$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: dQ9Z0jp3TXVSITrvlttA5WMy7rkJtA9v+9SZFrq45M0= Subject key identifier: A7:DA:29:58:AB:34:E1:ED:D0:F2:12:74:D1:23:4D:FC:C9:30:DF:38 Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 5847C604A39F22A11B6315C7CDCBC68ADC57B318 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: 012C Signing time: Sun 01 Mar 2026 09:31:04 +0000 Manifest this update: Sun 01 Mar 2026 09:26:04 +0000 Manifest next update: Wed 04 Mar 2026 12:53:04 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=) 2: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: RoMBiT8CGgFUWFKTD6wEzFrXSycGxKbGiQn89TwOBAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:47:c6:04:a3:9f:22:a1:1b:63:15:c7:cd:cb:c6:8a:dc:57:b3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Mar 1 09:26:04 2026 GMT Not After : Mar 4 12:53:04 2026 GMT Subject: CN=A7DA2958AB34E1EDD0F21274D1234DFCC930DF38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:1c:32:7e:37:ad:65:84:a2:c8:79:44:45: 3f:e4:2e:0e:ec:0e:48:94:8a:72:02:3f:65:46:0a: 9c:50:92:e3:76:88:55:d8:9b:fe:51:29:57:a4:ef: 6a:e0:2a:dc:af:91:5b:3c:32:dd:6f:4f:88:14:c7: a1:f7:a5:05:61:c7:25:41:0f:4f:79:20:2a:d7:5e: b4:0c:ac:e2:a7:4d:f5:9d:d6:50:72:cb:c1:2e:9b: 3c:e9:71:45:e8:5c:4f:a8:68:b5:28:c6:95:98:65: c3:5b:14:32:bf:6b:f2:89:46:18:7d:b4:04:35:d8: b6:b8:ab:78:8b:b2:e4:4e:71:36:31:69:4d:99:3a: 9e:c1:3f:fd:38:98:76:a4:c1:3a:0a:a3:b9:fe:50: f1:1e:31:50:ac:e1:04:e7:fa:b5:f7:29:91:4e:b4: 0b:de:4d:2b:07:b7:22:69:f7:d5:f8:f2:ae:44:ca: 15:b2:86:29:19:24:02:4f:28:cd:1d:cf:d3:ae:7b: 64:83:1a:d7:2a:46:63:d6:a3:47:09:24:c0:b6:a7: bb:cb:06:2c:16:44:ba:b6:3c:8e:48:7e:46:0d:e0: 7f:bc:54:d6:68:cd:bb:58:93:f2:f0:5b:f4:c6:ed: be:e0:7a:13:2e:fe:d1:ae:a5:1f:df:33:0a:83:7c: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DA:29:58:AB:34:E1:ED:D0:F2:12:74:D1:23:4D:FC:C9:30:DF:38 X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:87:33:ac:41:06:05:d8:56:d2:11:86:81:48:6e:16:c7:96: 75:1b:b3:e1:81:1b:20:da:24:35:95:66:84:2b:2a:de:0b:14: ca:94:4f:64:a6:9e:dc:d2:96:67:c6:28:46:3a:f2:db:1a:b7: 59:ac:71:29:8b:4b:5f:24:14:0e:87:8a:9b:dd:64:c1:c5:1c: c2:72:9d:ac:fe:3c:cb:1c:f8:9e:c0:7f:48:d2:20:9c:17:79: a9:fb:38:3a:ad:7b:f3:06:c5:81:32:fe:de:02:8d:6f:12:6e: ff:c0:de:17:11:84:cf:3f:4f:6c:c6:34:2a:ef:28:c8:9c:00: d5:72:b2:e7:09:c7:e4:d3:8f:51:f0:4d:a5:67:99:e4:c0:10: 36:c7:a9:5c:7f:55:a6:38:f4:2f:af:05:2d:ac:a1:c3:bd:38: 94:1f:4e:41:40:b7:2f:93:ec:a4:57:3e:7b:9e:0c:fb:4d:ac: ca:9e:f8:21:c6:c6:8b:ea:33:cc:c1:17:20:89:5e:fc:05:d4: 0a:17:b0:30:ca:5a:e0:95:78:63:2e:0a:ab:67:76:4f:55:8f: b3:e9:60:99:23:5d:23:cd:33:20:76:ef:ea:d7:18:b2:60:9b: dd:bf:bc:a5:54:7b:c7:3a:e5:b6:fc:d7:ba:b5:7e:ab:f5:5d: 64:b8:69:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEfGBKOfIqEbYxXHzcvGitxXsxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNjAzMDEwOTI2MDRaFw0yNjAzMDQxMjUzMDRaMDMxMTAvBgNV BAMTKEE3REEyOTU4QUIzNEUxRUREMEYyMTI3NEQxMjM0REZDQzkzMERGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqYBwyfjetZYSiyHlERT/kLg7s DkiUinICP2VGCpxQkuN2iFXYm/5RKVek72rgKtyvkVs8Mt1vT4gUx6H3pQVhxyVB D095ICrXXrQMrOKnTfWd1lByy8EumzzpcUXoXE+oaLUoxpWYZcNbFDK/a/KJRhh9 tAQ12La4q3iLsuROcTYxaU2ZOp7BP/04mHakwToKo7n+UPEeMVCs4QTn+rX3KZFO tAveTSsHtyJp99X48q5EyhWyhikZJAJPKM0dz9Oue2SDGtcqRmPWo0cJJMC2p7vL BiwWRLq2PI5IfkYN4H+8VNZozbtYk/LwW/TG7b7gehMu/tGupR/fMwqDfAb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9opWKs04e3Q8hJ00SNN/Mkw3zgwHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2HM6xBBgXYVtIRhoFIbhbHlnUbs+GBGyDa JDWVZoQrKt4LFMqUT2SmntzSlmfGKEY68tsat1mscSmLS18kFA6HipvdZMHFHMJy naz+PMsc+J7Af0jSIJwXean7ODqte/MGxYEy/t4CjW8Sbv/A3hcRhM8/T2zGNCrv KMicANVysucJx+TTj1HwTaVnmeTAEDbHqVx/VaY49C+vBS2socO9OJQfTkFAty+T 7KRXPnueDPtNrMqe+CHGxovqM8zBFyCJXvwF1AoXsDDKWuCVeGMuCqtndk9Vj7Pp YJkjXSPNMyB27+rXGLJgm92/vKVUe8c65bb817q1fqv1XWS4aW0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:32:03 2026 by rpki-client