$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: N/sE+OXymh1HlB0C2XLVSmBs/LDy3geFogemEyENR8Y= Subject key identifier: 03:56:7C:32:56:D7:D4:6A:A9:07:09:64:D0:06:9A:54:BE:44:4B:F5 Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 6D182D373D938C1ADB45B6427DF7DDBE0FE6627A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 0241 Signing time: Sat 18 Apr 2026 21:01:20 +0000 Manifest this update: Sat 18 Apr 2026 20:56:20 +0000 Manifest next update: Wed 22 Apr 2026 06:31:20 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 2: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: SlG5SyQAWU95OcdcGowq4OrXOtxIeI8klgHxG+nOQDo=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: 77asK98Y6FwjqdnTI49OxJf732MTRMb0e9/FzCcCblc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:18:2d:37:3d:93:8c:1a:db:45:b6:42:7d:f7:dd:be:0f:e6:62:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Apr 18 20:56:20 2026 GMT Not After : Apr 22 06:31:20 2026 GMT Subject: CN=03567C3256D7D46AA9070964D0069A54BE444BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:8f:32:ae:e6:71:7d:a2:67:4f:92:e5:4c: 20:f9:ea:4e:4e:7f:39:71:75:6b:ab:e7:9b:af:b6: c4:c7:2d:91:c6:aa:66:e8:4f:af:6a:9d:5b:68:19: 02:43:23:0e:c6:e0:58:ec:b1:c6:f4:ab:b1:fe:31: fb:f8:6f:76:f7:db:38:8d:30:a7:a2:72:44:d8:e0: d2:3c:3a:b8:05:d7:49:bd:1e:c8:7b:b4:c0:e3:e5: 6c:55:d2:4d:fa:52:73:ea:70:61:15:01:14:1d:f9: e3:c3:e6:12:f4:ff:93:84:a6:5e:b2:38:cc:36:49: 57:52:0b:0f:1a:00:f8:2d:30:55:7c:c6:8d:c8:dd: d8:80:bd:92:3b:27:0f:21:35:e5:c3:8e:55:da:4f: 97:2a:6d:f1:1e:be:0c:8c:e5:f7:4a:89:63:c2:53: 83:18:b1:b0:58:38:57:0e:52:80:9a:b9:62:15:dc: 8c:98:dc:36:60:0c:cc:1d:88:83:a6:7e:70:8e:42: 80:84:1d:cc:e7:62:c8:f5:4f:82:01:16:0b:cd:df: 9a:4e:8a:6b:88:06:47:ab:db:d3:f0:8a:0a:48:f8: 02:91:5b:88:f1:55:0f:f6:84:e0:d2:85:20:b1:32: 59:42:3a:3b:01:e1:53:15:cd:d2:bd:b7:67:91:4c: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:56:7C:32:56:D7:D4:6A:A9:07:09:64:D0:06:9A:54:BE:44:4B:F5 X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5d:37:bb:5d:0c:3e:4e:98:db:3d:31:fa:9c:34:fa:da:19: 23:f1:10:9c:7c:47:ce:ac:2d:26:eb:6f:e0:94:94:e0:43:b6: 33:77:bf:04:2b:67:75:fc:8c:80:8e:8b:bf:29:01:8b:93:6d: 03:1e:c1:4b:e5:fa:9e:a9:34:1c:d4:e7:a8:79:bb:0f:64:4b: f8:f9:04:6e:b7:ee:c6:af:62:7e:09:8e:09:bd:6d:c4:fa:e6: e7:d2:15:13:98:a9:c5:5c:7c:d5:b1:27:46:aa:36:38:fb:6a: ad:89:d6:d9:bd:80:fa:70:70:a0:23:d7:cd:d7:4b:a8:9b:a7: 3e:af:13:56:ba:00:50:38:99:e3:81:75:9a:ec:3c:64:03:e5: 90:ec:59:84:91:9e:bd:72:70:ed:70:80:65:0f:bc:9b:7e:44: c8:7f:e9:20:0c:af:ae:01:42:fd:33:e2:15:12:e2:14:22:52: 96:d5:4a:48:9c:bc:44:e1:57:80:68:cb:bd:a2:6d:9e:a7:c2: 22:15:0d:7d:1d:dc:90:14:7e:3b:5b:c3:25:58:6f:10:ad:9e: 7d:21:a2:c1:cb:79:23:4d:5f:a0:99:15:b7:ff:c2:f5:ff:25: 21:ae:a3:ed:dc:43:aa:a6:41:c8:fb:9f:ec:70:e6:06:81:db: 6f:99:3f:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRgtNz2TjBrbRbZCfffdvg/mYnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNjA0MTgyMDU2MjBaFw0yNjA0MjIwNjMxMjBaMDMxMTAvBgNV BAMTKDAzNTY3QzMyNTZEN0Q0NkFBOTA3MDk2NEQwMDY5QTU0QkU0NDRCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+48yruZxfaJnT5LlTCD56k5O fzlxdWur55uvtsTHLZHGqmboT69qnVtoGQJDIw7G4Fjsscb0q7H+Mfv4b3b32ziN MKeickTY4NI8OrgF10m9Hsh7tMDj5WxV0k36UnPqcGEVARQd+ePD5hL0/5OEpl6y OMw2SVdSCw8aAPgtMFV8xo3I3diAvZI7Jw8hNeXDjlXaT5cqbfEevgyM5fdKiWPC U4MYsbBYOFcOUoCauWIV3IyY3DZgDMwdiIOmfnCOQoCEHcznYsj1T4IBFgvN35pO imuIBker29PwigpI+AKRW4jxVQ/2hODShSCxMllCOjsB4VMVzdK9t2eRTOUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1Z8MlbX1GqpBwlk0AaaVL5ES/UwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJdN7tdDD5OmNs9MfqcNPraGSPxEJx8R86s LSbrb+CUlOBDtjN3vwQrZ3X8jICOi78pAYuTbQMewUvl+p6pNBzU56h5uw9kS/j5 BG637savYn4Jjgm9bcT65ufSFROYqcVcfNWxJ0aqNjj7aq2J1tm9gPpwcKAj183X S6ibpz6vE1a6AFA4meOBdZrsPGQD5ZDsWYSRnr1ycO1wgGUPvJt+RMh/6SAMr64B Qv0z4hUS4hQiUpbVSkicvEThV4Boy72ibZ6nwiIVDX0d3JAUfjtbwyVYbxCtnn0h osHLeSNNX6CZFbf/wvX/JSGuo+3cQ6qmQcj7n+xw5gaB22+ZP+0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:24 2026 by rpki-client