$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: IT6JbByDF2bK2nhPRlseFT4wFOPMb/AoWf8sKvklVTQ= Subject key identifier: 13:C0:97:03:38:EC:07:49:F1:6F:AE:0E:5F:F6:C3:65:7E:6E:66:D3 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 2BFCAC6E089D653C9531485A7485557A3A3052D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 0568 Signing time: Fri 17 Apr 2026 05:10:25 +0000 Manifest this update: Fri 17 Apr 2026 05:05:25 +0000 Manifest next update: Mon 20 Apr 2026 10:30:25 +0000 Files and hashes: 1: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) 2: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 3: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: JMO2L2Muzo7fH4aPNXxLHA2ydNTA2mpQfxFhLxQ3owk=) 4: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fc:ac:6e:08:9d:65:3c:95:31:48:5a:74:85:55:7a:3a:30:52:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Apr 17 05:05:25 2026 GMT Not After : Apr 20 10:30:25 2026 GMT Subject: CN=13C0970338EC0749F16FAE0E5FF6C3657E6E66D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:e0:5b:c2:ef:5d:6c:0a:d5:a5:f7:9a:cc: d1:a2:88:b8:78:83:63:37:45:75:a1:0c:79:1d:2c: c1:5b:25:4a:c3:e2:0d:f0:b7:38:41:ce:5c:1f:a4: 76:e8:df:b9:16:a0:53:d1:45:ab:24:43:cb:b4:44: 53:03:84:a0:bd:a0:42:9b:93:32:57:f3:3a:68:b2: 42:ce:ed:9e:eb:13:98:62:89:cf:c4:68:76:a1:fc: dc:80:de:59:38:83:08:c4:9b:46:8a:fd:ad:36:a1: 8b:9a:11:a2:4e:9c:c8:9c:21:d6:e1:10:ab:d7:9f: 4e:e5:e4:70:6a:bf:e5:74:9a:2e:2b:cc:9f:05:eb: 34:e5:ce:4e:b5:19:6b:5c:55:a4:d8:39:d5:16:86: 36:c6:ff:55:81:93:1d:16:e6:c4:e9:19:c1:e5:f3: 90:a7:48:16:5f:43:6e:ab:bf:16:41:bb:e0:ad:3b: 1f:ae:a4:24:e7:71:d2:76:47:53:0c:f5:7a:7e:78: f9:02:6a:81:26:ff:6e:98:4f:dd:f5:c8:d4:27:5d: 88:0d:0d:e1:f7:44:c0:b4:16:0a:20:e4:4b:77:0b: 4c:d9:fd:a0:a2:da:1b:55:59:5e:4c:37:fe:3f:68: 6c:ed:58:ef:5f:81:a4:40:73:69:4a:48:69:5c:6d: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C0:97:03:38:EC:07:49:F1:6F:AE:0E:5F:F6:C3:65:7E:6E:66:D3 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:30:cd:c2:8f:30:10:9d:e6:61:73:75:b8:18:b7:d6:9a:50: 21:b2:f5:f8:41:63:2b:8b:7b:02:19:fe:73:61:69:0e:7d:f9: 2c:1e:c0:cf:c3:30:ac:93:e9:8e:d4:50:07:26:e8:3f:4b:40: 58:62:db:bf:df:c1:19:c5:9d:c4:09:db:61:38:e9:6d:95:40: e0:ce:94:d0:45:b3:5f:23:74:50:72:dd:cb:4a:19:f9:d5:e7: a8:2d:56:b6:9c:bd:e3:91:36:0f:cb:17:5a:45:17:ef:5b:d9: 1d:45:26:5b:9a:d4:96:b1:83:e7:f1:79:34:28:00:b9:f8:03: d5:e1:e9:a4:07:64:5e:f5:da:38:f6:96:54:d0:3e:b3:ef:95: 97:75:e2:f1:79:32:00:64:b2:8a:3c:37:8d:e4:a0:0f:0c:08: b0:4d:87:22:4d:cb:db:d5:8e:cb:f3:cd:df:d1:a6:55:fe:c5: 8c:a0:43:60:93:10:12:0f:d0:08:a8:3a:18:d5:a9:af:5b:5e: ff:91:69:58:8d:67:1c:50:7a:9f:b8:5e:f5:ec:77:54:2c:86: 3f:b3:c6:9b:37:cb:0f:29:ab:dc:2d:8e:0d:11:ce:04:3d:05: b8:34:7c:22:8b:4d:83:97:6b:25:c3:a0:e5:06:d3:3e:e7:86: 89:6e:74:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/ysbgidZTyVMUhadIVVejowUtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNjA0MTcwNTA1MjVaFw0yNjA0MjAxMDMwMjVaMDMxMTAvBgNV BAMTKDEzQzA5NzAzMzhFQzA3NDlGMTZGQUUwRTVGRjZDMzY1N0U2RTY2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUeBbwu9dbArVpfeazNGiiLh4 g2M3RXWhDHkdLMFbJUrD4g3wtzhBzlwfpHbo37kWoFPRRaskQ8u0RFMDhKC9oEKb kzJX8zposkLO7Z7rE5hiic/EaHah/NyA3lk4gwjEm0aK/a02oYuaEaJOnMicIdbh EKvXn07l5HBqv+V0mi4rzJ8F6zTlzk61GWtcVaTYOdUWhjbG/1WBkx0W5sTpGcHl 85CnSBZfQ26rvxZBu+CtOx+upCTncdJ2R1MM9Xp+ePkCaoEm/26YT931yNQnXYgN DeH3RMC0Fgog5Et3C0zZ/aCi2htVWV5MN/4/aGztWO9fgaRAc2lKSGlcbePpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8CXAzjsB0nxb64OX/bDZX5uZtMwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEwzcKPMBCd5mFzdbgYt9aaUCGy9fhBYyuL ewIZ/nNhaQ59+SwewM/DMKyT6Y7UUAcm6D9LQFhi27/fwRnFncQJ22E46W2VQODO lNBFs18jdFBy3ctKGfnV56gtVracveORNg/LF1pFF+9b2R1FJlua1Jaxg+fxeTQo ALn4A9Xh6aQHZF712jj2llTQPrPvlZd14vF5MgBksoo8N43koA8MCLBNhyJNy9vV jsvzzd/RplX+xYygQ2CTEBIP0AioOhjVqa9bXv+RaViNZxxQep+4XvXsd1Qshj+z xps3yw8pq9wtjg0RzgQ9Bbg0fCKLTYOXayXDoOUG0z7nholudIY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:09:15 2026 by rpki-client