$ rpki-client -vvf repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.mft File: C5B12232B70EF234D5CB970B1B84D73947CC4864.mft (raw, json) Hash identifier: 1duOET5hHmueGV6XzDTUO6jG+PkUbT/lfQiotgYXeL0= Subject key identifier: B4:AC:84:DF:20:AA:01:13:A7:3B:14:7E:C1:DC:72:CE:41:78:FD:58 Authority key identifier: C5:B1:22:32:B7:0E:F2:34:D5:CB:97:0B:1B:84:D7:39:47:CC:48:64 Certificate issuer: /CN=C5B12232B70EF234D5CB970B1B84D73947CC4864 Certificate serial: 5544F5F986B2A58D6C7FC6A57348AC99FEB6A5FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B12232B70EF234D5CB970B1B84D73947CC4864.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.mft Manifest number: 05 Signing time: Thu 16 Apr 2026 09:52:11 +0000 Manifest this update: Thu 16 Apr 2026 09:47:11 +0000 Manifest next update: Sun 19 Apr 2026 14:44:11 +0000 Files and hashes: 1: C5B12232B70EF234D5CB970B1B84D73947CC4864.crl (hash: RePy4sKFsUunbOvAKDvq5zdVEtyi6GpQW1govYF6lVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.crl rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B12232B70EF234D5CB970B1B84D73947CC4864.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:44:f5:f9:86:b2:a5:8d:6c:7f:c6:a5:73:48:ac:99:fe:b6:a5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5B12232B70EF234D5CB970B1B84D73947CC4864 Validity Not Before: Apr 16 09:47:11 2026 GMT Not After : Apr 19 14:44:11 2026 GMT Subject: CN=B4AC84DF20AA0113A73B147EC1DC72CE4178FD58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:b0:52:40:64:8c:28:6b:2d:00:d7:ac:b1: 5a:7f:03:f5:91:20:b1:64:c5:15:61:0d:dc:5c:ff: e1:c1:a0:c9:07:e4:45:f0:a0:46:bf:23:89:0d:e8: 9e:bb:96:8e:28:53:6a:de:53:7a:5f:17:63:19:92: 1a:e8:5b:7e:e6:64:d1:5e:de:00:16:bb:db:4c:56: c2:b8:2c:db:93:48:24:5b:e2:7d:b3:0a:42:3a:05: b6:59:0d:0d:d6:a2:a7:9d:3c:11:62:8c:54:44:35: c4:62:b0:1a:2c:b2:70:38:3d:94:6b:bc:59:6a:2e: 1b:29:f3:20:1a:23:5a:f3:70:1f:91:36:b4:8e:62: 20:b5:89:50:95:bb:ef:9d:19:f7:ad:8a:57:fb:39: f9:86:83:d4:c7:06:95:fb:76:33:51:54:b1:af:5d: 4c:d6:ce:2a:c0:a0:b0:fb:43:ff:f4:9b:50:5a:e6: ae:f4:1e:a6:b0:c1:3d:fe:db:4c:55:b6:cf:e0:b7: 20:e0:6b:78:40:30:16:69:5a:d5:96:f5:df:b7:95: 80:f8:f4:b3:df:46:79:12:76:11:f1:34:b2:40:42: 8d:26:53:71:ef:f9:51:dd:ab:bd:5f:e1:1e:c3:46: ab:04:b8:33:eb:41:57:e3:f9:47:42:50:54:0a:6b: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AC:84:DF:20:AA:01:13:A7:3B:14:7E:C1:DC:72:CE:41:78:FD:58 X509v3 Authority Key Identifier: keyid:C5:B1:22:32:B7:0E:F2:34:D5:CB:97:0B:1B:84:D7:39:47:CC:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B12232B70EF234D5CB970B1B84D73947CC4864.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/C5B12232B70EF234D5CB970B1B84D73947CC4864.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:f7:49:89:b8:e8:df:e5:cc:0e:fa:34:56:a7:ae:ba:f1:5d: 47:11:f6:9f:87:06:37:5e:bd:cb:c0:9c:5a:71:44:8b:97:af: 9f:5e:21:84:89:8f:88:a1:59:f3:ed:7d:51:6b:2c:42:c9:90: c6:45:da:4a:a8:ec:c5:62:f1:02:42:17:9d:b0:33:ef:ce:e0: cd:3c:40:b0:12:21:66:e3:4a:d0:57:83:1b:99:61:d5:63:46: 46:c3:12:6f:ff:f3:51:3a:15:c2:8d:46:17:79:4f:24:44:34: e2:b6:54:86:c1:74:04:57:d5:9a:2a:ab:24:d3:00:38:ff:b0: d5:3d:bf:e5:67:3f:f4:73:76:c8:b8:bc:43:5c:d3:b5:69:fc: bb:83:6e:95:e1:dc:18:2b:82:97:e4:01:9f:29:f6:80:7f:28: ce:f1:11:35:13:a2:f6:65:fa:ac:79:5f:53:26:9b:dc:65:d6: 81:a3:ef:80:f9:9e:62:59:7a:3d:29:1b:2f:6d:1c:12:7d:41: e4:14:d2:cd:29:48:37:9e:23:64:b4:1e:7d:82:ba:ef:b3:b7: 99:f8:40:1c:74:38:6b:79:a5:9e:2e:c1:81:30:9f:d6:65:1c: f7:dc:e1:81:33:e8:b8:e4:69:a9:b8:a0:af:5f:c0:fe:af:b4: 40:4d:aa:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUT1+YaypY1sf8alc0ismf62pf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVCMTIyMzJCNzBFRjIzNEQ1Q0I5NzBCMUI4NEQ3Mzk0 N0NDNDg2NDAeFw0yNjA0MTYwOTQ3MTFaFw0yNjA0MTkxNDQ0MTFaMDMxMTAvBgNV BAMTKEI0QUM4NERGMjBBQTAxMTNBNzNCMTQ3RUMxREM3MkNFNDE3OEZENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6LBSQGSMKGstANessVp/A/WR ILFkxRVhDdxc/+HBoMkH5EXwoEa/I4kN6J67lo4oU2reU3pfF2MZkhroW37mZNFe 3gAWu9tMVsK4LNuTSCRb4n2zCkI6BbZZDQ3WoqedPBFijFRENcRisBossnA4PZRr vFlqLhsp8yAaI1rzcB+RNrSOYiC1iVCVu++dGfetilf7OfmGg9THBpX7djNRVLGv XUzWzirAoLD7Q//0m1Ba5q70HqawwT3+20xVts/gtyDga3hAMBZpWtWW9d+3lYD4 9LPfRnkSdhHxNLJAQo0mU3Hv+VHdq71f4R7DRqsEuDPrQVfj+UdCUFQKa/0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKyE3yCqAROnOxR+wdxyzkF4/VgwHwYDVR0j BBgwFoAUxbEiMrcO8jTVy5cLG4TXOUfMSGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDVhMDNlYi1hM2UxLTQ4NzktODViZi0yYmVhMDM1NTU4ZGQvMC9DNUIxMjIzMkI3 MEVGMjM0RDVDQjk3MEIxQjg0RDczOTQ3Q0M0ODY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVCMTIyMzJCNzBFRjIzNEQ1Q0I5NzBCMUI4NEQ3Mzk0N0ND NDg2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvQzVCMTIyMzJCNzBFRjIzNEQ1Q0I5NzBCMUI4NEQ3 Mzk0N0NDNDg2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANr3SYm46N/lzA76NFanrrrxXUcR9p+HBjde vcvAnFpxRIuXr59eIYSJj4ihWfPtfVFrLELJkMZF2kqo7MVi8QJCF52wM+/O4M08 QLASIWbjStBXgxuZYdVjRkbDEm//81E6FcKNRhd5TyRENOK2VIbBdARX1ZoqqyTT ADj/sNU9v+VnP/Rzdsi4vENc07Vp/LuDbpXh3BgrgpfkAZ8p9oB/KM7xETUTovZl +qx5X1Mmm9xl1oGj74D5nmJZej0pGy9tHBJ9QeQU0s0pSDeeI2S0Hn2Cuu+zt5n4 QBx0OGt5pZ4uwYEwn9ZlHPfc4YEz6Ljkaam4oK9fwP6vtEBNqno= -----END CERTIFICATE-----Generated at Fri Apr 17 16:11:25 2026 by rpki-client