$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: 2fHMTKKOxXcP2A4kaVeBuL9bG8/XbyAsNUfSxaUMutY= Subject key identifier: 81:C0:B7:30:F1:D9:35:C2:93:AA:FE:B8:4C:77:9C:1C:58:81:16:9B Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 6C7D3212D239C08A81B212F124F4A28DF26F65DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 028E Signing time: Thu 16 Apr 2026 22:02:03 +0000 Manifest this update: Thu 16 Apr 2026 21:57:03 +0000 Manifest next update: Mon 20 Apr 2026 08:36:03 +0000 Files and hashes: 1: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: WpqMcBpUduFRteq2SfmdFF+azH1VNXokpVYUMXZG5Ac=) 2: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: zNJv1QUhUzOTOEHHZCRJRlOjmSzt57PuZJkeSUFwNrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7d:32:12:d2:39:c0:8a:81:b2:12:f1:24:f4:a2:8d:f2:6f:65:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Apr 16 21:57:03 2026 GMT Not After : Apr 20 08:36:03 2026 GMT Subject: CN=81C0B730F1D935C293AAFEB84C779C1C5881169B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:3d:0e:a1:f3:3f:d7:b2:ef:2e:9d:cd:08: 87:97:8a:d1:f5:00:17:27:40:b0:d9:b0:70:f9:70: 39:a7:d4:50:9e:27:1d:c1:87:08:61:40:af:c6:91: 6d:71:99:0a:fe:0b:d7:3b:4c:f4:55:f3:2b:8c:84: 21:62:5e:f8:55:32:53:e3:22:34:ca:5e:db:c2:87: 44:1c:9a:4a:56:43:1c:ad:24:6c:ec:2b:28:3f:b1: 95:14:be:10:8e:4b:cf:cf:d0:98:bd:f2:f1:01:ec: 14:68:b2:90:4f:49:0b:8f:11:19:89:c9:fa:3d:6c: 0d:d3:8e:26:01:cb:45:d0:2e:05:24:6d:40:b5:a3: f7:f0:ad:71:be:ee:bc:5f:7a:1d:3d:f0:ff:c9:59: f6:ff:e7:38:cd:08:94:24:be:42:34:67:df:b3:af: 58:f2:69:75:35:0b:ed:05:33:60:2c:be:e9:fb:83: e4:30:e6:f8:a2:36:bb:32:06:52:06:8a:7a:9f:fb: 61:7a:37:4a:7a:e0:4c:63:65:33:ba:e7:38:1a:3d: d0:3a:9c:5f:cb:fb:97:8d:3a:97:17:f9:ff:17:6b: 7a:d0:6f:b4:9b:5f:ce:16:02:94:9b:6b:27:5b:6a: 73:d2:02:2a:83:95:79:1c:24:96:37:98:09:89:80: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:B7:30:F1:D9:35:C2:93:AA:FE:B8:4C:77:9C:1C:58:81:16:9B X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:be:e1:44:af:e5:1d:39:fc:2e:8b:2f:79:9f:d3:ad:98:51: ec:be:14:4c:56:10:3f:6e:08:62:db:bd:d2:dc:a0:bd:60:ff: 6e:d9:bf:80:d6:44:31:31:90:96:a0:b7:b5:cd:11:56:c1:b8: 92:01:7d:5a:2b:ef:76:4c:06:7e:90:3a:ff:b7:2f:a9:e2:24: 31:4a:0e:ba:41:eb:e5:bb:ce:d0:dc:22:bc:a4:ac:ef:82:e4: 8d:30:31:9a:b4:2f:8d:c5:66:67:b7:1d:10:03:2f:c6:69:10: 9d:d5:9f:c7:90:3b:4d:b4:88:aa:3f:6c:a2:2c:d4:f5:c2:eb: ee:2e:e3:4b:4d:61:4f:ad:9e:c3:97:f9:e4:6a:9e:4e:ce:50: 5d:21:38:0f:41:7c:3f:d3:ea:c6:4a:95:23:e9:31:0a:e6:20: e5:a9:86:51:2e:aa:0b:e9:af:1d:10:4b:8b:74:3f:39:3d:43: e7:86:b5:45:d4:cb:cf:63:54:01:6a:a7:8f:2c:25:a1:26:32: 03:7c:ed:5b:37:40:35:d3:7b:e3:8e:57:7c:17:f1:e2:2e:b1: 19:69:ef:86:cb:cc:ec:fe:e4:3c:02:41:74:5a:f1:fb:5a:6d: 93:4f:67:46:40:cb:20:a0:ed:d1:05:ac:25:92:74:13:8b:b8: 82:92:0a:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbH0yEtI5wIqBshLxJPSijfJvZd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNjA0MTYyMTU3MDNaFw0yNjA0MjAwODM2MDNaMDMxMTAvBgNV BAMTKDgxQzBCNzMwRjFEOTM1QzI5M0FBRkVCODRDNzc5QzFDNTg4MTE2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hT0OofM/17LvLp3NCIeXitH1 ABcnQLDZsHD5cDmn1FCeJx3BhwhhQK/GkW1xmQr+C9c7TPRV8yuMhCFiXvhVMlPj IjTKXtvCh0QcmkpWQxytJGzsKyg/sZUUvhCOS8/P0Ji98vEB7BRospBPSQuPERmJ yfo9bA3TjiYBy0XQLgUkbUC1o/fwrXG+7rxfeh098P/JWfb/5zjNCJQkvkI0Z9+z r1jyaXU1C+0FM2Asvun7g+Qw5viiNrsyBlIGinqf+2F6N0p64ExjZTO65zgaPdA6 nF/L+5eNOpcX+f8Xa3rQb7SbX84WApSbaydbanPSAiqDlXkcJJY3mAmJgB03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgcC3MPHZNcKTqv64THecHFiBFpswHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJi+4USv5R05/C6LL3mf062YUey+FExWED9u CGLbvdLcoL1g/27Zv4DWRDExkJagt7XNEVbBuJIBfVor73ZMBn6QOv+3L6niJDFK DrpB6+W7ztDcIrykrO+C5I0wMZq0L43FZme3HRADL8ZpEJ3Vn8eQO020iKo/bKIs 1PXC6+4u40tNYU+tnsOX+eRqnk7OUF0hOA9BfD/T6sZKlSPpMQrmIOWphlEuqgvp rx0QS4t0Pzk9Q+eGtUXUy89jVAFqp48sJaEmMgN87Vs3QDXTe+OOV3wX8eIusRlp 74bLzOz+5DwCQXRa8ftabZNPZ0ZAyyCg7dEFrCWSdBOLuIKSCto= -----END CERTIFICATE-----Generated at Fri Apr 17 20:50:03 2026 by rpki-client