$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: kemJuT2W7J6HiEpXZOCTNoLh4MEqTv3M5ZVdsPkCIbM= Subject key identifier: 38:08:15:BA:9E:C3:EA:A1:70:C5:4E:B1:46:C7:21:81:C5:AD:48:4A Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 3F505BFD96784EB7A0396DB894738CD873398E5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 0212 Signing time: Sun 01 Mar 2026 09:21:15 +0000 Manifest this update: Sun 01 Mar 2026 09:16:15 +0000 Manifest next update: Wed 04 Mar 2026 13:01:15 +0000 Files and hashes: 1: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: KaRQV42Qu3L7yd5P8OEKFDLouwkcYU0PPJMbH65gzdQ=) 2: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s=) 3: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: OlSEaMFgO7PKKnmIhsUPpO1TcfNohwlH/C3NH/NvhZg=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:50:5b:fd:96:78:4e:b7:a0:39:6d:b8:94:73:8c:d8:73:39:8e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Mar 1 09:16:15 2026 GMT Not After : Mar 4 13:01:15 2026 GMT Subject: CN=380815BA9EC3EAA170C54EB146C72181C5AD484A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:b1:6d:f1:36:22:12:c3:5a:2c:21:f9:0d: d8:ca:13:d8:be:c5:d6:52:db:eb:bb:86:9b:08:f3: 0b:74:1b:bd:f0:15:8e:cf:b0:f0:d7:26:1c:39:b0: c5:ea:6a:4c:ac:96:2d:63:62:14:7f:2e:37:1d:d5: fc:35:14:89:f1:3d:65:57:bb:df:df:9c:5a:05:84: 17:36:48:04:cd:77:04:cf:33:9e:de:60:7b:ab:47: 95:a2:97:60:3e:a9:4a:d7:52:27:e2:3f:b9:a3:1e: f6:19:eb:17:49:1b:2c:9c:38:4c:9f:b4:f4:63:7a: 6b:6e:27:1f:6b:e7:c0:74:e5:a7:a3:14:7a:63:01: a3:e7:a4:aa:88:08:38:3f:de:f9:8d:fc:d3:16:62: dc:78:1f:b7:99:7e:9c:a1:5b:fa:94:6f:f7:6e:8e: 21:71:95:bb:93:c1:8a:cb:ab:5e:a2:18:5f:51:98: 9b:c2:fa:7f:1e:bf:65:1e:01:3a:8f:5f:f7:1b:09: e7:34:74:0f:b9:31:e0:d5:f5:06:c3:00:e6:8d:2c: c1:7f:8f:d0:55:4f:82:9b:1c:b1:9f:29:53:69:13: 21:ef:c9:8d:8b:1c:0a:e3:e6:9f:d2:76:48:c8:13: ac:51:07:98:bd:d1:26:51:09:7b:1e:a8:3b:ae:ad: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:08:15:BA:9E:C3:EA:A1:70:C5:4E:B1:46:C7:21:81:C5:AD:48:4A X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:39:f0:a9:81:05:9d:2b:1b:34:5d:89:c5:bd:af:f8:bc:40: 70:cc:1d:6b:cd:bf:4c:3f:81:82:84:a8:6e:74:1f:a8:c2:e9: d5:ef:83:a2:b9:f5:23:8e:3f:fb:8c:f8:a8:7e:9e:c4:41:eb: a1:f7:a2:6d:f5:df:5e:72:38:51:58:30:5a:1c:da:6c:f2:08: 02:cb:e7:07:c5:a4:de:de:f1:b4:65:2a:d2:9d:1b:f9:79:63: 40:41:4b:3a:66:47:ef:ee:72:2f:b1:dc:2d:02:29:c5:ce:38: 4c:29:bd:95:bf:5d:53:6c:f5:28:3a:a5:b9:46:95:ce:89:d6: 47:38:69:3a:16:33:40:c1:0c:db:87:46:bd:8d:b9:e7:d0:c1: ae:4e:87:bc:34:cc:ab:e2:5c:44:8a:b8:23:f2:1e:f4:45:0c: 87:47:41:e0:e4:a4:26:84:2c:d3:8a:92:b7:29:79:63:9f:48: b0:f7:15:af:ad:1a:35:bf:e7:fb:7a:3e:d6:e2:00:12:5e:51: 6c:25:8a:cc:1c:7b:7c:26:cc:15:e0:bf:a7:d4:db:b7:ef:16: ff:99:90:b2:e6:28:32:bb:b9:7d:59:29:59:3a:fb:75:f9:64: 87:46:b8:e4:1e:22:95:1e:a7:04:40:6b:dd:74:fb:d8:85:ec: 6d:14:b6:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1Bb/ZZ4TregOW24lHOM2HM5jl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNjAzMDEwOTE2MTVaFw0yNjAzMDQxMzAxMTVaMDMxMTAvBgNV BAMTKDM4MDgxNUJBOUVDM0VBQTE3MEM1NEVCMTQ2QzcyMTgxQzVBRDQ4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuLFt8TYiEsNaLCH5DdjKE9i+ xdZS2+u7hpsI8wt0G73wFY7PsPDXJhw5sMXqakysli1jYhR/Ljcd1fw1FInxPWVX u9/fnFoFhBc2SATNdwTPM57eYHurR5Wil2A+qUrXUifiP7mjHvYZ6xdJGyycOEyf tPRjemtuJx9r58B05aejFHpjAaPnpKqICDg/3vmN/NMWYtx4H7eZfpyhW/qUb/du jiFxlbuTwYrLq16iGF9RmJvC+n8ev2UeATqPX/cbCec0dA+5MeDV9QbDAOaNLMF/ j9BVT4KbHLGfKVNpEyHvyY2LHArj5p/SdkjIE6xRB5i90SZRCXseqDuurTaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOAgVup7D6qFwxU6xRschgcWtSEowHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw58KmBBZ0rGzRdicW9r/i8QHDMHWvNv0w/ gYKEqG50H6jC6dXvg6K59SOOP/uM+Kh+nsRB66H3om31315yOFFYMFoc2mzyCALL 5wfFpN7e8bRlKtKdG/l5Y0BBSzpmR+/uci+x3C0CKcXOOEwpvZW/XVNs9Sg6pblG lc6J1kc4aToWM0DBDNuHRr2NuefQwa5Oh7w0zKviXESKuCPyHvRFDIdHQeDkpCaE LNOKkrcpeWOfSLD3Fa+tGjW/5/t6PtbiABJeUWwliswce3wmzBXgv6fU27fvFv+Z kLLmKDK7uX1ZKVk6+3X5ZIdGuOQeIpUepwRAa910+9iF7G0Utu8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:06 2026 by rpki-client