$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: spjoOtMrQW+/SHny7ngkG3U1fIbOaj47rQeQGgnoRdk= Subject key identifier: 80:42:78:6D:42:2D:BB:32:8F:1A:E9:DC:E4:AF:8B:18:4C:9F:D4:8A Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 03FB5A1C65C88E949D70962FC699D6823BF63BC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0559 Signing time: Sat 28 Feb 2026 18:11:49 +0000 Manifest this update: Sat 28 Feb 2026 18:06:49 +0000 Manifest next update: Wed 04 Mar 2026 02:10:49 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa (hash: otTw7cTD+7X2MD76zWvi6+MqPArwOlTIQa8qqypdI0I=) 3: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: IoOFpnGIf3rEY9lgIXhYlWTIM3+fFoald5Akpkrhmdk=) 4: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 5: 3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa (hash: xUH6hBErmhVIAC7hqy3cXz0kV3U+6cg7ogjiBk1mZyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fb:5a:1c:65:c8:8e:94:9d:70:96:2f:c6:99:d6:82:3b:f6:3b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Feb 28 18:06:49 2026 GMT Not After : Mar 4 02:10:49 2026 GMT Subject: CN=8042786D422DBB328F1AE9DCE4AF8B184C9FD48A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:59:60:68:cc:90:36:21:8f:0c:1f:7d:90: a2:fb:64:44:de:2d:8a:89:c5:97:0f:19:71:db:99: 28:a6:41:05:c9:4a:5d:d8:2d:4f:11:ce:fc:52:38: 0e:5c:10:ff:a9:81:b7:b8:fb:f4:7d:9b:23:8d:cf: 13:25:8e:26:4a:65:fb:44:01:51:ab:b5:c7:e7:69: 5c:29:97:c1:5f:14:c7:b9:aa:0f:af:4c:ac:da:30: d1:02:d2:63:3d:47:c3:43:1d:11:ad:a0:ff:84:8f: 76:22:18:cb:cf:04:0f:e5:6b:91:53:2a:65:36:98: 11:7a:bb:f5:74:7a:69:aa:3b:f6:b5:41:07:a5:52: 87:d7:a6:a7:0c:94:c3:88:b3:34:cb:f7:9b:42:c4: c8:6d:fd:3b:26:0f:72:0b:cc:a2:b7:fb:ac:c4:5c: a2:15:36:8a:e8:c7:96:84:99:36:60:86:70:2f:ba: 85:bc:36:65:15:08:86:08:b7:76:42:8e:4c:3c:3d: 8a:39:d6:2b:86:d3:77:78:de:84:ea:03:f4:b1:3e: 46:35:c1:77:9e:17:fa:e2:ca:08:bc:4b:53:55:83: 9c:db:84:1b:e5:c1:21:ac:50:c5:15:1e:a7:a6:69: e6:32:03:76:f5:40:d8:fc:27:52:de:d3:ec:e6:dc: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:42:78:6D:42:2D:BB:32:8F:1A:E9:DC:E4:AF:8B:18:4C:9F:D4:8A X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:04:40:94:e6:23:ba:fb:c1:cf:12:5c:23:d1:1e:6e:44:15: 1e:8f:b3:33:c2:5f:c8:9e:04:0c:00:49:e6:59:c1:4a:ac:e0: fe:dd:70:fb:45:5e:dc:54:5a:9d:2b:82:74:7a:6d:03:f8:20: a4:5d:59:5c:e5:78:7f:eb:69:af:62:d7:d3:1c:d1:db:f8:51: 9a:dc:6b:42:57:72:a3:14:9d:29:e7:14:99:eb:90:78:8f:7a: c0:07:e7:48:cd:31:dd:44:3d:0f:c9:d8:3b:34:b5:54:37:0d: c3:72:c4:8f:9d:28:4b:93:f3:08:90:a7:11:a3:52:c4:61:9f: c5:bf:59:27:99:10:ec:45:66:b4:5d:b9:96:4a:0c:03:b1:df: 81:1d:a8:5f:5e:a3:e5:b9:03:76:b4:59:2c:91:b9:1c:8d:d1: e9:f7:b6:4a:85:6c:54:69:c1:d5:de:ba:fc:1f:19:e2:0d:8f: 82:99:18:1f:f7:f3:0d:36:00:1c:10:e5:ee:5b:a9:ce:49:e5: 5e:e6:cc:24:bf:9d:f7:02:3b:9d:dc:69:0f:0f:35:a5:6f:37: 6b:c4:77:a0:e8:b0:52:f2:bd:31:83:bc:4a:cb:84:57:46:96: ff:f2:a4:74:2c:37:81:e1:d8:92:89:10:67:29:3d:6b:87:fd: 58:77:f3:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/taHGXIjpSdcJYvxpnWgjv2O8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNjAyMjgxODA2NDlaFw0yNjAzMDQwMjEwNDlaMDMxMTAvBgNV BAMTKDgwNDI3ODZENDIyREJCMzI4RjFBRTlEQ0U0QUY4QjE4NEM5RkQ0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClullgaMyQNiGPDB99kKL7ZETe LYqJxZcPGXHbmSimQQXJSl3YLU8RzvxSOA5cEP+pgbe4+/R9myONzxMljiZKZftE AVGrtcfnaVwpl8FfFMe5qg+vTKzaMNEC0mM9R8NDHRGtoP+Ej3YiGMvPBA/la5FT KmU2mBF6u/V0emmqO/a1QQelUofXpqcMlMOIszTL95tCxMht/TsmD3ILzKK3+6zE XKIVNorox5aEmTZghnAvuoW8NmUVCIYIt3ZCjkw8PYo51iuG03d43oTqA/SxPkY1 wXeeF/riygi8S1NVg5zbhBvlwSGsUMUVHqemaeYyA3b1QNj8J1Le0+zm3L4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgEJ4bUItuzKPGunc5K+LGEyf1IowHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIEQJTmI7r7wc8SXCPRHm5EFR6PszPCX8ie BAwASeZZwUqs4P7dcPtFXtxUWp0rgnR6bQP4IKRdWVzleH/raa9i19Mc0dv4UZrc a0JXcqMUnSnnFJnrkHiPesAH50jNMd1EPQ/J2Ds0tVQ3DcNyxI+dKEuT8wiQpxGj UsRhn8W/WSeZEOxFZrRduZZKDAOx34EdqF9eo+W5A3a0WSyRuRyN0en3tkqFbFRp wdXeuvwfGeINj4KZGB/38w02ABwQ5e5bqc5J5V7mzCS/nfcCO53caQ8PNaVvN2vE d6DosFLyvTGDvErLhFdGlv/ypHQsN4Hh2JKJEGcpPWuH/Vh384I= -----END CERTIFICATE-----Generated at Mon Mar 2 06:33:36 2026 by rpki-client