$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft (raw, json) Hash identifier: w8SNiWcUrDsg/SdBSbXpQX2DnZ9XLEGmr4kyVVhiZj0= Subject key identifier: DB:AE:24:C4:7D:3F:1F:A8:8E:E9:25:6F:21:E9:13:39:1F:B9:FE:52 Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Certificate serial: 7DB3D03E435AE9ED7B7B4A8360E050A4213AA99D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft Manifest number: 011B Signing time: Thu 16 Apr 2026 03:41:58 +0000 Manifest this update: Thu 16 Apr 2026 03:36:58 +0000 Manifest next update: Sun 19 Apr 2026 09:10:58 +0000 Files and hashes: 1: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl (hash: KvFoS9EDNKXFTEZnEs2LkzDr3bZoX3njmmG6UAwaTHQ=) 2: 3136302e32322e31322e302f32342d3234203d3e20313532373935.roa (hash: kSF1VyQJjpek8Mf3gy+lWICO98IQh62K2L543jgKTUA=) 3: 3136302e32322e31332e302f32342d3234203d3e20313532373935.roa (hash: CjQ8LjHFMEFZAKqjfhXd2Dui1+KhZzwEUkNHDbRDo5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b3:d0:3e:43:5a:e9:ed:7b:7b:4a:83:60:e0:50:a4:21:3a:a9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Validity Not Before: Apr 16 03:36:58 2026 GMT Not After : Apr 19 09:10:58 2026 GMT Subject: CN=DBAE24C47D3F1FA88EE9256F21E913391FB9FE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:45:77:50:19:c9:d2:c3:3f:ac:17:80:22: 4e:14:59:ee:e0:cf:b8:5f:ea:75:4f:a2:93:6c:e1: 3e:93:c7:a8:90:cf:1f:96:5e:44:e7:e0:08:45:40: 93:9a:c4:8a:36:26:b9:8c:cc:fe:79:1a:7c:da:6d: e5:96:05:f6:92:fc:23:22:21:64:b3:71:cb:1d:7a: da:42:72:7f:a3:06:bd:57:c0:ff:1a:c9:b8:43:85: de:8a:40:b2:64:87:70:71:bb:b1:b4:be:b8:3d:30: ff:d9:0d:e3:19:00:91:46:e4:46:1e:ea:a9:2e:78: 52:d2:06:1b:74:91:ed:48:ee:9e:66:51:d2:2c:53: 8e:86:0c:e1:46:7b:cd:d0:24:98:0a:09:c8:87:73: 53:71:9d:58:fc:11:90:6b:8c:ea:95:2b:b0:a1:c1: d5:0f:bb:2a:5e:b7:29:ba:72:3f:61:75:5d:29:3d: 0d:11:e6:2d:61:0e:ac:b0:9b:d8:58:44:67:24:ca: 9d:96:28:05:11:1f:ba:5c:be:43:b7:ef:d0:1c:0b: 00:8d:b6:19:da:14:8f:df:a3:f7:cb:f3:d9:c5:ca: 20:d0:40:bd:0a:b2:0a:3e:a6:6d:78:52:bc:26:89: f1:c7:e2:5c:a3:da:f7:a1:f9:11:47:19:d4:a2:54: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AE:24:C4:7D:3F:1F:A8:8E:E9:25:6F:21:E9:13:39:1F:B9:FE:52 X509v3 Authority Key Identifier: keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f9:55:b8:58:af:a9:4a:c0:56:84:50:a2:b8:fb:57:0f:81: a4:4c:4d:7d:90:a7:0b:91:96:04:9f:b4:43:9d:2f:18:b9:5e: c8:d6:0f:57:de:29:6b:50:5c:07:a5:a2:2b:82:38:6a:5f:ba: 6a:24:48:8d:ce:25:41:76:82:54:6d:6f:d5:37:ed:52:12:d9: 55:d5:30:9a:62:95:8f:92:bb:23:cd:45:10:6d:8e:5d:d3:27: bc:91:8a:71:9e:49:d3:cb:82:c6:8f:64:83:7a:c9:03:b8:36: 50:b2:ef:0d:e4:11:e2:a1:b5:67:1b:c4:f2:91:45:02:aa:7e: 36:e6:2d:00:99:fa:e2:6a:e5:15:d2:1c:c7:1a:c8:24:4f:66: c9:5d:d9:f1:e9:3f:5c:8d:47:09:f2:5a:b9:71:d2:69:6e:bc: 56:a5:f8:f4:42:94:8a:d6:bb:eb:37:4c:b5:4b:f0:e9:0b:bc: 4e:ac:d3:9f:ab:e1:2b:75:d7:e2:95:6d:05:be:c6:55:cd:2e: 7f:cf:0b:78:25:32:2f:90:60:a8:93:1f:44:c7:5c:2b:69:86: 7f:39:ad:21:eb:3c:87:8d:e9:cf:db:2b:fd:25:89:ab:97:c4: 6d:e0:ba:e0:1f:14:ce:64:77:10:e0:ad:39:98:8c:4a:12:82: 0a:f9:70:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbPQPkNa6e17e0qDYOBQpCE6qZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdF MEU0RDA2OTAeFw0yNjA0MTYwMzM2NThaFw0yNjA0MTkwOTEwNThaMDMxMTAvBgNV BAMTKERCQUUyNEM0N0QzRjFGQTg4RUU5MjU2RjIxRTkxMzM5MUZCOUZFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMEV3UBnJ0sM/rBeAIk4UWe7g z7hf6nVPopNs4T6Tx6iQzx+WXkTn4AhFQJOaxIo2JrmMzP55GnzabeWWBfaS/CMi IWSzccsdetpCcn+jBr1XwP8aybhDhd6KQLJkh3Bxu7G0vrg9MP/ZDeMZAJFG5EYe 6qkueFLSBht0ke1I7p5mUdIsU46GDOFGe83QJJgKCciHc1NxnVj8EZBrjOqVK7Ch wdUPuypetym6cj9hdV0pPQ0R5i1hDqywm9hYRGckyp2WKAURH7pcvkO379AcCwCN thnaFI/fo/fL89nFyiDQQL0Ksgo+pm14UrwmifHH4lyj2veh+RFHGdSiVH4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU264kxH0/H6iO6SVvIekTOR+5/lIwHwYDVR0j BBgwFoAUWI3Q/OS8JDzJxtaK4E6EZ+Dk0GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMC81ODhERDBGQ0U0 QkMyNDNDQzlDNkQ2OEFFMDRFODQ2N0UwRTREMDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdFMEU0 RDA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzAvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0 NjdFMEU0RDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD5VbhYr6lKwFaEUKK4+1cPgaRMTX2QpwuR lgSftEOdLxi5XsjWD1feKWtQXAeloiuCOGpfumokSI3OJUF2glRtb9U37VIS2VXV MJpilY+SuyPNRRBtjl3TJ7yRinGeSdPLgsaPZIN6yQO4NlCy7w3kEeKhtWcbxPKR RQKqfjbmLQCZ+uJq5RXSHMcayCRPZsld2fHpP1yNRwnyWrlx0mluvFal+PRClIrW u+s3TLVL8OkLvE6s05+r4St11+KVbQW+xlXNLn/PC3glMi+QYKiTH0THXCtphn85 rSHrPIeN6c/bK/0liauXxG3guuAfFM5kdxDgrTmYjEoSggr5cB8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:48 2026 by rpki-client