$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: ge4b6nxFz8bkVWtl7RuqNc74VZXWs0HKsE30Vkw8Lbk= Subject key identifier: 27:4A:E7:A1:73:9D:5A:20:A4:B1:A8:6B:80:3C:B5:64:63:1B:57:00 Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 7C46489AD8DEC6D3FA483EA6939DC0A3BB33560A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 056A Signing time: Mon 02 Mar 2026 13:32:28 +0000 Manifest this update: Mon 02 Mar 2026 13:27:28 +0000 Manifest next update: Thu 05 Mar 2026 23:11:28 +0000 Files and hashes: 1: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: iIVLCl6hBNTFss5NBhc/y/ALhbWiKpfNj1Jq8TdQMEg=) 2: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 2WIOYX46p74zIiYunJq4TWtX4WOqlO2yPDX3Ww98WUc=) 3: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: heGyyo+ETT8V3dgjREKU/fLp6uNkHbiH2GVik5PI5cY=) 4: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:46:48:9a:d8:de:c6:d3:fa:48:3e:a6:93:9d:c0:a3:bb:33:56:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Mar 2 13:27:28 2026 GMT Not After : Mar 5 23:11:28 2026 GMT Subject: CN=274AE7A1739D5A20A4B1A86B803CB564631B5700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:86:c2:70:12:6a:b2:d3:cf:31:fa:35:92: 35:bf:9f:c4:cc:4f:bc:86:64:a7:9b:21:1b:c0:fe: 37:09:26:d2:0d:68:ca:04:b2:37:1d:33:b4:00:56: 4c:97:e4:fa:79:20:92:8b:65:45:68:0e:d0:f3:42: 4c:66:10:a7:0d:dc:fb:0b:dd:d0:81:88:d9:42:78: 5b:b3:ef:2b:b3:eb:fe:a8:56:a9:c4:0d:e8:88:0e: 4f:81:02:82:82:fb:83:68:18:af:78:36:1a:c0:c6: ee:f0:ec:a5:e9:67:7c:de:26:1c:58:86:1f:fe:b6: 2d:bc:d8:00:73:d4:f6:19:2b:3b:bc:a4:d8:a7:0f: 4f:a2:97:f7:6d:3f:51:07:bd:79:13:4b:e3:bd:34: b2:80:d2:6c:a8:f9:df:4a:84:ba:8c:f3:0f:21:63: 7c:06:05:e3:24:cc:f7:2c:b2:7a:bf:10:c2:72:cc: cb:71:e4:6c:b8:01:ca:b5:31:8e:dd:82:b4:c6:c7: 10:32:de:93:25:98:71:3f:48:7e:4d:32:75:32:f9: da:a3:2c:78:85:40:bc:0a:42:df:c7:f2:58:21:ec: d4:42:65:c1:44:ab:f3:dd:cb:48:df:02:d2:50:74: ea:24:6c:b3:24:0f:72:28:a4:0a:30:44:ec:7e:67: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:E7:A1:73:9D:5A:20:A4:B1:A8:6B:80:3C:B5:64:63:1B:57:00 X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:67:07:5e:45:ee:f2:c1:f4:e4:16:80:9d:d0:9a:50:fe:33: a5:3c:bc:19:67:7e:22:ca:e8:41:45:15:1f:a6:b1:61:f2:50: bc:fa:cd:2c:64:17:65:89:10:aa:54:58:50:49:c9:b4:89:4b: 5b:1b:0f:a5:38:d8:fc:30:24:8d:4f:aa:51:32:ea:a9:b5:4b: ca:a9:ed:7e:e9:2a:5e:95:52:ea:60:ea:a5:38:26:5a:fd:d1: d1:98:8f:c6:d7:4a:80:96:39:a6:6c:ce:45:d6:a2:5a:61:c1: ea:bc:e3:8e:4e:00:6d:72:1a:1f:fd:f0:da:93:4b:a2:38:22: 93:90:c9:a3:01:24:8d:79:c2:c4:7f:11:ea:23:95:e7:a8:84: 0d:c4:f4:8e:52:07:89:38:e2:f3:fe:8d:b0:c7:63:dc:e8:c1: 40:4f:d2:1c:09:78:09:16:db:77:e0:82:f8:5f:3e:96:bd:83: b7:21:1b:c9:fe:ea:8a:0c:c1:10:df:d3:2b:e8:12:f3:fa:5b: df:49:2e:f8:f9:31:fb:56:6a:1f:91:0d:40:ab:cb:33:c3:ea: 23:6f:92:32:a9:7a:8f:d9:61:7f:b1:82:97:50:9b:0d:3a:52: 90:5c:eb:8d:21:e9:ea:17:51:6e:01:f1:93:44:df:ef:f1:19: df:22:a3:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEZImtjextP6SD6mk53Ao7szVgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNjAzMDIxMzI3MjhaFw0yNjAzMDUyMzExMjhaMDMxMTAvBgNV BAMTKDI3NEFFN0ExNzM5RDVBMjBBNEIxQTg2QjgwM0NCNTY0NjMxQjU3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zYbCcBJqstPPMfo1kjW/n8TM T7yGZKebIRvA/jcJJtINaMoEsjcdM7QAVkyX5Pp5IJKLZUVoDtDzQkxmEKcN3PsL 3dCBiNlCeFuz7yuz6/6oVqnEDeiIDk+BAoKC+4NoGK94NhrAxu7w7KXpZ3zeJhxY hh/+ti282ABz1PYZKzu8pNinD0+il/dtP1EHvXkTS+O9NLKA0myo+d9KhLqM8w8h Y3wGBeMkzPcssnq/EMJyzMtx5Gy4Acq1MY7dgrTGxxAy3pMlmHE/SH5NMnUy+dqj LHiFQLwKQt/H8lgh7NRCZcFEq/Pdy0jfAtJQdOokbLMkD3IopAowROx+Z5jdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ0rnoXOdWiCksahrgDy1ZGMbVwAwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhnB15F7vLB9OQWgJ3QmlD+M6U8vBlnfiLK 6EFFFR+msWHyULz6zSxkF2WJEKpUWFBJybSJS1sbD6U42PwwJI1PqlEy6qm1S8qp 7X7pKl6VUupg6qU4Jlr90dGYj8bXSoCWOaZszkXWolphweq8445OAG1yGh/98NqT S6I4IpOQyaMBJI15wsR/EeojleeohA3E9I5SB4k44vP+jbDHY9zowUBP0hwJeAkW 23fggvhfPpa9g7chG8n+6ooMwRDf0yvoEvP6W99JLvj5MftWah+RDUCryzPD6iNv kjKpeo/ZYX+xgpdQmw06UpBc640h6eoXUW4B8ZNE3+/xGd8io4g= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:40 2026 by rpki-client