$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: mQSnMBWQjW8Gco/wtSSjvQAz5yfcC16a0VfyiJ/U5sw= Subject key identifier: BE:0D:5C:E0:C8:AF:FB:33:38:13:05:B2:67:C6:54:C9:86:56:33:64 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 4A5D7DCE304DF85D957262E647DE9CAD080BEFA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 0550 Signing time: Sat 28 Feb 2026 21:10:56 +0000 Manifest this update: Sat 28 Feb 2026 21:05:56 +0000 Manifest next update: Wed 04 Mar 2026 08:52:56 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: nQgPknA+4/HC9bDcwDlFjBP50OGdniPDYjsu9ezCyh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5d:7d:ce:30:4d:f8:5d:95:72:62:e6:47:de:9c:ad:08:0b:ef:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Feb 28 21:05:56 2026 GMT Not After : Mar 4 08:52:56 2026 GMT Subject: CN=BE0D5CE0C8AFFB33381305B267C654C986563364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:fc:f0:15:d0:6d:37:33:ad:7f:54:2e:44: d6:d2:31:78:fe:74:1f:57:c8:9c:83:02:bd:c5:0b: 6f:f7:3a:a9:23:73:20:f2:4d:c7:2e:ed:c7:e5:08: ab:2c:bb:f5:00:b6:78:41:0b:2a:9e:73:8d:20:82: 7c:e4:a2:3b:74:93:6b:09:e8:62:f0:2c:8b:b8:b7: c8:c4:c9:22:9a:e8:30:22:2b:cc:c7:2b:1d:92:52: ed:54:33:01:a9:38:f3:0d:cb:b2:44:d6:42:40:13: 28:ab:c9:02:2c:8d:6c:56:1d:2b:16:df:81:c5:0e: fb:8e:d8:bb:0d:a1:e9:e8:78:96:b1:43:57:1f:5c: 06:2d:c9:d4:ae:37:1d:76:09:5a:aa:41:9b:7e:29: 54:d5:cc:6c:a0:0e:5b:ed:84:22:3e:d4:a1:3e:d9: 87:fa:54:8e:07:88:d7:e6:05:1a:6a:11:e0:eb:ea: bd:21:5d:9c:55:70:86:3f:80:92:bd:0d:c9:9a:4c: 52:ea:0d:4d:54:06:fa:9c:0c:3b:56:d9:29:8f:2f: da:8b:2a:48:23:56:a8:18:34:fa:83:87:e4:52:0e: 35:10:dd:1f:da:00:5e:56:00:a8:ca:8b:25:2a:02: 31:a0:d1:2e:3a:e1:65:08:06:81:80:46:bb:8f:72: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0D:5C:E0:C8:AF:FB:33:38:13:05:B2:67:C6:54:C9:86:56:33:64 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5d:5f:e5:d6:45:75:0e:42:64:8f:64:f5:0c:a6:4a:7a:a7: 2f:cc:b1:85:88:f1:f0:bd:c2:55:d5:20:28:a0:95:57:12:42: 23:47:a0:ea:d3:a7:c8:a6:1b:3e:00:42:b0:12:34:8c:2c:bd: d8:e0:aa:85:5d:10:00:d4:e2:bc:13:a1:fc:fe:13:9b:10:f2: 68:fc:e2:df:bd:4e:97:0b:20:e4:74:10:b6:eb:5d:a2:b7:b6: 61:3e:42:93:35:61:d8:db:ea:51:d4:70:da:17:f4:fd:1f:7e: dc:72:1a:d8:98:91:5f:84:ac:e3:80:3b:65:9d:c5:67:6c:21: 8f:d6:a9:26:2e:ec:15:b5:69:cf:dc:92:99:d9:f8:46:17:51: fd:db:51:6a:98:86:d3:c0:d6:ec:a9:90:02:c7:53:3a:23:3b: d4:e9:61:bd:44:eb:f3:2d:1e:be:2b:db:ba:e5:2e:87:68:51: b9:b9:c9:b5:f4:b7:16:b7:56:a3:c0:01:dd:c1:a0:de:f2:f6: be:8e:6e:21:92:a7:60:9f:21:c7:be:7c:53:03:1a:4b:47:de: eb:69:f0:d1:16:9c:37:6a:9a:52:cd:f7:6a:2d:73:2f:90:bd: e3:26:3d:c4:f9:8f:27:3d:7a:ef:c0:3d:4f:74:b7:7b:61:2d: 74:d9:63:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSl19zjBN+F2VcmLmR96crQgL76gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNjAyMjgyMTA1NTZaFw0yNjAzMDQwODUyNTZaMDMxMTAvBgNV BAMTKEJFMEQ1Q0UwQzhBRkZCMzMzODEzMDVCMjY3QzY1NEM5ODY1NjMzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HfzwFdBtNzOtf1QuRNbSMXj+ dB9XyJyDAr3FC2/3OqkjcyDyTccu7cflCKssu/UAtnhBCyqec40ggnzkojt0k2sJ 6GLwLIu4t8jEySKa6DAiK8zHKx2SUu1UMwGpOPMNy7JE1kJAEyiryQIsjWxWHSsW 34HFDvuO2LsNoenoeJaxQ1cfXAYtydSuNx12CVqqQZt+KVTVzGygDlvthCI+1KE+ 2Yf6VI4HiNfmBRpqEeDr6r0hXZxVcIY/gJK9DcmaTFLqDU1UBvqcDDtW2SmPL9qL KkgjVqgYNPqDh+RSDjUQ3R/aAF5WAKjKiyUqAjGg0S464WUIBoGARruPcib1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvg1c4Miv+zM4EwWyZ8ZUyYZWM2QwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9dX+XWRXUOQmSPZPUMpkp6py/MsYWI8fC9 wlXVICiglVcSQiNHoOrTp8imGz4AQrASNIwsvdjgqoVdEADU4rwTofz+E5sQ8mj8 4t+9TpcLIOR0ELbrXaK3tmE+QpM1Ydjb6lHUcNoX9P0fftxyGtiYkV+ErOOAO2Wd xWdsIY/WqSYu7BW1ac/ckpnZ+EYXUf3bUWqYhtPA1uypkALHUzojO9TpYb1E6/Mt Hr4r27rlLodoUbm5ybX0txa3VqPAAd3BoN7y9r6ObiGSp2CfIce+fFMDGktH3utp 8NEWnDdqmlLN92otcy+QveMmPcT5jyc9eu/APU90t3thLXTZYxc= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:49 2026 by rpki-client