$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: UijmgwhXXTe+hrElCk5IoJBmdn4WkSGvqbExh/1tJI0= Subject key identifier: 5D:F1:FA:83:BD:97:21:CA:22:19:66:45:E8:7C:B5:92:7A:B3:34:2C Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 440482E564CC0F2D6D59268299E7DFA82EE38DE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: 011F Signing time: Wed 15 Apr 2026 21:41:45 +0000 Manifest this update: Wed 15 Apr 2026 21:36:45 +0000 Manifest next update: Sun 19 Apr 2026 02:36:45 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 3: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: 1jYACyODsQnZi2Z00jfBXOqYA1EQlNnMMgB11qG/2Gg=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:04:82:e5:64:cc:0f:2d:6d:59:26:82:99:e7:df:a8:2e:e3:8d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Apr 15 21:36:45 2026 GMT Not After : Apr 19 02:36:45 2026 GMT Subject: CN=5DF1FA83BD9721CA22196645E87CB5927AB3342C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:ff:be:51:22:bd:8f:4b:34:3e:e4:1f:66: f8:6d:b0:49:cd:00:11:21:22:01:15:8b:7d:d0:ee: 36:26:c8:45:92:e7:fb:cf:22:fa:16:79:f9:46:57: 2d:df:f7:4b:84:da:fa:91:3d:3b:80:c2:91:e4:3c: 47:97:5c:a6:3c:af:e4:fb:66:69:fb:a0:25:0a:4d: 8f:21:6b:dc:c5:19:d0:62:8a:f0:22:1d:e7:af:51: fe:77:ad:8e:33:be:af:1b:7d:df:c4:13:1e:e6:ff: 00:6b:e5:af:a4:58:c5:d9:b6:73:ea:1e:d0:6b:46: af:01:7c:b6:a9:9b:69:35:86:f2:54:2b:5b:4e:b9: e2:35:b9:1d:eb:84:81:bd:03:83:54:3d:e9:65:ac: 7d:25:be:b0:28:01:39:74:71:2b:94:1b:1a:ff:2a: 1a:a2:8e:45:70:5d:86:00:0e:28:08:11:bc:f1:33: 63:cd:b2:74:fe:35:61:6e:80:98:41:4a:ec:4f:73: b5:d6:fa:16:94:c1:3d:dd:b6:05:2f:02:b7:6a:8f: 72:9a:00:55:29:0d:1e:7b:99:28:58:70:4f:12:56: 94:1d:c1:ba:dc:dd:c6:e7:ab:04:f7:55:a5:ff:3c: 47:fa:fa:8a:ee:8f:61:45:ff:01:c2:6a:55:e8:ab: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:FA:83:BD:97:21:CA:22:19:66:45:E8:7C:B5:92:7A:B3:34:2C X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:54:c1:69:2a:0c:18:da:c5:c7:df:33:f3:74:6a:1a:72:e5: e6:1d:7a:ad:72:9f:9b:86:33:42:65:ac:d0:25:ea:8b:e1:62: 00:6d:cc:0c:de:f3:21:38:e6:a1:f0:57:87:e8:67:44:ee:99: 08:38:16:af:5f:e2:58:cc:51:5a:2b:2d:24:f0:5b:29:04:2f: 07:41:52:9d:19:81:6a:40:27:85:4a:4c:fb:0e:7c:2b:51:af: 86:9a:68:71:e7:26:4e:66:09:e3:30:bd:fe:d2:f6:2b:70:05: f4:d1:b7:ff:7d:37:d5:29:fc:50:3c:29:06:b7:55:17:04:5b: 5d:30:41:46:84:49:e3:53:66:38:6f:d3:51:a5:1d:dc:db:33: 28:26:b8:93:84:0f:d5:5a:9d:ab:6d:6e:f0:9d:bc:c0:6a:e3: ad:23:e5:f9:e0:a4:48:62:70:9d:d6:d3:a4:7c:ed:87:49:c0: 34:cf:91:8c:39:c7:8b:ab:5e:28:96:89:f4:8f:38:01:5f:5a: 2b:91:55:be:34:1f:b4:e8:2d:90:9c:4e:db:7e:44:b3:ae:ac: 3a:f5:3e:39:8c:ae:ca:9f:e4:bb:0e:cc:a0:33:10:7a:30:07: d9:03:72:d6:95:35:22:ab:52:52:2b:ac:4d:1c:c7:92:15:3a: 13:6d:01:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURASC5WTMDy1tWSaCmeffqC7jjecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNjA0MTUyMTM2NDVaFw0yNjA0MTkwMjM2NDVaMDMxMTAvBgNV BAMTKDVERjFGQTgzQkQ5NzIxQ0EyMjE5NjY0NUU4N0NCNTkyN0FCMzM0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGof++USK9j0s0PuQfZvhtsEnN ABEhIgEVi33Q7jYmyEWS5/vPIvoWeflGVy3f90uE2vqRPTuAwpHkPEeXXKY8r+T7 Zmn7oCUKTY8ha9zFGdBiivAiHeevUf53rY4zvq8bfd/EEx7m/wBr5a+kWMXZtnPq HtBrRq8BfLapm2k1hvJUK1tOueI1uR3rhIG9A4NUPellrH0lvrAoATl0cSuUGxr/ KhqijkVwXYYADigIEbzxM2PNsnT+NWFugJhBSuxPc7XW+haUwT3dtgUvArdqj3Ka AFUpDR57mShYcE8SVpQdwbrc3cbnqwT3VaX/PEf6+oruj2FF/wHCalXoq+ZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXfH6g72XIcoiGWZF6Hy1knqzNCwwHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1UwWkqDBjaxcffM/N0ahpy5eYdeq1yn5uG M0JlrNAl6ovhYgBtzAze8yE45qHwV4foZ0TumQg4Fq9f4ljMUVorLSTwWykELwdB Up0ZgWpAJ4VKTPsOfCtRr4aaaHHnJk5mCeMwvf7S9itwBfTRt/99N9Up/FA8KQa3 VRcEW10wQUaESeNTZjhv01GlHdzbMygmuJOED9VanattbvCdvMBq460j5fngpEhi cJ3W06R87YdJwDTPkYw5x4urXiiWifSPOAFfWiuRVb40H7ToLZCcTtt+RLOurDr1 PjmMrsqf5LsOzKAzEHowB9kDctaVNSKrUlIrrE0cx5IVOhNtAaM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:56:11 2026 by rpki-client