$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: lNlnyVL9hhQ9u8znD83aDSEEuS1eYJogNfY1sYUcH5c= Subject key identifier: BA:EE:F8:63:8E:67:DA:A9:4F:C3:96:BD:66:6E:83:FA:F1:13:12:50 Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 6265732DE458BA1817B5ACCF237A224ADAB1F968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: 010A Signing time: Fri 27 Feb 2026 23:22:51 +0000 Manifest this update: Fri 27 Feb 2026 23:17:51 +0000 Manifest next update: Tue 03 Mar 2026 09:07:51 +0000 Files and hashes: 1: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: 7HatrIpIAsvwHLA/vKVUs+cg6d8A1AC/On48ZRNrSIg=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 3: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:65:73:2d:e4:58:ba:18:17:b5:ac:cf:23:7a:22:4a:da:b1:f9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Feb 27 23:17:51 2026 GMT Not After : Mar 3 09:07:51 2026 GMT Subject: CN=BAEEF8638E67DAA94FC396BD666E83FAF1131250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:20:8f:5c:92:4d:a0:4e:d6:ed:bc:70:eb:f0: 0c:c0:ad:41:9f:44:17:76:d2:01:10:92:b5:f5:35: ff:d2:e8:11:c6:98:64:e5:c8:b9:80:97:a8:72:c0: de:da:d9:c3:8f:12:03:bd:52:9a:bb:1e:33:f0:0a: e7:f3:18:62:5f:74:03:4d:aa:83:fd:c4:2b:d1:ec: c8:da:43:fa:24:1a:38:c0:ea:12:a4:95:2c:3e:1f: 17:8a:40:81:2a:30:3d:b2:7a:45:ac:6d:98:51:53: c0:58:cd:7e:29:69:11:cd:51:ec:33:17:c0:6f:cd: ed:00:0d:fb:ee:dd:bc:cd:fb:08:a6:78:3c:c0:38: c8:0c:93:78:7e:18:8f:1e:1c:c8:63:48:ae:ce:ff: 67:b7:d7:51:7f:67:16:98:c7:19:b0:11:c8:14:da: 7c:be:a4:5b:4c:7c:93:9c:f0:e6:45:34:5d:ee:1e: 1c:93:7d:c4:05:8c:f6:90:92:18:0c:1b:c4:0d:e8: fd:c4:f3:e9:bc:e5:5a:15:0b:76:c1:ba:5e:2c:f8: 1d:62:41:eb:8e:20:d1:9c:38:fb:1b:31:ef:30:dd: 0b:ba:97:a3:f0:c4:ce:c6:ad:bb:ce:a4:56:e8:bc: e5:89:a7:7e:e7:bb:96:34:1e:73:d7:c9:8c:b9:10: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EE:F8:63:8E:67:DA:A9:4F:C3:96:BD:66:6E:83:FA:F1:13:12:50 X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bd:20:cb:ce:4b:5c:b4:5d:46:43:39:95:de:8e:5d:77:3e: 4d:db:74:d3:7a:2b:cf:bb:9a:f2:d7:ca:89:e2:52:60:80:c6: f1:3a:99:ac:56:0a:b4:22:ea:24:c6:64:c6:e7:40:78:f0:59: 12:80:e3:66:47:e2:5d:f6:69:03:06:8c:f7:79:1d:f1:d5:b2: 70:5b:18:d6:8f:2e:06:1f:5a:23:87:f6:a5:a3:2d:a1:94:b5: 39:4d:a9:f5:9d:f3:41:28:12:40:92:6e:25:8f:56:18:b9:f6: 97:c0:63:ce:d0:d7:27:8f:e2:78:61:ff:25:02:43:87:f2:e4: af:17:f0:4b:40:d4:01:e5:80:39:71:77:f3:23:9c:6c:87:1a: a5:7a:4c:26:8e:0f:6b:a0:29:b4:ca:30:1d:27:8f:96:4f:2c: 75:e1:39:d9:de:1e:63:bb:cc:61:eb:94:c3:20:7e:97:78:48: 19:0b:55:9f:cc:d1:72:df:4a:2f:03:df:75:84:df:2a:80:d6: f3:2b:1e:7a:ba:c8:4d:b1:e8:f9:65:1f:ad:9d:cf:2d:aa:5b: 68:c3:38:f6:38:3b:75:37:85:3d:bb:0f:77:5f:fe:01:e9:b1: 3b:6b:8e:02:cb:6b:fd:09:a7:72:e0:51:9c:6b:1e:d5:98:55: 7d:d3:2c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmVzLeRYuhgXtazPI3oiStqx+WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNjAyMjcyMzE3NTFaFw0yNjAzMDMwOTA3NTFaMDMxMTAvBgNV BAMTKEJBRUVGODYzOEU2N0RBQTk0RkMzOTZCRDY2NkU4M0ZBRjExMzEyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkII9ckk2gTtbtvHDr8AzArUGf RBd20gEQkrX1Nf/S6BHGmGTlyLmAl6hywN7a2cOPEgO9Upq7HjPwCufzGGJfdANN qoP9xCvR7MjaQ/okGjjA6hKklSw+HxeKQIEqMD2yekWsbZhRU8BYzX4paRHNUewz F8Bvze0ADfvu3bzN+wimeDzAOMgMk3h+GI8eHMhjSK7O/2e311F/ZxaYxxmwEcgU 2ny+pFtMfJOc8OZFNF3uHhyTfcQFjPaQkhgMG8QN6P3E8+m85VoVC3bBul4s+B1i QeuOINGcOPsbMe8w3Qu6l6PwxM7GrbvOpFbovOWJp37nu5Y0HnPXyYy5ED+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuu74Y45n2qlPw5a9Zm6D+vETElAwHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA29IMvOS1y0XUZDOZXejl13Pk3bdNN6K8+7 mvLXyoniUmCAxvE6maxWCrQi6iTGZMbnQHjwWRKA42ZH4l32aQMGjPd5HfHVsnBb GNaPLgYfWiOH9qWjLaGUtTlNqfWd80EoEkCSbiWPVhi59pfAY87Q1yeP4nhh/yUC Q4fy5K8X8EtA1AHlgDlxd/MjnGyHGqV6TCaOD2ugKbTKMB0nj5ZPLHXhOdneHmO7 zGHrlMMgfpd4SBkLVZ/M0XLfSi8D33WE3yqA1vMrHnq6yE2x6PllH62dzy2qW2jD OPY4O3U3hT27D3df/gHpsTtrjgLLa/0Jp3LgUZxrHtWYVX3TLHY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:27 2026 by rpki-client