Q0OrGPHwqNP80Hp4cke8e14= Subject key identifier: B2:0D:F9:4D:6D:B7:26:AA:2A:27:10:F3:E9:37:4A:5A:F8:75:6F:5B Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 28C10924E1985A80B43E4BC5EEF3278FE4501155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 0554 Signing time: Sat 28 Feb 2026 07:31:19 +0000 Manifest this update: Sat 28 Feb 2026 07:26:19 +0000 Manifest next update: Tue 03 Mar 2026 13:46:19 +0000 Files and hashes: 1: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 2: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 3: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 4: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) 5: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: l+M4th3loub5ccam14TYvuOhQ1IlM4inhQwjg5R5MzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c1:09:24:e1:98:5a:80:b4:3e:4b:c5:ee:f3:27:8f:e4:50:11:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Feb 28 07:26:19 2026 GMT Not After : Mar 3 13:46:19 2026 GMT Subject: CN=B20DF94D6DB726AA2A2710F3E9374A5AF8756F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:ed:2a:cc:09:f6:d0:32:8d:23:b1:07:9c: 10:c6:16:dd:21:17:2c:0e:51:91:db:3a:87:20:9f: f2:79:ed:63:10:5f:fb:e8:7c:f5:05:39:6e:63:96: eb:ab:2e:5d:6f:57:3c:b2:49:cf:69:a5:65:c7:73: 28:6c:c2:bb:d3:26:68:95:fd:fd:b2:08:c8:79:06: 38:b7:41:b8:b8:ad:a7:a1:72:57:31:53:b7:1a:e0: f9:28:b9:18:fe:2d:d6:db:9f:7e:11:1f:73:cb:40: e0:1b:f4:77:b7:25:e0:69:55:a1:51:65:f9:f5:96: 13:a8:94:8f:9f:31:56:04:a4:83:2b:2d:cc:2d:b3: 08:c2:a7:84:de:08:42:66:82:2a:ed:39:76:8c:f5: 1c:30:86:00:4b:df:77:8e:92:e6:8b:20:eb:20:27: 58:63:b3:ca:a2:46:a9:f4:47:f9:94:ca:6f:49:cf: fc:23:f0:9e:6e:8f:20:bd:5d:a9:16:a5:c0:da:0a: 2c:26:9c:02:4d:0d:df:c8:41:d4:4f:60:e8:31:4f: 1a:f6:44:40:c1:89:0b:e0:11:6c:d1:26:69:53:5f: 85:c7:ff:fe:4c:ca:89:b6:dc:33:13:18:82:57:ef: 24:e2:78:dc:94:0d:84:2d:cd:70:a6:2b:dd:9a:05: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0D:F9:4D:6D:B7:26:AA:2A:27:10:F3:E9:37:4A:5A:F8:75:6F:5B X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:ec:d6:a0:47:90:38:e8:56:f6:19:e1:93:91:43:3b:cb:3c: 74:1d:a2:71:44:f0:d2:a0:4b:7e:8e:21:f7:6a:4f:12:49:2d: 7c:3a:9c:24:62:a7:ea:28:cd:7c:b5:2c:6f:2d:0f:81:a8:e2: d0:38:76:af:8a:9f:ba:36:c8:91:8a:99:f8:14:f6:93:e9:50: 6a:5a:37:91:d5:2b:7b:9f:79:45:60:1d:6f:c8:7e:a5:ca:e1: e6:c5:58:5b:51:95:95:ab:a3:9b:f5:da:d3:8e:8b:22:e8:ad: 2b:07:a5:44:0f:e5:72:3e:c1:af:0e:07:b0:4a:57:02:3a:a9: 18:08:be:e9:1f:37:08:16:40:4d:23:de:4a:7b:dc:06:e0:b1: ca:f1:9d:ac:97:9b:17:7f:17:71:4a:41:e2:72:5f:f5:0c:76: 06:b8:32:c5:83:2c:c0:6f:5b:23:7d:cd:61:89:f3:ab:c8:71: 0e:44:31:7b:15:3f:2c:6a:fe:50:13:c0:60:b0:c0:5a:b2:d9: c3:5f:88:76:17:a1:bd:b0:bf:8a:2a:5d:0f:bb:ec:0d:ab:8e: 55:f2:51:7b:31:56:2f:b1:73:ab:ed:2d:05:52:67:ef:d4:ba: 32:83:ab:72:04:f2:f0:f1:1e:ff:fb:cc:d9:a0:00:2a:49:7e: ae:3d:4b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMEJJOGYWoC0PkvF7vMnj+RQEVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNjAyMjgwNzI2MTlaFw0yNjAzMDMxMzQ2MTlaMDMxMTAvBgNV BAMTKEIyMERGOTRENkRCNzI2QUEyQTI3MTBGM0U5Mzc0QTVBRjg3NTZGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsO0qzAn20DKNI7EHnBDGFt0h FywOUZHbOocgn/J57WMQX/vofPUFOW5jluurLl1vVzyySc9ppWXHcyhswrvTJmiV /f2yCMh5Bji3Qbi4raehclcxU7ca4PkouRj+Ldbbn34RH3PLQOAb9He3JeBpVaFR Zfn1lhOolI+fMVYEpIMrLcwtswjCp4TeCEJmgirtOXaM9RwwhgBL33eOkuaLIOsg J1hjs8qiRqn0R/mUym9Jz/wj8J5ujyC9XakWpcDaCiwmnAJNDd/IQdRPYOgxTxr2 REDBiQvgEWzRJmlTX4XH//5Myom23DMTGIJX7yTieNyUDYQtzXCmK92aBeWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsg35TW23JqoqJxDz6TdKWvh1b1swHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzs1qBHkDjoVvYZ4ZORQzvLPHQdonFE8NKg S36OIfdqTxJJLXw6nCRip+oozXy1LG8tD4Go4tA4dq+Kn7o2yJGKmfgU9pPpUGpa N5HVK3ufeUVgHW/IfqXK4ebFWFtRlZWro5v12tOOiyLorSsHpUQP5XI+wa8OB7BK VwI6qRgIvukfNwgWQE0j3kp73AbgscrxnayXmxd/F3FKQeJyX/UMdga4MsWDLMBv WyN9zWGJ86vIcQ5EMXsVPyxq/lATwGCwwFqy2cNfiHYXob2wv4oqXQ+77A2rjlXy UXsxVi+xc6vtLQVSZ+/UujKDq3IE8vDxHv/7zNmgACpJfq49S2s= -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:45 2026 by rpki-client