$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: Nwb8ABDLvLMvwu+K2zYw67Mb3bd3o5q385tWaXrM7Z8= Subject key identifier: 2F:80:65:69:D0:90:53:86:6C:4F:5E:CB:C1:3C:B6:E6:01:BC:D2:F4 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 4CBC4F34C9D95A804D4579FBF255983F2E2120FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 02A3 Signing time: Thu 16 Apr 2026 19:21:38 +0000 Manifest this update: Thu 16 Apr 2026 19:16:38 +0000 Manifest next update: Mon 20 Apr 2026 06:46:38 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=) 2: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: 8qIzEbJbhL6c3B9Ilxvr2WfYP9K+s14fsin9SlZYRNo=) 3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: YGbtlM42GpeXJWwNS5HnaEAi9mnZKsNiOe/sp7sIMh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bc:4f:34:c9:d9:5a:80:4d:45:79:fb:f2:55:98:3f:2e:21:20:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Apr 16 19:16:38 2026 GMT Not After : Apr 20 06:46:38 2026 GMT Subject: CN=2F806569D09053866C4F5ECBC13CB6E601BCD2F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:f6:26:89:10:db:53:fe:7d:97:2a:4a:22: 4d:1b:c8:6a:85:da:8f:20:d3:78:a5:52:da:b3:05: 05:3f:3f:eb:78:48:de:fb:76:3c:b5:05:7d:6c:0f: 07:b3:a1:cf:3f:e2:0c:ce:20:87:48:6f:a1:1f:1e: 0f:b8:41:1c:e5:6a:2d:c4:c4:ee:e5:a3:bc:13:21: 0d:72:89:22:3b:c1:27:d8:69:73:48:29:e4:09:3c: 4f:03:fe:6f:eb:cc:ae:7a:c1:78:b5:75:3b:92:fb: c9:a2:53:a6:ae:26:61:1f:18:ab:a0:16:a9:4d:94: 0e:0a:f5:ae:e5:fa:f8:c9:d9:62:6b:27:06:8a:92: c5:85:73:d9:ad:83:ae:e1:06:e8:4f:5e:22:fe:72: 3f:3e:92:7e:1f:7e:31:eb:81:91:98:3e:3a:a3:50: d1:e3:53:6c:2f:61:ca:28:88:dc:33:f6:98:20:c2: a8:7a:bc:34:43:43:d5:43:db:84:77:63:26:ed:fe: 0a:a3:2f:1f:d8:dd:db:2b:0f:7a:09:63:6d:5d:4b: c8:66:7d:02:3c:c2:f3:5b:c3:97:80:2f:97:88:59: 35:1f:db:5c:43:75:e5:ca:99:6b:fe:31:75:36:ab: 4c:52:3f:56:49:38:b2:51:9f:6a:7d:ca:ba:13:6a: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:80:65:69:D0:90:53:86:6C:4F:5E:CB:C1:3C:B6:E6:01:BC:D2:F4 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:92:f9:c5:c3:26:8a:00:2c:cc:a0:24:39:c3:32:f0:b7:60: f2:ca:c7:cf:21:ee:46:65:f9:e8:18:a1:8c:46:16:88:22:f1: db:dd:1a:30:20:86:72:9d:59:11:de:c1:3a:28:01:a4:25:a5: 27:3a:fc:71:7f:97:45:59:95:13:0d:76:bd:38:8b:13:91:af: 4f:c0:9b:3c:e5:93:ee:03:ef:02:6c:b8:f4:14:05:b8:d1:4b: 60:69:07:55:05:37:ac:34:60:46:7c:1b:c4:99:e5:52:09:34: b1:14:65:97:d9:8f:bc:46:70:83:10:0d:2a:bf:e7:49:7b:fb: a3:1d:e8:0a:7b:ec:18:15:b6:52:ab:7d:12:dc:e3:72:3d:98: e5:dc:0c:b9:f5:04:e2:0b:e0:e2:10:48:9f:db:55:c0:88:ad: 64:fa:f2:fc:df:bb:d8:f9:c5:08:e3:cf:ec:11:58:76:e9:f0: d4:da:8d:78:d9:3f:ed:8f:6c:00:92:42:39:85:46:3c:6d:67: 42:5c:cd:7c:81:23:de:12:39:7a:3c:56:71:36:68:01:a3:97: 02:19:7d:57:aa:c9:50:15:a8:2b:ab:cf:f2:56:14:6a:6b:6e: d2:07:91:04:ab:60:7e:1c:da:56:84:d6:df:48:0c:5b:67:fe: c4:8e:99:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLxPNMnZWoBNRXn78lWYPy4hIP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNjA0MTYxOTE2MzhaFw0yNjA0MjAwNjQ2MzhaMDMxMTAvBgNV BAMTKDJGODA2NTY5RDA5MDUzODY2QzRGNUVDQkMxM0NCNkU2MDFCQ0QyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLfYmiRDbU/59lypKIk0byGqF 2o8g03ilUtqzBQU/P+t4SN77djy1BX1sDwezoc8/4gzOIIdIb6EfHg+4QRzlai3E xO7lo7wTIQ1yiSI7wSfYaXNIKeQJPE8D/m/rzK56wXi1dTuS+8miU6auJmEfGKug FqlNlA4K9a7l+vjJ2WJrJwaKksWFc9mtg67hBuhPXiL+cj8+kn4ffjHrgZGYPjqj UNHjU2wvYcooiNwz9pggwqh6vDRDQ9VD24R3Yybt/gqjLx/Y3dsrD3oJY21dS8hm fQI8wvNbw5eAL5eIWTUf21xDdeXKmWv+MXU2q0xSP1ZJOLJRn2p9yroTao7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4BladCQU4ZsT17LwTy25gG80vQwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOS+cXDJooALMygJDnDMvC3YPLKx88h7kZl +egYoYxGFogi8dvdGjAghnKdWRHewTooAaQlpSc6/HF/l0VZlRMNdr04ixORr0/A mzzlk+4D7wJsuPQUBbjRS2BpB1UFN6w0YEZ8G8SZ5VIJNLEUZZfZj7xGcIMQDSq/ 50l7+6Md6Ap77BgVtlKrfRLc43I9mOXcDLn1BOIL4OIQSJ/bVcCIrWT68vzfu9j5 xQjjz+wRWHbp8NTajXjZP+2PbACSQjmFRjxtZ0JczXyBI94SOXo8VnE2aAGjlwIZ fVeqyVAVqCurz/JWFGprbtIHkQSrYH4c2laE1t9IDFtn/sSOmQI= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:31 2026 by rpki-client