$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: 6NGxP76MFXskxV+OtcAeWsRWqpKMAbwJIEr1YaX6nr8= Subject key identifier: 86:4B:0E:E4:13:38:8B:93:EE:2E:D0:09:9B:1C:0D:E8:99:20:67:43 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 4BA7ACACE0F93D52D6295A73E2630F137B914D86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 01F8 Signing time: Sat 28 Feb 2026 17:41:13 +0000 Manifest this update: Sat 28 Feb 2026 17:36:13 +0000 Manifest next update: Tue 03 Mar 2026 21:29:13 +0000 Files and hashes: 1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: Wb9X/lYEQLO6N+RbT3LnrvUZAo5cQVZ53qNz2yQJ7KQ=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: r4lFs0TNiF7PlJS0PWYOEttBGGT47VYExK2RXJ6gyEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:ac:ac:e0:f9:3d:52:d6:29:5a:73:e2:63:0f:13:7b:91:4d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Feb 28 17:36:13 2026 GMT Not After : Mar 3 21:29:13 2026 GMT Subject: CN=864B0EE413388B93EE2ED0099B1C0DE899206743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:9b:d2:04:d8:7c:e1:c8:fb:cc:31:b9:dd: 4f:44:0c:2e:14:9d:ce:82:15:76:9e:57:38:54:b4: 59:c6:7f:9b:6a:37:d8:de:fd:5e:10:4a:d8:3a:d9: 1b:86:b1:a0:33:a1:c0:06:f5:3c:fa:b4:75:80:7b: 7d:6f:97:08:a3:ad:62:27:b7:9a:7e:6c:29:27:7a: 4d:eb:1a:70:39:1f:47:0b:a0:66:b3:94:93:8a:e6: a6:15:3a:e3:82:df:9d:43:b4:56:09:e2:1c:3a:32: c4:67:d8:b6:3f:80:2b:bf:e0:80:34:8d:cf:e0:cf: e8:88:de:e9:5d:85:b4:50:12:f6:79:4f:41:ca:b2: 74:4f:5a:a9:1b:0c:6f:62:9b:c3:f7:a7:9c:a9:ba: 7b:c1:1f:89:2f:5d:e7:56:1c:e1:26:4d:68:fb:1a: b9:f8:cb:8b:88:5f:18:5c:54:0d:65:2a:12:40:f8: 34:5b:5e:43:b2:24:40:33:02:08:6e:79:f1:34:03: 26:f3:5b:02:28:55:e5:8d:1f:37:ce:74:aa:4b:7d: e0:c1:8b:32:e3:4f:11:3e:8b:d8:76:ae:3d:4a:9c: 57:d1:21:99:6d:cd:48:5d:78:d2:94:d4:83:78:bd: b9:35:87:2b:59:3d:36:98:1e:40:78:81:36:86:75: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4B:0E:E4:13:38:8B:93:EE:2E:D0:09:9B:1C:0D:E8:99:20:67:43 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:88:17:3b:de:0c:d6:03:d5:72:01:35:75:b1:80:25:f7:fd: db:54:ec:58:05:f8:79:a2:79:48:9c:45:90:32:23:ad:39:6c: 7f:f3:c8:02:c6:4b:3c:53:4e:39:c2:88:3f:ae:ad:20:fd:16: 66:6c:c0:ba:67:1f:bf:99:1a:21:d6:0d:8c:31:7d:e3:f2:4b: 24:5a:0c:f8:77:86:84:89:1e:8b:14:02:58:42:c9:25:58:83: cf:ed:46:5f:13:6f:90:1c:f4:e0:22:e1:a1:2c:e9:6f:c1:06: bd:6b:5f:33:8f:62:dd:a4:a1:92:43:55:7f:b7:0b:04:d5:a3: e0:72:b4:fb:42:7c:d8:1b:30:47:25:70:31:42:5f:78:42:08: 05:9e:13:45:a2:de:bb:be:fc:d5:9a:10:37:e7:e4:66:88:f8: ad:62:99:4b:2f:fa:99:99:e6:49:01:f6:f5:26:1b:93:d6:11: ec:97:e9:e5:3e:91:71:3a:89:4e:53:57:7e:c4:91:4f:ae:6b: 4d:81:44:fc:f8:dc:90:b9:8b:13:13:2a:9c:7b:3a:44:a3:c8: de:21:2f:10:e7:ec:93:3b:39:51:58:4d:d2:5a:68:3f:21:d7: 13:26:93:a1:c4:ad:21:42:b2:b4:5c:e1:b9:ee:4c:6b:32:8b: 21:0f:f3:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6esrOD5PVLWKVpz4mMPE3uRTYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNjAyMjgxNzM2MTNaFw0yNjAzMDMyMTI5MTNaMDMxMTAvBgNV BAMTKDg2NEIwRUU0MTMzODhCOTNFRTJFRDAwOTlCMUMwREU4OTkyMDY3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg05vSBNh84cj7zDG53U9EDC4U nc6CFXaeVzhUtFnGf5tqN9je/V4QStg62RuGsaAzocAG9Tz6tHWAe31vlwijrWIn t5p+bCknek3rGnA5H0cLoGazlJOK5qYVOuOC351DtFYJ4hw6MsRn2LY/gCu/4IA0 jc/gz+iI3uldhbRQEvZ5T0HKsnRPWqkbDG9im8P3p5ypunvBH4kvXedWHOEmTWj7 Grn4y4uIXxhcVA1lKhJA+DRbXkOyJEAzAghuefE0AybzWwIoVeWNHzfOdKpLfeDB izLjTxE+i9h2rj1KnFfRIZltzUhdeNKU1IN4vbk1hytZPTaYHkB4gTaGdd6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhksO5BM4i5PuLtAJmxwN6JkgZ0MwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKIFzveDNYD1XIBNXWxgCX3/dtU7FgF+Hmi eUicRZAyI605bH/zyALGSzxTTjnCiD+urSD9FmZswLpnH7+ZGiHWDYwxfePySyRa DPh3hoSJHosUAlhCySVYg8/tRl8Tb5Ac9OAi4aEs6W/BBr1rXzOPYt2koZJDVX+3 CwTVo+BytPtCfNgbMEclcDFCX3hCCAWeE0Wi3ru+/NWaEDfn5GaI+K1imUsv+pmZ 5kkB9vUmG5PWEeyX6eU+kXE6iU5TV37EkU+ua02BRPz43JC5ixMTKpx7OkSjyN4h LxDn7JM7OVFYTdJaaD8h1xMmk6HErSFCsrRc4bnuTGsyiyEP86Q= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:10 2026 by rpki-client