$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: KO8z6jkLZcl9M9VQ5+8St12pKdvTZOWkJGY2B+8qbJw= Subject key identifier: 83:C8:B5:CD:E5:5F:6A:6D:D8:BB:2A:B3:F2:92:FC:E7:29:C4:3E:7C Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 03E6889AF57C518CC74FB54EC1CAD7B69B100043 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0280 Signing time: Fri 27 Feb 2026 21:10:04 +0000 Manifest this update: Fri 27 Feb 2026 21:05:04 +0000 Manifest next update: Tue 03 Mar 2026 02:56:04 +0000 Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 9C6JxChFeHLhz/hiGucLeF7/o+dBMXRfwa1cbKwCRWc=) 2: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: xMdEvGF/+SyRoZ7z5CHqddGX4oeiyI11oIybEGAc3r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e6:88:9a:f5:7c:51:8c:c7:4f:b5:4e:c1:ca:d7:b6:9b:10:00:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Feb 27 21:05:04 2026 GMT Not After : Mar 3 02:56:04 2026 GMT Subject: CN=83C8B5CDE55F6A6DD8BB2AB3F292FCE729C43E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:17:95:13:74:c9:3e:3a:57:cc:37:82:1b: f1:4f:96:93:13:7a:18:fa:49:79:b2:28:21:7e:6d: 57:be:62:70:c3:d2:eb:93:e6:7f:b7:1d:9b:b2:91: 93:82:11:ef:7d:dc:0d:00:f2:76:58:37:f6:e4:8e: 4d:18:e7:df:81:8c:6e:54:1c:ba:3f:e5:dd:1d:97: da:a0:d6:8d:ae:55:94:4b:16:43:43:29:59:0c:bc: 7d:5c:21:2f:3e:15:bd:ef:f8:ef:99:33:e2:e6:83: 30:ec:b1:07:1e:4d:c3:8d:9e:75:69:71:61:e1:1c: 6d:2b:12:c3:36:8a:57:c8:73:56:74:62:d8:99:8e: aa:2f:fa:66:eb:5a:35:a9:d1:a8:3a:72:34:ee:6f: e7:9e:f7:45:b9:ab:95:fd:d6:86:88:42:5a:93:76: 36:31:1b:5a:c0:25:c7:25:16:7d:fd:1c:1d:ed:8c: 67:82:4b:cc:56:d9:b3:ea:8e:2c:de:ba:5a:96:2e: 0e:1d:7d:a0:fd:17:82:c0:5d:62:ff:81:ee:6d:67: 0a:4b:13:b1:34:57:79:14:5b:fd:44:40:34:a4:67: 89:3f:fb:2b:dc:b6:ac:c3:e5:b7:37:b0:b0:2b:29: ae:59:55:73:9b:bd:d3:2d:72:fe:e6:71:cd:90:04: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C8:B5:CD:E5:5F:6A:6D:D8:BB:2A:B3:F2:92:FC:E7:29:C4:3E:7C X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4e:53:d4:de:33:a9:26:9d:f7:b7:93:e9:1c:09:2c:9b:1e: 27:39:2a:be:9f:84:23:f3:b7:51:f3:fd:cf:59:b5:e6:6f:8d: 11:c2:37:70:e4:26:0e:ba:61:ec:4c:24:88:00:ba:1e:25:99: 28:7b:3a:58:af:2c:35:d7:81:fb:b1:c2:80:08:ae:2a:7c:6a: 06:bc:d8:31:89:f9:93:50:df:05:8b:1b:bd:54:5a:02:43:a7: 6e:36:82:95:c7:65:e0:1b:33:95:30:52:95:6e:77:6b:2d:60: c4:3a:4e:e5:cd:fa:cc:6a:84:ac:5c:fa:af:67:8d:72:fa:77: e2:85:db:ba:80:34:e1:d8:10:5d:bc:d0:fb:e9:04:09:3c:47: fb:b1:66:bf:fa:c3:a4:e7:12:b1:0a:87:16:c1:30:54:2a:5c: 6a:22:f9:aa:5b:0b:bd:57:93:d5:4c:8c:ca:ac:02:dc:c3:05: ba:14:80:6b:9d:3d:d0:f9:80:1c:8a:7b:58:12:88:37:3a:64: 13:25:14:c8:e7:3b:fc:84:e4:be:10:af:78:3c:de:c0:2b:ce: 65:48:f1:55:fe:d6:29:45:77:09:a1:bb:b9:83:7e:d8:3a:88: 45:46:46:61:20:46:95:e6:30:6e:f5:80:fa:b8:52:ca:90:18: df:7d:b8:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+aImvV8UYzHT7VOwcrXtpsQAEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNjAyMjcyMTA1MDRaFw0yNjAzMDMwMjU2MDRaMDMxMTAvBgNV BAMTKDgzQzhCNUNERTU1RjZBNkREOEJCMkFCM0YyOTJGQ0U3MjlDNDNFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoReVE3TJPjpXzDeCG/FPlpMT ehj6SXmyKCF+bVe+YnDD0uuT5n+3HZuykZOCEe993A0A8nZYN/bkjk0Y59+BjG5U HLo/5d0dl9qg1o2uVZRLFkNDKVkMvH1cIS8+Fb3v+O+ZM+LmgzDssQceTcONnnVp cWHhHG0rEsM2ilfIc1Z0YtiZjqov+mbrWjWp0ag6cjTub+ee90W5q5X91oaIQlqT djYxG1rAJcclFn39HB3tjGeCS8xW2bPqjizeulqWLg4dfaD9F4LAXWL/ge5tZwpL E7E0V3kUW/1EQDSkZ4k/+yvctqzD5bc3sLArKa5ZVXObvdMtcv7mcc2QBH1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg8i1zeVfam3Yuyqz8pL85ynEPnwwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtOU9TeM6kmnfe3k+kcCSybHic5Kr6fhCPz t1Hz/c9ZteZvjRHCN3DkJg66YexMJIgAuh4lmSh7OlivLDXXgfuxwoAIrip8aga8 2DGJ+ZNQ3wWLG71UWgJDp242gpXHZeAbM5UwUpVud2stYMQ6TuXN+sxqhKxc+q9n jXL6d+KF27qANOHYEF280PvpBAk8R/uxZr/6w6TnErEKhxbBMFQqXGoi+apbC71X k9VMjMqsAtzDBboUgGudPdD5gByKe1gSiDc6ZBMlFMjnO/yE5L4Qr3g83sArzmVI 8VX+1ilFdwmhu7mDftg6iEVGRmEgRpXmMG71gPq4UsqQGN99uBk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:36:04 2026 by rpki-client