$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: Idm1xhICIGYrsEqp11+3JnpQ3m05mEC4CGSCPT2CfXI= Subject key identifier: C9:40:72:EE:78:E0:C6:DB:E2:38:D5:E5:03:82:2B:A6:D6:71:99:6E Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 472BBA0B1EAE61AFA9B73595AE2113818799E673 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 0496 Signing time: Sun 01 Mar 2026 10:21:27 +0000 Manifest this update: Sun 01 Mar 2026 10:16:27 +0000 Manifest next update: Wed 04 Mar 2026 11:06:27 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: KRktnteDnyYg6nz1jryAhBitmgTdPeDYlQjOLwEk1PI=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: xufBW0tgF9GH044ZCtCODOthPCoRzgsrcm0HHfNPNhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2b:ba:0b:1e:ae:61:af:a9:b7:35:95:ae:21:13:81:87:99:e6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Mar 1 10:16:27 2026 GMT Not After : Mar 4 11:06:27 2026 GMT Subject: CN=C94072EE78E0C6DBE238D5E503822BA6D671996E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:9b:d8:61:51:d2:6f:3c:90:f6:e7:d2:fc: 5a:39:f2:eb:c5:90:78:aa:03:e5:c7:38:56:43:d6: 92:1c:54:b9:2e:e7:2d:d8:1b:7a:31:c5:4f:0b:cc: dc:54:b5:69:ec:8f:0c:7f:1c:2c:29:1c:96:a0:9c: 83:3e:1c:25:52:a1:9b:75:7f:ee:68:1e:b8:9f:2e: 69:31:17:d9:2d:6a:8e:50:dc:c6:fa:bc:82:fe:40: a8:2d:2f:67:93:96:7a:7e:59:25:6f:b2:89:f8:14: c7:ce:94:bb:5a:b4:fe:08:69:09:31:01:ea:a3:f5: c3:73:3b:33:64:bd:5c:0e:b1:94:f0:5c:09:87:0c: 72:43:96:61:5e:85:5a:4f:83:4b:6e:9c:b3:ea:dc: 4f:3f:8c:e6:95:98:21:40:40:8e:f4:55:ad:18:c1: 4c:1d:a9:5c:b8:f9:f7:fa:ad:57:0f:b6:ec:b3:33: 5d:4a:11:69:03:b9:a1:33:3a:73:44:d5:71:51:38: db:d7:fc:34:f1:cd:5e:31:2c:b3:96:d7:48:bf:a6: 53:ed:0f:17:9d:39:fe:2d:f7:ea:55:a5:2a:af:72: 8c:64:9c:4c:70:b2:d7:1f:e5:cb:1f:3e:41:5e:11: dc:76:8b:ca:f1:90:ae:fe:1b:da:d5:0b:9f:4c:4f: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:72:EE:78:E0:C6:DB:E2:38:D5:E5:03:82:2B:A6:D6:71:99:6E X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:66:ca:99:b9:68:28:40:d7:f1:84:8e:fb:44:78:8a:8a:78: ba:56:9e:bf:77:a8:83:17:26:08:4f:fd:3b:9a:5d:6a:d0:b5: 78:ac:eb:ab:0e:2c:24:41:54:3b:a3:34:45:82:4d:49:44:cd: c0:6a:03:40:57:1f:1b:2d:70:68:9d:46:23:64:bf:44:f1:53: b1:e0:75:c0:44:f7:af:9d:6e:8a:ea:a9:c3:bf:d2:5b:98:11: d8:23:40:84:6c:70:ad:3e:4f:11:26:dc:fb:90:c4:73:30:e4: 69:83:cd:d2:7f:18:4f:e6:3e:7d:4a:e2:e1:88:66:ae:bf:33: 2a:36:3c:d7:54:e6:d9:2f:f6:5e:64:ed:97:d3:bb:08:2d:eb: 0b:f7:19:94:ea:62:5d:28:17:fb:0a:0c:a6:94:38:c3:cc:a8: 6e:72:fc:2b:e9:50:f2:36:9b:f2:68:d9:01:98:e3:5d:92:ad: 7d:71:7a:4d:41:b3:68:de:02:82:87:72:fc:28:d9:cc:02:52: 21:e9:15:d4:ee:12:4e:25:31:55:c3:62:37:04:18:28:be:7a: 51:4f:ca:a7:41:5f:aa:f2:24:0f:e2:df:df:30:e4:68:b0:f1: 0a:22:2c:63:93:89:9a:b3:2d:31:6c:b8:ca:4f:49:38:c8:99: 76:ca:e8:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyu6Cx6uYa+ptzWVriETgYeZ5nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNjAzMDExMDE2MjdaFw0yNjAzMDQxMTA2MjdaMDMxMTAvBgNV BAMTKEM5NDA3MkVFNzhFMEM2REJFMjM4RDVFNTAzODIyQkE2RDY3MTk5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFb5vYYVHSbzyQ9ufS/Fo58uvF kHiqA+XHOFZD1pIcVLku5y3YG3oxxU8LzNxUtWnsjwx/HCwpHJagnIM+HCVSoZt1 f+5oHrifLmkxF9ktao5Q3Mb6vIL+QKgtL2eTlnp+WSVvson4FMfOlLtatP4IaQkx Aeqj9cNzOzNkvVwOsZTwXAmHDHJDlmFehVpPg0tunLPq3E8/jOaVmCFAQI70Va0Y wUwdqVy4+ff6rVcPtuyzM11KEWkDuaEzOnNE1XFRONvX/DTxzV4xLLOW10i/plPt DxedOf4t9+pVpSqvcoxknExwstcf5csfPkFeEdx2i8rxkK7+G9rVC59MT25RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyUBy7njgxtviONXlA4IrptZxmW4wHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNmypm5aChA1/GEjvtEeIqKeLpWnr93qIMX JghP/TuaXWrQtXis66sOLCRBVDujNEWCTUlEzcBqA0BXHxstcGidRiNkv0TxU7Hg dcBE96+dborqqcO/0luYEdgjQIRscK0+TxEm3PuQxHMw5GmDzdJ/GE/mPn1K4uGI Zq6/Myo2PNdU5tkv9l5k7ZfTuwgt6wv3GZTqYl0oF/sKDKaUOMPMqG5y/CvpUPI2 m/Jo2QGY412SrX1xek1Bs2jeAoKHcvwo2cwCUiHpFdTuEk4lMVXDYjcEGCi+elFP yqdBX6ryJA/i398w5Giw8QoiLGOTiZqzLTFsuMpPSTjImXbK6OA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:20 2026 by rpki-client