$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: 2xjofWFWV3UaIjUEuALGcKU3pgy9y5nnioowMXF/DS4= Subject key identifier: 5C:2D:18:7D:F2:10:D1:0B:2A:6F:1E:5E:13:E1:FB:A4:EB:13:EB:B0 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 2F372C1E9CB5C85EE1CCE6380E98A11F56AA262C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: A7 Signing time: Sat 28 Feb 2026 05:02:29 +0000 Manifest this update: Sat 28 Feb 2026 04:57:29 +0000 Manifest next update: Tue 03 Mar 2026 11:08:29 +0000 Files and hashes: 1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: HxlVuzs7eK/QIb3He+7HeuYWOOv2bUOwuCe9xTCpWcM=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: FoxdZHJrEp7+nFUQtWkPulj2p2oThQSviqn5PbYR67E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:37:2c:1e:9c:b5:c8:5e:e1:cc:e6:38:0e:98:a1:1f:56:aa:26:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Feb 28 04:57:29 2026 GMT Not After : Mar 3 11:08:29 2026 GMT Subject: CN=5C2D187DF210D10B2A6F1E5E13E1FBA4EB13EBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:78:80:b9:f8:f7:8f:60:be:0e:f3:e7:13:ae: 75:0e:af:61:1d:47:0c:57:4d:fe:1e:17:4f:88:44: 49:8b:17:b1:47:e2:55:bc:ef:e8:bc:87:07:7b:9c: 3c:b9:26:a3:3b:c1:7d:dc:98:90:e8:d1:6f:a8:6c: 2a:fb:3b:51:f9:85:1d:0c:da:73:ae:b3:9b:9b:e8: e3:cd:47:92:f7:40:86:a8:b8:0a:98:46:3d:04:c1: 28:a7:f9:cc:21:cd:b1:00:3f:0d:c6:88:fb:fe:02: 73:5e:af:3f:2d:bf:70:3c:e9:8f:2e:10:a7:2d:06: e4:58:05:22:b4:41:b3:a8:d7:58:55:0f:9a:2b:4f: 53:43:57:f1:9f:87:7a:57:27:5d:3c:15:d0:0c:4c: 0d:b2:e7:26:7f:b9:a7:df:ce:ca:88:d7:c2:aa:b8: 9c:ad:a1:19:38:42:12:10:df:77:fa:45:31:77:27: 05:51:48:d3:d6:69:15:ce:a2:d7:80:e5:8a:26:c1: 17:b8:f2:38:78:52:b5:85:e5:a2:d7:a6:87:76:e1: ca:e7:be:c1:27:ba:e8:64:d3:1d:18:c1:d1:11:ff: c6:b1:01:ba:5c:80:54:d4:21:f9:9c:2e:71:40:7b: 32:ee:bf:5d:e6:0a:c1:b6:15:8c:8e:47:bb:ca:95: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2D:18:7D:F2:10:D1:0B:2A:6F:1E:5E:13:E1:FB:A4:EB:13:EB:B0 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8e:54:69:9b:7b:8d:a2:c4:72:1c:f7:d0:aa:9e:f3:26:ec: 22:1f:17:f7:86:07:e9:84:6e:40:09:10:84:ef:7f:8a:86:ae: 35:a1:a8:71:fe:ee:08:84:65:89:b1:56:7e:74:ff:d9:85:34: 7d:5b:f0:a4:51:ed:67:0f:d8:cb:bf:c2:7f:1f:1f:f0:bf:e8: c3:0b:94:c6:0d:2c:a6:85:24:84:da:cd:93:e0:b5:4d:bd:5f: 7c:f0:b0:be:97:02:83:a7:14:29:f3:93:84:ea:6b:e0:37:a0: e6:f8:6c:ea:bc:40:37:ec:8d:ab:35:59:b4:2b:45:35:f3:5e: c0:97:c3:7f:b1:fc:5b:a1:63:15:b3:9d:0c:3c:e5:b1:9c:34: 2f:49:67:e2:c0:31:0f:36:a4:ce:3f:73:5b:3c:5d:07:dc:5c: 8d:3e:3b:66:84:8e:45:da:d3:9e:52:4e:ca:44:e9:1b:37:ff: 21:fa:72:04:50:25:0e:8b:a0:00:d2:93:07:9c:f9:ce:3b:f7: 64:4d:12:24:83:33:20:d1:83:01:6c:70:76:97:51:32:47:85: b4:71:dd:dd:d2:98:61:41:34:e1:3d:dd:d5:fe:91:5d:12:eb: 6a:7f:6b:11:2c:2e:38:d5:a8:2c:fc:7d:ef:f5:a0:42:b5:43: df:ff:f6:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzcsHpy1yF7hzOY4DpihH1aqJiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNjAyMjgwNDU3MjlaFw0yNjAzMDMxMTA4MjlaMDMxMTAvBgNV BAMTKDVDMkQxODdERjIxMEQxMEIyQTZGMUU1RTEzRTFGQkE0RUIxM0VCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0eIC5+PePYL4O8+cTrnUOr2Ed RwxXTf4eF0+IREmLF7FH4lW87+i8hwd7nDy5JqM7wX3cmJDo0W+obCr7O1H5hR0M 2nOus5ub6OPNR5L3QIaouAqYRj0EwSin+cwhzbEAPw3GiPv+AnNerz8tv3A86Y8u EKctBuRYBSK0QbOo11hVD5orT1NDV/Gfh3pXJ108FdAMTA2y5yZ/uaffzsqI18Kq uJytoRk4QhIQ33f6RTF3JwVRSNPWaRXOoteA5YomwRe48jh4UrWF5aLXpod24crn vsEnuuhk0x0YwdER/8axAbpcgFTUIfmcLnFAezLuv13mCsG2FYyOR7vKlcyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXC0YffIQ0Qsqbx5eE+H7pOsT67AwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6OVGmbe42ixHIc99CqnvMm7CIfF/eGB+mE bkAJEITvf4qGrjWhqHH+7giEZYmxVn50/9mFNH1b8KRR7WcP2Mu/wn8fH/C/6MML lMYNLKaFJITazZPgtU29X3zwsL6XAoOnFCnzk4Tqa+A3oOb4bOq8QDfsjas1WbQr RTXzXsCXw3+x/FuhYxWznQw85bGcNC9JZ+LAMQ82pM4/c1s8XQfcXI0+O2aEjkXa 055STspE6Rs3/yH6cgRQJQ6LoADSkwec+c4792RNEiSDMyDRgwFscHaXUTJHhbRx 3d3SmGFBNOE93dX+kV0S62p/axEsLjjVqCz8fe/1oEK1Q9//9ns= -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:48 2026 by rpki-client