$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: IrFNaPolnZZS61y4jBSjB0pIB0/N9WyDGmIE1k0iEuQ= Subject key identifier: 40:D8:E1:D8:BC:6F:33:12:C8:77:18:52:37:52:C1:62:FA:E2:79:7D Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 22B9A720571235F02A3274F53BB2177D5BD27AC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 04AB Signing time: Thu 16 Apr 2026 19:11:30 +0000 Manifest this update: Thu 16 Apr 2026 19:06:30 +0000 Manifest next update: Mon 20 Apr 2026 06:19:30 +0000 Files and hashes: 1: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: xufBW0tgF9GH044ZCtCODOthPCoRzgsrcm0HHfNPNhM=) 2: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: /pdJ5bxWHl1vuzMhz9maXx5NTgYQBxAxpfAhInQ1xFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b9:a7:20:57:12:35:f0:2a:32:74:f5:3b:b2:17:7d:5b:d2:7a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Apr 16 19:06:30 2026 GMT Not After : Apr 20 06:19:30 2026 GMT Subject: CN=40D8E1D8BC6F3312C87718523752C162FAE2797D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:cb:74:dc:2a:15:3f:e6:4f:53:95:1a:b5: a2:1b:34:94:99:c9:8d:d1:63:0b:0b:c7:1e:d0:50: e1:7b:1b:8c:5d:c5:80:c6:13:33:3b:80:4e:db:42: 46:2c:41:5e:9d:a1:61:a0:57:c9:98:80:28:c1:be: 2a:51:20:09:ae:b6:28:86:7d:1b:a8:f7:a2:e7:d9: 5d:95:a1:12:47:4b:76:45:ba:50:0b:30:b5:89:ba: 0a:fe:32:30:de:58:8a:07:49:30:c1:4e:0a:a5:bd: 57:ae:fa:cb:fb:81:22:e3:19:c9:4c:2c:32:66:04: 1b:31:85:bf:9b:dd:9a:34:a0:0a:b4:db:9a:bc:45: 25:da:43:c9:46:a5:b5:52:07:cc:75:3a:15:8d:60: 37:72:d0:2a:ca:ed:c5:3d:65:25:61:95:76:37:ac: 3c:88:4d:e5:34:36:bb:21:17:40:9e:8c:c8:cc:cf: 6e:b0:f6:40:04:12:d7:b8:2a:fe:38:e6:41:d7:e4: 15:f3:c2:93:6e:c3:80:a1:17:31:08:5e:e4:eb:e1: 03:12:07:10:61:ec:63:c4:8c:d4:1a:7e:05:90:55: 4d:94:3e:40:b9:e1:bb:3a:7d:94:51:dc:8f:0f:ca: 39:88:39:3a:b1:e9:0d:e4:70:8b:2d:74:35:7d:be: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:E1:D8:BC:6F:33:12:C8:77:18:52:37:52:C1:62:FA:E2:79:7D X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:8a:a2:77:fa:62:9e:d2:84:6e:e6:9b:f2:9d:30:3f:1a: 91:a8:1e:39:01:fc:65:34:7d:bd:6e:5b:72:8e:a6:b9:6e:29: 8b:ee:fd:87:42:7e:f3:bf:ad:fe:2b:b5:b2:e9:9f:ad:ac:23: d0:90:7a:8b:c3:30:2b:cf:6d:3f:90:dd:b3:06:ee:ad:dc:62: df:d4:b8:84:fd:60:de:d1:3e:6b:82:4b:ff:06:6f:93:e3:9e: 2e:77:0d:b2:8a:c4:92:ca:a5:92:dd:d9:f9:ea:a7:61:6c:f3: 83:fa:84:6f:18:7e:1e:7c:cd:cc:df:f2:89:a9:0a:02:20:12: 40:a3:32:d4:fd:1f:88:08:35:19:86:db:50:86:31:de:b7:0e: b0:d5:5e:e9:17:9f:6b:97:63:dc:02:34:ea:e5:69:47:fd:55: 00:71:3c:a0:44:67:fc:ae:1c:90:b2:12:6f:b5:6b:29:b8:37: 2a:0a:3f:9e:5c:05:80:18:f7:be:be:51:64:1c:52:e3:40:c3: 05:a3:ea:77:f1:98:06:86:77:7b:b1:f5:72:16:6a:2c:84:ab: 99:62:a4:d8:6d:6b:31:64:88:8b:9a:c4:5f:1c:20:5a:8a:f8: 3a:99:c3:19:d3:07:52:06:80:4f:f4:a1:c4:ad:52:06:09:62: db:d6:45:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrmnIFcSNfAqMnT1O7IXfVvSesQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNjA0MTYxOTA2MzBaFw0yNjA0MjAwNjE5MzBaMDMxMTAvBgNV BAMTKDQwRDhFMUQ4QkM2RjMzMTJDODc3MTg1MjM3NTJDMTYyRkFFMjc5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pct03CoVP+ZPU5UataIbNJSZ yY3RYwsLxx7QUOF7G4xdxYDGEzM7gE7bQkYsQV6doWGgV8mYgCjBvipRIAmutiiG fRuo96Ln2V2VoRJHS3ZFulALMLWJugr+MjDeWIoHSTDBTgqlvVeu+sv7gSLjGclM LDJmBBsxhb+b3Zo0oAq025q8RSXaQ8lGpbVSB8x1OhWNYDdy0CrK7cU9ZSVhlXY3 rDyITeU0NrshF0CejMjMz26w9kAEEte4Kv445kHX5BXzwpNuw4ChFzEIXuTr4QMS BxBh7GPEjNQafgWQVU2UPkC54bs6fZRR3I8PyjmIOTqx6Q3kcIstdDV9vnLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNjh2LxvMxLIdxhSN1LBYvrieX0wHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT+iqJ3+mKe0oRu5pvynTA/GpGoHjkB/GU0 fb1uW3KOprluKYvu/YdCfvO/rf4rtbLpn62sI9CQeovDMCvPbT+Q3bMG7q3cYt/U uIT9YN7RPmuCS/8Gb5Pjni53DbKKxJLKpZLd2fnqp2Fs84P6hG8Yfh58zczf8omp CgIgEkCjMtT9H4gINRmG21CGMd63DrDVXukXn2uXY9wCNOrlaUf9VQBxPKBEZ/yu HJCyEm+1aym4NyoKP55cBYAY976+UWQcUuNAwwWj6nfxmAaGd3ux9XIWaiyEq5li pNhtazFkiIuaxF8cIFqK+DqZwxnTB1IGgE/0ocStUgYJYtvWRTs= -----END CERTIFICATE-----Generated at Fri Apr 17 09:50:40 2026 by rpki-client