$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: MckwK+QOvG0/wcfz7OsWyxB26wx0Wo5vlrFSDWi4p+s= Subject key identifier: 70:B3:BF:38:04:F2:65:A2:A5:59:B3:06:27:40:A2:28:06:C8:D5:3B Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 28588BCA1E758303A876F239F1ABA047C1D7F069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 03E8 Signing time: Sun 01 Mar 2026 19:22:43 +0000 Manifest this update: Sun 01 Mar 2026 19:17:43 +0000 Manifest next update: Thu 05 Mar 2026 06:12:43 +0000 Files and hashes: 1: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: crrVXsWR+Fxp9uoEqbAQLPrtpWcxAHi8Di3TGy4d38k=) 2: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: YBqJEgBScNZE40ToH6Xa8JtZcJ1wwXmCSVUNuGk+Tns=) 3: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: 2Fp4Lwy8mON7FVeMJE/4PvZDu17XhYrM2gPfMF99PL4=) 4: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: mJh+Jb4W1Qp0OCB+Vg0qzn9Btmj8AzJYp96qUw9uQnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:58:8b:ca:1e:75:83:03:a8:76:f2:39:f1:ab:a0:47:c1:d7:f0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Mar 1 19:17:43 2026 GMT Not After : Mar 5 06:12:43 2026 GMT Subject: CN=70B3BF3804F265A2A559B3062740A22806C8D53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:4c:79:91:ef:54:72:0e:24:27:25:2c:67: 73:96:ce:a8:32:74:f9:cd:23:6f:5b:43:6c:12:dd: 88:17:8b:9f:90:d3:06:2b:99:ba:63:0b:19:72:f7: b5:f6:71:e0:17:36:b7:60:58:c5:f3:22:a2:bd:9a: bc:90:65:e2:7a:99:23:99:58:3d:f7:92:e6:c0:5c: 14:04:89:db:f4:ae:4e:bf:ef:bc:5c:cc:51:2f:e8: b9:ce:41:08:b8:62:55:14:ba:da:23:a4:98:85:60: 34:8f:cd:32:54:c9:29:28:b5:8b:17:de:f5:3c:c4: 15:ed:1e:be:b9:de:1c:a4:66:86:95:50:27:89:4e: e1:c6:7d:fe:9c:ad:79:d3:46:5d:dd:f4:8c:bf:9b: f2:91:ec:bb:22:ee:a6:00:0a:90:ba:24:e8:22:0f: 48:9d:31:dd:82:b2:61:d6:90:45:56:dd:3b:45:19: 72:98:44:09:f3:45:29:86:9b:67:0a:4d:51:05:44: 09:29:59:4c:75:80:1d:4d:20:ee:9b:4d:a9:b1:99: 84:55:6a:e3:58:ca:a8:6c:00:2e:92:c0:66:f0:fa: fd:17:98:4d:3c:ea:42:e3:51:97:1c:33:d2:cc:d0: 73:36:16:37:eb:29:05:8f:e7:ae:84:1b:fb:e4:eb: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:BF:38:04:F2:65:A2:A5:59:B3:06:27:40:A2:28:06:C8:D5:3B X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0d:56:9d:ae:d6:21:39:e4:0f:a9:8c:98:cc:53:5d:c9:63: a7:73:d2:3c:6d:bd:51:63:af:9a:3f:f8:e5:b3:1e:30:92:ee: 36:35:88:6e:8b:69:14:6a:e3:69:a1:06:d3:2b:32:b0:f4:fd: a9:d5:ae:8d:48:04:67:b2:23:53:0f:25:90:e3:e8:23:cd:5a: 1e:a7:54:db:da:cf:da:c1:b6:3b:c3:cf:fb:c4:eb:20:36:85: b0:7f:4e:97:c8:39:41:7c:b1:2b:b2:88:22:8f:6c:f0:e8:69: 82:09:a6:b7:e1:86:c0:0d:f0:d1:3d:65:2e:b5:a8:03:70:8d: c8:9f:f9:ab:f5:41:ff:b9:41:17:aa:65:3e:16:b5:dc:f9:dc: 65:e7:12:1b:00:a6:90:d8:af:04:dc:9e:05:a2:4a:67:c9:fe: 30:30:ee:18:9f:25:97:3a:dd:80:5c:f7:7a:17:d1:d6:5a:2d: ba:d4:00:ce:5d:0a:91:ef:c6:c3:92:d9:b1:c2:ab:39:4f:85: d4:9d:da:bc:aa:50:8d:04:22:43:20:4a:34:01:36:77:60:21: a3:6b:8c:34:d8:80:d8:51:c5:3c:a9:25:0d:4a:8d:a1:1e:4f: 31:48:0e:21:45:7d:26:9e:15:89:4a:12:c6:27:9e:84:e9:59: 34:bf:39:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFiLyh51gwOodvI58augR8HX8GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNjAzMDExOTE3NDNaFw0yNjAzMDUwNjEyNDNaMDMxMTAvBgNV BAMTKDcwQjNCRjM4MDRGMjY1QTJBNTU5QjMwNjI3NDBBMjI4MDZDOEQ1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNUx5ke9Ucg4kJyUsZ3OWzqgy dPnNI29bQ2wS3YgXi5+Q0wYrmbpjCxly97X2ceAXNrdgWMXzIqK9mryQZeJ6mSOZ WD33kubAXBQEidv0rk6/77xczFEv6LnOQQi4YlUUutojpJiFYDSPzTJUySkotYsX 3vU8xBXtHr653hykZoaVUCeJTuHGff6crXnTRl3d9Iy/m/KR7Lsi7qYACpC6JOgi D0idMd2CsmHWkEVW3TtFGXKYRAnzRSmGm2cKTVEFRAkpWUx1gB1NIO6bTamxmYRV auNYyqhsAC6SwGbw+v0XmE086kLjUZccM9LM0HM2FjfrKQWP566EG/vk64JxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLO/OATyZaKlWbMGJ0CiKAbI1TswHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkNVp2u1iE55A+pjJjMU13JY6dz0jxtvVFj r5o/+OWzHjCS7jY1iG6LaRRq42mhBtMrMrD0/anVro1IBGeyI1MPJZDj6CPNWh6n VNvaz9rBtjvDz/vE6yA2hbB/TpfIOUF8sSuyiCKPbPDoaYIJprfhhsAN8NE9ZS61 qANwjcif+av1Qf+5QReqZT4Wtdz53GXnEhsAppDYrwTcngWiSmfJ/jAw7hifJZc6 3YBc93oX0dZaLbrUAM5dCpHvxsOS2bHCqzlPhdSd2ryqUI0EIkMgSjQBNndgIaNr jDTYgNhRxTypJQ1KjaEeTzFIDiFFfSaeFYlKEsYnnoTpWTS/OWQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:32:58 2026 by rpki-client