$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: /wEWWxnBVIhCvofMb7lhysNxReL1Q56tyOaRsp1YBb8= Subject key identifier: D5:F3:08:08:A9:61:80:56:5F:16:3A:45:1E:91:4B:98:B5:4D:5F:EF Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 464D1C285E2C1A4AD2FBF147F2E2113C68A712E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0562 Signing time: Fri 20 Mar 2026 18:51:46 +0000 Manifest this update: Fri 20 Mar 2026 18:46:46 +0000 Manifest next update: Tue 24 Mar 2026 04:01:46 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa (hash: xUH6hBErmhVIAC7hqy3cXz0kV3U+6cg7ogjiBk1mZyg=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 3: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: eIHRs1K5EBfRYP6MEF8AvFhyNWYPHAz0b+8MbPx5wvc=) 4: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 5: 323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa (hash: otTw7cTD+7X2MD76zWvi6+MqPArwOlTIQa8qqypdI0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 04:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4d:1c:28:5e:2c:1a:4a:d2:fb:f1:47:f2:e2:11:3c:68:a7:12:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Mar 20 18:46:46 2026 GMT Not After : Mar 24 04:01:46 2026 GMT Subject: CN=D5F30808A96180565F163A451E914B98B54D5FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:6f:c7:c1:5c:79:86:2a:fb:1d:0d:5a:05: 42:c0:f4:cb:c8:ce:dd:d8:97:05:9b:43:e8:5b:7d: a6:04:24:50:aa:84:65:f5:72:51:7f:ce:e0:c9:9d: f2:a3:1d:29:b4:54:42:ee:23:b2:2d:26:56:b6:f8: 89:f1:d0:55:67:fa:9e:20:54:34:71:f0:47:80:51: 51:5d:39:2f:db:93:bb:bd:47:ab:3b:c7:bd:3d:c2: e7:a0:86:1b:6a:c0:d8:23:0b:6d:03:3f:e3:19:64: 52:80:51:16:b3:f3:25:42:b1:91:80:81:e8:e7:87: 35:ee:af:b3:e4:c8:de:a2:9a:fb:ea:91:3a:c8:46: 1d:8b:fd:ec:72:fe:47:a0:fd:33:f5:b4:d8:2f:9c: 8d:94:9f:8b:59:60:54:1d:3d:9f:7f:c7:a7:dc:d9: e4:1a:5a:ae:86:c8:fb:eb:9c:e5:76:76:ce:55:cf: b6:7a:f1:92:89:e7:e3:af:43:12:6d:a5:50:2a:b6: 90:69:28:7c:e0:48:7b:7c:df:8f:fc:1d:af:81:85: 3a:b6:5c:b2:a4:96:ab:cf:49:96:9b:f4:fd:1e:55: 0f:9a:e5:09:d9:d2:c5:66:76:84:47:17:b7:ea:dd: 5d:11:f8:7b:cf:55:c3:83:dc:8a:26:eb:75:bc:2b: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F3:08:08:A9:61:80:56:5F:16:3A:45:1E:91:4B:98:B5:4D:5F:EF X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:eb:1a:30:02:86:02:5f:56:9d:6d:bb:d7:7e:32:78:f1:60: a8:e3:5e:54:dd:97:18:77:f8:a4:52:a1:d8:90:f2:16:4f:cc: d4:68:5f:a5:57:87:bf:29:ed:95:71:b3:36:85:2d:67:0f:ae: 8b:50:c2:9d:87:ad:9c:3d:96:e3:ac:1c:ae:1d:f4:9c:ce:21: 1f:5a:c0:7d:cb:8c:36:bb:04:4e:bd:ee:d6:49:e0:3b:8e:07: f4:c6:ab:c6:e1:0d:36:77:00:c0:d3:20:ab:6a:71:3c:58:c8: d6:6e:b5:17:0d:b7:e5:c0:33:59:ac:33:38:8f:8b:75:9c:f0: 04:c3:44:b1:78:96:a7:c2:5a:23:ef:91:f4:8e:88:a5:9e:49: 97:78:8e:74:4b:d6:d1:ae:79:81:91:80:33:e8:17:b8:04:f1: b2:bc:c8:84:86:6f:86:3f:40:c6:05:79:c1:5f:27:70:7c:5b: d3:95:88:a4:dc:f6:d2:1a:a8:c7:f3:fd:17:80:9c:13:8b:9a: 8a:85:84:6a:9d:d6:2a:cb:86:c4:9b:48:69:d4:23:26:c1:f4: e6:89:60:45:69:77:95:48:a8:28:46:ed:f5:69:0d:d1:d4:76: dd:e7:8b:77:91:e4:80:c3:a5:79:70:2c:e3:16:68:57:ec:45: 23:4c:c7:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURk0cKF4sGkrS+/FH8uIRPGinEuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNjAzMjAxODQ2NDZaFw0yNjAzMjQwNDAxNDZaMDMxMTAvBgNV BAMTKEQ1RjMwODA4QTk2MTgwNTY1RjE2M0E0NTFFOTE0Qjk4QjU0RDVGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTqW/HwVx5hir7HQ1aBULA9MvI zt3YlwWbQ+hbfaYEJFCqhGX1clF/zuDJnfKjHSm0VELuI7ItJla2+Inx0FVn+p4g VDRx8EeAUVFdOS/bk7u9R6s7x709wueghhtqwNgjC20DP+MZZFKAURaz8yVCsZGA gejnhzXur7PkyN6imvvqkTrIRh2L/exy/keg/TP1tNgvnI2Un4tZYFQdPZ9/x6fc 2eQaWq6GyPvrnOV2ds5Vz7Z68ZKJ5+OvQxJtpVAqtpBpKHzgSHt834/8Ha+BhTq2 XLKklqvPSZab9P0eVQ+a5QnZ0sVmdoRHF7fq3V0R+HvPVcOD3Iom63W8K4kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fMICKlhgFZfFjpFHpFLmLVNX+8wHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzrGjAChgJfVp1tu9d+MnjxYKjjXlTdlxh3 +KRSodiQ8hZPzNRoX6VXh78p7ZVxszaFLWcProtQwp2HrZw9luOsHK4d9JzOIR9a wH3LjDa7BE697tZJ4DuOB/TGq8bhDTZ3AMDTIKtqcTxYyNZutRcNt+XAM1msMziP i3Wc8ATDRLF4lqfCWiPvkfSOiKWeSZd4jnRL1tGueYGRgDPoF7gE8bK8yISGb4Y/ QMYFecFfJ3B8W9OViKTc9tIaqMfz/ReAnBOLmoqFhGqd1irLhsSbSGnUIybB9OaJ YEVpd5VIqChG7fVpDdHUdt3ni3eR5IDDpXlwLOMWaFfsRSNMxyU= -----END CERTIFICATE-----Generated at Sat Mar 21 15:10:59 2026 by rpki-client