$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: OoLbY6U/MICIl0uRloEO+OrFqXjgnxq5lZcp+NjSnzw= Subject key identifier: 8D:AD:77:57:DE:99:E2:5A:3C:42:6D:61:8E:4A:DC:8C:D8:18:FE:F0 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 687485EC195D2A4B51F3C3DE57BD5F4AAF669645 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 03F0 Signing time: Sun 22 Mar 2026 18:01:53 +0000 Manifest this update: Sun 22 Mar 2026 17:56:53 +0000 Manifest next update: Thu 26 Mar 2026 01:49:53 +0000 Files and hashes: 1: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: EiCmHMYmmzf+/n2LZl36tHEHdpKrECaxi0eq9mr8kI4=) 2: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: 24/NhCGBGOt7WZwcmBT+s4GINfQM7GC17qrWB072MSU=) 3: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: I5lMCHW/0VM2snh5gMHMreCjKGcwb2psDVtNsfQ2Q0o=) 4: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: i/wE9/DDpdlCjm0NM2UFIdi5f16OPBgnoC1WNngZprI=) 5: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: 8uslDq+EkJlCY+MtyQFy4AEhhci2PaD2xXMS8hJIQuw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 01:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:74:85:ec:19:5d:2a:4b:51:f3:c3:de:57:bd:5f:4a:af:66:96:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Mar 22 17:56:53 2026 GMT Not After : Mar 26 01:49:53 2026 GMT Subject: CN=8DAD7757DE99E25A3C426D618E4ADC8CD818FEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:36:73:a6:af:02:86:01:5c:6a:84:3c:96: 21:8d:32:01:38:53:0f:91:2d:2f:92:26:b0:2a:21: 5a:a2:24:5d:de:d6:77:07:cb:5a:1c:a9:2d:08:5b: b5:1e:a5:81:c6:36:50:28:b5:e4:20:9e:c1:35:1b: 97:6d:e7:68:68:8a:05:5e:13:d6:a3:ef:e5:a0:6b: e6:36:e0:93:b3:2a:b8:40:9a:0b:fe:3c:c3:6e:c7: 04:ea:ca:ec:17:d8:cf:20:2b:2d:c0:2d:9f:21:b7: bf:3f:15:b1:21:ce:ac:d3:97:f6:d9:03:96:42:12: 0e:d0:1c:78:60:63:22:d4:96:ba:bf:87:ed:d2:25: 4e:88:5b:b3:ac:49:23:b6:b1:5d:fa:ee:c7:39:c0: 28:85:18:54:d3:3a:81:64:83:41:46:1d:1d:ee:02: 22:1e:cb:a9:1f:10:df:8a:73:2e:9a:56:31:7e:1e: a6:65:c1:99:4c:ab:71:70:42:7e:d2:9b:5d:f3:76: 0c:7a:63:3e:9f:f5:49:f8:99:ec:36:37:00:8b:e0: a5:28:c5:30:fa:32:a2:e7:d6:98:00:a1:9b:5a:38: 0a:49:5c:e7:4b:a2:8d:e2:b7:75:b2:62:6e:6c:75: ff:b3:35:96:09:c8:65:94:a9:cb:27:a8:88:c1:85: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:77:57:DE:99:E2:5A:3C:42:6D:61:8E:4A:DC:8C:D8:18:FE:F0 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ca:b4:b7:58:ee:64:ae:ca:88:24:82:88:4c:04:b4:ea:8a: 4e:bd:34:b8:47:3f:67:79:24:f3:e7:8c:a0:f7:4b:7a:e1:37: e9:76:9e:8c:84:62:a5:c4:6e:d2:eb:21:6f:7e:be:0e:8d:67: 6a:c3:2c:54:99:00:ab:24:b0:33:ea:a8:24:76:2c:3d:9b:82: 91:df:e8:d2:71:16:35:bb:d1:8d:42:5e:99:4e:af:03:b4:d4: d9:1c:2f:c8:3d:2e:6b:c7:4e:7f:20:89:11:6b:df:4f:dc:94: a7:46:3c:57:bd:24:95:12:7f:3d:16:15:0f:61:8e:ac:8d:99: 27:01:16:cb:2f:7d:49:77:e9:1d:ec:5c:22:47:53:3b:45:50: 8a:92:50:47:ee:87:c1:05:54:f0:2b:21:df:ac:3a:f2:09:65: d2:d4:ac:80:c7:83:9c:c2:f9:90:11:c2:d9:ca:6b:83:c3:b7: 92:41:ae:ec:1a:82:a0:cb:26:f3:4f:da:db:40:c9:f0:af:f1: 5e:92:61:48:1a:7d:82:c7:d0:99:a9:d2:97:8d:00:32:1b:f6: fc:04:22:19:80:63:5f:9b:88:52:14:85:43:2d:0c:56:93:32: 6d:b9:ff:29:ce:47:c6:c6:c9:86:0e:a4:97:db:1a:ef:29:7e: 6a:b3:4d:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHSF7BldKktR88PeV71fSq9mlkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNjAzMjIxNzU2NTNaFw0yNjAzMjYwMTQ5NTNaMDMxMTAvBgNV BAMTKDhEQUQ3NzU3REU5OUUyNUEzQzQyNkQ2MThFNEFEQzhDRDgxOEZFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbNjZzpq8ChgFcaoQ8liGNMgE4 Uw+RLS+SJrAqIVqiJF3e1ncHy1ocqS0IW7UepYHGNlAoteQgnsE1G5dt52hoigVe E9aj7+Wga+Y24JOzKrhAmgv+PMNuxwTqyuwX2M8gKy3ALZ8ht78/FbEhzqzTl/bZ A5ZCEg7QHHhgYyLUlrq/h+3SJU6IW7OsSSO2sV367sc5wCiFGFTTOoFkg0FGHR3u AiIey6kfEN+Kcy6aVjF+HqZlwZlMq3FwQn7Sm13zdgx6Yz6f9Un4mew2NwCL4KUo xTD6MqLn1pgAoZtaOApJXOdLoo3it3WyYm5sdf+zNZYJyGWUqcsnqIjBheRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUja13V96Z4lo8Qm1hjkrcjNgY/vAwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfKtLdY7mSuyogkgohMBLTqik69NLhHP2d5 JPPnjKD3S3rhN+l2noyEYqXEbtLrIW9+vg6NZ2rDLFSZAKsksDPqqCR2LD2bgpHf 6NJxFjW70Y1CXplOrwO01NkcL8g9LmvHTn8giRFr30/clKdGPFe9JJUSfz0WFQ9h jqyNmScBFssvfUl36R3sXCJHUztFUIqSUEfuh8EFVPArId+sOvIJZdLUrIDHg5zC +ZARwtnKa4PDt5JBruwagqDLJvNP2ttAyfCv8V6SYUgafYLH0Jmp0peNADIb9vwE IhmAY1+biFIUhUMtDFaTMm25/ynOR8bGyYYOpJfbGu8pfmqzTXg= -----END CERTIFICATE-----Generated at Tue Mar 24 12:28:07 2026 by rpki-client