$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: WwCU3kxtJmn9lnvRc+ncpZSpX3KQ8UcBO81jZ1zyRCI= Subject key identifier: AA:BE:26:AD:3C:4E:43:25:84:32:7E:4A:B3:78:DD:CC:9C:75:46:D6 Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 2D00366E3CE97AC9DA638E5B4D0E99F57DB2AA6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 01E5 Signing time: Sat 18 Apr 2026 10:32:10 +0000 Manifest this update: Sat 18 Apr 2026 10:27:10 +0000 Manifest next update: Tue 21 Apr 2026 14:18:10 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: 4s/6CYq2JEhw17UnDpeRq+LOovL2V+VcCa0fcIbjt8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:00:36:6e:3c:e9:7a:c9:da:63:8e:5b:4d:0e:99:f5:7d:b2:aa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Apr 18 10:27:10 2026 GMT Not After : Apr 21 14:18:10 2026 GMT Subject: CN=AABE26AD3C4E432584327E4AB378DDCC9C7546D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:1a:f5:20:32:29:5e:16:c4:b6:9b:81:60: 76:ec:3e:8e:05:b6:cc:1f:eb:aa:a5:6e:07:69:4c: 6b:ca:cf:4f:db:a8:50:e2:1b:f8:2a:9e:85:ec:53: de:c8:f6:32:ac:5b:bd:38:ff:02:57:e8:dc:6e:10: ac:a8:91:5b:19:99:2f:9b:41:79:e9:67:e9:cd:8a: 97:2a:a8:be:6f:3a:49:9c:4b:b3:e6:f3:27:2c:3b: c3:19:15:45:53:2f:92:11:f6:df:b8:92:1a:25:f9: 11:df:c5:cf:f1:c9:6b:b4:20:f0:1b:9d:05:d2:27: 26:e6:02:52:37:d7:d0:ed:a9:7f:29:43:74:a1:c5: 58:15:c6:ef:77:87:93:15:a5:4e:69:c4:db:d0:63: 12:a8:ae:cc:cd:eb:b8:8d:1f:5c:9f:a5:ec:67:a1: eb:52:4e:67:be:10:9e:ec:3b:ee:5a:9b:f8:3c:24: c2:55:c2:5c:71:3a:6f:fe:e3:30:47:c5:15:98:68: 77:ef:c2:f8:a5:03:4c:2b:c7:eb:4b:a1:1e:44:bc: 1f:f2:78:74:b6:d7:1e:a1:89:0c:7b:96:de:6b:e3: a2:ca:08:94:9c:70:7e:8a:99:f4:89:c3:0f:62:9e: c3:e4:93:08:01:c3:4d:cd:64:18:81:3d:02:73:ce: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:26:AD:3C:4E:43:25:84:32:7E:4A:B3:78:DD:CC:9C:75:46:D6 X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f4:09:ed:1a:64:b1:38:0a:f1:fd:4f:7a:72:e4:1f:32:a0: 45:13:54:8c:72:05:44:77:d3:bc:a9:8d:6c:55:56:de:ec:76: 0a:16:d6:2d:65:66:8c:27:94:79:ba:ec:c6:68:24:9c:15:7f: 85:fc:33:3b:67:17:e3:a3:a1:6b:71:67:61:45:6a:89:d9:a9: 1a:95:b6:e3:82:63:b0:86:35:b3:53:36:7d:8f:d3:48:1d:d3: f8:16:ed:e4:1d:82:ce:ae:1c:d7:a9:a7:7b:dd:2e:b2:eb:dd: 9e:43:ac:ed:39:92:00:93:94:bc:df:12:65:79:c7:14:14:95: 56:7d:96:86:12:47:02:a0:33:ad:6d:53:68:4d:4e:16:a3:66: 7f:cf:9f:da:ee:02:eb:63:bd:e1:d9:6b:63:06:f2:9a:fa:cd: c0:44:0f:f3:70:a8:69:4a:bb:3a:c2:42:d3:90:b9:2b:21:97: 3d:3b:ee:3f:0a:f0:0e:2d:ee:1f:1f:91:17:3f:60:ad:2d:56: 66:a3:cc:0e:51:99:b7:ab:4f:3b:d7:47:04:06:c4:16:de:61: 7d:1a:a0:57:2c:8a:21:64:d4:6f:27:37:80:fd:c3:53:01:ec: 80:6f:4b:77:03:b7:e3:91:17:ff:5c:8f:10:ad:38:3d:13:59: 5d:75:70:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQA2bjzpesnaY45bTQ6Z9X2yqmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNjA0MTgxMDI3MTBaFw0yNjA0MjExNDE4MTBaMDMxMTAvBgNV BAMTKEFBQkUyNkFEM0M0RTQzMjU4NDMyN0U0QUIzNzhERENDOUM3NTQ2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72xr1IDIpXhbEtpuBYHbsPo4F tswf66qlbgdpTGvKz0/bqFDiG/gqnoXsU97I9jKsW704/wJX6NxuEKyokVsZmS+b QXnpZ+nNipcqqL5vOkmcS7Pm8ycsO8MZFUVTL5IR9t+4khol+RHfxc/xyWu0IPAb nQXSJybmAlI319DtqX8pQ3ShxVgVxu93h5MVpU5pxNvQYxKorszN67iNH1yfpexn oetSTme+EJ7sO+5am/g8JMJVwlxxOm/+4zBHxRWYaHfvwvilA0wrx+tLoR5EvB/y eHS21x6hiQx7lt5r46LKCJSccH6KmfSJww9insPkkwgBw03NZBiBPQJzzhBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqr4mrTxOQyWEMn5Ks3jdzJx1RtYwHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFj0Ce0aZLE4CvH9T3py5B8yoEUTVIxyBUR3 07ypjWxVVt7sdgoW1i1lZownlHm67MZoJJwVf4X8MztnF+OjoWtxZ2FFaonZqRqV tuOCY7CGNbNTNn2P00gd0/gW7eQdgs6uHNepp3vdLrLr3Z5DrO05kgCTlLzfEmV5 xxQUlVZ9loYSRwKgM61tU2hNThajZn/Pn9ruAutjveHZa2MG8pr6zcBED/NwqGlK uzrCQtOQuSshlz077j8K8A4t7h8fkRc/YK0tVmajzA5RmberTzvXRwQGxBbeYX0a oFcsiiFk1G8nN4D9w1MB7IBvS3cDt+ORF/9cjxCtOD0TWV11cHc= -----END CERTIFICATE-----Generated at Sun Apr 19 11:53:16 2026 by rpki-client