$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: jcRXD80qUmfr5LqSOGiV8jRdZYl5CmlccR8RqaqIRAI= Subject key identifier: FA:28:EF:81:E6:C8:E5:02:72:E5:C1:18:C6:E5:75:F7:F2:CE:07:E6 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 3CA45D6F4F5657EC5E8FDBBC1F281944BC62D499 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 0553 Signing time: Sun 01 Mar 2026 05:10:06 +0000 Manifest this update: Sun 01 Mar 2026 05:05:06 +0000 Manifest next update: Wed 04 Mar 2026 07:08:06 +0000 Files and hashes: 1: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) 2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) 3: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 4: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: cE38S5Er7a4OTQjM/HJml/aFlrPvrHrctK0O4vZKOP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a4:5d:6f:4f:56:57:ec:5e:8f:db:bc:1f:28:19:44:bc:62:d4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Mar 1 05:05:06 2026 GMT Not After : Mar 4 07:08:06 2026 GMT Subject: CN=FA28EF81E6C8E50272E5C118C6E575F7F2CE07E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:38:fb:f4:d2:0b:4b:5d:a6:b3:1c:9b:53: 95:ca:c7:7e:11:1c:f9:ad:42:61:02:5d:d9:cb:a7: 59:39:4c:b8:3c:5e:b5:21:42:44:94:f4:f9:32:60: 58:95:8f:5f:a1:86:1b:de:e5:53:ea:86:9d:b5:ed: 19:3d:1d:8e:c3:0f:ba:b5:ed:29:89:0b:1e:7b:0c: 50:03:e5:fe:da:4e:e2:be:94:02:93:ff:44:e2:c8: ba:68:78:48:a1:41:1c:ba:a8:73:3c:31:d4:6f:65: 62:aa:21:96:2b:9e:8b:56:e4:55:14:f8:b3:99:47: bf:e8:e1:87:48:56:cf:8f:6b:dd:1e:7a:dd:94:63: 7a:41:94:6d:28:be:d1:11:9a:07:98:d0:9f:21:f9: 7c:17:72:30:6f:56:4b:7a:05:96:d4:5e:71:90:23: a5:09:a5:8b:1f:f4:7d:8b:21:55:84:c9:9c:ea:6b: 46:a6:31:a8:22:64:c6:34:0e:7d:78:78:83:59:f7: ad:d0:76:75:f2:b3:4c:23:26:82:11:f8:f0:fa:2a: 47:13:11:1e:62:95:c2:19:f2:a4:a4:2f:18:08:1e: 14:d0:84:4c:34:af:28:60:81:00:ce:06:19:c8:35: 9c:9b:f1:35:05:26:d0:93:fb:c0:db:80:d2:ea:f0: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:28:EF:81:E6:C8:E5:02:72:E5:C1:18:C6:E5:75:F7:F2:CE:07:E6 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5d:ec:a9:ca:f5:4b:59:cf:85:3f:e7:a0:23:d0:99:a4:71: 88:6e:72:75:eb:d6:2f:ed:fc:07:34:dc:8b:7a:74:78:02:fe: 43:40:3c:1b:cd:e6:db:2c:f8:8a:91:a6:53:19:25:21:06:a0: d6:85:17:bb:35:9f:dc:86:a6:33:97:c2:46:2e:c8:81:41:6e: 65:ed:97:e6:14:e8:ea:a9:bd:6b:16:75:32:05:fe:a2:a9:73: 31:7e:68:e8:38:58:3c:fa:2e:d7:cd:ac:58:96:21:12:90:dd: a3:f3:46:6c:59:dc:8f:c6:7a:77:3e:3b:c4:b1:94:5a:6c:39: f3:fc:3d:57:c4:14:b9:03:fc:78:b6:37:57:d4:0a:bf:61:39: 01:19:96:61:33:b9:0f:b7:9f:9b:b7:90:76:40:36:93:3d:6f: e0:f5:01:80:20:aa:af:65:5a:26:0a:d2:35:56:25:51:91:28: 6f:e2:93:6f:6f:90:c7:35:dc:0d:9f:d5:6c:da:f1:a3:dd:ed: 69:6f:c1:be:7f:a9:5b:ef:28:79:75:d6:a8:b1:6f:6c:6a:9b: 8f:30:85:1e:32:37:a2:e8:59:6d:b9:5d:42:10:aa:5b:48:5a: ef:8c:83:26:6b:44:c3:63:6a:de:1e:16:a6:51:f6:8b:30:8b: d5:44:25:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKRdb09WV+xej9u8HygZRLxi1JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNjAzMDEwNTA1MDZaFw0yNjAzMDQwNzA4MDZaMDMxMTAvBgNV BAMTKEZBMjhFRjgxRTZDOEU1MDI3MkU1QzExOEM2RTU3NUY3RjJDRTA3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17Dj79NILS12msxybU5XKx34R HPmtQmECXdnLp1k5TLg8XrUhQkSU9PkyYFiVj1+hhhve5VPqhp217Rk9HY7DD7q1 7SmJCx57DFAD5f7aTuK+lAKT/0TiyLpoeEihQRy6qHM8MdRvZWKqIZYrnotW5FUU +LOZR7/o4YdIVs+Pa90eet2UY3pBlG0ovtERmgeY0J8h+XwXcjBvVkt6BZbUXnGQ I6UJpYsf9H2LIVWEyZzqa0amMagiZMY0Dn14eINZ963QdnXys0wjJoIR+PD6KkcT ER5ilcIZ8qSkLxgIHhTQhEw0ryhggQDOBhnINZyb8TUFJtCT+8DbgNLq8EkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ijvgebI5QJy5cEYxuV19/LOB+YwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1d7KnK9UtZz4U/56Aj0JmkcYhucnXr1i/t /Ac03It6dHgC/kNAPBvN5tss+IqRplMZJSEGoNaFF7s1n9yGpjOXwkYuyIFBbmXt l+YU6OqpvWsWdTIF/qKpczF+aOg4WDz6LtfNrFiWIRKQ3aPzRmxZ3I/Genc+O8Sx lFpsOfP8PVfEFLkD/Hi2N1fUCr9hOQEZlmEzuQ+3n5u3kHZANpM9b+D1AYAgqq9l WiYK0jVWJVGRKG/ik29vkMc13A2f1Wza8aPd7Wlvwb5/qVvvKHl11qixb2xqm48w hR4yN6LoWW25XUIQqltIWu+MgyZrRMNjat4eFqZR9oswi9VEJbY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:47 2026 by rpki-client