$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: S2fMydsfLTezjkmaLM8uVDoXANdHRJ+bdAd5TbjYCjc= Subject key identifier: 72:0D:88:B0:A5:57:57:52:7A:91:76:0B:E1:4B:6B:3A:D0:B8:69:40 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 69FD1597C66375B4BC0BBF79C65C3D36D11393D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: A8 Signing time: Mon 02 Mar 2026 11:12:36 +0000 Manifest this update: Mon 02 Mar 2026 11:07:36 +0000 Manifest next update: Thu 05 Mar 2026 18:49:36 +0000 Files and hashes: 1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: FzKL1BFJPdDrl5OjMtkmpJOPrjr5ihGYOj0qfmxoc+Y=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: FoxdZHJrEp7+nFUQtWkPulj2p2oThQSviqn5PbYR67E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fd:15:97:c6:63:75:b4:bc:0b:bf:79:c6:5c:3d:36:d1:13:93:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Mar 2 11:07:36 2026 GMT Not After : Mar 5 18:49:36 2026 GMT Subject: CN=720D88B0A55757527A91760BE14B6B3AD0B86940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:f7:29:cf:02:ca:16:b1:32:6c:f8:c0:dd: 47:16:91:b3:85:84:07:a6:9a:51:7d:89:43:5b:b6: fc:41:01:c8:15:58:1f:5f:0c:a3:2a:8e:16:cc:6c: 79:02:ca:c9:35:66:5e:6b:6f:e8:00:f1:6f:17:7d: f9:a2:c7:b7:34:14:54:55:fa:09:da:76:fd:3c:22: 5a:d8:2b:52:a9:e1:e8:78:4b:6f:1a:a2:4c:57:e2: d2:12:17:15:7a:a4:5b:32:75:f1:86:f1:0b:f8:4c: b5:a6:f1:5d:84:7f:66:25:51:64:e6:0a:7c:0c:25: 5e:b5:3d:c5:c2:49:24:e0:19:cf:9f:90:29:cc:44: 12:43:63:1a:be:42:1e:cc:71:ad:5a:7d:ab:67:07: 7f:b1:6c:29:d6:7d:f3:58:cc:5f:48:5c:09:1f:89: 19:44:f6:5c:17:c5:dd:c8:b6:9e:d4:a7:0c:bc:2b: 1d:6e:b4:03:55:28:29:0d:80:ca:36:90:72:b4:da: 39:ef:3e:0a:55:d2:40:75:cc:b0:3a:8c:33:a0:e7: 6a:21:97:3a:97:12:d5:81:2b:14:de:31:c5:8b:79: 32:03:d9:1f:d0:bc:a2:7e:ba:db:0f:e3:5b:2a:c9: 2f:47:5e:c8:40:da:06:c2:65:d1:6c:4f:e1:e5:77: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0D:88:B0:A5:57:57:52:7A:91:76:0B:E1:4B:6B:3A:D0:B8:69:40 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:16:1e:9c:08:34:c5:c2:5b:7e:35:70:1e:06:17:e6:9c:d2: 2e:74:2a:d9:7d:21:ea:65:b2:d8:3a:52:4e:5d:f9:e8:73:9c: c3:5e:19:ed:02:93:1c:42:b3:51:ad:d8:c4:4e:99:7f:76:4b: c5:33:22:56:29:f3:ef:ae:f3:d1:02:24:2a:4a:25:e9:4c:2b: 54:ad:90:a6:29:b2:c1:cf:13:cc:25:48:f4:3d:4e:fe:2e:95: 99:19:90:08:98:df:94:02:2c:6d:13:1a:b9:a4:98:81:ca:31: f9:b4:92:2f:6a:16:25:4d:21:dd:47:ac:12:bd:9d:34:d5:02: de:e1:6a:79:bf:de:15:4e:5b:58:d4:43:dd:27:b3:52:f6:cb: 1d:1b:37:9b:72:36:e3:db:39:ee:af:df:7d:7f:1b:c1:bc:22: 18:dd:2b:a8:04:a1:85:ea:e6:9c:76:38:9f:2c:84:af:e0:e3: 26:19:f6:6b:b9:4f:97:43:2b:cd:de:df:a8:40:fc:82:57:5d: c1:62:46:5a:c3:06:c1:31:56:2a:3b:4c:1e:87:12:15:ba:0a: 68:d2:73:9d:9b:c6:c6:5a:4c:df:af:e0:4a:8b:5a:8a:78:32: c1:65:49:a1:76:37:b2:a8:13:03:6a:30:5b:c7:b1:93:e2:5f: 81:52:e1:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaf0Vl8ZjdbS8C795xlw9NtETk9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNjAzMDIxMTA3MzZaFw0yNjAzMDUxODQ5MzZaMDMxMTAvBgNV BAMTKDcyMEQ4OEIwQTU1NzU3NTI3QTkxNzYwQkUxNEI2QjNBRDBCODY5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JfcpzwLKFrEybPjA3UcWkbOF hAemmlF9iUNbtvxBAcgVWB9fDKMqjhbMbHkCysk1Zl5rb+gA8W8Xffmix7c0FFRV +gnadv08IlrYK1Kp4eh4S28aokxX4tISFxV6pFsydfGG8Qv4TLWm8V2Ef2YlUWTm CnwMJV61PcXCSSTgGc+fkCnMRBJDYxq+Qh7Mca1afatnB3+xbCnWffNYzF9IXAkf iRlE9lwXxd3Itp7Upwy8Kx1utANVKCkNgMo2kHK02jnvPgpV0kB1zLA6jDOg52oh lzqXEtWBKxTeMcWLeTID2R/QvKJ+utsP41sqyS9HXshA2gbCZdFsT+Hld6RrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcg2IsKVXV1J6kXYL4UtrOtC4aUAwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcWHpwINMXCW341cB4GF+ac0i50Ktl9Iepl stg6Uk5d+ehznMNeGe0CkxxCs1Gt2MROmX92S8UzIlYp8++u89ECJCpKJelMK1St kKYpssHPE8wlSPQ9Tv4ulZkZkAiY35QCLG0TGrmkmIHKMfm0ki9qFiVNId1HrBK9 nTTVAt7hanm/3hVOW1jUQ90ns1L2yx0bN5tyNuPbOe6v331/G8G8IhjdK6gEoYXq 5px2OJ8shK/g4yYZ9mu5T5dDK83e36hA/IJXXcFiRlrDBsExVio7TB6HEhW6CmjS c52bxsZaTN+v4EqLWop4MsFlSaF2N7KoEwNqMFvHsZPiX4FS4fM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:21 2026 by rpki-client