$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft (raw, json) Hash identifier: hgHb/4D5GpCCp2YBq4UethRuC4juuNpm1tJtzDtUTLU= Subject key identifier: 03:BE:09:42:E0:51:A2:26:71:31:2B:52:3D:84:89:8C:B7:42:C4:6D Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Certificate serial: 3404961D245D1D0400061A226C9E044999BB8866 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft Manifest number: 0107 Signing time: Sun 01 Mar 2026 22:01:57 +0000 Manifest this update: Sun 01 Mar 2026 21:56:57 +0000 Manifest next update: Thu 05 Mar 2026 07:15:57 +0000 Files and hashes: 1: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl (hash: 7IKOKctd2dSYgc0oOL0D2ms21xLuXhrHH2MGUl+twfU=) 2: 3136302e32322e31332e302f32342d3234203d3e20313532373935.roa (hash: CjQ8LjHFMEFZAKqjfhXd2Dui1+KhZzwEUkNHDbRDo5c=) 3: 3136302e32322e31322e302f32342d3234203d3e20313532373935.roa (hash: kSF1VyQJjpek8Mf3gy+lWICO98IQh62K2L543jgKTUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:04:96:1d:24:5d:1d:04:00:06:1a:22:6c:9e:04:49:99:bb:88:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Validity Not Before: Mar 1 21:56:57 2026 GMT Not After : Mar 5 07:15:57 2026 GMT Subject: CN=03BE0942E051A22671312B523D84898CB742C46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:72:17:bc:c9:7a:54:26:40:13:66:15:d4: ba:e6:51:55:91:6c:16:4f:d6:98:49:2f:40:6e:7d: 1a:6b:5d:91:a7:08:df:08:5e:88:52:fd:a8:24:95: 44:96:95:a3:88:14:35:cc:67:d9:e5:c9:ba:e5:47: 2c:ef:93:d3:0e:8f:25:50:68:cc:b9:ba:28:6e:56: 9b:2c:b1:8b:73:d6:cc:57:00:fa:0c:73:af:e4:67: cc:ad:dd:2b:4a:19:e7:04:b4:be:e9:a9:b1:aa:0e: ad:af:7e:c5:35:0d:e2:b7:d6:ad:6e:6a:1a:e3:7a: ee:ad:fe:53:f5:1a:d6:05:6d:4b:3b:50:f1:06:6a: 35:81:c4:0d:c2:84:a5:8a:d6:3a:17:0a:85:9f:13: 93:4e:06:f5:68:87:32:0b:af:f8:8f:b3:78:0e:3c: 47:bb:e2:a9:98:af:b7:d2:5f:8a:62:bd:9a:c8:66: 2b:74:ad:8b:ca:9d:03:1a:fc:fd:21:30:21:97:02: d4:d6:88:c4:8d:1f:84:ee:93:af:88:4b:18:8e:65: 1e:24:d0:dd:28:6d:fb:b6:72:c5:12:07:9f:65:77: eb:7b:4e:57:f3:b3:44:0b:63:b6:92:6a:c4:37:0f: 2f:e8:0d:25:37:63:c5:5c:a3:70:5b:2d:59:ce:d1: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:09:42:E0:51:A2:26:71:31:2B:52:3D:84:89:8C:B7:42:C4:6D X509v3 Authority Key Identifier: keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:eb:bb:53:61:51:49:92:3a:47:8f:a9:9b:87:bc:d9:23:99: dc:99:eb:0d:42:1e:d2:70:a8:64:52:20:65:c6:4d:a8:c4:42: 74:28:22:f0:b7:01:af:5f:fd:50:3b:ac:27:aa:b9:d7:04:e6: 70:e1:ae:08:d4:31:1e:21:2e:98:cb:2c:8a:0d:b8:2a:00:bf: 32:d1:e4:c6:ab:27:4a:36:2f:eb:d7:96:76:2f:cd:aa:61:be: d9:75:1f:2e:fa:7e:aa:ad:d5:b9:8c:9a:52:0d:7b:ee:b0:be: 0a:c5:8c:f9:07:f6:a8:1c:36:0f:34:98:76:4a:fe:36:09:53: 3f:af:dd:c7:1c:5a:f8:81:98:17:19:9a:47:a5:50:2a:0e:b4: 60:97:a2:08:b0:94:29:41:56:a1:15:1e:de:14:bc:a0:31:dc: 48:5f:e4:72:1a:bd:58:d3:5b:47:17:ed:24:c0:d0:93:08:69: 7a:f0:6e:56:58:7c:00:b3:1d:34:33:1e:af:6e:f2:38:d4:d2: d9:15:b5:89:20:c6:17:13:a4:2d:0e:7d:ec:40:e8:b4:80:b1: 8e:54:5a:ea:1c:11:ff:33:27:1a:4c:ce:d5:75:57:64:17:87: a1:79:be:dc:3b:72:18:a9:9a:09:93:c1:a4:ff:c8:16:89:ee: 1c:4c:f4:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNASWHSRdHQQABhoibJ4ESZm7iGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdF MEU0RDA2OTAeFw0yNjAzMDEyMTU2NTdaFw0yNjAzMDUwNzE1NTdaMDMxMTAvBgNV BAMTKDAzQkUwOTQyRTA1MUEyMjY3MTMxMkI1MjNEODQ4OThDQjc0MkM0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMHIXvMl6VCZAE2YV1LrmUVWR bBZP1phJL0BufRprXZGnCN8IXohS/agklUSWlaOIFDXMZ9nlybrlRyzvk9MOjyVQ aMy5uihuVpsssYtz1sxXAPoMc6/kZ8yt3StKGecEtL7pqbGqDq2vfsU1DeK31q1u ahrjeu6t/lP1GtYFbUs7UPEGajWBxA3ChKWK1joXCoWfE5NOBvVohzILr/iPs3gO PEe74qmYr7fSX4pivZrIZit0rYvKnQMa/P0hMCGXAtTWiMSNH4Tuk6+ISxiOZR4k 0N0obfu2csUSB59ld+t7Tlfzs0QLY7aSasQ3Dy/oDSU3Y8Vco3BbLVnO0TtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA74JQuBRoiZxMStSPYSJjLdCxG0wHwYDVR0j BBgwFoAUWI3Q/OS8JDzJxtaK4E6EZ+Dk0GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMC81ODhERDBGQ0U0 QkMyNDNDQzlDNkQ2OEFFMDRFODQ2N0UwRTREMDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdFMEU0 RDA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzAvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0 NjdFMEU0RDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHru1NhUUmSOkePqZuHvNkjmdyZ6w1CHtJw qGRSIGXGTajEQnQoIvC3Aa9f/VA7rCequdcE5nDhrgjUMR4hLpjLLIoNuCoAvzLR 5MarJ0o2L+vXlnYvzaphvtl1Hy76fqqt1bmMmlINe+6wvgrFjPkH9qgcNg80mHZK /jYJUz+v3cccWviBmBcZmkelUCoOtGCXogiwlClBVqEVHt4UvKAx3Ehf5HIavVjT W0cX7STA0JMIaXrwblZYfACzHTQzHq9u8jjU0tkVtYkgxhcTpC0OfexA6LSAsY5U WuocEf8zJxpMztV1V2QXh6F5vtw7chipmgmTwaT/yBaJ7hxM9Jw= -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:46 2026 by rpki-client