$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: PUuA0LWGX0qPOpcdXZp0i8IMDvn4wJru/OnxX1Q3Caw= Subject key identifier: 0E:66:E3:50:D6:CB:E9:8C:E4:92:9E:8F:3E:A0:A8:8C:85:ED:7A:54 Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 64847B321D2A3F638B4505848785ADF8C4CA7828 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 0230 Signing time: Sun 01 Mar 2026 21:21:57 +0000 Manifest this update: Sun 01 Mar 2026 21:16:57 +0000 Manifest next update: Wed 04 Mar 2026 22:18:57 +0000 Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: Vrmcu03T647sbP3GWEBBWylAAxqciaCOgVn/2H7+uB8=) 2: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) 3: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) 4: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: Synl1Qli5tGqURbvcO6q+mapQcgZZuy5ec4S1NvZHLI=) 5: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:84:7b:32:1d:2a:3f:63:8b:45:05:84:87:85:ad:f8:c4:ca:78:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Mar 1 21:16:57 2026 GMT Not After : Mar 4 22:18:57 2026 GMT Subject: CN=0E66E350D6CBE98CE4929E8F3EA0A88C85ED7A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:9a:13:3f:00:2d:d4:c7:1a:2c:f1:cd:19: 79:cf:18:60:cd:d6:7c:bf:ea:76:34:b5:9a:1b:47: 95:0b:38:6d:78:40:80:83:42:fe:25:04:91:77:d7: 23:7b:62:8e:2d:f7:0a:39:15:29:01:ef:e1:ab:f0: 58:14:52:e7:fe:e8:a6:6a:d0:e1:29:d2:dc:5f:e6: 8b:d5:24:5f:16:7e:16:6a:5c:4d:75:a0:d3:ac:03: 1b:d7:df:3b:ba:44:dd:9d:70:b2:c7:4d:a3:d1:1c: 6d:d6:32:d4:57:c7:70:29:ec:d9:eb:7a:68:ff:2e: 5a:d0:fe:b2:05:e1:23:65:69:d3:8e:ae:63:aa:fe: f6:5e:7b:43:41:00:ea:b3:3e:ac:20:3e:14:c3:70: 43:3f:08:8e:01:6b:15:82:be:bb:19:9e:cb:26:6e: 8a:90:3d:70:31:0e:5e:12:d9:21:0a:b3:a3:98:73: dc:89:0c:2a:1b:05:03:fb:4d:cb:79:4b:10:f9:c3: 22:59:a6:52:ef:40:3f:1e:f0:3c:0a:35:dc:15:5a: 95:7a:0f:db:d5:c7:8e:37:23:70:ad:ab:43:f7:97: 49:b0:ee:79:e2:1a:98:fd:7a:b0:4f:3a:83:06:56: 67:1c:ce:4b:35:27:a6:25:8b:58:5d:47:d0:79:8d: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:66:E3:50:D6:CB:E9:8C:E4:92:9E:8F:3E:A0:A8:8C:85:ED:7A:54 X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d7:e8:bd:be:c7:a4:95:e7:4d:2f:c7:08:27:20:4d:33:50: ec:2d:3a:46:71:75:ab:9d:96:94:cd:83:39:69:67:71:07:49: 1d:1b:63:16:06:03:b7:84:7e:33:85:4d:d5:70:15:d9:96:be: 9e:c0:b3:66:78:5e:25:32:b3:f7:d5:1d:7c:dd:55:40:15:7a: 71:02:2a:0f:93:36:d7:24:3f:e4:f1:23:ae:ea:59:6a:da:45: 65:40:9e:ec:4c:65:0f:f4:51:b9:82:5d:ba:f5:08:e5:d9:f3: 85:0d:f7:cf:5d:e4:73:78:78:46:b3:dd:6b:cc:56:d6:4a:11: d2:ef:ad:3f:bb:86:d5:35:26:84:c2:72:44:14:03:20:a0:95: 88:a9:28:63:f4:88:10:17:63:a3:b1:01:25:eb:8f:52:22:56: e5:c1:be:e9:4c:75:00:8f:28:a3:a8:d4:ef:fc:45:31:09:1c: 35:1c:0d:d1:fc:a0:a8:e4:97:af:40:e9:27:f8:14:fd:11:01: 4e:db:e3:5a:e6:56:d6:ee:5e:f8:b4:11:03:24:06:cc:d6:ec: 1d:4c:6d:a7:7b:3c:77:ff:9a:67:44:74:df:4c:5e:09:1f:89: 8d:ec:bb:09:fe:fb:68:ae:62:a0:fd:77:74:a4:5b:fc:96:cd: cd:f5:af:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIR7Mh0qP2OLRQWEh4Wt+MTKeCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNjAzMDEyMTE2NTdaFw0yNjAzMDQyMjE4NTdaMDMxMTAvBgNV BAMTKDBFNjZFMzUwRDZDQkU5OENFNDkyOUU4RjNFQTBBODhDODVFRDdBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYpoTPwAt1McaLPHNGXnPGGDN 1ny/6nY0tZobR5ULOG14QICDQv4lBJF31yN7Yo4t9wo5FSkB7+Gr8FgUUuf+6KZq 0OEp0txf5ovVJF8WfhZqXE11oNOsAxvX3zu6RN2dcLLHTaPRHG3WMtRXx3Ap7Nnr emj/LlrQ/rIF4SNladOOrmOq/vZee0NBAOqzPqwgPhTDcEM/CI4BaxWCvrsZnssm boqQPXAxDl4S2SEKs6OYc9yJDCobBQP7Tct5SxD5wyJZplLvQD8e8DwKNdwVWpV6 D9vVx443I3Ctq0P3l0mw7nniGpj9erBPOoMGVmcczks1J6Yli1hdR9B5jRjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmbjUNbL6Yzkkp6PPqCojIXtelQwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7X6L2+x6SV500vxwgnIE0zUOwtOkZxdaud lpTNgzlpZ3EHSR0bYxYGA7eEfjOFTdVwFdmWvp7As2Z4XiUys/fVHXzdVUAVenEC Kg+TNtckP+TxI67qWWraRWVAnuxMZQ/0UbmCXbr1COXZ84UN989d5HN4eEaz3WvM VtZKEdLvrT+7htU1JoTCckQUAyCglYipKGP0iBAXY6OxASXrj1IiVuXBvulMdQCP KKOo1O/8RTEJHDUcDdH8oKjkl69A6Sf4FP0RAU7b41rmVtbuXvi0EQMkBszW7B1M bad7PHf/mmdEdN9MXgkfiY3suwn++2iuYqD9d3SkW/yWzc31r/E= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:24 2026 by rpki-client