$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: tZiBO4P4kjesD62sK+gIJFvIeyo9K38llJvrH56x/gI= Subject key identifier: 2A:E0:9A:A8:D2:A9:D8:16:97:1B:90:D6:52:C2:34:E7:07:BE:97:BE Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 524D7217F906D6614C7C78B22DAA7701CD893DE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 017D Signing time: Wed 15 Apr 2026 21:30:44 +0000 Manifest this update: Wed 15 Apr 2026 21:25:44 +0000 Manifest next update: Sat 18 Apr 2026 22:10:44 +0000 Files and hashes: 1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=) 2: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: 03AP2w5iUjcW8NswAxS3RufItJG+F9WN1oivqlPcTtc=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4d:72:17:f9:06:d6:61:4c:7c:78:b2:2d:aa:77:01:cd:89:3d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Apr 15 21:25:44 2026 GMT Not After : Apr 18 22:10:44 2026 GMT Subject: CN=2AE09AA8D2A9D816971B90D652C234E707BE97BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:51:29:0c:46:77:88:01:cb:1c:fb:1f:ec: 26:47:59:c0:12:ae:74:1d:f6:55:4b:61:13:f3:be: 08:4a:c5:09:b6:2e:12:9b:2f:92:6c:29:45:46:fb: 70:60:62:3b:86:f3:5e:b8:48:19:e7:bf:32:ef:7e: a1:7e:bd:d0:11:f9:d0:11:8e:d9:5f:d1:37:84:0f: dc:cf:94:e0:71:8a:ea:53:72:fd:80:15:94:0a:61: ea:a6:47:6c:93:5e:cf:a8:fa:8b:82:bb:1b:ef:89: 23:d5:12:4d:a8:f7:98:09:3b:93:f5:fc:cf:1a:98: b5:9e:be:12:30:b1:8d:a3:b2:9c:e0:00:e1:1b:ad: f2:1a:a4:69:33:d9:00:15:fc:b2:25:68:b0:0a:e9: 18:b7:e9:e9:6e:bf:ad:67:69:23:69:73:53:75:05: f8:53:84:89:49:4c:7e:2c:7a:0a:f4:8f:d0:c4:d2: e1:00:49:dd:5b:3d:68:c0:ff:14:8b:20:24:ea:48: 85:18:ad:3f:f6:45:c4:f6:2b:1a:16:8f:3e:95:da: 16:76:b3:77:e9:81:7a:8e:d1:0d:db:cf:c2:df:71: 09:15:27:92:b1:0d:9f:4c:be:ea:26:c8:a7:a4:69: 65:9b:cb:90:84:49:53:24:fa:14:80:b6:02:e1:52: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E0:9A:A8:D2:A9:D8:16:97:1B:90:D6:52:C2:34:E7:07:BE:97:BE X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8d:b8:d9:6c:32:59:2d:80:05:00:6f:44:9f:c4:3d:d1:d6: ec:d5:43:45:9f:7e:57:08:27:63:02:29:eb:39:08:69:63:da: 50:c1:3e:f4:81:21:1b:5c:14:4e:a1:ce:73:27:55:05:f9:65: e4:10:58:8c:fd:48:94:8b:39:02:cf:c6:43:0e:46:1e:24:85: ce:a0:1d:96:76:4c:d6:74:e1:2e:8b:9a:fa:94:db:ec:4a:f5: 7a:23:5d:10:99:9b:7d:f7:c4:31:8b:28:00:61:c7:f9:ab:03: 3e:77:bd:80:5b:20:55:5c:22:69:66:2f:dc:51:6b:e0:78:d7: 75:8d:19:9b:55:82:52:43:4c:6b:24:a9:a2:37:2b:7c:a2:32: 76:49:b9:45:eb:5c:33:91:da:6d:9a:2b:ff:17:e0:3d:ca:56: 26:8c:f7:7e:8e:dd:1f:16:d8:40:ba:31:fc:d3:15:99:77:11: c1:f0:56:95:34:ee:5d:d5:99:6a:cc:8f:2f:9a:2a:4b:da:d2: e1:7e:3a:9b:98:2d:75:36:01:1f:f9:82:92:60:50:56:6d:46: 27:b9:8a:c2:78:85:6e:6c:52:0e:5e:bf:a2:2a:e5:43:e6:76: 70:55:9e:7c:81:a3:9b:a0:62:e4:b2:d1:95:7b:5c:d4:54:f7: 57:a0:13:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUk1yF/kG1mFMfHiyLap3Ac2JPekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNjA0MTUyMTI1NDRaFw0yNjA0MTgyMjEwNDRaMDMxMTAvBgNV BAMTKDJBRTA5QUE4RDJBOUQ4MTY5NzFCOTBENjUyQzIzNEU3MDdCRTk3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZVEpDEZ3iAHLHPsf7CZHWcAS rnQd9lVLYRPzvghKxQm2LhKbL5JsKUVG+3BgYjuG8164SBnnvzLvfqF+vdAR+dAR jtlf0TeED9zPlOBxiupTcv2AFZQKYeqmR2yTXs+o+ouCuxvviSPVEk2o95gJO5P1 /M8amLWevhIwsY2jspzgAOEbrfIapGkz2QAV/LIlaLAK6Ri36eluv61naSNpc1N1 BfhThIlJTH4segr0j9DE0uEASd1bPWjA/xSLICTqSIUYrT/2RcT2KxoWjz6V2hZ2 s3fpgXqO0Q3bz8LfcQkVJ5KxDZ9MvuomyKekaWWby5CESVMk+hSAtgLhUv4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKuCaqNKp2BaXG5DWUsI05we+l74wHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqNuNlsMlktgAUAb0SfxD3R1uzVQ0WfflcI J2MCKes5CGlj2lDBPvSBIRtcFE6hznMnVQX5ZeQQWIz9SJSLOQLPxkMORh4khc6g HZZ2TNZ04S6LmvqU2+xK9XojXRCZm333xDGLKABhx/mrAz53vYBbIFVcImlmL9xR a+B413WNGZtVglJDTGskqaI3K3yiMnZJuUXrXDOR2m2aK/8X4D3KViaM936O3R8W 2EC6MfzTFZl3EcHwVpU07l3VmWrMjy+aKkva0uF+OpuYLXU2AR/5gpJgUFZtRie5 isJ4hW5sUg5ev6Iq5UPmdnBVnnyBo5ugYuSy0ZV7XNRU91egE2A= -----END CERTIFICATE-----Generated at Fri Apr 17 18:55:34 2026 by rpki-client