$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: 5vglyrPPb6aTgVMZcTZTZLoUsMze2hCiAX2hJwE6FNs= Subject key identifier: EB:58:E5:AA:D8:B6:D4:D2:28:F9:6B:C8:56:75:16:9B:91:02:4E:35 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 2D036FE939AAE1E39DAC42E53A0CA4ECB00402BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 0252 Signing time: Sun 01 Mar 2026 18:12:09 +0000 Manifest this update: Sun 01 Mar 2026 18:07:09 +0000 Manifest next update: Thu 05 Mar 2026 02:02:09 +0000 Files and hashes: 1: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: w8LVVv9sVXM+fjKcJxpjXNYIKS5FLlrCeb6IMBZhzXA=) 2: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 3: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 4: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:03:6f:e9:39:aa:e1:e3:9d:ac:42:e5:3a:0c:a4:ec:b0:04:02:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Mar 1 18:07:09 2026 GMT Not After : Mar 5 02:02:09 2026 GMT Subject: CN=EB58E5AAD8B6D4D228F96BC85675169B91024E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:86:4a:a4:d4:1c:ee:e1:ad:84:3d:e1:67: 9c:96:a1:b8:73:94:1a:1b:32:eb:c7:a8:91:61:7c: aa:8e:43:67:1f:14:d4:77:6a:01:93:c9:f8:a8:e2: 0f:92:04:5b:ee:e9:69:69:c1:ec:e5:c0:65:e7:7e: aa:33:6c:5b:94:1a:f5:2d:a8:57:12:98:a2:9e:a4: 68:b2:69:3f:78:d9:8f:35:b4:f5:37:82:33:a7:6e: 02:ad:f9:b4:70:e8:2f:02:e1:05:bf:7e:8b:c8:3e: 42:77:5e:30:33:48:e0:41:8e:2c:ed:cd:dd:44:e7: 81:b5:38:a1:aa:0e:68:0a:58:fd:41:02:51:d6:92: e2:39:72:63:f0:8d:51:3a:68:bb:01:a5:46:aa:5b: dc:de:8a:0b:ed:72:6c:07:ef:94:0d:68:fe:93:7f: 85:f1:d5:44:76:7d:8a:80:f9:2b:eb:99:e4:11:49: 7a:88:8f:5b:67:2b:98:1e:2f:39:22:e2:39:91:16: fa:70:43:a8:63:cb:64:6a:d4:62:a1:9a:93:09:7b: 7e:a9:fc:3c:66:5a:48:fe:7b:c3:7b:b4:d0:e5:8b: 6a:c0:3e:b4:82:ef:5a:22:24:60:a1:f1:07:aa:e6: 2b:87:9e:b3:aa:ff:6c:5b:5e:69:6b:de:ef:9f:1f: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:58:E5:AA:D8:B6:D4:D2:28:F9:6B:C8:56:75:16:9B:91:02:4E:35 X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b4:c4:2e:8a:84:1f:9c:26:03:41:16:85:57:43:88:06:46: 9d:ab:90:a4:31:fc:0a:60:a8:9d:0a:d6:3d:20:b2:b6:f6:cb: 91:51:fa:52:a5:05:d2:a5:bb:3d:f3:8f:2c:6e:17:8d:ae:a4: 06:57:6c:ad:7a:e4:c2:6a:4d:78:0a:1a:49:8c:3f:a7:cc:56: d6:3c:02:e5:65:a5:93:cf:ed:6d:0a:5e:4b:50:13:0d:25:ce: 51:16:07:a3:93:03:6d:a3:f2:72:7a:c4:69:35:5d:f5:24:3b: 2c:f3:28:e8:48:9f:da:85:28:0c:84:ab:96:3d:96:30:38:00: f8:f6:66:7c:85:97:92:f2:3e:15:a9:1a:de:3d:75:1c:74:41: e8:26:52:76:2e:3f:9e:b9:d2:4e:61:3d:45:15:29:2a:df:62: 8d:eb:a3:f3:82:f9:56:e3:7a:ca:a4:c6:13:59:a4:90:2f:01: 9b:32:15:4e:9a:4e:db:a4:45:8e:4a:b8:e5:e7:ae:85:8e:df: 62:e0:91:48:38:10:0b:34:b3:38:5f:15:87:91:39:eb:90:de: 3a:ca:02:8f:5d:65:d3:eb:d4:b0:54:92:b7:b9:7d:88:06:bc: 19:03:db:02:58:5d:b2:24:cd:88:44:82:2b:fd:e6:c4:c0:2a: d9:2a:b1:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQNv6Tmq4eOdrELlOgyk7LAEAr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNjAzMDExODA3MDlaFw0yNjAzMDUwMjAyMDlaMDMxMTAvBgNV BAMTKEVCNThFNUFBRDhCNkQ0RDIyOEY5NkJDODU2NzUxNjlCOTEwMjRFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQ4ZKpNQc7uGthD3hZ5yWobhz lBobMuvHqJFhfKqOQ2cfFNR3agGTyfio4g+SBFvu6WlpwezlwGXnfqozbFuUGvUt qFcSmKKepGiyaT942Y81tPU3gjOnbgKt+bRw6C8C4QW/fovIPkJ3XjAzSOBBjizt zd1E54G1OKGqDmgKWP1BAlHWkuI5cmPwjVE6aLsBpUaqW9zeigvtcmwH75QNaP6T f4Xx1UR2fYqA+SvrmeQRSXqIj1tnK5geLzki4jmRFvpwQ6hjy2Rq1GKhmpMJe36p /DxmWkj+e8N7tNDli2rAPrSC71oiJGCh8Qeq5iuHnrOq/2xbXmlr3u+fH1ybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU61jlqti21NIo+WvIVnUWm5ECTjUwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKq0xC6KhB+cJgNBFoVXQ4gGRp2rkKQx/Apg qJ0K1j0gsrb2y5FR+lKlBdKluz3zjyxuF42upAZXbK165MJqTXgKGkmMP6fMVtY8 AuVlpZPP7W0KXktQEw0lzlEWB6OTA22j8nJ6xGk1XfUkOyzzKOhIn9qFKAyEq5Y9 ljA4APj2ZnyFl5LyPhWpGt49dRx0QegmUnYuP5650k5hPUUVKSrfYo3ro/OC+Vbj esqkxhNZpJAvAZsyFU6aTtukRY5KuOXnroWO32LgkUg4EAs0szhfFYeROeuQ3jrK Ao9dZdPr1LBUkre5fYgGvBkD2wJYXbIkzYhEgiv95sTAKtkqsb4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:40 2026 by rpki-client