$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: C6hvxc2hO6RwfD42PjhuKkV6PI//2vyhCVJ3fIsDe6A= Subject key identifier: BB:2B:B1:07:2D:D9:42:66:C8:C1:C6:86:CF:9D:4F:43:98:16:EB:B2 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 790E3A18C3E92941C3DAB5B9EC7394F44DB82674 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 0353 Signing time: Mon 02 Mar 2026 00:31:02 +0000 Manifest this update: Mon 02 Mar 2026 00:26:02 +0000 Manifest next update: Thu 05 Mar 2026 05:47:02 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 3: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: 7axh8n/qlMvI6ZrOg6KuEJreTwy34YjGbKRHWicKK74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0e:3a:18:c3:e9:29:41:c3:da:b5:b9:ec:73:94:f4:4d:b8:26:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Mar 2 00:26:02 2026 GMT Not After : Mar 5 05:47:02 2026 GMT Subject: CN=BB2BB1072DD94266C8C1C686CF9D4F439816EBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:5f:3c:5f:47:77:df:c6:34:e9:fb:99:a5: 86:c6:03:bc:bc:8a:c1:82:0f:df:63:0f:0a:85:fb: 85:1a:6c:d1:eb:ad:60:96:1f:bd:a6:31:64:65:a1: c9:f2:2c:68:12:b3:58:82:57:95:bb:1a:e5:83:44: 9a:f6:9e:89:fb:c6:67:91:19:02:6b:cd:a1:12:7e: 83:ed:8f:db:9f:e5:c9:69:44:9f:f9:70:c3:75:f4: d4:6f:6c:47:b1:36:95:ee:24:37:cb:bf:3f:fc:ec: 75:2d:d0:24:e9:73:f7:70:4d:52:02:be:db:07:02: 19:23:8e:c8:82:a9:40:57:dc:cb:6b:29:20:df:b8: 47:ec:31:67:04:1c:59:7f:2d:48:ce:57:1f:81:c2: d8:0e:d3:9e:91:16:c7:b3:b2:5d:fc:6a:9d:79:b9: 9f:f7:14:14:a4:8c:9a:84:86:89:79:8e:cb:bb:30: bc:7c:0a:4c:c9:d8:14:71:c0:14:92:ec:7c:26:b0: 46:f3:d9:b3:57:19:48:60:88:d2:26:04:1a:79:73: a2:8f:36:6c:02:4b:0e:a7:8e:b1:2f:7f:4e:32:ee: 1e:ac:23:af:01:98:96:fd:d6:ea:5e:c1:9a:a3:0c: 87:28:b9:7a:4e:81:a0:b4:79:a4:48:33:e5:85:dd: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:B1:07:2D:D9:42:66:C8:C1:C6:86:CF:9D:4F:43:98:16:EB:B2 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:48:e4:43:52:f1:03:70:2c:b3:8a:05:dc:ce:5a:54:38:26: 9a:44:f9:1a:42:1d:07:78:03:4b:11:78:f6:8c:82:ed:52:2d: 9d:e5:72:d9:04:5f:7d:99:50:92:23:f6:33:93:a2:a4:57:89: 7e:17:fa:92:01:01:28:17:7e:4e:58:e1:0a:64:a2:c2:f0:91: 23:d7:0b:df:cc:a4:be:ab:4b:31:f9:f3:f4:8e:dd:ec:ff:1d: 52:e8:97:b2:4d:54:ea:f5:83:62:53:b1:43:6d:15:ff:67:ad: ff:bb:10:21:2e:38:16:3c:8e:c8:ae:47:23:73:d0:9f:a7:72: d3:37:a7:cc:1b:05:22:26:9a:55:27:53:82:44:38:34:05:bf: df:46:77:48:0d:81:1d:b6:7c:64:65:85:6c:d1:12:31:86:54: 28:a7:7c:ac:8f:46:25:45:4c:37:a5:8d:89:4b:03:2f:14:51: 5e:e9:10:de:94:e2:1b:62:84:d8:53:52:2b:48:0a:6e:76:96: e7:3d:68:4c:5e:43:56:92:85:7f:93:1b:a3:a3:b1:1b:1c:59: 66:5a:b5:95:8e:18:85:07:2a:13:ce:f0:33:5b:73:56:e9:16: da:2c:f4:ff:68:c0:3b:90:24:8a:23:0c:96:0a:4b:f1:2a:ea: a4:6a:2d:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQ46GMPpKUHD2rW57HOU9E24JnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNjAzMDIwMDI2MDJaFw0yNjAzMDUwNTQ3MDJaMDMxMTAvBgNV BAMTKEJCMkJCMTA3MkREOTQyNjZDOEMxQzY4NkNGOUQ0RjQzOTgxNkVCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUel88X0d338Y06fuZpYbGA7y8 isGCD99jDwqF+4UabNHrrWCWH72mMWRlocnyLGgSs1iCV5W7GuWDRJr2non7xmeR GQJrzaESfoPtj9uf5clpRJ/5cMN19NRvbEexNpXuJDfLvz/87HUt0CTpc/dwTVIC vtsHAhkjjsiCqUBX3MtrKSDfuEfsMWcEHFl/LUjOVx+BwtgO056RFsezsl38ap15 uZ/3FBSkjJqEhol5jsu7MLx8CkzJ2BRxwBSS7HwmsEbz2bNXGUhgiNImBBp5c6KP NmwCSw6njrEvf04y7h6sI68BmJb91upewZqjDIcouXpOgaC0eaRIM+WF3Y9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyuxBy3ZQmbIwcaGz51PQ5gW67IwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJI5ENS8QNwLLOKBdzOWlQ4JppE+RpCHQd4 A0sRePaMgu1SLZ3lctkEX32ZUJIj9jOToqRXiX4X+pIBASgXfk5Y4QpkosLwkSPX C9/MpL6rSzH58/SO3ez/HVLol7JNVOr1g2JTsUNtFf9nrf+7ECEuOBY8jsiuRyNz 0J+nctM3p8wbBSImmlUnU4JEODQFv99Gd0gNgR22fGRlhWzREjGGVCinfKyPRiVF TDeljYlLAy8UUV7pEN6U4htihNhTUitICm52luc9aExeQ1aShX+TG6OjsRscWWZa tZWOGIUHKhPO8DNbc1bpFtos9P9owDuQJIojDJYKS/Eq6qRqLXU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:11:07 2026 by rpki-client