$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: GCOEDV5B8pyV91P7I4dQQdaQrYEGvZqU16JhY1GK/9c= Subject key identifier: 56:68:D2:10:C9:09:A1:EF:66:8D:F4:7C:82:F7:D5:B2:12:4E:37:0D Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 2428BA523D2B8E2DBA95A763BA74FE6AAC207DC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: 0141 Signing time: Thu 16 Apr 2026 17:21:10 +0000 Manifest this update: Thu 16 Apr 2026 17:16:10 +0000 Manifest next update: Mon 20 Apr 2026 04:12:10 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: se2HXGKNNi7Ek+z5z36cxPafjHtBbEFygmNfu3EQrEQ=) 2: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: cFIufkCL0I3dteUL1DzqK2c4OeHFB9uU5moyuH0mCp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:28:ba:52:3d:2b:8e:2d:ba:95:a7:63:ba:74:fe:6a:ac:20:7d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Apr 16 17:16:10 2026 GMT Not After : Apr 20 04:12:10 2026 GMT Subject: CN=5668D210C909A1EF668DF47C82F7D5B2124E370D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:76:2d:50:9a:48:c1:b0:56:bc:1c:7e:e0: 1e:a2:bd:73:3b:46:a5:55:38:30:f8:8b:23:f3:25: 9e:40:05:1e:4f:8d:0e:4d:43:2b:2b:5a:cc:6c:04: 08:68:9f:d3:92:ed:77:1b:19:8f:da:2c:15:18:3c: 24:ec:6a:b8:f9:d2:d1:c3:b6:21:4a:16:84:56:6f: fd:cc:2f:46:5f:49:a9:e5:7b:ed:73:f7:cd:0e:95: 5a:42:4b:ee:38:06:7a:aa:8d:91:a8:55:6d:18:0a: 09:84:4e:64:36:42:19:15:14:68:53:71:59:6e:4d: 5b:b8:f5:82:35:7f:2f:c0:17:7a:00:c8:bf:6b:92: fc:a8:21:15:c1:95:78:44:cc:9f:ed:cc:a0:2e:3f: 24:3c:b4:d8:5f:a4:aa:17:b5:3c:3d:19:34:6b:8f: 43:67:5c:be:20:15:c0:fa:09:62:b4:29:64:ba:cf: 9d:77:2c:30:67:60:82:08:2a:8c:0f:53:36:dd:69: a1:86:fa:cb:cb:fc:8a:ff:61:04:a0:ad:cc:a3:f4: d5:83:31:c3:e8:98:89:93:f9:2e:52:4d:73:12:2b: 39:88:d4:50:ea:f8:b7:6a:71:08:a2:c9:33:df:44: 75:04:ef:e8:08:dd:e2:cd:41:e9:41:60:98:2a:af: d1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:D2:10:C9:09:A1:EF:66:8D:F4:7C:82:F7:D5:B2:12:4E:37:0D X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:18:08:52:97:48:20:27:bf:e6:3e:ef:c6:6e:e2:1d:76: 7e:44:ff:88:d2:7b:0b:1a:3a:b7:cb:8f:29:e7:4f:3a:fb:a4: 2c:a6:66:41:b7:a1:fa:51:97:bf:37:db:4d:9d:2d:ea:c2:42: d9:f0:1c:a1:32:7c:73:42:e0:5b:b0:06:2d:ab:6a:0f:3f:3c: 1b:72:c4:60:c4:6b:e4:1e:12:92:0a:9b:f9:0b:fb:3b:8b:c5: bf:de:f2:27:c5:1f:23:47:0a:44:d2:c7:c4:3e:75:b2:2d:33: 10:42:02:c1:db:91:a8:f8:0d:b5:da:6e:7e:4a:01:e2:9f:6a: 75:9b:97:e5:52:be:e7:db:45:62:4f:3d:1d:2f:4d:4c:70:a6: 28:c2:6c:d6:a0:7e:e4:66:4d:f4:b8:bd:d4:0d:cb:bc:61:cd: 32:87:4c:5f:3b:3c:f7:40:d1:dd:bb:20:13:95:b0:9b:59:0e: 97:ce:23:3b:12:83:f2:bf:a7:94:e9:eb:d0:7c:3b:87:49:45: 23:47:cb:ac:9b:20:20:7e:82:5b:36:5b:94:5c:ee:5e:0c:0e: ac:80:ce:e6:f5:13:16:4a:4d:81:d9:41:7c:fc:d5:cf:40:99: 99:ba:ff:a0:29:e4:d2:fb:d7:6e:6e:81:34:b6:b3:ac:5e:c6: 97:b1:74:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCi6Uj0rji26ladjunT+aqwgfcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNjA0MTYxNzE2MTBaFw0yNjA0MjAwNDEyMTBaMDMxMTAvBgNV BAMTKDU2NjhEMjEwQzkwOUExRUY2NjhERjQ3QzgyRjdENUIyMTI0RTM3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2XYtUJpIwbBWvBx+4B6ivXM7 RqVVODD4iyPzJZ5ABR5PjQ5NQysrWsxsBAhon9OS7XcbGY/aLBUYPCTsarj50tHD tiFKFoRWb/3ML0ZfSanle+1z980OlVpCS+44BnqqjZGoVW0YCgmETmQ2QhkVFGhT cVluTVu49YI1fy/AF3oAyL9rkvyoIRXBlXhEzJ/tzKAuPyQ8tNhfpKoXtTw9GTRr j0NnXL4gFcD6CWK0KWS6z513LDBnYIIIKowPUzbdaaGG+svL/Ir/YQSgrcyj9NWD McPomImT+S5STXMSKzmI1FDq+LdqcQiiyTPfRHUE7+gI3eLNQelBYJgqr9EhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVmjSEMkJoe9mjfR8gvfVshJONw0wHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcVGAhSl0ggJ7/mPu/GbuIddn5E/4jSewsa OrfLjynnTzr7pCymZkG3ofpRl783202dLerCQtnwHKEyfHNC4FuwBi2rag8/PBty xGDEa+QeEpIKm/kL+zuLxb/e8ifFHyNHCkTSx8Q+dbItMxBCAsHbkaj4DbXabn5K AeKfanWbl+VSvufbRWJPPR0vTUxwpijCbNagfuRmTfS4vdQNy7xhzTKHTF87PPdA 0d27IBOVsJtZDpfOIzsSg/K/p5Tp69B8O4dJRSNHy6ybICB+gls2W5Rc7l4MDqyA zub1ExZKTYHZQXz81c9AmZm6/6Ap5NL7125ugTS2s6xexpexdNQ= -----END CERTIFICATE-----Generated at Sat Apr 18 03:26:07 2026 by rpki-client