$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: 9WK1GlhlnCijy7WAvUXTJxjNEyXDHJluPfRbmma1f7k= Subject key identifier: 1F:55:FF:E1:2F:EC:3C:E3:75:61:89:C9:A4:DE:C6:AD:37:64:C9:C8 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 1D098F0DE182054E4AE142F1920DC2323049D85B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 0337 Signing time: Sat 28 Feb 2026 16:52:26 +0000 Manifest this update: Sat 28 Feb 2026 16:47:26 +0000 Manifest next update: Tue 03 Mar 2026 18:40:26 +0000 Files and hashes: 1: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: BNkzeB5hRh7FsAPM9UBaqhrCM5rkYoDBITwELx6zzq4=) 2: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 3: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 4: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:09:8f:0d:e1:82:05:4e:4a:e1:42:f1:92:0d:c2:32:30:49:d8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Feb 28 16:47:26 2026 GMT Not After : Mar 3 18:40:26 2026 GMT Subject: CN=1F55FFE12FEC3CE3756189C9A4DEC6AD3764C9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:97:e0:f7:9f:c8:31:1f:12:48:b2:fd:ac: 73:f4:02:f5:f1:88:c9:5a:cd:85:0c:95:41:6b:21: e9:c8:59:95:ab:33:dd:1c:45:6f:d9:13:0b:f0:bd: 94:5e:8c:22:65:02:48:ca:cd:b7:8c:11:08:5a:43: 3f:0c:d3:96:fa:20:3a:e5:b0:f1:57:a4:c1:6a:77: 40:c3:c9:86:ac:38:bd:48:b9:bc:bb:89:81:27:29: 8b:7c:90:09:32:50:01:83:29:59:45:c6:fd:49:1a: 71:46:80:83:85:07:01:a4:29:c8:f7:86:54:1d:d2: b9:10:49:35:57:0e:d0:f1:4b:ac:ac:bd:5f:01:ae: e7:30:ae:e2:b4:9f:b7:fc:cd:f0:4b:14:5a:5a:d5: da:59:5a:9c:c3:33:5f:01:96:94:35:0e:a8:f1:41: f5:99:31:21:fc:25:10:7b:d3:33:7c:16:46:87:a1: 17:02:0f:6d:d8:1f:ad:0e:b5:21:97:4e:53:8f:f8: 10:96:2d:bd:8a:54:94:e7:4d:c2:9d:06:3e:58:fa: 6a:f1:7c:f4:ad:11:a4:33:bd:e6:f6:b7:8c:26:cb: 4b:ff:60:35:92:86:91:cd:73:4f:e2:16:d7:b5:96: dd:70:41:03:fe:57:4c:d4:a7:00:74:6c:de:67:97: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:FF:E1:2F:EC:3C:E3:75:61:89:C9:A4:DE:C6:AD:37:64:C9:C8 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c1:ea:c6:25:c3:07:58:b9:bf:bf:17:16:44:92:dc:f0:51: fd:e6:fb:4a:ea:63:71:5d:94:ef:71:ba:d4:31:10:66:0c:fd: ad:22:c1:d3:94:12:7e:e8:b5:ad:de:3c:fb:a6:cc:a4:6c:bc: e0:57:b1:2a:2f:64:1e:2c:53:0f:cd:ca:87:ce:dd:bc:2b:fd: 48:d0:be:27:6e:0d:2a:93:ab:99:88:78:70:b7:1d:ef:bd:6a: 15:3e:cf:94:a6:c0:91:bf:68:0b:5b:bc:a5:d3:0c:9a:c7:7e: 12:13:7d:20:cf:92:6d:03:0f:a0:24:4e:5d:ef:d2:d1:3b:02: 68:ca:97:ed:ff:c8:fa:6d:a5:41:03:9a:f8:8a:ea:4f:d1:e4: 72:bf:06:e5:00:12:35:be:5f:7e:dd:ee:b0:33:a9:12:ff:29: 05:76:a1:67:ba:c3:eb:70:a7:88:da:53:8b:e5:ca:6c:6a:9d: ad:71:70:6a:78:8a:8a:a7:5d:a1:4e:74:81:34:d0:b7:85:9c: e7:00:9a:9f:8b:31:33:fc:d7:4a:9d:85:bb:36:b6:d8:70:15: a7:d7:b8:86:b4:63:4c:d5:6b:a4:76:1e:1e:53:e4:a9:98:a3: 03:77:23:ce:f7:97:c1:22:0e:61:11:39:01:ae:4a:1e:3f:9d: f6:fb:ae:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQmPDeGCBU5K4ULxkg3CMjBJ2FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNjAyMjgxNjQ3MjZaFw0yNjAzMDMxODQwMjZaMDMxMTAvBgNV BAMTKDFGNTVGRkUxMkZFQzNDRTM3NTYxODlDOUE0REVDNkFEMzc2NEM5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeypfg95/IMR8SSLL9rHP0AvXx iMlazYUMlUFrIenIWZWrM90cRW/ZEwvwvZRejCJlAkjKzbeMEQhaQz8M05b6IDrl sPFXpMFqd0DDyYasOL1Iuby7iYEnKYt8kAkyUAGDKVlFxv1JGnFGgIOFBwGkKcj3 hlQd0rkQSTVXDtDxS6ysvV8BrucwruK0n7f8zfBLFFpa1dpZWpzDM18BlpQ1Dqjx QfWZMSH8JRB70zN8FkaHoRcCD23YH60OtSGXTlOP+BCWLb2KVJTnTcKdBj5Y+mrx fPStEaQzveb2t4wmy0v/YDWShpHNc0/iFte1lt1wQQP+V0zUpwB0bN5nl6N1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH1X/4S/sPON1YYnJpN7GrTdkycgwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrB6sYlwwdYub+/FxZEktzwUf3m+0rqY3Fd lO9xutQxEGYM/a0iwdOUEn7ota3ePPumzKRsvOBXsSovZB4sUw/NyofO3bwr/UjQ viduDSqTq5mIeHC3He+9ahU+z5SmwJG/aAtbvKXTDJrHfhITfSDPkm0DD6AkTl3v 0tE7AmjKl+3/yPptpUEDmviK6k/R5HK/BuUAEjW+X37d7rAzqRL/KQV2oWe6w+tw p4jaU4vlymxqna1xcGp4ioqnXaFOdIE00LeFnOcAmp+LMTP810qdhbs2tthwFafX uIa0Y0zVa6R2Hh5T5KmYowN3I873l8EiDmEROQGuSh4/nfb7rrI= -----END CERTIFICATE-----Generated at Mon Mar 2 15:34:12 2026 by rpki-client