$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: Fl1rp3XxZTF11dKNwpUbLAmWDzqmwtviHDr/9GWyUnw= Subject key identifier: 20:6A:82:0A:86:CB:D4:CD:8B:6C:5C:BD:45:65:01:F5:61:F6:9E:81 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 76ACC89A9D306EA06E073EA9821B3F27EB199372 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 0565 Signing time: Sat 18 Apr 2026 19:30:50 +0000 Manifest this update: Sat 18 Apr 2026 19:25:50 +0000 Manifest next update: Tue 21 Apr 2026 20:47:50 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: 4ruTnQePRpS26crPL9ghgi1V+M8wjUe4RLpmHUU4+OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ac:c8:9a:9d:30:6e:a0:6e:07:3e:a9:82:1b:3f:27:eb:19:93:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Apr 18 19:25:50 2026 GMT Not After : Apr 21 20:47:50 2026 GMT Subject: CN=206A820A86CBD4CD8B6C5CBD456501F561F69E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:fe:a8:a3:49:bf:bd:14:07:ee:df:c2:ae: 7a:f7:bb:f8:69:aa:9f:60:2c:a7:7e:13:e6:a5:93: c7:da:99:28:45:f9:8e:29:17:a7:36:7d:62:f1:39: 01:6f:35:18:bd:ff:0b:b1:b5:f7:21:62:4b:06:f9: 7d:8d:76:26:d4:c2:d9:f9:de:00:b4:38:7e:63:f1: 6b:28:95:4a:8f:51:ae:1d:a6:c1:5c:7c:06:c8:06: b3:c9:47:7c:c7:17:e6:10:7d:82:de:7e:82:19:ca: f2:ec:98:11:ff:c5:ea:78:7b:b4:99:7e:c8:5b:c9: 24:af:65:dc:e0:57:3a:5a:9b:2d:b6:3d:79:5e:a4: f5:19:91:d6:69:57:19:44:fc:91:dd:58:4a:fb:59: 90:6e:5c:30:20:b7:11:f4:fd:2b:a5:c2:ba:a3:3f: 3f:e1:07:d1:fe:f5:d5:37:c9:d2:d7:30:c2:02:94: 21:0e:3f:0f:46:e8:0b:36:6e:3f:fb:63:83:39:f3: 85:88:df:c9:6c:48:00:d2:20:fc:c4:2c:71:0c:e6: a4:f3:14:84:5d:cb:94:1d:61:35:2d:af:84:56:da: 3e:fa:c8:23:68:ae:47:93:c8:82:70:f2:13:43:e3: 8a:5a:a2:6f:8b:6d:bc:c8:25:d9:4e:2d:1e:55:39: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:82:0A:86:CB:D4:CD:8B:6C:5C:BD:45:65:01:F5:61:F6:9E:81 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:01:99:73:61:cf:f0:e3:2f:e9:65:dd:c2:d8:dc:2d:c8:55: 2b:23:2c:ae:11:09:c0:93:cf:68:e4:97:3e:1f:34:0f:7c:4e: b4:6a:1b:8b:40:92:d9:b2:9c:37:b7:1e:89:94:f6:d0:2a:c1: 8d:3d:34:d4:b1:c1:e9:08:ea:7b:b7:57:cc:b3:20:bb:ac:4c: ff:9e:81:e4:2a:30:29:80:95:15:e4:d1:ee:80:b9:a5:8d:59: 28:20:16:2b:c9:04:c8:77:08:65:9e:0d:5a:c8:fa:af:77:ce: 98:05:f4:92:41:ae:c4:a0:fe:1a:3e:ce:a3:6c:c6:03:a4:5d: 4b:ab:b1:fb:bb:a1:ce:9e:e2:75:32:aa:14:f2:aa:c0:75:ee: d5:84:2b:a1:ea:ba:d8:28:c4:b5:72:56:0d:5e:29:bf:68:cf: c4:13:7f:4f:88:be:fb:32:59:ea:ba:4b:49:9c:22:8f:0a:54: dd:a1:4d:da:d2:10:18:50:53:39:a2:0e:9e:18:bb:da:d9:84: 2d:7f:d0:c3:81:52:0a:5c:a6:78:44:7e:64:26:94:9d:5d:13: 5d:2f:65:cc:7e:72:c6:b8:c9:a9:b9:00:c5:27:55:50:7b:ab: b2:fa:0a:b4:42:c2:78:d1:24:26:c8:0e:d7:95:91:df:db:34: 3b:36:cd:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqzImp0wbqBuBz6pghs/J+sZk3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNjA0MTgxOTI1NTBaFw0yNjA0MjEyMDQ3NTBaMDMxMTAvBgNV BAMTKDIwNkE4MjBBODZDQkQ0Q0Q4QjZDNUNCRDQ1NjUwMUY1NjFGNjlFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3v6oo0m/vRQH7t/Crnr3u/hp qp9gLKd+E+alk8famShF+Y4pF6c2fWLxOQFvNRi9/wuxtfchYksG+X2NdibUwtn5 3gC0OH5j8WsolUqPUa4dpsFcfAbIBrPJR3zHF+YQfYLefoIZyvLsmBH/xep4e7SZ fshbySSvZdzgVzpamy22PXlepPUZkdZpVxlE/JHdWEr7WZBuXDAgtxH0/Sulwrqj Pz/hB9H+9dU3ydLXMMIClCEOPw9G6As2bj/7Y4M584WI38lsSADSIPzELHEM5qTz FIRdy5QdYTUtr4RW2j76yCNorkeTyIJw8hND44paom+LbbzIJdlOLR5VOcbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGqCCobL1M2LbFy9RWUB9WH2noEwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIBmXNhz/DjL+ll3cLY3C3IVSsjLK4RCcCT z2jklz4fNA98TrRqG4tAktmynDe3HomU9tAqwY09NNSxwekI6nu3V8yzILusTP+e geQqMCmAlRXk0e6AuaWNWSggFivJBMh3CGWeDVrI+q93zpgF9JJBrsSg/ho+zqNs xgOkXUursfu7oc6e4nUyqhTyqsB17tWEK6HqutgoxLVyVg1eKb9oz8QTf0+Ivvsy Weq6S0mcIo8KVN2hTdrSEBhQUzmiDp4Yu9rZhC1/0MOBUgpcpnhEfmQmlJ1dE10v Zcx+csa4yam5AMUnVVB7q7L6CrRCwnjRJCbIDteVkd/bNDs2zWI= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:57 2026 by rpki-client