$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: fMnUr/MTAMd06Eou25wPrn9gHpEGaeJk+cpj9LdCHvk= Subject key identifier: 92:93:39:5D:B3:9C:C3:C0:10:28:1F:0A:38:12:20:F5:7E:48:20:D2 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 31FEB3D67710844656E365E00297DF4DCF822903 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0169 Signing time: Sun 01 Mar 2026 09:40:43 +0000 Manifest this update: Sun 01 Mar 2026 09:35:43 +0000 Manifest next update: Wed 04 Mar 2026 10:43:43 +0000 Files and hashes: 1: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: mH8qrgHq/dFBfguCEQNirvdByfoP4BgUfzXdAU+Im6Q=) 2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=) 3: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fe:b3:d6:77:10:84:46:56:e3:65:e0:02:97:df:4d:cf:82:29:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Mar 1 09:35:43 2026 GMT Not After : Mar 4 10:43:43 2026 GMT Subject: CN=9293395DB39CC3C010281F0A381220F57E4820D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:a5:f4:41:6a:bf:29:b0:52:76:fb:05:32: 8e:96:cd:d8:02:e3:49:be:eb:15:e0:5e:57:ec:dc: 29:5f:02:0e:6c:e4:49:69:44:8e:d4:72:de:e1:64: 64:00:ad:6d:6b:24:fa:21:58:51:8e:89:9f:aa:54: 83:52:7f:f7:71:a9:67:4a:18:df:ae:dd:09:f4:a2: 8c:f7:90:fe:cc:f1:65:40:18:5b:b6:ba:8b:bc:b7: 53:5a:47:7a:7e:72:9d:33:96:75:7f:4a:a0:aa:b0: 43:a6:5d:3f:da:75:c3:58:8c:53:cc:d0:55:8e:25: 33:6f:94:61:9d:0f:c3:5d:d3:51:75:0f:e0:1f:d5: 0b:24:88:14:c9:39:18:aa:c5:2f:a8:de:c0:bf:17: 7f:c4:a6:e8:de:1f:29:a3:d2:fe:7a:47:29:fb:11: 96:2b:ed:4e:b5:86:cc:09:02:67:85:ba:96:48:f4: 07:81:22:ef:ca:5b:63:cc:d4:9e:70:00:b3:b3:f9: 9e:3e:05:d5:e5:43:2d:13:a8:27:47:27:64:b8:f7: f9:a2:54:14:34:70:e1:e8:99:df:97:4e:78:26:eb: 39:3a:b9:f6:68:e1:05:5a:ba:90:69:ac:cb:cc:dd: 10:42:10:5c:83:a0:8d:ee:ee:75:e4:04:60:74:65: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:93:39:5D:B3:9C:C3:C0:10:28:1F:0A:38:12:20:F5:7E:48:20:D2 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a9:46:3e:d9:c2:56:e5:17:8f:e4:b7:60:38:4d:4a:2d:07: e2:d5:59:5e:17:58:d5:7b:91:d4:10:24:60:33:7c:63:57:f6: a3:26:d8:d7:b5:4d:5a:c5:30:f9:ec:4f:f7:da:26:22:9a:35: 22:22:56:fb:da:72:5e:af:bf:c2:68:45:51:f7:f4:84:79:df: 06:e8:c4:39:f9:b8:54:94:00:ac:55:e3:b2:22:76:34:a3:bc: 53:77:d3:fe:ac:b7:6f:4d:c7:40:ba:c6:25:3d:66:32:1e:71: fc:54:e9:b6:2a:22:3d:bd:c6:11:fe:2c:f0:f5:1e:27:43:a5: d8:4f:b0:1b:e8:b6:cc:0c:be:63:45:58:51:73:ad:e8:9f:2f: d1:a9:db:49:b0:cf:bc:8f:f7:10:46:3c:a8:6f:c3:db:5d:28: 63:ea:1f:da:42:22:48:8c:ea:29:64:8a:21:5b:84:27:db:3c: 54:77:9c:26:1a:86:0a:4d:a7:2e:b5:0e:73:55:05:85:7e:d3: 1f:7f:bf:b6:6d:7e:dd:56:bc:65:4d:db:48:a7:3c:b4:1e:64: b3:1e:89:0e:16:b3:02:c0:68:00:62:2d:66:36:62:75:06:4a: 77:79:f1:d2:2a:23:d6:90:10:e8:15:2f:f6:7b:c5:70:5c:d8: 01:1f:33:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMf6z1ncQhEZW42XgApffTc+CKQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNjAzMDEwOTM1NDNaFw0yNjAzMDQxMDQzNDNaMDMxMTAvBgNV BAMTKDkyOTMzOTVEQjM5Q0MzQzAxMDI4MUYwQTM4MTIyMEY1N0U0ODIwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7aX0QWq/KbBSdvsFMo6WzdgC 40m+6xXgXlfs3ClfAg5s5ElpRI7Uct7hZGQArW1rJPohWFGOiZ+qVINSf/dxqWdK GN+u3Qn0ooz3kP7M8WVAGFu2uou8t1NaR3p+cp0zlnV/SqCqsEOmXT/adcNYjFPM 0FWOJTNvlGGdD8Nd01F1D+Af1QskiBTJORiqxS+o3sC/F3/EpujeHymj0v56Ryn7 EZYr7U61hswJAmeFupZI9AeBIu/KW2PM1J5wALOz+Z4+BdXlQy0TqCdHJ2S49/mi VBQ0cOHomd+XTngm6zk6ufZo4QVaupBprMvM3RBCEFyDoI3u7nXkBGB0ZcZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkpM5XbOcw8AQKB8KOBIg9X5IINIwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESpRj7ZwlblF4/kt2A4TUotB+LVWV4XWNV7 kdQQJGAzfGNX9qMm2Ne1TVrFMPnsT/faJiKaNSIiVvvacl6vv8JoRVH39IR53wbo xDn5uFSUAKxV47IidjSjvFN30/6st29Nx0C6xiU9ZjIecfxU6bYqIj29xhH+LPD1 HidDpdhPsBvotswMvmNFWFFzreifL9Gp20mwz7yP9xBGPKhvw9tdKGPqH9pCIkiM 6ilkiiFbhCfbPFR3nCYahgpNpy61DnNVBYV+0x9/v7Ztft1WvGVN20inPLQeZLMe iQ4WswLAaABiLWY2YnUGSnd58dIqI9aQEOgVL/Z7xXBc2AEfMyM= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:03 2026 by rpki-client