$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: EiW4NaB12s6J9ti+NPNaRTWqBbs/jVCSpsPIleDKIuw= Subject key identifier: E1:C4:B8:52:FF:A8:C4:C8:35:F1:62:FC:A7:93:D1:09:8A:55:D9:31 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 0A4D1E805DEDEEAFB866CCCF3B4335CE78937B93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 0524 Signing time: Thu 16 Apr 2026 04:20:55 +0000 Manifest this update: Thu 16 Apr 2026 04:15:55 +0000 Manifest next update: Sun 19 Apr 2026 14:12:55 +0000 Files and hashes: 1: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 2: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 3: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) 4: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 5: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: +EFXmqu3JLaq42h7z1lE1v93Bgk0y0IL5bxecaOnNys=) 6: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: zmM+zkGsJ/Z0jggMij58mitzt/j0AryFqRztIoiEEJU=) 7: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4d:1e:80:5d:ed:ee:af:b8:66:cc:cf:3b:43:35:ce:78:93:7b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Apr 16 04:15:55 2026 GMT Not After : Apr 19 14:12:55 2026 GMT Subject: CN=E1C4B852FFA8C4C835F162FCA793D1098A55D931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:08:25:7a:3a:ef:d0:b6:bb:b7:ab:ce:0a: 09:61:db:c0:59:15:52:b5:5a:7c:c1:f5:fe:f8:3c: 22:f9:f6:5e:d3:03:2f:7c:64:ca:76:c4:25:82:71: 13:8e:21:8d:e5:fd:1d:5d:fd:d2:86:3f:cf:24:2f: 6f:04:fc:69:46:e7:b3:91:a2:ff:18:0c:7c:d7:ac: 35:b5:2f:8e:82:83:e7:2b:bd:f6:31:6c:dc:5d:e5: f9:bc:2b:31:e3:38:bc:f4:8e:b2:2d:3d:cd:2b:ab: 8e:4f:8b:45:c8:e0:c6:91:e6:b9:dd:63:68:0e:fc: 6d:5d:87:48:25:5c:7a:77:6b:a1:0b:38:fe:cf:cd: a6:ee:a1:45:61:40:43:94:5d:5f:73:b4:87:15:38: 1c:90:fe:0d:7d:48:0c:b2:75:ee:ef:60:6d:c3:71: c2:b2:27:ee:33:3c:1e:e1:fb:19:d2:48:81:99:9f: 73:87:a4:aa:7d:08:2d:5c:29:cc:74:3f:53:f3:2b: b2:8d:e2:0e:29:a5:40:b6:4c:10:12:99:0f:3e:31: bf:d5:3a:e4:af:c6:fc:03:47:6e:d0:8d:0e:1b:5a: da:63:c1:50:83:18:c9:69:6d:07:bf:99:f0:ce:2d: bd:ef:41:b7:e4:b7:45:ea:29:06:4a:00:fb:b1:d4: d1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C4:B8:52:FF:A8:C4:C8:35:F1:62:FC:A7:93:D1:09:8A:55:D9:31 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e5:e5:78:92:4d:fe:b3:0d:1e:25:37:f0:a2:32:bc:65:a4: 75:a9:d6:4e:13:58:f7:f0:0f:fc:86:b9:ca:82:f6:d1:d8:3e: e1:f7:c2:95:6f:f0:ef:c0:49:c0:02:da:8f:6e:80:60:c7:25: ad:ba:6a:75:b3:f2:00:27:5f:7b:e8:ec:12:fb:95:1b:4e:b4: f4:4d:8f:cd:00:ff:b5:2b:a4:7a:05:5e:49:93:d8:7b:4f:14: 1a:57:cb:7e:f1:a3:e6:16:ca:12:a9:77:80:40:94:9e:37:c5: 27:20:5a:5f:d3:8b:b8:cd:b3:8c:b6:12:b2:7f:f0:33:d3:ef: 9a:b7:fa:c5:b7:e2:5f:e1:88:e0:ce:67:55:20:37:51:07:fa: 4a:a7:91:5e:eb:e3:ef:b8:61:f0:cc:3d:4a:4e:ef:64:33:75: c3:ef:87:38:3e:67:87:e5:c2:9a:1d:00:ab:63:07:95:58:00: 68:be:4b:88:51:5f:29:14:de:ac:cf:be:81:bc:4f:c1:45:e4: 47:0c:a7:16:71:7c:a9:26:2a:88:a1:72:b5:64:2a:96:b5:5e: fd:3f:64:ee:c1:38:ed:b6:9a:0c:12:44:83:09:ab:4e:e7:65: e0:44:21:b0:14:30:58:de:a0:87:35:da:16:37:8a:47:6a:0f: 37:26:7d:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCk0egF3t7q+4ZszPO0M1zniTe5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNjA0MTYwNDE1NTVaFw0yNjA0MTkxNDEyNTVaMDMxMTAvBgNV BAMTKEUxQzRCODUyRkZBOEM0QzgzNUYxNjJGQ0E3OTNEMTA5OEE1NUQ5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcAglejrv0La7t6vOCglh28BZ FVK1WnzB9f74PCL59l7TAy98ZMp2xCWCcROOIY3l/R1d/dKGP88kL28E/GlG57OR ov8YDHzXrDW1L46Cg+crvfYxbNxd5fm8KzHjOLz0jrItPc0rq45Pi0XI4MaR5rnd Y2gO/G1dh0glXHp3a6ELOP7PzabuoUVhQEOUXV9ztIcVOByQ/g19SAyyde7vYG3D ccKyJ+4zPB7h+xnSSIGZn3OHpKp9CC1cKcx0P1PzK7KN4g4ppUC2TBASmQ8+Mb/V OuSvxvwDR27QjQ4bWtpjwVCDGMlpbQe/mfDOLb3vQbfkt0XqKQZKAPux1NE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4cS4Uv+oxMg18WL8p5PRCYpV2TEwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvl5XiSTf6zDR4lN/CiMrxlpHWp1k4TWPfw D/yGucqC9tHYPuH3wpVv8O/AScAC2o9ugGDHJa26anWz8gAnX3vo7BL7lRtOtPRN j80A/7UrpHoFXkmT2HtPFBpXy37xo+YWyhKpd4BAlJ43xScgWl/Ti7jNs4y2ErJ/ 8DPT75q3+sW34l/hiODOZ1UgN1EH+kqnkV7r4++4YfDMPUpO72QzdcPvhzg+Z4fl wpodAKtjB5VYAGi+S4hRXykU3qzPvoG8T8FF5EcMpxZxfKkmKoihcrVkKpa1Xv0/ ZO7BOO22mgwSRIMJq07nZeBEIbAUMFjeoIc12hY3ikdqDzcmffY= -----END CERTIFICATE-----Generated at Sat Apr 18 06:27:50 2026 by rpki-client