$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: nJGVwuat36som4YctVBEjmr5nNSy0feamOLUo6xxFj4= Subject key identifier: 36:79:51:62:F8:65:DA:A0:7C:03:3A:92:40:A8:FD:7B:29:E8:FC:C8 Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 621544D358F011251E7BA163AA0C9BEA99DF59D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 022B Signing time: Sat 28 Feb 2026 20:11:25 +0000 Manifest this update: Sat 28 Feb 2026 20:06:25 +0000 Manifest next update: Wed 04 Mar 2026 02:51:25 +0000 Files and hashes: 1: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) 2: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 3: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: Aehy2hZVjYw7jjPgW8RyAxNsHk9zgBzXry/EQXcR0BE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:15:44:d3:58:f0:11:25:1e:7b:a1:63:aa:0c:9b:ea:99:df:59:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Feb 28 20:06:25 2026 GMT Not After : Mar 4 02:51:25 2026 GMT Subject: CN=36795162F865DAA07C033A9240A8FD7B29E8FCC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fd:27:53:cb:66:f7:91:49:4f:29:70:8b:19: 8d:bb:67:f7:01:2c:df:c8:87:54:59:44:98:8d:a8: 74:56:46:5b:76:e6:b8:4a:7a:ad:15:fb:b5:a7:3c: 75:52:1f:64:d3:08:1e:ea:35:84:b5:58:94:c9:dd: 5d:e5:fb:d8:cf:a3:42:bc:dc:f0:6a:6b:45:e9:29: dd:64:8f:69:16:98:3a:e9:f9:01:65:9c:6a:8c:f2: 16:6c:f1:24:7d:18:80:a0:61:59:7a:a2:1d:22:25: c9:71:19:dc:b3:42:b1:b6:93:6c:ac:ba:11:6f:96: 83:f4:c0:86:95:d2:02:69:ba:a5:09:80:32:79:8b: 06:ed:15:ac:51:67:5b:6b:d9:21:8e:12:2b:71:8f: 97:d0:2d:7e:ba:d4:54:b5:38:f1:60:db:2d:5b:15: 0b:55:0e:a2:23:36:c9:58:6e:55:bb:5b:78:2b:19: d5:b5:a5:62:c8:0c:b1:26:ae:6c:50:a9:34:47:9b: da:22:13:ae:a9:7d:33:20:ec:45:77:25:6f:1e:9d: 14:02:48:6c:3b:a4:64:4e:ea:cd:39:35:f6:c6:0b: 16:03:1d:47:01:be:be:35:4e:ca:ff:8e:e9:2c:37: 1e:40:c8:81:01:83:46:56:ca:67:85:c7:56:63:e3: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:79:51:62:F8:65:DA:A0:7C:03:3A:92:40:A8:FD:7B:29:E8:FC:C8 X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b2:6e:b7:19:3c:60:54:5a:44:3c:99:3d:41:c6:0e:bf:41: 84:08:62:99:90:d5:72:bd:3d:b9:6c:89:a9:91:d5:20:19:d2: 2e:d8:2d:60:9b:b1:4d:3c:5a:a5:aa:7b:bd:bb:28:b0:38:41: a7:76:1e:72:d0:ad:85:e9:62:25:be:bd:ef:b5:9a:f7:18:37: 49:d2:02:b0:62:b4:da:e7:6b:78:06:01:8d:23:2b:94:2c:96: 21:b2:3b:80:ee:3f:1e:bc:d0:8c:8a:9f:2e:18:b1:91:3e:5f: 49:a8:d3:ed:8e:7a:c4:c5:79:f4:84:67:ad:2e:43:9f:42:4e: 38:d2:ab:c8:85:e4:f0:06:ed:79:02:57:c7:7b:35:b3:c8:bb: 58:05:28:64:64:7f:1f:8d:67:a6:2f:ff:14:2c:4b:e1:de:d4: ea:f3:ad:08:74:e2:9a:a7:ba:dc:70:a0:d2:fe:b7:cf:c4:f7: 8d:2b:85:c5:01:f9:71:80:a8:64:95:45:4e:e9:61:73:ad:81: c6:a1:65:d4:9c:ef:0c:20:f6:dd:c6:59:82:5b:08:ee:de:b8: ac:02:23:b0:6d:5b:3e:b9:13:18:99:e5:97:47:c2:16:5e:18: 44:10:e1:db:8a:d5:07:bd:c5:42:92:00:67:1a:68:74:91:81: fd:87:77:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhVE01jwESUee6Fjqgyb6pnfWdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNjAyMjgyMDA2MjVaFw0yNjAzMDQwMjUxMjVaMDMxMTAvBgNV BAMTKDM2Nzk1MTYyRjg2NURBQTA3QzAzM0E5MjQwQThGRDdCMjlFOEZDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk/SdTy2b3kUlPKXCLGY27Z/cB LN/Ih1RZRJiNqHRWRlt25rhKeq0V+7WnPHVSH2TTCB7qNYS1WJTJ3V3l+9jPo0K8 3PBqa0XpKd1kj2kWmDrp+QFlnGqM8hZs8SR9GICgYVl6oh0iJclxGdyzQrG2k2ys uhFvloP0wIaV0gJpuqUJgDJ5iwbtFaxRZ1tr2SGOEitxj5fQLX661FS1OPFg2y1b FQtVDqIjNslYblW7W3grGdW1pWLIDLEmrmxQqTRHm9oiE66pfTMg7EV3JW8enRQC SGw7pGRO6s05NfbGCxYDHUcBvr41Tsr/juksNx5AyIEBg0ZWymeFx1Zj44b1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnlRYvhl2qB8AzqSQKj9eyno/MgwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOybrcZPGBUWkQ8mT1Bxg6/QYQIYpmQ1XK9 PblsiamR1SAZ0i7YLWCbsU08WqWqe727KLA4Qad2HnLQrYXpYiW+ve+1mvcYN0nS ArBitNrna3gGAY0jK5QsliGyO4DuPx680IyKny4YsZE+X0mo0+2OesTFefSEZ60u Q59CTjjSq8iF5PAG7XkCV8d7NbPIu1gFKGRkfx+NZ6Yv/xQsS+He1OrzrQh04pqn utxwoNL+t8/E940rhcUB+XGAqGSVRU7pYXOtgcahZdSc7wwg9t3GWYJbCO7euKwC I7BtWz65ExiZ5ZdHwhZeGEQQ4duK1Qe9xUKSAGcaaHSRgf2Hdzs= -----END CERTIFICATE-----Generated at Mon Mar 2 01:14:41 2026 by rpki-client