$ rpki-client -vvf repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft File: 2858C74CC23A557C73F59051B7FE8638AA491C94.mft (raw, json) Hash identifier: gt4u0HaRi+7FaDoKypZLqbSrExlch/pUKWit8/AhKls= Subject key identifier: 5D:5C:BC:AF:4C:CB:DC:6C:A2:23:47:EC:3C:AB:86:A6:58:DB:9E:19 Authority key identifier: 28:58:C7:4C:C2:3A:55:7C:73:F5:90:51:B7:FE:86:38:AA:49:1C:94 Certificate issuer: /CN=2858C74CC23A557C73F59051B7FE8638AA491C94 Certificate serial: 69C0C07FB826F0808471B916A1724748798D45AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft Manifest number: 6A Signing time: Wed 11 Mar 2026 09:11:32 +0000 Manifest this update: Wed 11 Mar 2026 09:06:32 +0000 Manifest next update: Sat 14 Mar 2026 10:15:32 +0000 Files and hashes: 1: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: IB02l7aeS1Ctr7m+n8ymFsmUvTLgjo3obFTTz15X/C8=) 2: 2858C74CC23A557C73F59051B7FE8638AA491C94.crl (hash: lcS/R0y0JICN3YXJ1W3agvjWhwvBQ6oej7CNtrrAszQ=) 3: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: 8MTe8KcDcB0X2kj+3dmF5RSp4lHPV4hialaox1IdvHk=) 4: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: KGGUUPJetYRovMai9BvuYsEqHu8TgW6bYg4Sm8JWJcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.crl rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 10:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c0:c0:7f:b8:26:f0:80:84:71:b9:16:a1:72:47:48:79:8d:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2858C74CC23A557C73F59051B7FE8638AA491C94 Validity Not Before: Mar 11 09:06:32 2026 GMT Not After : Mar 14 10:15:32 2026 GMT Subject: CN=5D5CBCAF4CCBDC6CA22347EC3CAB86A658DB9E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:67:2d:d4:10:be:23:89:c1:92:eb:58:d5: b6:78:29:e4:4b:c0:68:b8:0d:bc:4e:c9:6d:58:5f: f3:5b:54:00:4c:92:4d:dc:33:2c:2f:dd:05:ec:a5: 95:69:c3:95:65:95:a1:76:64:d0:60:30:46:7a:d5: 07:2d:62:11:d1:40:cd:d5:17:e5:0a:99:2c:8e:7d: 00:ce:82:58:09:86:03:dd:01:b4:e1:0f:6c:a6:b4: 97:a0:99:ee:ca:81:80:1f:90:59:b9:3b:69:bc:e8: ab:ca:c2:8b:f9:a3:dd:81:89:ea:e8:55:d7:ac:b6: 67:21:af:42:4c:a1:ac:c6:72:4f:fd:f3:a3:9f:ed: e0:41:55:f6:f5:7d:d2:a4:71:d4:d9:58:da:d6:34: 79:ea:c9:c6:50:fe:7b:d4:39:be:5b:73:37:f9:ef: 8a:fc:4c:94:6b:e7:d6:94:18:38:0a:f3:ac:b7:fd: 72:c4:10:36:85:13:f0:23:f8:a5:29:3b:a7:ff:73: be:97:d9:d1:3c:5b:38:a0:97:97:14:80:8f:a1:64: 8a:38:99:cb:7b:06:51:f2:f3:de:95:73:3c:34:84: 5a:b5:65:c5:37:a0:74:bb:77:c7:68:46:ef:fb:c7: 32:42:f3:3d:8b:98:49:0c:89:b2:51:a6:c3:2b:d1: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5C:BC:AF:4C:CB:DC:6C:A2:23:47:EC:3C:AB:86:A6:58:DB:9E:19 X509v3 Authority Key Identifier: keyid:28:58:C7:4C:C2:3A:55:7C:73:F5:90:51:B7:FE:86:38:AA:49:1C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4f:d7:fc:e7:e2:19:f3:55:73:00:2d:4f:8b:33:7f:7d:8e: e2:b5:1d:79:e9:f4:28:4f:ec:5e:92:4b:57:65:8f:6b:53:eb: b3:6f:d2:74:49:59:b8:28:f8:4f:87:16:a7:c6:f5:0d:9d:ba: 29:e3:06:78:bc:ed:19:dc:77:20:9f:77:f9:6c:da:1e:10:9a: bc:b4:f5:bf:ed:9b:7b:2a:20:40:d0:9b:e0:f0:42:89:51:da: 02:f2:f9:9d:f5:7c:63:d9:ba:6a:c4:1e:72:18:af:b6:65:78: e2:b3:03:23:33:7c:8f:e2:c9:07:a4:97:c9:89:aa:c8:1b:d3: 1e:34:03:af:6d:d0:65:27:3e:63:1b:ea:45:66:cb:df:f4:9e: be:2b:75:4d:8e:43:df:41:16:66:8e:31:5a:0b:81:41:c2:8f: c9:9c:0a:d7:38:16:23:f6:cb:27:f6:55:04:15:75:c1:73:58: eb:6c:90:59:f7:1f:dd:de:05:0c:ef:12:3d:4f:53:db:b0:8d: ac:80:9f:52:00:bd:a6:49:46:5e:7e:2c:26:93:a0:b7:01:55: 34:d7:18:81:e4:7d:7d:24:1b:97:ac:2a:02:b8:19:47:b4:b7: ff:fb:80:3f:a4:b9:23:5b:ac:a8:a3:94:76:c9:51:72:4a:ac: e0:65:7d:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacDAf7gm8ICEcbkWoXJHSHmNRaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2MzhB QTQ5MUM5NDAeFw0yNjAzMTEwOTA2MzJaFw0yNjAzMTQxMDE1MzJaMDMxMTAvBgNV BAMTKDVENUNCQ0FGNENDQkRDNkNBMjIzNDdFQzNDQUI4NkE2NThEQjlFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecWct1BC+I4nBkutY1bZ4KeRL wGi4DbxOyW1YX/NbVABMkk3cMywv3QXspZVpw5VllaF2ZNBgMEZ61QctYhHRQM3V F+UKmSyOfQDOglgJhgPdAbThD2ymtJegme7KgYAfkFm5O2m86KvKwov5o92Biero Vdestmchr0JMoazGck/986Of7eBBVfb1fdKkcdTZWNrWNHnqycZQ/nvUOb5bczf5 74r8TJRr59aUGDgK86y3/XLEEDaFE/Aj+KUpO6f/c76X2dE8Wzigl5cUgI+hZIo4 mct7BlHy896Vczw0hFq1ZcU3oHS7d8doRu/7xzJC8z2LmEkMibJRpsMr0TPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXVy8r0zL3GyiI0fsPKuGpljbnhkwHwYDVR0j BBgwFoAUKFjHTMI6VXxz9ZBRt/6GOKpJHJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNlZjhiMC1iYTY0LTRjMGMtOGRlOC0xZjUwYTg1ZDVmZGUvMC8yODU4Qzc0Q0My M0E1NTdDNzNGNTkwNTFCN0ZFODYzOEFBNDkxQzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2MzhBQTQ5 MUM5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2 MzhBQTQ5MUM5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1P1/zn4hnzVXMALU+LM399juK1HXnp9ChP 7F6SS1dlj2tT67Nv0nRJWbgo+E+HFqfG9Q2duinjBni87RncdyCfd/ls2h4Qmry0 9b/tm3sqIEDQm+DwQolR2gLy+Z31fGPZumrEHnIYr7ZleOKzAyMzfI/iyQekl8mJ qsgb0x40A69t0GUnPmMb6kVmy9/0nr4rdU2OQ99BFmaOMVoLgUHCj8mcCtc4FiP2 yyf2VQQVdcFzWOtskFn3H93eBQzvEj1PU9uwjayAn1IAvaZJRl5+LCaToLcBVTTX GIHkfX0kG5esKgK4GUe0t//7gD+kuSNbrKijlHbJUXJKrOBlfeI= -----END CERTIFICATE-----Generated at Fri Mar 13 10:54:31 2026 by rpki-client