$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: Bo0SJ/G9S2ndPXxE3OWsrK/R27ZnI+brW38Wh5kPGwI= Subject key identifier: BF:1F:E1:DB:37:60:38:1B:EF:3A:28:82:86:1D:7B:D9:F2:AC:71:44 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 35C0360F6AFC36F5CE2A288F9C7DC5352645849A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 04A0 Signing time: Sun 01 Mar 2026 09:40:01 +0000 Manifest this update: Sun 01 Mar 2026 09:35:01 +0000 Manifest next update: Wed 04 Mar 2026 12:37:01 +0000 Files and hashes: 1: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: N5UjAFtW7lzWOCve3uLkjICnBAb0hl0TlIqJbA073j4=) 2: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: R//rU13s2JPenNUsihOvlbAbpj+HfKGOOTSxdjuipA4=) 3: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: 2o165ipoUQ5xC+3YJyvZSSnkLXwty1Hk0oFl5RqIxMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c0:36:0f:6a:fc:36:f5:ce:2a:28:8f:9c:7d:c5:35:26:45:84:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Mar 1 09:35:01 2026 GMT Not After : Mar 4 12:37:01 2026 GMT Subject: CN=BF1FE1DB3760381BEF3A2882861D7BD9F2AC7144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:af:73:bb:90:77:72:0d:1f:e1:11:5f:af: 79:b0:08:87:75:0f:1f:5e:e1:ab:d3:84:8a:b0:b8: 1e:ea:e4:27:f7:5c:7d:c1:ab:c6:12:6f:33:da:5f: 9e:86:f0:13:46:67:54:2c:48:c4:1c:78:ca:09:cc: 7e:4c:f6:cc:bd:94:f0:43:cc:79:e4:4a:df:75:ed: 08:d2:27:22:c0:34:1e:e7:8e:20:3e:c0:85:76:cd: 30:4b:5e:88:8b:a9:5e:7e:44:32:11:d6:e4:52:d0: 9d:0b:43:44:1e:b5:99:21:b4:64:d7:18:55:c3:5e: 49:c6:2c:1c:d9:e3:d7:9c:7b:b0:b9:d6:fc:08:ce: 0f:0a:f5:51:60:72:8b:f9:0d:1e:c0:88:c4:ef:09: 16:4f:77:e2:bd:ff:7f:e2:ce:22:07:0d:a5:87:07: f3:9c:6d:f5:9e:a8:91:18:dd:4f:0a:96:8f:9d:84: 9f:ba:67:7f:cb:74:13:55:0c:0d:04:44:8d:e5:cd: b4:21:23:f1:22:1f:23:06:63:24:f1:80:60:fa:38: 44:92:f9:26:38:83:c9:11:61:b9:b1:fa:98:32:c1: 94:cb:ad:fc:32:ad:a0:25:3f:6a:00:e3:78:ac:15: 3d:85:b7:86:78:de:41:54:f4:1d:80:f1:8b:43:51: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1F:E1:DB:37:60:38:1B:EF:3A:28:82:86:1D:7B:D9:F2:AC:71:44 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ca:67:a8:d0:dc:a7:c4:82:df:7a:f5:74:bd:ef:57:7e:05: 9d:a9:fa:95:b5:69:0c:b0:a1:61:c1:6c:f9:14:4a:ac:69:7d: 3e:44:04:16:fd:72:c8:eb:ae:62:f1:82:d0:24:2d:76:d2:f6: 25:5e:f8:84:79:05:f8:67:3c:29:2f:86:70:d2:f5:04:0e:35: 3f:3c:f8:46:f0:da:e5:e7:46:e2:8c:ff:b9:94:83:e4:e7:9a: 2e:e0:14:a0:d8:12:f2:31:1c:8c:e5:ec:6a:bb:76:8d:0f:ca: f3:fb:b9:9f:70:d3:6a:07:c5:c4:06:20:6a:10:01:d8:b6:49: 89:65:6a:23:9a:27:d1:d0:86:aa:ce:b6:8f:75:c2:75:10:13: 13:df:08:5d:49:0a:d7:e3:1a:8c:83:0a:a9:49:c1:40:52:9e: 82:6d:98:96:b6:c9:2b:ca:ca:e5:95:c6:f5:36:fe:77:d7:12: 71:ab:ac:fb:7e:6d:5a:d4:b4:07:c6:31:e5:82:2e:e6:63:2d: 64:f8:19:9f:b3:75:50:c0:0c:c4:e1:54:cb:66:62:fe:56:2c: bb:d2:58:95:b7:88:92:2c:f3:63:30:7a:2c:30:70:99:b9:42: ab:be:b3:0d:0b:07:7b:45:6e:1e:41:5b:ba:45:f9:75:7d:4b: c0:aa:c3:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcA2D2r8NvXOKiiPnH3FNSZFhJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNjAzMDEwOTM1MDFaFw0yNjAzMDQxMjM3MDFaMDMxMTAvBgNV BAMTKEJGMUZFMURCMzc2MDM4MUJFRjNBMjg4Mjg2MUQ3QkQ5RjJBQzcxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBU69zu5B3cg0f4RFfr3mwCId1 Dx9e4avThIqwuB7q5Cf3XH3Bq8YSbzPaX56G8BNGZ1QsSMQceMoJzH5M9sy9lPBD zHnkSt917QjSJyLANB7njiA+wIV2zTBLXoiLqV5+RDIR1uRS0J0LQ0QetZkhtGTX GFXDXknGLBzZ49ece7C51vwIzg8K9VFgcov5DR7AiMTvCRZPd+K9/3/iziIHDaWH B/OcbfWeqJEY3U8Klo+dhJ+6Z3/LdBNVDA0ERI3lzbQhI/EiHyMGYyTxgGD6OESS +SY4g8kRYbmx+pgywZTLrfwyraAlP2oA43isFT2Ft4Z43kFU9B2A8YtDUZUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvx/h2zdgOBvvOiiChh172fKscUQwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnKZ6jQ3KfEgt969XS971d+BZ2p+pW1aQyw oWHBbPkUSqxpfT5EBBb9csjrrmLxgtAkLXbS9iVe+IR5BfhnPCkvhnDS9QQONT88 +Ebw2uXnRuKM/7mUg+Tnmi7gFKDYEvIxHIzl7Gq7do0PyvP7uZ9w02oHxcQGIGoQ Adi2SYllaiOaJ9HQhqrOto91wnUQExPfCF1JCtfjGoyDCqlJwUBSnoJtmJa2ySvK yuWVxvU2/nfXEnGrrPt+bVrUtAfGMeWCLuZjLWT4GZ+zdVDADMThVMtmYv5WLLvS WJW3iJIs82MweiwwcJm5Qqu+sw0LB3tFbh5BW7pF+XV9S8Cqw0M= -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:28 2026 by rpki-client