$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: Y1RisAfNrOt1/t2lmJbWw/Ill0qNdanNn5nCUa7IUuA= Subject key identifier: D5:E5:F4:F8:87:D6:B7:75:16:C0:27:B9:04:26:3E:F2:4F:F2:00:BB Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 48AB6ADE4E8A28951F1FA8C4843CEAA8722FBED1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 051A Signing time: Sun 01 Mar 2026 20:31:36 +0000 Manifest this update: Sun 01 Mar 2026 20:26:36 +0000 Manifest next update: Thu 05 Mar 2026 00:51:36 +0000 Files and hashes: 1: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: T61wBHFXcj0i4VzC5ZhjBNctfHwPokwvn00e8F93OOE=) 2: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: z4oYCZWDew+XBZrkivYPBIEa8esU/2et9t2LDZPakkY=) 3: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 8uluz9oQUOC33A/yP5J6qEWwFa5BN6LUXooNJ8KA6Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ab:6a:de:4e:8a:28:95:1f:1f:a8:c4:84:3c:ea:a8:72:2f:be:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Mar 1 20:26:36 2026 GMT Not After : Mar 5 00:51:36 2026 GMT Subject: CN=D5E5F4F887D6B77516C027B904263EF24FF200BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:9e:e6:83:e0:21:3b:55:00:06:f3:52:0b: ff:88:05:66:e4:82:d9:bf:fc:7e:9c:7f:5c:86:fb: a2:83:8c:30:5c:a5:a0:b8:88:5a:a1:72:7c:4e:c3: 63:0e:41:7e:9c:80:c8:b2:1b:1d:24:ee:07:4f:43: 82:20:5e:cb:02:38:37:a5:bd:e6:7d:09:07:6c:25: ed:ec:88:9e:3f:25:b2:4a:d8:b5:a6:1f:93:54:ee: 27:65:16:c0:f7:f8:e6:70:33:9a:3d:1e:51:e7:15: e2:32:62:4b:cf:8a:18:f3:93:cc:25:c7:de:26:8e: 0f:ba:50:0e:e6:3f:a6:30:bc:75:9e:af:0c:c4:71: e1:72:cc:f2:37:34:28:9e:df:f3:42:93:f0:a0:9c: f4:44:b9:e0:09:52:40:2f:93:55:49:b3:78:13:6b: 56:20:86:e4:76:1e:cb:7d:1c:f9:37:e1:4e:d7:98: 76:1f:c4:dc:a5:1f:68:b3:e4:02:6c:6a:dc:fa:bb: 54:60:60:59:ed:d9:0a:f8:3b:60:32:fb:3a:b7:e5: 71:a4:d6:c1:93:b9:c9:39:4d:19:40:99:f4:6b:9d: f9:3d:49:2a:99:38:d6:f7:27:05:36:78:19:84:98: e4:f1:fd:5b:10:e4:48:d5:1a:b9:8f:50:f7:76:a4: ef:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E5:F4:F8:87:D6:B7:75:16:C0:27:B9:04:26:3E:F2:4F:F2:00:BB X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:77:93:de:0a:60:0f:9a:7a:e7:cc:bb:51:f8:0c:33:bd:01: 95:23:7f:68:3c:7a:2b:29:27:22:b9:7e:bf:da:bc:61:5e:48: 10:76:bb:16:bb:9c:be:dd:5e:98:01:e4:92:87:f3:9b:ef:43: d6:8c:b7:e7:a8:51:d2:f6:43:35:eb:08:35:04:1f:9f:e0:98: 24:88:62:8f:3b:ef:55:a0:7d:52:92:79:b9:f4:0f:0c:8d:94: e0:62:0f:4c:fe:70:ec:89:1d:a4:d3:7f:dd:62:db:6a:ea:5d: d4:3b:b9:d6:3d:8f:79:2f:74:a5:74:31:ac:ec:74:54:86:2b: 18:d6:22:e3:7f:bf:4c:32:fb:62:6a:9c:98:94:92:df:13:a2: 1e:28:fa:0e:fc:00:13:56:98:56:14:65:dd:0f:c2:fc:77:8c: 5b:f3:6b:3d:06:86:60:a1:0e:a4:e3:b4:5c:99:28:52:b3:a6: 92:3d:37:f5:b1:d0:85:d1:06:90:a0:99:86:fc:13:4d:8c:c6: 5f:96:5a:bf:1a:c8:e0:3b:f2:af:03:4b:13:d7:b3:7d:25:1e: 28:0d:33:b6:96:5e:b5:03:5b:df:b5:a7:64:7d:33:3d:43:1a: 73:19:e5:92:41:00:57:fe:a6:a4:b9:bb:b0:2f:96:b5:52:fc: ca:c5:04:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKtq3k6KKJUfH6jEhDzqqHIvvtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNjAzMDEyMDI2MzZaFw0yNjAzMDUwMDUxMzZaMDMxMTAvBgNV BAMTKEQ1RTVGNEY4ODdENkI3NzUxNkMwMjdCOTA0MjYzRUYyNEZGMjAwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1Z7mg+AhO1UABvNSC/+IBWbk gtm//H6cf1yG+6KDjDBcpaC4iFqhcnxOw2MOQX6cgMiyGx0k7gdPQ4IgXssCODel veZ9CQdsJe3siJ4/JbJK2LWmH5NU7idlFsD3+OZwM5o9HlHnFeIyYkvPihjzk8wl x94mjg+6UA7mP6YwvHWerwzEceFyzPI3NCie3/NCk/CgnPREueAJUkAvk1VJs3gT a1YghuR2Hst9HPk34U7XmHYfxNylH2iz5AJsatz6u1RgYFnt2Qr4O2Ay+zq35XGk 1sGTuck5TRlAmfRrnfk9SSqZONb3JwU2eBmEmOTx/VsQ5EjVGrmPUPd2pO8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1eX0+IfWt3UWwCe5BCY+8k/yALswHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKN3k94KYA+aeufMu1H4DDO9AZUjf2g8eisp JyK5fr/avGFeSBB2uxa7nL7dXpgB5JKH85vvQ9aMt+eoUdL2QzXrCDUEH5/gmCSI Yo8771WgfVKSebn0DwyNlOBiD0z+cOyJHaTTf91i22rqXdQ7udY9j3kvdKV0Mazs dFSGKxjWIuN/v0wy+2JqnJiUkt8Toh4o+g78ABNWmFYUZd0Pwvx3jFvzaz0GhmCh DqTjtFyZKFKzppI9N/Wx0IXRBpCgmYb8E02Mxl+WWr8ayOA78q8DSxPXs30lHigN M7aWXrUDW9+1p2R9Mz1DGnMZ5ZJBAFf+pqS5u7AvlrVS/MrFBB8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:49 2026 by rpki-client