$ rpki-client -vvf repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft File: C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft (raw, json) Hash identifier: HkDMTKChTZDlkK4P+R2NpeYOKRsFGbbWnUv7I+WUIAI= Subject key identifier: 21:CE:0F:27:D9:16:F6:32:DC:4E:F6:09:3D:A6:C0:E9:06:52:76:3A Authority key identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F Certificate issuer: /CN=C5B92B59C4DF6510BAE830177B33AA62BFF43C8F Certificate serial: 26EC475F7E722638A611E23B96A2F30BB8537BD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft Manifest number: 0200 Signing time: Fri 17 Apr 2026 17:32:28 +0000 Manifest this update: Fri 17 Apr 2026 17:27:28 +0000 Manifest next update: Tue 21 Apr 2026 05:29:28 +0000 Files and hashes: 1: C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.crl (hash: H9dNaNs2ycb4T+nQSsWM7zK1fP2NDhZhO6DchGYzyAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.crl rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ec:47:5f:7e:72:26:38:a6:11:e2:3b:96:a2:f3:0b:b8:53:7b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5B92B59C4DF6510BAE830177B33AA62BFF43C8F Validity Not Before: Apr 17 17:27:28 2026 GMT Not After : Apr 21 05:29:28 2026 GMT Subject: CN=21CE0F27D916F632DC4EF6093DA6C0E90652763A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:d7:9f:ce:35:32:ee:f2:6a:e4:5e:2e:f3: 6d:15:4c:8e:af:97:1c:e7:58:12:0f:6b:23:41:f8: 82:f4:6f:6e:2e:40:6a:33:e8:67:cf:e7:90:16:68: c6:81:9b:03:6b:17:46:3c:f9:ae:7a:49:14:1c:a0: 33:d6:0b:5c:b8:c7:e1:a9:85:c3:1f:f4:bc:bd:c5: a2:2c:1c:f2:18:14:fb:97:a9:e0:d4:3c:62:49:66: d3:58:ac:7f:f3:35:98:f1:95:fe:ec:02:47:41:95: 4f:91:d6:4f:87:df:2d:f6:c7:0a:c3:82:f5:8e:a8: be:ae:8d:9a:3e:af:66:12:47:57:de:47:f0:0c:e6: c1:d8:46:71:bd:e1:6e:6e:af:79:dd:c0:75:c7:cb: 85:c5:4e:78:59:a2:a6:b8:6b:08:c3:2d:d4:2c:2d: 29:10:fb:0f:0d:b3:2e:a5:c2:24:14:88:ac:0d:dc: 5d:a2:7e:f0:80:47:09:67:1a:e8:82:cd:0a:ed:ed: de:de:ae:4c:17:6d:63:39:5a:07:c4:eb:99:3f:dc: 3f:df:0f:a8:d1:07:53:2d:6e:17:20:5e:4e:eb:7c: be:92:95:74:9d:1b:09:96:be:fb:d7:1b:d7:6e:0e: 14:e5:90:ef:04:40:29:bc:2f:64:57:34:9a:b3:fa: 60:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:0F:27:D9:16:F6:32:DC:4E:F6:09:3D:A6:C0:E9:06:52:76:3A X509v3 Authority Key Identifier: keyid:C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cb:f7:ed:11:f1:1f:fa:b6:39:13:b3:61:92:a6:ee:d3:98: 7e:a1:c3:78:91:d3:0a:d0:34:66:4f:c0:e1:94:57:a1:0d:cc: e8:f3:7f:a4:ba:0f:4a:fa:74:28:da:27:2d:d6:c0:3d:ac:92: c7:45:b0:24:32:cb:d8:02:64:5e:79:80:65:b6:10:5a:1e:52: 20:da:91:1e:fc:b0:2b:01:e6:fe:3f:08:40:2b:10:74:5e:af: 5f:40:13:6b:72:03:69:87:98:83:a6:02:e4:85:3c:3b:ef:39: dd:77:86:11:3e:d8:f3:98:00:60:29:1e:c6:0e:4c:24:14:a4: 50:d7:95:05:46:4b:71:09:a7:f8:1e:93:70:58:5b:62:81:29: b7:55:73:ac:d1:66:22:ce:82:3f:cd:95:2e:ef:63:2c:6c:6b: 95:5d:24:87:a5:33:72:25:fe:c7:82:a1:38:be:5a:41:3f:60: 91:06:d8:ad:80:47:7a:ed:17:aa:5a:5e:7f:10:42:3a:0f:fc: 88:ac:ec:9c:60:37:bd:d9:77:a7:1c:a4:9d:55:a3:e0:2d:e4: 80:46:ca:96:8b:87:d0:0f:b3:f6:63:9e:4e:cf:81:5f:8a:6a: 99:14:0b:57:38:31:5c:f2:cd:f9:a1:69:e0:39:90:0d:61:5d: fd:a6:62:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJuxHX35yJjimEeI7lqLzC7hTe9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVCOTJCNTlDNERGNjUxMEJBRTgzMDE3N0IzM0FBNjJC RkY0M0M4RjAeFw0yNjA0MTcxNzI3MjhaFw0yNjA0MjEwNTI5MjhaMDMxMTAvBgNV BAMTKDIxQ0UwRjI3RDkxNkY2MzJEQzRFRjYwOTNEQTZDMEU5MDY1Mjc2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKdefzjUy7vJq5F4u820VTI6v lxznWBIPayNB+IL0b24uQGoz6GfP55AWaMaBmwNrF0Y8+a56SRQcoDPWC1y4x+Gp hcMf9Ly9xaIsHPIYFPuXqeDUPGJJZtNYrH/zNZjxlf7sAkdBlU+R1k+H3y32xwrD gvWOqL6ujZo+r2YSR1feR/AM5sHYRnG94W5ur3ndwHXHy4XFTnhZoqa4awjDLdQs LSkQ+w8Nsy6lwiQUiKwN3F2ifvCARwlnGuiCzQrt7d7erkwXbWM5WgfE65k/3D/f D6jRB1MtbhcgXk7rfL6SlXSdGwmWvvvXG9duDhTlkO8EQCm8L2RXNJqz+mCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIc4PJ9kW9jLcTvYJPabA6QZSdjowHwYDVR0j BBgwFoAUxbkrWcTfZRC66DAXezOqYr/0PI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDc2NWYwNi1iNGM5LTQ3YzEtYWQ5YS0wNjEyYzdjMDJkMWMvMC9DNUI5MkI1OUM0 REY2NTEwQkFFODMwMTc3QjMzQUE2MkJGRjQzQzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVCOTJCNTlDNERGNjUxMEJBRTgzMDE3N0IzM0FBNjJCRkY0 M0M4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ3NjVmMDYtYjRjOS00N2MxLWFk OWEtMDYxMmM3YzAyZDFjLzAvQzVCOTJCNTlDNERGNjUxMEJBRTgzMDE3N0IzM0FB NjJCRkY0M0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3L9+0R8R/6tjkTs2GSpu7TmH6hw3iR0wrQ NGZPwOGUV6ENzOjzf6S6D0r6dCjaJy3WwD2sksdFsCQyy9gCZF55gGW2EFoeUiDa kR78sCsB5v4/CEArEHRer19AE2tyA2mHmIOmAuSFPDvvOd13hhE+2POYAGApHsYO TCQUpFDXlQVGS3EJp/gek3BYW2KBKbdVc6zRZiLOgj/NlS7vYyxsa5VdJIelM3Il /seCoTi+WkE/YJEG2K2AR3rtF6paXn8QQjoP/Iis7JxgN73Zd6ccpJ1Vo+At5IBG ypaLh9APs/Zjnk7PgV+KapkUC1c4MVzyzfmhaeA5kA1hXf2mYvs= -----END CERTIFICATE-----Generated at Fri Apr 17 22:05:20 2026 by rpki-client