$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: Od+ck4x+5IxDV6My9qgwd2VGZWKPc7xb3ULVQUE6eKU= Subject key identifier: 72:AF:1E:C4:E9:27:95:78:EE:D1:76:E7:31:07:93:11:8F:64:A8:AE Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 328159446374B05084DDC0480622992C25924EB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: 0131 Signing time: Thu 16 Apr 2026 06:02:43 +0000 Manifest this update: Thu 16 Apr 2026 05:57:43 +0000 Manifest next update: Sun 19 Apr 2026 08:51:43 +0000 Files and hashes: 1: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: fUuc++IwTa3C5SiFzB2ZqsW+FmEcTBoiODMt7pCesWE=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: azsz9z1KEsnyuF15yUQXq8B2sogEjx41kyrRUx9ZzNg=) 3: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: 4lKv5nLnJSCkxv4U2mXX8DZ/Ypxjw06U+yW2HXaeuyk=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: biMLC4wOitkgGs3RHy61vEna5qJFiujzkfEQVq781lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:81:59:44:63:74:b0:50:84:dd:c0:48:06:22:99:2c:25:92:4e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Apr 16 05:57:43 2026 GMT Not After : Apr 19 08:51:43 2026 GMT Subject: CN=72AF1EC4E9279578EED176E7310793118F64A8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:82:29:b0:80:97:44:6f:ce:0e:a2:23:a6:b9: 55:08:6e:e1:e2:45:e9:00:91:1b:a5:25:58:a2:a3: 8c:e2:2d:b6:08:9e:c4:ff:eb:f0:0b:a3:16:fc:6e: e1:9a:1d:87:87:4f:7d:35:19:e1:e9:bc:5f:f0:9d: 66:b1:5e:a4:dc:cc:2c:da:c6:f8:ec:9b:45:e6:c3: 14:97:66:23:f4:81:d7:5e:e8:c5:a7:3a:37:c5:84: d4:33:c5:2a:4c:f1:0f:dd:a1:82:3a:5f:9c:1a:f3: f3:13:de:23:8c:d1:1b:8a:49:48:6f:27:42:60:7c: 04:54:f1:94:20:c8:9f:5a:5b:26:ea:32:3e:1b:5f: 26:24:7f:9f:1e:63:41:fe:62:fc:1c:99:db:da:70: 28:cc:58:ea:25:0e:8c:9b:ab:98:a3:37:5f:09:64: 5e:49:3e:99:1f:63:74:e3:22:90:8e:3f:66:90:1f: d9:8c:55:d0:72:06:b7:e5:36:91:e7:d0:d7:23:14: 06:e0:88:4d:be:95:24:d5:b8:9f:ae:7c:c1:a0:23: 71:ed:5f:89:ed:62:22:42:74:2d:eb:96:da:ec:b0: 69:c4:95:52:fa:6d:4d:8e:ae:4d:0b:ef:af:4d:a9: 9c:bb:56:e7:55:61:9a:68:6e:8c:c0:a8:15:c0:af: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AF:1E:C4:E9:27:95:78:EE:D1:76:E7:31:07:93:11:8F:64:A8:AE X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6b:00:2d:af:80:a7:6b:36:dc:32:b3:df:9f:17:6e:bb:5f: 91:24:4c:dc:9d:90:4a:75:ba:51:1c:55:f7:b5:8d:8f:3f:6d: 7f:5f:8f:a5:00:ba:74:e1:11:93:0f:d7:60:86:d7:e8:b5:e5: 9b:ec:6e:82:25:37:fe:2c:ec:ac:4c:75:fd:d9:95:c9:6d:03: 91:b7:87:f9:6d:b4:b8:00:93:89:63:86:96:c8:3c:44:44:ed: 07:18:bf:f3:31:5c:d7:84:fe:96:14:49:7a:d5:09:0b:7e:d2: da:a5:4e:cb:9b:89:7c:8e:5f:b9:5f:b2:75:a5:37:64:87:b6: b6:be:f2:d0:9c:5f:39:09:d1:85:ab:ce:ff:e1:0a:ba:c4:6c: e5:a6:33:70:2b:bd:b3:6b:04:9d:cf:3c:97:24:0f:38:13:36: 87:19:62:c7:3b:62:7b:ca:86:7a:92:32:aa:03:cb:d7:fa:8e: 6a:8a:63:9e:6a:41:fa:cc:66:22:3a:cd:c1:8f:f9:be:ba:42: 89:b9:1d:bb:a6:c6:bf:19:8a:27:80:db:63:04:d4:cc:65:af: 25:2c:79:54:1e:a5:55:45:48:bd:93:21:23:6b:74:d6:d6:e9: 5d:2c:b0:79:75:61:e7:d8:d4:f2:e5:70:33:de:60:cb:21:72: 79:33:a2:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoFZRGN0sFCE3cBIBiKZLCWSTrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNjA0MTYwNTU3NDNaFw0yNjA0MTkwODUxNDNaMDMxMTAvBgNV BAMTKDcyQUYxRUM0RTkyNzk1NzhFRUQxNzZFNzMxMDc5MzExOEY2NEE4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1gimwgJdEb84OoiOmuVUIbuHi RekAkRulJViio4ziLbYInsT/6/ALoxb8buGaHYeHT301GeHpvF/wnWaxXqTczCza xvjsm0XmwxSXZiP0gdde6MWnOjfFhNQzxSpM8Q/doYI6X5wa8/MT3iOM0RuKSUhv J0JgfARU8ZQgyJ9aWybqMj4bXyYkf58eY0H+YvwcmdvacCjMWOolDoybq5ijN18J ZF5JPpkfY3TjIpCOP2aQH9mMVdByBrflNpHn0NcjFAbgiE2+lSTVuJ+ufMGgI3Ht X4ntYiJCdC3rltrssGnElVL6bU2Ork0L769NqZy7VudVYZpobozAqBXAr3PTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcq8exOknlXju0XbnMQeTEY9kqK4wHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIprAC2vgKdrNtwys9+fF267X5EkTNydkEp1 ulEcVfe1jY8/bX9fj6UAunThEZMP12CG1+i15ZvsboIlN/4s7KxMdf3ZlcltA5G3 h/lttLgAk4ljhpbIPERE7QcYv/MxXNeE/pYUSXrVCQt+0tqlTsubiXyOX7lfsnWl N2SHtra+8tCcXzkJ0YWrzv/hCrrEbOWmM3ArvbNrBJ3PPJckDzgTNocZYsc7YnvK hnqSMqoDy9f6jmqKY55qQfrMZiI6zcGP+b66Qom5Hbumxr8ZiieA22ME1MxlryUs eVQepVVFSL2TISNrdNbW6V0ssHl1YefY1PLlcDPeYMshcnkzolc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:27:17 2026 by rpki-client