$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: m/kwqyF9EvQ2fVyRaK49VerwjvPbxZ7SzNlqDqRgBps= Subject key identifier: 1F:36:E5:E3:F4:A3:72:4D:B6:04:5C:CE:48:10:0D:E5:43:69:E2:9F Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 62938F8B3D6C969438CDCE6038C63FBE57FC31F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: 0152 Signing time: Sat 28 Feb 2026 11:01:12 +0000 Manifest this update: Sat 28 Feb 2026 10:56:12 +0000 Manifest next update: Tue 03 Mar 2026 22:20:12 +0000 Files and hashes: 1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: 1ftcq0ke6NnfXt91v/LBZRnqq7CJr94jUy6E/R6CvTs=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: 8MQEMqhN7Q9xL1VnnFKndGDw/o7VojjkZHwwL7Jl284=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:93:8f:8b:3d:6c:96:94:38:cd:ce:60:38:c6:3f:be:57:fc:31:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Feb 28 10:56:12 2026 GMT Not After : Mar 3 22:20:12 2026 GMT Subject: CN=1F36E5E3F4A3724DB6045CCE48100DE54369E29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:73:0c:e5:a5:b0:9f:e3:f9:d2:59:e1:54: e4:21:d1:1b:38:ea:cc:b2:6a:61:72:86:ee:b6:23: 9b:9d:be:cf:b6:64:a0:42:f7:8c:62:56:85:88:73: ed:66:9e:11:a0:4e:4f:66:4d:4d:08:71:21:67:6f: ed:d7:d4:e3:1e:31:92:2c:71:98:bc:18:32:5c:e3: d0:59:54:5c:62:e0:a7:28:75:b6:28:17:a3:06:fe: 4b:64:f6:c6:eb:1d:f0:fa:67:05:cc:1b:1f:25:2c: bf:84:1e:4d:ce:e0:e4:03:04:c8:f8:49:bd:51:df: dc:cd:c4:3d:37:b6:9e:e7:91:7c:c4:c1:be:19:33: d3:31:b5:e8:64:46:a8:88:bf:fd:2f:8f:ab:87:3e: 10:ca:d0:13:99:28:7a:cb:74:60:f7:66:d2:60:26: 37:b6:4f:63:76:59:dc:ef:3c:4d:8a:3d:6f:f7:cc: 18:9b:c4:e9:fa:cd:70:f1:56:5a:83:5d:49:bc:79: 0f:c6:7c:83:7b:a9:ec:99:cd:5d:3b:25:5c:9a:1a: 13:51:e4:4e:2b:d6:fb:07:46:08:5c:5c:71:4b:6b: 30:0e:5a:f0:cc:99:cc:ad:ef:1d:3a:73:4c:a8:ee: 4d:2e:f8:9c:63:54:8f:bc:27:86:a8:aa:37:41:4d: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:E5:E3:F4:A3:72:4D:B6:04:5C:CE:48:10:0D:E5:43:69:E2:9F X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:28:27:e2:4e:9d:4d:45:aa:52:83:61:cb:c9:4d:c2:c5:75: 47:eb:1b:9c:63:82:73:ec:20:fa:5e:61:8a:2e:de:66:27:82: 2a:61:a9:56:2f:20:97:86:4c:d9:e8:10:58:98:3a:37:f2:5d: df:94:76:9b:8b:9b:20:d8:f3:78:78:a0:d6:5b:75:74:94:59: 9f:71:aa:25:79:03:10:7c:9c:23:c2:a7:12:04:5d:42:01:f4: 78:ef:75:b9:27:24:8f:00:66:1b:fc:b5:d2:b0:4d:b5:3c:31: d3:27:92:84:df:32:a0:ba:8e:d6:d5:ef:c7:e6:37:26:48:95: c7:a0:4b:45:20:3d:2d:fb:56:68:42:ca:0b:bd:71:20:4b:7e: 8a:3b:90:41:51:6f:a8:ae:56:cd:05:f6:2c:c3:8d:3c:d3:50: f7:ff:91:72:51:ee:f1:55:73:ac:17:18:de:a8:d9:34:43:cd: b9:bc:cd:4f:7f:d2:15:27:8e:71:c6:72:8f:7e:f5:68:86:34: 62:20:d8:cd:4e:89:38:9a:4c:01:8b:45:61:4e:01:0e:10:db: ec:dd:52:e8:09:0a:05:61:8f:89:7a:da:68:5a:5b:e0:60:4d: f2:8e:8e:67:42:b1:ac:48:d5:14:fd:2e:60:ca:96:5b:51:32: 56:4a:7a:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpOPiz1slpQ4zc5gOMY/vlf8MfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNjAyMjgxMDU2MTJaFw0yNjAzMDMyMjIwMTJaMDMxMTAvBgNV BAMTKDFGMzZFNUUzRjRBMzcyNERCNjA0NUNDRTQ4MTAwREU1NDM2OUUyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwXMM5aWwn+P50lnhVOQh0Rs4 6syyamFyhu62I5udvs+2ZKBC94xiVoWIc+1mnhGgTk9mTU0IcSFnb+3X1OMeMZIs cZi8GDJc49BZVFxi4KcodbYoF6MG/ktk9sbrHfD6ZwXMGx8lLL+EHk3O4OQDBMj4 Sb1R39zNxD03tp7nkXzEwb4ZM9MxtehkRqiIv/0vj6uHPhDK0BOZKHrLdGD3ZtJg Jje2T2N2WdzvPE2KPW/3zBibxOn6zXDxVlqDXUm8eQ/GfIN7qeyZzV07JVyaGhNR 5E4r1vsHRghcXHFLazAOWvDMmcyt7x06c0yo7k0u+JxjVI+8J4aoqjdBTQWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzbl4/Sjck22BFzOSBAN5UNp4p8wHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAoJ+JOnU1FqlKDYcvJTcLFdUfrG5xjgnPs IPpeYYou3mYngiphqVYvIJeGTNnoEFiYOjfyXd+UdpuLmyDY83h4oNZbdXSUWZ9x qiV5AxB8nCPCpxIEXUIB9HjvdbknJI8AZhv8tdKwTbU8MdMnkoTfMqC6jtbV78fm NyZIlcegS0UgPS37VmhCygu9cSBLfoo7kEFRb6iuVs0F9izDjTzTUPf/kXJR7vFV c6wXGN6o2TRDzbm8zU9/0hUnjnHGco9+9WiGNGIg2M1OiTiaTAGLRWFOAQ4Q2+zd UugJCgVhj4l62mhaW+BgTfKOjmdCsaxI1RT9LmDKlltRMlZKeto= -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:16 2026 by rpki-client