$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: mIkYIZ75WQFd3Atg58F3CNRgStVskqf8J8w3Nr/BYtQ= Subject key identifier: 6F:75:8E:D9:8D:5D:90:55:27:81:27:D0:6A:26:40:FC:BD:FC:E7:BA Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 41237B7FD82E1CCC5B6A69B42CCE1E5CD9B06C95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 0553 Signing time: Mon 02 Mar 2026 04:30:49 +0000 Manifest this update: Mon 02 Mar 2026 04:25:49 +0000 Manifest next update: Thu 05 Mar 2026 14:43:49 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 3: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 4: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: nAd8+HLNtfmJM4mt5Z5E2y7lbW/yj6V/Tnvtd//KZXA=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:23:7b:7f:d8:2e:1c:cc:5b:6a:69:b4:2c:ce:1e:5c:d9:b0:6c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Mar 2 04:25:49 2026 GMT Not After : Mar 5 14:43:49 2026 GMT Subject: CN=6F758ED98D5D9055278127D06A2640FCBDFCE7BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9b:a5:1b:2a:e1:10:e9:ac:f6:e5:a2:e4:80: 95:f7:a0:dc:98:6d:f6:dc:e5:fc:89:d1:71:a0:9e: d2:9f:aa:7a:96:40:38:73:09:bd:4b:75:c5:e3:a8: 6d:f3:e5:f9:1a:17:0e:1e:68:41:b2:5d:8f:49:35: e0:ee:36:5c:50:47:84:56:f8:f0:41:bd:02:9b:20: c9:6c:f8:56:86:32:5c:b7:87:72:b3:33:0b:4b:7b: f8:80:d2:52:76:d0:bf:1e:bd:d4:d3:ef:77:0f:0f: 99:15:6e:76:d1:0e:fc:5e:30:7b:eb:53:24:c9:39: 5d:cb:ec:1a:66:e7:bc:ee:0e:7c:03:a0:cd:1e:7c: b8:c8:62:1c:43:b3:c5:8e:57:31:4e:e3:20:d1:eb: 73:04:f4:3a:37:7e:c0:4f:fb:9f:d8:5b:b8:b7:fc: 8f:97:b0:66:ec:3d:89:96:80:ca:9f:bc:95:a8:df: be:41:06:c2:c6:a2:9b:15:e7:03:50:50:8d:69:4b: 1b:09:0e:05:6c:79:49:65:6f:a5:12:1e:62:f3:d1: 27:03:47:59:8d:b9:bf:19:44:00:c2:cb:ca:c4:ac: d0:da:04:68:d8:0b:a3:19:2b:0a:e4:2f:9a:a6:82: f3:39:e9:36:51:9c:fa:84:6d:e4:c9:d6:6a:0d:60: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:75:8E:D9:8D:5D:90:55:27:81:27:D0:6A:26:40:FC:BD:FC:E7:BA X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c9:39:ed:f4:ec:46:6e:2f:b8:3b:c1:f9:f0:89:89:c4:29: 3a:80:d1:28:21:08:9c:4b:c4:18:b8:c7:8f:c4:20:7a:aa:be: f8:54:48:07:78:7a:55:20:ba:27:28:8b:86:fe:45:8f:76:24: ad:05:7e:dc:33:4b:5a:dc:b8:ab:a0:e4:2f:59:f8:ee:69:a4: 99:c9:cc:86:cd:34:8e:f7:b8:80:c0:eb:0e:b7:dc:0d:35:21: 52:a5:b1:43:12:b2:dd:17:50:f9:99:46:90:2d:2a:d2:d3:4f: 91:5b:ee:2c:86:22:09:53:8a:4b:d6:c0:0f:d8:c8:66:a3:c2: 98:80:66:3f:8f:7a:74:9b:e2:66:88:3c:f6:36:e2:2e:ad:b9: 24:66:e8:07:8a:f5:35:0b:86:61:19:a2:f8:35:9a:9b:37:41: e3:d5:8e:7e:a2:dc:42:46:e1:bf:ed:58:66:36:70:e5:2e:0c: 51:57:e7:98:c3:a2:da:71:4d:0d:80:92:d9:00:ed:20:4d:3b: a5:09:60:99:7a:0f:c4:7b:91:31:6e:fa:dd:86:f8:8a:dd:ce: 1e:ed:3f:e5:07:af:97:61:d3:f9:78:ca:f6:88:06:f7:d5:9d: 96:ba:d7:f9:6e:a0:64:56:b8:9a:a1:db:d4:38:07:0a:ea:0e: 8c:14:fa:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSN7f9guHMxbamm0LM4eXNmwbJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNjAzMDIwNDI1NDlaFw0yNjAzMDUxNDQzNDlaMDMxMTAvBgNV BAMTKDZGNzU4RUQ5OEQ1RDkwNTUyNzgxMjdEMDZBMjY0MEZDQkRGQ0U3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmm6UbKuEQ6az25aLkgJX3oNyY bfbc5fyJ0XGgntKfqnqWQDhzCb1LdcXjqG3z5fkaFw4eaEGyXY9JNeDuNlxQR4RW +PBBvQKbIMls+FaGMly3h3KzMwtLe/iA0lJ20L8evdTT73cPD5kVbnbRDvxeMHvr UyTJOV3L7Bpm57zuDnwDoM0efLjIYhxDs8WOVzFO4yDR63ME9Do3fsBP+5/YW7i3 /I+XsGbsPYmWgMqfvJWo375BBsLGopsV5wNQUI1pSxsJDgVseUllb6USHmLz0ScD R1mNub8ZRADCy8rErNDaBGjYC6MZKwrkL5qmgvM56TZRnPqEbeTJ1moNYF0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3WO2Y1dkFUngSfQaiZA/L3857owHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTJOe307EZuL7g7wfnwiYnEKTqA0SghCJxL xBi4x4/EIHqqvvhUSAd4elUguicoi4b+RY92JK0FftwzS1rcuKug5C9Z+O5ppJnJ zIbNNI73uIDA6w633A01IVKlsUMSst0XUPmZRpAtKtLTT5Fb7iyGIglTikvWwA/Y yGajwpiAZj+PenSb4maIPPY24i6tuSRm6AeK9TULhmEZovg1mps3QePVjn6i3EJG 4b/tWGY2cOUuDFFX55jDotpxTQ2AktkA7SBNO6UJYJl6D8R7kTFu+t2G+Irdzh7t P+UHr5dh0/l4yvaIBvfVnZa61/luoGRWuJqh29Q4BwrqDowU+ug= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:09 2026 by rpki-client