$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: y2/1i7xwQvFX4m0k8CkCa7WfwV6/lx/ZBizUdVcQsGE= Subject key identifier: 8D:EC:F8:D8:5F:7A:D3:E5:C0:FF:DE:9C:61:B3:8F:44:AD:EF:A3:93 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 55DBD9ECAB14497E0E39F08D40ECB33DB5018F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 033A Signing time: Sat 07 Mar 2026 11:12:36 +0000 Manifest this update: Sat 07 Mar 2026 11:07:36 +0000 Manifest next update: Tue 10 Mar 2026 15:31:36 +0000 Files and hashes: 1: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: XbhHAVjdklEOIQ3CDNitPsHrTyWbDm4Uz9dxAbLCrY8=) 2: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 3: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) 4: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:db:d9:ec:ab:14:49:7e:0e:39:f0:8d:40:ec:b3:3d:b5:01:8f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Mar 7 11:07:36 2026 GMT Not After : Mar 10 15:31:36 2026 GMT Subject: CN=8DECF8D85F7AD3E5C0FFDE9C61B38F44ADEFA393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:8c:c5:7f:54:f4:b9:cf:d7:ed:40:29:04: 40:c5:cd:fb:33:16:42:c2:b1:39:9a:03:06:cf:15: b7:87:8d:b7:1b:d2:d5:08:35:69:8d:ce:39:ea:05: a4:72:72:58:9c:64:3c:f3:21:f8:9c:25:30:16:bf: 4c:66:bc:9e:75:12:e7:d0:69:f3:d8:1d:65:71:d0: 9b:54:a3:98:a8:a9:d1:a0:6d:98:06:48:b1:22:ed: 1e:87:a5:4f:73:c9:e3:6e:17:9c:ab:0b:f8:bb:ab: 51:02:0e:ae:5f:11:28:bc:75:7e:06:c9:1d:ba:41: 65:a9:ee:48:32:71:04:69:2a:19:76:64:6d:60:e5: f2:b5:f9:1b:38:30:67:66:3b:a1:b7:c5:e4:05:2f: 2b:b2:e0:9a:56:1e:9e:e6:cc:f6:91:2e:b3:a3:98: 80:70:5e:f8:01:1e:7d:4f:d6:04:dc:45:8f:40:aa: 67:f2:e8:0b:aa:27:0b:9f:c4:32:1e:f2:19:6a:f6: 3a:fc:a0:c7:c5:85:03:32:19:74:ac:5c:86:ae:86: 32:85:47:ec:0f:09:0c:26:1c:0f:f8:0a:24:d3:e1: bc:aa:69:f4:bb:07:75:c7:c4:83:66:ec:99:db:4b: c2:df:e7:52:64:4a:42:91:07:2e:24:42:14:db:a8: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EC:F8:D8:5F:7A:D3:E5:C0:FF:DE:9C:61:B3:8F:44:AD:EF:A3:93 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:04:a9:0a:a0:68:c7:b1:eb:b6:9d:ed:d9:7c:03:31:b3:cb: 77:7b:c4:91:ed:b3:f9:26:0b:97:73:79:58:aa:5e:0f:9d:30: 0e:15:de:2c:0e:e4:3a:36:2f:34:53:c3:84:94:2b:8f:aa:9d: 2d:da:81:dd:2b:2b:a1:6c:ad:23:91:ec:4d:3d:44:71:9a:cd: 3f:04:89:6a:d1:fc:e4:bc:9a:60:e2:be:38:ca:46:41:8c:79: 2d:0f:a7:b9:5d:bd:82:c5:29:1f:cd:2a:01:7c:bc:da:ae:4e: cd:1f:b8:06:c7:3f:1e:de:db:81:58:ae:09:76:44:99:95:f6: 9c:9d:4f:34:5b:bc:90:00:8c:3a:a6:0d:cf:65:58:02:b9:66: 1a:32:33:f3:36:ff:42:05:fc:6f:d9:2b:66:92:4b:64:9c:81: 96:ba:04:e1:8e:fb:fb:64:5d:d6:bd:86:2f:62:26:1e:71:49: b6:fb:89:bf:84:3f:75:e8:3e:26:0e:1b:80:5e:14:51:50:63: 73:2e:4c:c6:db:f8:a8:26:5a:28:3d:ba:8b:24:65:08:09:d9: 7c:3d:22:7f:29:87:ef:a8:76:7a:fa:a4:f4:62:14:99:66:f2: b4:b7:fd:4a:43:cf:23:9a:0d:5e:fd:fa:74:b6:47:7f:2c:ca: 1a:fd:5d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdvZ7KsUSX4OOfCNQOyzPbUBjw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNjAzMDcxMTA3MzZaFw0yNjAzMTAxNTMxMzZaMDMxMTAvBgNV BAMTKDhERUNGOEQ4NUY3QUQzRTVDMEZGREU5QzYxQjM4RjQ0QURFRkEzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdYzFf1T0uc/X7UApBEDFzfsz FkLCsTmaAwbPFbeHjbcb0tUINWmNzjnqBaRyclicZDzzIficJTAWv0xmvJ51EufQ afPYHWVx0JtUo5ioqdGgbZgGSLEi7R6HpU9zyeNuF5yrC/i7q1ECDq5fESi8dX4G yR26QWWp7kgycQRpKhl2ZG1g5fK1+Rs4MGdmO6G3xeQFLyuy4JpWHp7mzPaRLrOj mIBwXvgBHn1P1gTcRY9Aqmfy6AuqJwufxDIe8hlq9jr8oMfFhQMyGXSsXIauhjKF R+wPCQwmHA/4CiTT4byqafS7B3XHxINm7JnbS8Lf51JkSkKRBy4kQhTbqCUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjez42F960+XA/96cYbOPRK3vo5MwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkEqQqgaMex67ad7dl8AzGzy3d7xJHts/km C5dzeViqXg+dMA4V3iwO5Do2LzRTw4SUK4+qnS3agd0rK6FsrSOR7E09RHGazT8E iWrR/OS8mmDivjjKRkGMeS0Pp7ldvYLFKR/NKgF8vNquTs0fuAbHPx7e24FYrgl2 RJmV9pydTzRbvJAAjDqmDc9lWAK5ZhoyM/M2/0IF/G/ZK2aSS2ScgZa6BOGO+/tk Xda9hi9iJh5xSbb7ib+EP3XoPiYOG4BeFFFQY3MuTMbb+KgmWig9uoskZQgJ2Xw9 In8ph++odnr6pPRiFJlm8rS3/UpDzyOaDV79+nS2R38syhr9Xao= -----END CERTIFICATE-----Generated at Sun Mar 8 00:13:01 2026 by rpki-client