$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: Mr0tvh80lrbSeR08Hg4xkjWfIaCHDLBTxBQKT8yfpYM= Subject key identifier: A4:35:C6:26:69:46:22:46:6D:49:15:6B:FA:4C:08:FC:C0:BE:6E:51 Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 43D012DC9E6BB4E833D1703E7CBA652140C15B1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 02B3 Signing time: Fri 17 Apr 2026 18:22:04 +0000 Manifest this update: Fri 17 Apr 2026 18:17:04 +0000 Manifest next update: Mon 20 Apr 2026 19:27:04 +0000 Files and hashes: 1: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=) 2: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: b7Qc07CSU9xeXIWO7HueQWcqnyZwZByIE5cbY2CnFck=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d0:12:dc:9e:6b:b4:e8:33:d1:70:3e:7c:ba:65:21:40:c1:5b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Apr 17 18:17:04 2026 GMT Not After : Apr 20 19:27:04 2026 GMT Subject: CN=A435C626694622466D49156BFA4C08FCC0BE6E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:80:8d:cc:89:75:36:e1:c0:59:46:ca:18:ea: 03:5d:11:b2:2e:94:77:80:95:d3:a2:d6:81:d6:cc: 95:26:7b:b6:0a:41:7c:8b:ce:41:e7:f2:9a:00:20: 2e:02:c5:6a:a3:a5:00:22:f3:4f:92:22:0d:7e:de: 1b:f9:6e:a7:1e:cf:28:88:0a:27:31:db:08:4b:6e: ab:c5:ac:ce:92:63:ca:ca:9d:d7:2a:a1:2a:1e:92: 64:b8:89:53:43:57:cc:3c:bd:8f:d3:70:49:c4:b9: 51:e8:f0:74:57:bb:0a:79:b3:ff:30:2a:84:4d:30: 0d:6b:bf:4c:41:62:61:69:c1:95:6f:cd:e0:ea:44: 24:fa:c6:e5:d6:0f:2c:b5:61:c9:44:b0:04:c3:0e: 69:ee:60:b8:df:7e:5a:da:f9:65:0e:28:09:ed:58: fc:23:17:96:53:a9:66:59:dc:92:af:ac:23:30:8f: c5:7d:f6:cb:d1:95:d5:81:1a:a4:46:2e:61:ec:b1: da:c8:14:fa:bd:6e:d5:4a:63:a9:96:d8:66:53:54: 92:77:d0:0e:9f:a2:56:58:c0:19:16:38:0f:40:ea: 19:f9:b4:9e:3d:dd:8c:39:02:fd:0f:fb:bc:73:f1: f3:4f:a7:fd:f1:af:5c:d9:4d:2c:0a:d0:4c:74:e9: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:35:C6:26:69:46:22:46:6D:49:15:6B:FA:4C:08:FC:C0:BE:6E:51 X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b2:30:07:31:67:56:07:ba:c1:49:97:dd:c4:45:cc:d0:b0: 1f:ab:70:ad:93:3b:31:38:3e:4d:50:34:d2:ca:ba:77:fd:ce: bf:92:8c:84:41:c1:6d:45:1c:96:71:11:ca:ce:a4:57:b3:bf: cc:e5:4d:04:6e:35:da:44:a2:23:a2:4b:6a:b6:a3:0b:b7:89: 20:3b:ba:fe:e7:45:23:1e:35:e3:7d:8a:de:99:0c:28:95:6f: 9d:e1:d6:2b:72:f5:4b:bf:b6:83:7a:62:a7:51:64:59:ab:25: 44:9d:04:f2:8a:b4:27:4c:3d:dd:44:88:b8:c0:b6:b6:6e:72: 0d:3b:03:c1:72:97:aa:ad:37:2e:2b:ab:dd:e8:82:47:2e:c8: 78:72:ca:6b:2a:43:d8:7f:52:d2:3e:c0:45:b5:5f:5a:cd:12: dc:ec:65:3f:45:1d:a2:42:86:ab:50:84:70:ff:fd:ff:3d:c6: e4:e5:d4:97:07:5b:02:40:a8:01:4f:59:74:21:e6:69:f0:86: 30:e8:12:9f:88:87:57:eb:7e:d1:f9:e0:5a:df:56:26:90:d1: fb:2f:39:b0:3c:16:2a:6b:3c:06:19:de:cf:ca:c8:d0:72:19: 65:f8:c6:2f:10:f6:52:f1:24:08:22:8a:79:16:34:29:64:14: fa:42:9d:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9AS3J5rtOgz0XA+fLplIUDBWx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNjA0MTcxODE3MDRaFw0yNjA0MjAxOTI3MDRaMDMxMTAvBgNV BAMTKEE0MzVDNjI2Njk0NjIyNDY2RDQ5MTU2QkZBNEMwOEZDQzBCRTZFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDugI3MiXU24cBZRsoY6gNdEbIu lHeAldOi1oHWzJUme7YKQXyLzkHn8poAIC4CxWqjpQAi80+SIg1+3hv5bqcezyiI Cicx2whLbqvFrM6SY8rKndcqoSoekmS4iVNDV8w8vY/TcEnEuVHo8HRXuwp5s/8w KoRNMA1rv0xBYmFpwZVvzeDqRCT6xuXWDyy1YclEsATDDmnuYLjfflra+WUOKAnt WPwjF5ZTqWZZ3JKvrCMwj8V99svRldWBGqRGLmHssdrIFPq9btVKY6mW2GZTVJJ3 0A6folZYwBkWOA9A6hn5tJ493Yw5Av0P+7xz8fNPp/3xr1zZTSwK0Ex06Y3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDXGJmlGIkZtSRVr+kwI/MC+blEwHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2yMAcxZ1YHusFJl93ERczQsB+rcK2TOzE4 Pk1QNNLKunf9zr+SjIRBwW1FHJZxEcrOpFezv8zlTQRuNdpEoiOiS2q2owu3iSA7 uv7nRSMeNeN9it6ZDCiVb53h1ity9Uu/toN6YqdRZFmrJUSdBPKKtCdMPd1EiLjA trZucg07A8Fyl6qtNy4rq93ogkcuyHhyymsqQ9h/UtI+wEW1X1rNEtzsZT9FHaJC hqtQhHD//f89xuTl1JcHWwJAqAFPWXQh5mnwhjDoEp+Ih1frftH54FrfViaQ0fsv ObA8FiprPAYZ3s/KyNByGWX4xi8Q9lLxJAgiinkWNClkFPpCnSI= -----END CERTIFICATE-----Generated at Sun Apr 19 15:37:32 2026 by rpki-client