$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: 7/rYdrsK6EoSvcyGY7sjJkfBbVa9DcYruH1lqllNRS8= Subject key identifier: 00:EE:52:00:0E:1B:24:4B:6D:D4:38:3B:C8:02:CD:46:99:9D:F7:5E Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 1173867F8B5723114E83CACF84B7ED2DE69C93E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 0571 Signing time: Tue 17 Mar 2026 22:02:30 +0000 Manifest this update: Tue 17 Mar 2026 21:57:30 +0000 Manifest next update: Sat 21 Mar 2026 07:32:30 +0000 Files and hashes: 1: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 2WIOYX46p74zIiYunJq4TWtX4WOqlO2yPDX3Ww98WUc=) 2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: heGyyo+ETT8V3dgjREKU/fLp6uNkHbiH2GVik5PI5cY=) 3: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: MsfccsVUyEFuspyCFv4KKHp+MqjAv+6pDhriOEEFysw=) 4: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 07:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:73:86:7f:8b:57:23:11:4e:83:ca:cf:84:b7:ed:2d:e6:9c:93:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Mar 17 21:57:30 2026 GMT Not After : Mar 21 07:32:30 2026 GMT Subject: CN=00EE52000E1B244B6DD4383BC802CD46999DF75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:34:32:46:66:b1:b3:74:9a:7f:7f:88:26: b7:f4:00:5a:cc:86:37:47:55:bc:37:02:f3:00:72: 0e:b3:49:d9:1e:37:fb:32:15:0b:d1:e6:92:6c:a8: 40:d3:91:c7:dc:a6:75:b8:13:90:53:31:3a:09:8f: 6a:c1:71:7f:e8:ce:84:47:73:a5:28:d7:9e:4f:a4: 31:60:90:d0:40:78:ec:d1:ea:6a:7f:53:dd:b3:4e: 88:db:42:8b:06:71:f1:7c:64:de:e8:97:57:99:16: 79:02:e2:0d:9e:14:7a:33:10:bb:2f:62:94:b4:a6: b2:bf:86:10:f6:3d:56:bb:2d:23:05:23:71:b4:0e: 11:5a:12:4f:9c:11:27:96:d9:9b:b7:d8:d1:83:36: 2f:b3:90:07:35:92:50:48:37:49:17:d1:50:da:3b: cd:8c:cb:2c:f8:35:f4:40:94:c3:46:f5:2b:44:b5: 9c:a2:53:93:3c:50:10:73:14:b2:93:c8:43:3f:f9: 1a:d8:09:1b:16:ea:39:3b:fd:26:d2:7d:92:cf:45: b6:bc:3d:fd:b2:05:49:3f:ca:97:00:ec:df:cd:37: 95:96:d8:62:a2:2d:ef:50:2c:5a:44:bc:33:89:96: d2:89:59:dc:6f:9d:82:7b:81:4f:bd:20:f7:dc:2b: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:52:00:0E:1B:24:4B:6D:D4:38:3B:C8:02:CD:46:99:9D:F7:5E X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7a:5e:95:01:d0:d0:2c:16:87:71:1c:c7:ca:1a:3a:ef:b2: 30:09:df:37:c5:de:01:b5:35:4c:d4:bf:71:59:85:e4:4b:49: a6:6f:a1:7f:7b:b2:63:73:38:68:db:b7:e4:da:4a:7c:c9:be: b1:0a:df:88:35:3e:2b:bb:75:40:40:c7:6b:83:b4:a8:a5:3e: 23:c5:83:d5:66:ce:85:0e:f2:d6:d2:a6:fd:67:66:a8:51:02: 0f:6d:fc:89:eb:ea:46:02:be:e4:53:45:7b:8d:18:c4:8c:29: fe:2f:c3:d3:74:84:0a:ec:66:72:d3:1f:5c:5b:fc:f5:a5:18: d8:b9:80:7a:f1:32:17:14:26:e1:fc:7c:5d:fb:6e:f3:67:13: 22:12:d2:6b:c3:ed:4b:f7:fd:6e:a4:ff:66:9e:1c:b9:60:81: 9b:68:82:2f:c4:3a:7a:24:fd:80:62:dc:c0:4f:0c:07:28:dd: 65:d6:14:18:e8:99:40:65:98:99:43:1e:a2:28:b4:ef:8c:49: b2:9c:19:6e:12:c8:16:91:a5:c0:3e:ba:8b:f6:5d:08:25:54: ed:7f:b8:d7:70:d7:51:b8:a3:08:99:a1:0b:ec:5f:53:2a:be: 45:fe:a6:31:12:79:65:e7:02:ae:46:2e:24:08:b9:3c:da:46: dc:c1:94:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXOGf4tXIxFOg8rPhLftLeack+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNjAzMTcyMTU3MzBaFw0yNjAzMjEwNzMyMzBaMDMxMTAvBgNV BAMTKDAwRUU1MjAwMEUxQjI0NEI2REQ0MzgzQkM4MDJDRDQ2OTk5REY3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwDQyRmaxs3Saf3+IJrf0AFrM hjdHVbw3AvMAcg6zSdkeN/syFQvR5pJsqEDTkcfcpnW4E5BTMToJj2rBcX/ozoRH c6Uo155PpDFgkNBAeOzR6mp/U92zTojbQosGcfF8ZN7ol1eZFnkC4g2eFHozELsv YpS0prK/hhD2PVa7LSMFI3G0DhFaEk+cESeW2Zu32NGDNi+zkAc1klBIN0kX0VDa O82Myyz4NfRAlMNG9StEtZyiU5M8UBBzFLKTyEM/+RrYCRsW6jk7/SbSfZLPRba8 Pf2yBUk/ypcA7N/NN5WW2GKiLe9QLFpEvDOJltKJWdxvnYJ7gU+9IPfcK8ktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAO5SAA4bJEtt1Dg7yALNRpmd914wHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp6XpUB0NAsFodxHMfKGjrvsjAJ3zfF3gG1 NUzUv3FZheRLSaZvoX97smNzOGjbt+TaSnzJvrEK34g1Piu7dUBAx2uDtKilPiPF g9VmzoUO8tbSpv1nZqhRAg9t/Inr6kYCvuRTRXuNGMSMKf4vw9N0hArsZnLTH1xb /PWlGNi5gHrxMhcUJuH8fF37bvNnEyIS0mvD7Uv3/W6k/2aeHLlggZtogi/EOnok /YBi3MBPDAco3WXWFBjomUBlmJlDHqIotO+MSbKcGW4SyBaRpcA+uov2XQglVO1/ uNdw11G4owiZoQvsX1MqvkX+pjESeWXnAq5GLiQIuTzaRtzBlI0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:05 2026 by rpki-client