$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: 67f8UpRIWcOu6e2LAyn/6TUHXJb7bUZKUIYEBM7BGIs= Subject key identifier: 62:F8:55:3B:FB:2A:E8:22:CA:34:71:92:0A:4B:6C:89:57:67:10:6E Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 3554AE224B147CB1A78AD88A1053C999D9612E83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 017C Signing time: Sun 01 Mar 2026 19:22:24 +0000 Manifest this update: Sun 01 Mar 2026 19:17:24 +0000 Manifest next update: Thu 05 Mar 2026 04:42:24 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: WtVfPZfCZ+ZExAyfqDCdWvXE48LKmIllvsd8uUvXohQ=) 2: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: vEmWTZGMN6r/84bGel+lGVc5Hm39OuImGvC5TqvGvjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:54:ae:22:4b:14:7c:b1:a7:8a:d8:8a:10:53:c9:99:d9:61:2e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Mar 1 19:17:24 2026 GMT Not After : Mar 5 04:42:24 2026 GMT Subject: CN=62F8553BFB2AE822CA3471920A4B6C895767106E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:41:a0:cc:0e:b5:40:56:ea:af:8f:80:f4: 38:90:af:21:19:97:15:ef:47:81:22:67:93:da:96: 69:be:4d:2d:fb:a2:72:f6:06:e5:57:56:07:fa:dc: b5:b6:71:bc:6f:ac:5d:44:52:44:2b:15:b5:01:f0: a1:82:dc:83:57:31:82:b5:6a:46:0d:81:75:73:7a: 33:e2:09:61:8e:d0:d5:6d:de:81:02:c5:fd:68:86: 62:49:c0:eb:18:57:44:a6:84:3d:01:f6:4e:9e:b9: 73:ee:63:b6:11:cd:69:6a:a6:c8:8b:37:4a:61:52: 8c:32:9c:c6:4f:3a:8b:12:0e:11:6d:16:46:fb:04: 06:7e:e4:cb:be:5d:cb:ed:33:4f:37:39:4c:af:92: 3d:48:f4:0c:54:a6:bc:24:7b:89:c7:e1:61:e5:21: 0f:b3:9a:53:8f:dc:1c:4c:f8:3d:e0:67:b9:44:71: 65:79:a0:cf:f9:96:dd:9b:2a:cd:ce:9a:57:7a:40: ab:21:57:9c:ad:59:cf:e9:1d:12:76:7d:58:6b:67: 79:47:19:d6:a5:74:6c:43:0c:a9:42:b3:bc:79:d9: 96:d9:ab:13:32:85:07:ff:d0:ac:b1:26:18:6e:ed: c6:b4:92:a7:84:ab:6c:5c:5c:d6:a8:83:1f:62:f0: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F8:55:3B:FB:2A:E8:22:CA:34:71:92:0A:4B:6C:89:57:67:10:6E X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c7:11:f3:cc:67:19:ff:31:e7:01:03:e9:ef:a8:68:3c:d1: 2c:75:4d:41:71:65:eb:5a:20:49:ea:9b:38:19:e5:e3:d2:2b: e2:70:68:79:91:01:33:d3:d4:17:74:a6:2a:0c:d2:a5:bb:f9: 01:a5:a9:cf:3d:06:a1:06:d0:ed:08:46:65:c3:09:82:a5:f0: 87:32:11:aa:30:13:04:a4:ba:32:d6:aa:79:f6:d3:c2:14:40: 01:c3:ea:51:49:92:9c:1e:65:8f:53:cb:37:a8:27:27:23:05: 81:f6:19:b7:ed:36:7d:87:be:31:9c:92:ea:47:f7:9a:eb:55: 54:90:13:69:18:3e:31:0d:c6:b6:f7:60:ac:9d:11:d6:29:93: e3:df:f5:06:1c:24:f2:5b:19:05:99:b4:85:c4:d7:17:29:d5: 48:7e:b8:2a:b4:69:9c:be:ef:c7:69:b4:70:d0:f9:12:0f:cb: 06:7f:16:48:f5:30:9f:73:97:77:60:ee:ce:1e:ff:8f:d6:72: a3:51:ff:71:56:e8:f6:08:a8:38:47:86:54:fc:6f:00:97:11: a2:7e:7f:45:28:8b:5e:00:4a:1d:2f:e9:df:c2:b3:b1:e2:84: b7:3e:9b:ab:e0:a5:3b:94:01:7d:f2:6d:6c:f5:bf:4c:d6:89: 89:53:e7:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVSuIksUfLGnitiKEFPJmdlhLoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNjAzMDExOTE3MjRaFw0yNjAzMDUwNDQyMjRaMDMxMTAvBgNV BAMTKDYyRjg1NTNCRkIyQUU4MjJDQTM0NzE5MjBBNEI2Qzg5NTc2NzEwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+UGgzA61QFbqr4+A9DiQryEZ lxXvR4EiZ5Palmm+TS37onL2BuVXVgf63LW2cbxvrF1EUkQrFbUB8KGC3INXMYK1 akYNgXVzejPiCWGO0NVt3oECxf1ohmJJwOsYV0SmhD0B9k6euXPuY7YRzWlqpsiL N0phUowynMZPOosSDhFtFkb7BAZ+5Mu+XcvtM083OUyvkj1I9AxUprwke4nH4WHl IQ+zmlOP3BxM+D3gZ7lEcWV5oM/5lt2bKs3Omld6QKshV5ytWc/pHRJ2fVhrZ3lH GdaldGxDDKlCs7x52ZbZqxMyhQf/0KyxJhhu7ca0kqeEq2xcXNaogx9i8B2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYvhVO/sq6CLKNHGSCktsiVdnEG4wHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXHEfPMZxn/MecBA+nvqGg80Sx1TUFxZeta IEnqmzgZ5ePSK+JwaHmRATPT1Bd0pioM0qW7+QGlqc89BqEG0O0IRmXDCYKl8Icy EaowEwSkujLWqnn208IUQAHD6lFJkpweZY9TyzeoJycjBYH2GbftNn2HvjGckupH 95rrVVSQE2kYPjENxrb3YKydEdYpk+Pf9QYcJPJbGQWZtIXE1xcp1Uh+uCq0aZy+ 78dptHDQ+RIPywZ/Fkj1MJ9zl3dg7s4e/4/WcqNR/3FW6PYIqDhHhlT8bwCXEaJ+ f0Uoi14ASh0v6d/Cs7HihLc+m6vgpTuUAX3ybWz1v0zWiYlT5wI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:41:24 2026 by rpki-client