$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: plBcptO35asq0kqlyUv1RD732TVpAoUlSXskGULisTo= Subject key identifier: 2D:55:81:B1:17:D0:FF:63:EA:4B:3C:E1:C3:1E:9A:72:EA:C6:3C:56 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 5C105FE1877F9E9DE16AEE49B0497C76EFEDD04D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: 010A Signing time: Mon 02 Mar 2026 09:10:42 +0000 Manifest this update: Mon 02 Mar 2026 09:05:42 +0000 Manifest next update: Thu 05 Mar 2026 16:24:42 +0000 Files and hashes: 1: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) 2: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: JjaYHfItjid5p3CPJBm6jwYYuDUk5JPxCRIlK2CI5xY=) 3: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) 4: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) 5: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) 6: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 7: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:10:5f:e1:87:7f:9e:9d:e1:6a:ee:49:b0:49:7c:76:ef:ed:d0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Mar 2 09:05:42 2026 GMT Not After : Mar 5 16:24:42 2026 GMT Subject: CN=2D5581B117D0FF63EA4B3CE1C31E9A72EAC63C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:01:55:b5:92:b1:5b:0f:fa:95:c1:c7:05: bd:e7:f5:ab:fb:97:37:5e:32:3a:20:6c:17:5d:3a: 75:3b:35:64:ed:43:ae:81:a8:18:f9:dc:78:c0:79: 1e:e9:9e:6b:eb:cb:bd:42:eb:f5:16:ee:7d:59:bd: 13:ed:66:77:02:4e:ad:a6:97:30:1b:d6:e1:44:6d: 49:2a:df:ec:bb:1a:85:4e:9b:bf:2b:65:46:b3:62: ec:f3:57:40:65:7a:5b:03:22:51:78:65:de:d2:bb: 2d:44:78:f4:bd:c4:ac:51:74:65:f9:4c:b4:1c:61: 18:96:01:b9:3d:ab:4a:75:b1:81:8a:5f:ad:65:9e: 75:bf:ee:66:72:06:5e:bb:29:f5:99:20:df:c4:67: 6d:52:fb:d9:d4:b4:0a:1a:1c:02:da:6e:96:58:4c: 69:fa:e2:0d:96:13:b2:d0:64:df:31:26:d4:1b:0b: 94:6d:ef:29:05:4d:5a:58:95:a4:b5:fb:a2:29:58: 54:f3:38:58:47:88:ce:05:a4:2e:6a:fc:dd:56:aa: 4e:e0:42:dd:b8:41:3c:f6:30:e7:b8:f4:fd:7d:42: ce:05:11:7c:90:70:ec:4f:fe:6e:3e:37:a5:fb:21: 6f:45:11:f9:5c:b2:74:44:e6:29:f6:4b:3a:65:2b: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:55:81:B1:17:D0:FF:63:EA:4B:3C:E1:C3:1E:9A:72:EA:C6:3C:56 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:bb:ea:31:ec:52:ef:a6:7c:36:d2:4b:0d:ee:54:70:ab:c6: 79:f8:ee:ae:09:9b:93:e2:6d:64:5a:a0:d2:11:d8:f1:57:29: 19:bf:d6:b6:ec:15:ff:64:e8:dd:05:a1:00:a6:26:6e:08:34: d8:35:85:0b:59:54:2e:e3:76:65:12:02:b4:9e:a2:4b:79:90: 49:7e:21:e1:5e:ee:b8:8a:8f:9b:80:c3:e1:4d:84:75:06:1b: 5e:96:be:f6:4f:d4:e7:33:d4:46:83:e5:01:cb:5b:d0:d2:07: 3d:fc:8e:e7:ee:49:ff:0e:af:da:77:6c:5d:d2:4e:77:c7:b6: f1:bb:0d:1e:0b:6b:ee:4c:84:c5:9d:a9:59:2a:ec:14:18:55: 75:84:cb:0d:0f:6e:df:f5:8f:3a:f4:0d:aa:6a:54:2f:78:e9: 5d:a6:54:3f:eb:fc:47:d2:e7:ce:6d:9f:c0:f1:e6:d8:c0:de: 3c:d5:19:03:f0:81:0a:58:60:19:cb:91:55:c0:4d:98:a6:34: f2:d6:c4:bb:f1:f4:7e:9e:97:2f:a8:62:03:aa:89:0a:a7:ef: 20:91:88:0f:fc:5d:95:ac:36:7a:7e:09:28:7d:b5:c0:ab:a3: fb:c8:df:5e:6e:33:ae:45:39:23:eb:9b:04:7f:43:8f:cd:23: e3:dc:90:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBBf4Yd/np3hau5JsEl8du/t0E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNjAzMDIwOTA1NDJaFw0yNjAzMDUxNjI0NDJaMDMxMTAvBgNV BAMTKDJENTU4MUIxMTdEMEZGNjNFQTRCM0NFMUMzMUU5QTcyRUFDNjNDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYgFVtZKxWw/6lcHHBb3n9av7 lzdeMjogbBddOnU7NWTtQ66BqBj53HjAeR7pnmvry71C6/UW7n1ZvRPtZncCTq2m lzAb1uFEbUkq3+y7GoVOm78rZUazYuzzV0BlelsDIlF4Zd7Suy1EePS9xKxRdGX5 TLQcYRiWAbk9q0p1sYGKX61lnnW/7mZyBl67KfWZIN/EZ21S+9nUtAoaHALabpZY TGn64g2WE7LQZN8xJtQbC5Rt7ykFTVpYlaS1+6IpWFTzOFhHiM4FpC5q/N1Wqk7g Qt24QTz2MOe49P19Qs4FEXyQcOxP/m4+N6X7IW9FEflcsnRE5in2SzplK9g1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVWBsRfQ/2PqSzzhwx6acurGPFYwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFC76jHsUu+mfDbSSw3uVHCrxnn47q4Jm5Pi bWRaoNIR2PFXKRm/1rbsFf9k6N0FoQCmJm4INNg1hQtZVC7jdmUSArSeokt5kEl+ IeFe7riKj5uAw+FNhHUGG16WvvZP1Ocz1EaD5QHLW9DSBz38jufuSf8Or9p3bF3S TnfHtvG7DR4La+5MhMWdqVkq7BQYVXWEyw0Pbt/1jzr0DapqVC946V2mVD/r/EfS 585tn8Dx5tjA3jzVGQPwgQpYYBnLkVXATZimNPLWxLvx9H6ely+oYgOqiQqn7yCR iA/8XZWsNnp+CSh9tcCro/vI315uM65FOSPrmwR/Q4/NI+PckHo= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:27 2026 by rpki-client