$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: T09tHcQW9sheU1/JOVCkk21xEOKUt93rhnxCGWuu/gA= Subject key identifier: DD:C0:78:B0:2E:35:5D:3C:91:92:33:6C:4E:A9:3E:19:56:28:DE:5E Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 54F81DA58135E42ACA3CAF217F57FA2C6B60573A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 0227 Signing time: Fri 17 Apr 2026 05:02:11 +0000 Manifest this update: Fri 17 Apr 2026 04:57:11 +0000 Manifest next update: Mon 20 Apr 2026 09:09:11 +0000 Files and hashes: 1: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s=) 2: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=) 3: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: OlSEaMFgO7PKKnmIhsUPpO1TcfNohwlH/C3NH/NvhZg=) 4: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: 566L9VHjte69xDPeYqPbfz7h96+N2vjDzXQqVXMnyuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f8:1d:a5:81:35:e4:2a:ca:3c:af:21:7f:57:fa:2c:6b:60:57:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Apr 17 04:57:11 2026 GMT Not After : Apr 20 09:09:11 2026 GMT Subject: CN=DDC078B02E355D3C9192336C4EA93E195628DE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:15:ac:c3:49:38:a4:28:0e:4c:6b:40:16: f2:a5:fa:bf:fe:37:54:96:21:13:cb:6f:e5:52:0a: 4f:bb:fd:09:e8:0d:59:f6:72:b4:7f:46:49:0e:ae: a0:a5:74:54:c8:e4:ff:15:a1:08:33:b7:aa:c9:4d: 35:de:3b:77:9a:c8:e2:c2:85:77:f1:18:b9:53:e2: dc:58:eb:93:71:33:7e:d0:b4:c2:18:0b:f7:ae:42: f9:17:e4:1d:be:39:1a:f3:17:4d:38:65:d7:9b:aa: db:9b:ba:06:39:77:64:87:22:0b:9b:eb:9f:d8:6f: 9f:e8:4d:c3:3c:ef:0a:75:94:c3:cd:f6:f3:49:22: 0e:74:29:46:a9:f7:a4:a1:bc:fe:7a:ca:ac:c4:d4: 39:7c:46:1e:d3:48:c4:3f:86:4c:8b:7a:d3:ba:4b: a5:4b:98:02:e7:a8:ea:10:84:92:3f:d8:70:c5:c2: 11:96:51:1e:f9:ec:8b:f8:32:2a:83:ef:24:95:6d: 67:02:82:a2:ad:e3:93:66:53:68:3b:ce:1f:42:88: b3:a1:20:15:b3:5c:d6:0b:b1:77:ce:9f:b1:07:99: 78:a9:3d:3a:c3:e5:39:62:f1:75:c6:5f:bc:ce:c8: 10:2d:8f:98:42:d7:83:aa:fe:03:21:a0:5c:16:ed: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:78:B0:2E:35:5D:3C:91:92:33:6C:4E:A9:3E:19:56:28:DE:5E X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f7:2d:d1:9e:cc:38:54:b2:78:91:02:6e:9b:c4:47:a3:ac: 36:fe:a1:2f:b1:11:66:0c:e0:0c:89:99:35:09:e2:e3:c1:6c: 4b:4f:26:06:73:42:3b:be:86:82:5d:ca:cc:1b:7d:d5:2a:97: c1:8f:d4:4c:a9:6e:d3:b6:92:8a:13:6e:97:15:0e:40:64:37: ce:c8:0c:99:4e:b5:d7:8e:d0:22:34:ff:4a:d4:cc:4f:dd:12: 04:22:4b:4f:82:67:e6:86:0a:66:1e:95:b9:5a:7e:7c:ee:14: 01:f6:c0:5c:c1:e9:35:02:8e:73:f0:8a:2d:2d:4a:d2:97:c0: 8a:38:b1:76:e9:be:71:eb:ce:0b:84:bc:50:a3:2e:7d:82:0f: 67:05:b2:c2:ab:c7:0c:21:1b:f6:52:1d:d5:c2:dc:c5:d9:9d: 3e:01:24:48:9e:24:3e:9e:58:26:60:86:73:ff:bc:73:9b:b1: a5:d3:aa:a6:cd:e6:1c:28:7e:1d:32:82:3e:53:23:6c:ae:04: 24:65:d7:16:7e:b0:50:e1:44:be:29:7f:6b:fa:78:db:23:dc: 3d:27:4b:36:ec:dd:35:63:52:98:ca:34:09:c3:e9:2e:b6:97: 14:4f:02:e7:e7:c7:fd:a6:8b:5d:c6:c0:2d:fc:ae:07:86:50: 6f:94:fa:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPgdpYE15CrKPK8hf1f6LGtgVzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNjA0MTcwNDU3MTFaFw0yNjA0MjAwOTA5MTFaMDMxMTAvBgNV BAMTKEREQzA3OEIwMkUzNTVEM0M5MTkyMzM2QzRFQTkzRTE5NTYyOERFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YxWsw0k4pCgOTGtAFvKl+r/+ N1SWIRPLb+VSCk+7/QnoDVn2crR/RkkOrqCldFTI5P8VoQgzt6rJTTXeO3eayOLC hXfxGLlT4txY65NxM37QtMIYC/euQvkX5B2+ORrzF004ZdebqtubugY5d2SHIgub 65/Yb5/oTcM87wp1lMPN9vNJIg50KUap96ShvP56yqzE1Dl8Rh7TSMQ/hkyLetO6 S6VLmALnqOoQhJI/2HDFwhGWUR757Iv4MiqD7ySVbWcCgqKt45NmU2g7zh9CiLOh IBWzXNYLsXfOn7EHmXipPTrD5Tli8XXGX7zOyBAtj5hC14Oq/gMhoFwW7eXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3cB4sC41XTyRkjNsTqk+GVYo3l4wHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr3LdGezDhUsniRAm6bxEejrDb+oS+xEWYM 4AyJmTUJ4uPBbEtPJgZzQju+hoJdyswbfdUql8GP1EypbtO2kooTbpcVDkBkN87I DJlOtdeO0CI0/0rUzE/dEgQiS0+CZ+aGCmYelblafnzuFAH2wFzB6TUCjnPwii0t StKXwIo4sXbpvnHrzguEvFCjLn2CD2cFssKrxwwhG/ZSHdXC3MXZnT4BJEieJD6e WCZghnP/vHObsaXTqqbN5hwofh0ygj5TI2yuBCRl1xZ+sFDhRL4pf2v6eNsj3D0n Szbs3TVjUpjKNAnD6S62lxRPAufnx/2mi13GwC38rgeGUG+U+n8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:23 2026 by rpki-client