$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: Ae0MbocgOllEZGmz2tFGVH2AP0xDCkjTbOUgyLDtIYs= Subject key identifier: 03:22:FB:A7:B9:A3:82:3C:4A:EA:9B:AC:79:0A:3F:E7:0D:88:21:1A Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 47F5E738B3F2C3AC704EEADD9C5F78E1964436E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 0266 Signing time: Thu 16 Apr 2026 01:44:45 +0000 Manifest this update: Thu 16 Apr 2026 01:39:45 +0000 Manifest next update: Sun 19 Apr 2026 11:28:45 +0000 Files and hashes: 1: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: cXkbM2VDPHAMtezT3GG/k9XIgcsPZTYfY8tAzuSozyA=) 2: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: TC7kjKI9TxMB3HNBPej3++Y7S3V1L2WaqE07r70wEgc=) 3: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: U7KiWtJRXhGNHfcfOGADcGrP874b70NncOTsxRcMo+c=) 4: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IqdyBss4FzdA/M3SnxcRkepuTRZFmOB0g6ykhyyOeAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f5:e7:38:b3:f2:c3:ac:70:4e:ea:dd:9c:5f:78:e1:96:44:36:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Apr 16 01:39:45 2026 GMT Not After : Apr 19 11:28:45 2026 GMT Subject: CN=0322FBA7B9A3823C4AEA9BAC790A3FE70D88211A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9b:7b:10:34:df:5d:bc:59:27:ed:a3:a2:24: 6b:08:59:c9:52:18:7f:fa:64:ea:3a:1e:2e:37:88: 77:26:c8:0f:ca:8b:56:cf:23:a9:85:19:08:a0:0d: 04:a2:65:27:2f:a9:bd:74:2c:55:b0:54:33:ab:fa: c7:fa:de:99:14:1b:c1:13:6e:87:9a:ad:be:1e:bd: cf:05:27:60:6d:b0:01:52:72:48:3d:3b:9b:f4:47: 2d:8d:e0:e0:8d:b6:7a:60:76:34:1e:37:8b:27:13: 77:b9:b9:66:3d:7f:07:7f:83:b8:47:c7:50:c6:d6: c9:0a:f1:24:05:86:70:b6:2b:91:8a:f2:81:de:ab: 68:18:62:d3:f2:d5:c7:50:8d:04:ef:e6:a5:a3:9c: 40:7a:ba:e9:21:23:c8:7e:8f:89:d1:2a:a6:41:1d: 9d:1e:01:6b:74:82:26:42:a0:6c:b6:7f:37:5b:09: 39:31:7f:e2:8f:81:36:40:a3:50:e6:13:cd:fe:73: e9:df:52:24:01:33:ce:20:39:8d:46:1c:fd:a7:83: 76:2f:0f:f6:d0:57:ca:f2:45:b6:0e:f7:2f:3b:36: c1:fb:21:bf:4a:bb:7a:52:11:08:b6:2a:b1:e2:9e: 64:19:8e:c4:cd:34:6b:61:a5:36:d5:89:69:40:7d: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:FB:A7:B9:A3:82:3C:4A:EA:9B:AC:79:0A:3F:E7:0D:88:21:1A X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4c:5b:65:22:48:25:e2:f6:02:18:82:2c:f6:3d:cc:6c:63: b9:cd:60:8d:01:fe:ec:04:b6:5b:15:93:79:7f:8d:60:e3:7c: 84:c8:5c:60:b7:ef:31:34:f5:20:2a:e7:4a:e1:f1:78:90:3d: f9:4f:2b:90:1a:a4:11:e4:25:c7:1c:a0:65:51:14:23:ea:83: 00:1d:c6:c1:80:6d:5d:d5:c6:2a:d2:7a:df:ab:21:38:15:2b: 4f:be:0d:b4:03:f2:2a:fe:2c:df:90:08:1a:28:69:43:82:ef: c4:d7:7d:e4:b7:bb:c3:40:bc:9d:d4:9d:1a:d1:4b:e6:31:c2: 65:78:30:8f:44:16:ac:eb:fc:56:12:07:32:e6:f7:5a:61:7a: e9:b3:8f:25:48:0f:cb:58:00:41:52:11:4f:b0:c8:52:88:ac: 62:b4:33:b6:52:b3:35:51:a0:c9:b0:ea:0c:34:50:35:fa:04: 1f:03:ab:e5:89:50:de:b4:b6:a2:e8:f7:a3:a9:46:a2:f3:7d: 2e:de:ed:5b:c0:f0:93:a0:8d:53:e9:ea:a5:81:e9:43:c9:83: 27:b1:7b:a2:c6:3f:db:8e:2a:98:72:35:82:8c:49:b9:96:bd: ef:dc:b2:31:8d:bb:86:c1:0e:66:21:d2:13:34:42:db:92:8f: b5:9b:11:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/XnOLPyw6xwTurdnF944ZZENuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNjA0MTYwMTM5NDVaFw0yNjA0MTkxMTI4NDVaMDMxMTAvBgNV BAMTKDAzMjJGQkE3QjlBMzgyM0M0QUVBOUJBQzc5MEEzRkU3MEQ4ODIxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnm3sQNN9dvFkn7aOiJGsIWclS GH/6ZOo6Hi43iHcmyA/Ki1bPI6mFGQigDQSiZScvqb10LFWwVDOr+sf63pkUG8ET boearb4evc8FJ2BtsAFSckg9O5v0Ry2N4OCNtnpgdjQeN4snE3e5uWY9fwd/g7hH x1DG1skK8SQFhnC2K5GK8oHeq2gYYtPy1cdQjQTv5qWjnEB6uukhI8h+j4nRKqZB HZ0eAWt0giZCoGy2fzdbCTkxf+KPgTZAo1DmE83+c+nfUiQBM84gOY1GHP2ng3Yv D/bQV8ryRbYO9y87NsH7Ib9Ku3pSEQi2KrHinmQZjsTNNGthpTbViWlAfcs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAyL7p7mjgjxK6puseQo/5w2IIRowHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdMW2UiSCXi9gIYgiz2PcxsY7nNYI0B/uwE tlsVk3l/jWDjfITIXGC37zE09SAq50rh8XiQPflPK5AapBHkJcccoGVRFCPqgwAd xsGAbV3VxirSet+rITgVK0++DbQD8ir+LN+QCBooaUOC78TXfeS3u8NAvJ3UnRrR S+YxwmV4MI9EFqzr/FYSBzLm91pheumzjyVID8tYAEFSEU+wyFKIrGK0M7ZSszVR oMmw6gw0UDX6BB8Dq+WJUN60tqLo96OpRqLzfS7e7VvA8JOgjVPp6qWB6UPJgyex e6LGP9uOKphyNYKMSbmWve/csjGNu4bBDmYh0hM0QtuSj7WbEao= -----END CERTIFICATE-----Generated at Fri Apr 17 16:25:49 2026 by rpki-client