$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: wM/ESPIFQ542IArucDORxJCSPAfHOmhj4IeohNA4dIY= Subject key identifier: 1C:37:A2:BC:35:BA:AF:57:E1:5E:D4:B7:F6:D5:C6:71:48:CB:45:4A Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 76CB08474C41A1ED336E5558C45186C0E20011BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 0244 Signing time: Sat 18 Apr 2026 09:02:10 +0000 Manifest this update: Sat 18 Apr 2026 08:57:10 +0000 Manifest next update: Tue 21 Apr 2026 13:35:10 +0000 Files and hashes: 1: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 2: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) 3: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: LYqzrvqqa02D5KjgXE2AyaSq0q7SGMVCK+6xnMPSMMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:cb:08:47:4c:41:a1:ed:33:6e:55:58:c4:51:86:c0:e2:00:11:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Apr 18 08:57:10 2026 GMT Not After : Apr 21 13:35:10 2026 GMT Subject: CN=1C37A2BC35BAAF57E15ED4B7F6D5C67148CB454A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:19:1a:ef:56:56:fc:ca:af:00:56:37:c9: b7:9c:ed:d1:1a:b9:3f:48:d8:84:e9:36:26:69:74: 2c:6d:1f:22:62:c0:8e:d1:52:d5:e7:14:8d:98:26: 8d:de:24:9a:3f:9e:1f:59:01:f0:b2:e9:56:2e:f9: 21:d6:c7:0f:85:83:a3:7d:94:c7:6e:2e:a9:8b:30: b0:49:8e:81:fa:06:ec:5b:69:35:fc:a2:52:2e:87: 01:15:96:8a:96:fe:a2:fc:f6:d9:50:90:33:c1:94: 7a:12:da:d2:b2:f6:e6:05:a9:41:91:f0:88:07:23: 7c:b7:1e:bd:5f:8a:dd:e0:99:bd:68:fa:35:47:b4: 19:26:9f:bf:0f:34:35:53:d4:28:75:4e:e7:8d:bc: 12:ff:5e:0f:60:27:a3:e4:67:03:d6:92:bd:d6:c9: f4:e7:1e:8d:01:e0:4f:49:32:29:d7:d7:75:77:e0: 5c:a2:1e:8b:27:c7:88:22:4d:4b:f7:e1:0e:b7:d3: ec:ec:9d:c5:f9:c6:4a:df:00:6a:4a:c4:3b:94:64: 5c:50:23:9a:06:38:4a:db:4b:03:9f:c3:f6:fb:03: af:fb:27:2c:58:19:1a:57:45:b4:8d:9f:bb:61:24: d3:2d:43:2c:67:40:3f:7c:35:7e:6f:9b:85:74:2b: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:37:A2:BC:35:BA:AF:57:E1:5E:D4:B7:F6:D5:C6:71:48:CB:45:4A X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:23:b6:fd:fe:96:89:7f:35:a2:ef:08:21:87:e9:f3:e2:af: 59:fe:e4:51:ad:9a:fb:cf:74:0c:ff:5f:e4:45:50:fe:fa:d4: 7e:89:9e:d1:44:ee:e2:44:2c:d7:94:81:22:ca:c5:35:43:5e: 44:97:a6:62:c7:10:bc:c1:b8:21:86:1a:fc:d3:bd:6b:53:ba: 3b:aa:d0:0f:e4:3a:12:82:fe:52:a3:94:84:bf:7d:9c:41:49: ed:b4:dd:08:a0:2f:96:4c:61:43:10:71:d7:97:57:21:6b:fe: f7:c9:fe:4e:ae:02:6e:39:64:6b:33:a7:f2:5e:68:b3:82:27: 0c:0b:2d:59:92:c0:14:7c:e5:99:75:1c:d8:96:fb:b0:54:89: 1f:59:5e:ce:17:d2:c6:97:10:43:28:4b:08:7c:ec:3d:a1:dd: 7f:5d:cd:7b:bf:7c:80:65:0a:72:98:65:66:ce:32:ca:49:77: 13:a1:0d:f2:93:8b:f7:c2:f8:89:26:7d:5f:c6:f2:4b:0c:ce: 56:19:4e:79:0c:e8:20:e7:fe:2e:fa:0d:d6:16:c5:b2:87:37: fe:93:de:39:d4:e6:3b:b1:69:b9:bc:99:a2:0d:94:bc:c5:b4: 8b:76:e4:1d:90:47:a2:50:24:20:e9:61:35:d3:b1:04:8c:b5: 84:72:0f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdssIR0xBoe0zblVYxFGGwOIAEb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNjA0MTgwODU3MTBaFw0yNjA0MjExMzM1MTBaMDMxMTAvBgNV BAMTKDFDMzdBMkJDMzVCQUFGNTdFMTVFRDRCN0Y2RDVDNjcxNDhDQjQ1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWBka71ZW/MqvAFY3ybec7dEa uT9I2ITpNiZpdCxtHyJiwI7RUtXnFI2YJo3eJJo/nh9ZAfCy6VYu+SHWxw+Fg6N9 lMduLqmLMLBJjoH6BuxbaTX8olIuhwEVloqW/qL89tlQkDPBlHoS2tKy9uYFqUGR 8IgHI3y3Hr1fit3gmb1o+jVHtBkmn78PNDVT1Ch1TueNvBL/Xg9gJ6PkZwPWkr3W yfTnHo0B4E9JMinX13V34FyiHosnx4giTUv34Q630+zsncX5xkrfAGpKxDuUZFxQ I5oGOErbSwOfw/b7A6/7JyxYGRpXRbSNn7thJNMtQyxnQD98NX5vm4V0K+CxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHDeivDW6r1fhXtS39tXGcUjLRUowHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQjtv3+lol/NaLvCCGH6fPir1n+5FGtmvvP dAz/X+RFUP761H6JntFE7uJELNeUgSLKxTVDXkSXpmLHELzBuCGGGvzTvWtTujuq 0A/kOhKC/lKjlIS/fZxBSe203QigL5ZMYUMQcdeXVyFr/vfJ/k6uAm45ZGszp/Je aLOCJwwLLVmSwBR85Zl1HNiW+7BUiR9ZXs4X0saXEEMoSwh87D2h3X9dzXu/fIBl CnKYZWbOMspJdxOhDfKTi/fC+IkmfV/G8ksMzlYZTnkM6CDn/i76DdYWxbKHN/6T 3jnU5juxabm8maINlLzFtIt25B2QR6JQJCDpYTXTsQSMtYRyD2M= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:18 2026 by rpki-client