$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: 5MjMpT+ALfNNgDVTRD34zUbjpDbiTGsdocZqraCw98A= Subject key identifier: 05:BD:24:F7:7F:2C:85:0C:FA:BF:F9:5E:55:1C:B7:01:3D:FE:A3:4F Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 02ECDBBF0C6DDBF731083A62E8286540DE5EEB17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 0132 Signing time: Mon 02 Mar 2026 14:01:51 +0000 Manifest this update: Mon 02 Mar 2026 13:56:51 +0000 Manifest next update: Thu 05 Mar 2026 18:05:51 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: X7ETbrXLlsb1gErfsePddYhE1xdzeHTt/6mH7d4q/24=) 2: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: nPIVqB0MgPSj6y1GXEHX+MBWCarKfKT2JAelJ8vmy9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ec:db:bf:0c:6d:db:f7:31:08:3a:62:e8:28:65:40:de:5e:eb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Mar 2 13:56:51 2026 GMT Not After : Mar 5 18:05:51 2026 GMT Subject: CN=05BD24F77F2C850CFABFF95E551CB7013DFEA34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:fc:bd:fb:6d:62:9b:01:86:d1:1f:b5:86: b8:fe:3b:97:6d:a3:95:61:15:ea:73:0f:c1:3d:99: a2:ca:af:36:10:78:28:df:f4:9c:70:9d:b1:48:4c: 41:db:58:14:b8:70:4a:c1:22:50:b2:e5:30:8e:f6: d2:0d:be:4d:04:c3:3a:d8:28:c0:e4:14:c2:f0:23: 15:fb:8e:00:35:67:e7:69:a7:fe:5d:59:18:26:e6: 01:c6:fa:46:17:c4:ab:72:1f:73:12:50:a9:75:a3: 04:11:14:0b:17:28:e2:5e:98:6c:e9:7b:df:de:a2: 6a:b1:fd:f8:cc:38:3f:70:54:00:d4:c3:28:a9:18: 47:9f:e5:ad:37:0e:36:cc:60:0c:a2:43:86:b1:66: eb:e0:d9:ab:c2:ea:49:f1:82:17:39:3d:73:e6:a7: 08:05:97:50:d7:5d:8a:37:ee:b3:57:18:a0:e2:0a: ba:67:21:3f:6d:27:21:41:b7:15:27:16:35:ef:9c: ab:eb:bc:56:e3:16:37:be:22:0d:ee:df:a9:4e:53: 2b:64:8e:b3:4b:20:c3:87:35:a3:b8:b8:d6:a4:e4: f4:74:13:54:ce:bd:98:e7:90:eb:dc:9e:ed:60:dc: 0f:2b:43:05:7f:45:b2:4d:37:74:f8:8f:cd:7e:81: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:24:F7:7F:2C:85:0C:FA:BF:F9:5E:55:1C:B7:01:3D:FE:A3:4F X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:39:4e:d4:53:cf:f3:cd:23:a8:05:4a:42:56:60:5b:e3:70: 53:a8:c5:06:70:77:82:42:4c:39:91:aa:64:cb:34:bd:a8:cc: a7:db:31:28:65:46:68:9f:31:85:89:30:de:0c:25:8a:92:d2: 49:1e:d4:28:7b:85:e0:2a:ce:20:4e:3f:cb:fd:6b:23:19:1b: fc:00:64:64:95:c9:ca:79:5b:c1:5c:75:aa:70:da:c0:d6:8b: 92:d4:d5:7f:8d:42:11:a2:09:28:56:6b:e5:33:5a:e9:b3:04: 7f:8a:80:dc:b8:8a:51:dc:45:24:13:b1:5c:5a:df:8d:17:5c: 7e:5a:18:be:b6:6a:b0:b3:d1:27:e1:06:dc:77:09:67:ce:a5: 40:c7:be:93:bd:1a:f9:29:f3:2d:17:05:0b:bc:6c:80:e1:74: 4b:60:83:90:bb:36:09:45:e1:26:f0:57:ec:2b:bc:54:f9:3e: 1c:15:e8:11:00:91:e8:ca:18:d6:1c:9f:10:72:7e:22:ff:ec: ef:14:a4:6b:66:8f:46:5b:89:f1:bc:31:e2:d6:2d:a2:75:c7: ed:6c:8e:e2:87:cc:a7:ae:51:30:0d:13:b3:71:7c:d6:5a:d3: 4c:85:ef:2d:be:1d:fe:3f:01:23:c1:d8:ca:db:93:e5:e4:99: 69:5e:f3:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuzbvwxt2/cxCDpi6ChlQN5e6xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNjAzMDIxMzU2NTFaFw0yNjAzMDUxODA1NTFaMDMxMTAvBgNV BAMTKDA1QkQyNEY3N0YyQzg1MENGQUJGRjk1RTU1MUNCNzAxM0RGRUEzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtzfy9+21imwGG0R+1hrj+O5dt o5VhFepzD8E9maLKrzYQeCjf9JxwnbFITEHbWBS4cErBIlCy5TCO9tINvk0EwzrY KMDkFMLwIxX7jgA1Z+dpp/5dWRgm5gHG+kYXxKtyH3MSUKl1owQRFAsXKOJemGzp e9/eomqx/fjMOD9wVADUwyipGEef5a03DjbMYAyiQ4axZuvg2avC6knxghc5PXPm pwgFl1DXXYo37rNXGKDiCrpnIT9tJyFBtxUnFjXvnKvrvFbjFje+Ig3u36lOUytk jrNLIMOHNaO4uNak5PR0E1TOvZjnkOvcnu1g3A8rQwV/RbJNN3T4j81+gaCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBb0k938shQz6v/leVRy3AT3+o08wHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKA5TtRTz/PNI6gFSkJWYFvjcFOoxQZwd4JC TDmRqmTLNL2ozKfbMShlRmifMYWJMN4MJYqS0kke1Ch7heAqziBOP8v9ayMZG/wA ZGSVycp5W8Fcdapw2sDWi5LU1X+NQhGiCShWa+UzWumzBH+KgNy4ilHcRSQTsVxa 340XXH5aGL62arCz0SfhBtx3CWfOpUDHvpO9Gvkp8y0XBQu8bIDhdEtgg5C7NglF 4SbwV+wrvFT5PhwV6BEAkejKGNYcnxByfiL/7O8UpGtmj0ZbifG8MeLWLaJ1x+1s juKHzKeuUTANE7NxfNZa00yF7y2+Hf4/ASPB2Mrbk+XkmWle81A= -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:03 2026 by rpki-client