$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: zisfrV8ci/NvtZQ/CND24YWbrjJ6JXQdQyyU7Ktw14E= Subject key identifier: 8D:1E:FB:36:5B:06:DC:1B:78:94:37:00:94:C4:67:92:6D:07:81:69 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 33D929FD88ED5E8D4BC85407D327CAB993C10624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 0557 Signing time: Sun 01 Mar 2026 16:22:39 +0000 Manifest this update: Sun 01 Mar 2026 16:17:39 +0000 Manifest next update: Wed 04 Mar 2026 16:40:39 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 2: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 3: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 4: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: sJOyiztcvIL7JumCNyaB5zW+aigY3Sl2wDWcW7eNw4Y=) 5: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d9:29:fd:88:ed:5e:8d:4b:c8:54:07:d3:27:ca:b9:93:c1:06:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Mar 1 16:17:39 2026 GMT Not After : Mar 4 16:40:39 2026 GMT Subject: CN=8D1EFB365B06DC1B7894370094C467926D078169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:ef:1f:83:18:ae:48:07:57:b9:bb:95:0c: 49:c7:d6:23:70:dd:7e:a3:28:75:41:61:1d:97:c7: dd:df:92:39:c0:71:93:cd:e1:87:67:cf:a9:de:28: e9:59:99:72:6b:b8:70:40:ec:bb:9b:a1:31:11:12: eb:46:2c:fe:49:83:29:2a:81:03:9d:4a:d2:e8:d0: 91:7a:b9:91:72:78:94:be:d4:7e:f5:70:4b:96:ed: 8a:f9:11:38:2d:fd:f8:c7:2d:1b:d7:40:af:9a:58: 7c:60:6c:0f:fe:03:77:bd:24:c4:5f:6d:a6:3d:c4: b9:75:38:9c:b8:46:36:37:b9:37:54:7d:47:d8:36: 97:98:8c:c0:d9:1d:6c:49:ce:f9:f8:3b:27:b7:cf: 48:28:e6:8f:d1:ce:0f:89:82:7a:91:29:6a:9b:9c: 3f:02:52:fb:10:24:2a:a0:53:44:17:27:30:05:4e: 8c:29:03:06:2e:23:e2:59:19:e8:67:44:b1:93:4c: 65:5a:01:e0:4d:cd:7a:9b:86:c3:36:f8:1f:ae:39: f9:c5:45:1c:1f:9e:bd:c9:fe:10:c1:fb:6b:e5:47: 97:e2:ae:74:e9:91:76:54:94:c0:50:51:5d:2e:e7: 6d:c5:51:70:9e:23:d5:e2:17:91:2e:d9:57:2d:c9: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1E:FB:36:5B:06:DC:1B:78:94:37:00:94:C4:67:92:6D:07:81:69 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:80:e3:18:c5:fe:d6:b1:44:aa:30:9d:00:d3:5d:ef:71:b8: 76:93:08:ae:ef:be:d1:bb:cb:a2:c7:c5:84:8a:29:0a:3b:4c: b5:17:1c:e6:3c:1e:fc:33:45:10:0e:de:c7:78:6d:8f:24:fd: c7:d2:90:a2:d4:a8:22:aa:1f:ec:9a:e7:78:57:2f:36:77:1b: c5:71:1d:48:76:79:7e:f8:cc:cb:7f:39:af:b0:cc:74:ee:6b: 44:b4:e9:62:ad:66:8a:73:ed:e6:cc:04:60:e5:73:2b:d1:07: 1e:19:56:0b:de:c6:2f:a4:92:39:24:de:a9:14:36:4a:e3:43: 2f:68:55:f5:e2:4b:36:2d:07:ad:bf:0e:c6:4b:3d:36:de:10: c9:6e:26:5b:83:b4:dd:03:bf:d5:c2:cb:c3:89:c7:24:6c:2b: 23:2a:79:8a:26:c8:84:4a:19:5a:73:30:ed:2e:82:4c:b1:9f: 3d:b8:89:9a:54:de:cc:95:d1:9a:67:b3:cd:9d:44:93:46:c7: 44:d8:9e:14:34:8d:f9:8e:72:7d:70:a1:a1:03:5b:9b:37:e8: 56:38:87:f1:a3:8c:eb:a5:06:43:28:a7:48:dd:86:c5:21:8f: 23:4e:3d:87:58:90:51:d4:5f:83:9a:f3:5a:fd:d3:73:c7:69: 57:42:6a:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9kp/YjtXo1LyFQH0yfKuZPBBiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNjAzMDExNjE3MzlaFw0yNjAzMDQxNjQwMzlaMDMxMTAvBgNV BAMTKDhEMUVGQjM2NUIwNkRDMUI3ODk0MzcwMDk0QzQ2NzkyNkQwNzgxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTu8fgxiuSAdXubuVDEnH1iNw 3X6jKHVBYR2Xx93fkjnAcZPN4Ydnz6neKOlZmXJruHBA7LuboTEREutGLP5Jgykq gQOdStLo0JF6uZFyeJS+1H71cEuW7Yr5ETgt/fjHLRvXQK+aWHxgbA/+A3e9JMRf baY9xLl1OJy4RjY3uTdUfUfYNpeYjMDZHWxJzvn4Oye3z0go5o/Rzg+JgnqRKWqb nD8CUvsQJCqgU0QXJzAFTowpAwYuI+JZGehnRLGTTGVaAeBNzXqbhsM2+B+uOfnF RRwfnr3J/hDB+2vlR5firnTpkXZUlMBQUV0u523FUXCeI9XiF5Eu2VctyRu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjR77NlsG3Bt4lDcAlMRnkm0HgWkwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqA4xjF/taxRKownQDTXe9xuHaTCK7vvtG7 y6LHxYSKKQo7TLUXHOY8HvwzRRAO3sd4bY8k/cfSkKLUqCKqH+ya53hXLzZ3G8Vx HUh2eX74zMt/Oa+wzHTua0S06WKtZopz7ebMBGDlcyvRBx4ZVgvexi+kkjkk3qkU NkrjQy9oVfXiSzYtB62/DsZLPTbeEMluJluDtN0Dv9XCy8OJxyRsKyMqeYomyIRK GVpzMO0ugkyxnz24iZpU3syV0Zpns82dRJNGx0TYnhQ0jfmOcn1woaEDW5s36FY4 h/GjjOulBkMop0jdhsUhjyNOPYdYkFHUX4Oa81r903PHaVdCaqY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:30 2026 by rpki-client