$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: L4Tre9A922c4Q/ul3Zru5p7lKAXa6uv53fP+ObdprU8= Subject key identifier: 27:AE:32:B2:5E:76:FA:6A:33:FC:A9:36:31:99:2E:F4:BB:05:53:08 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 2EE27485B77FA12C3B87F284A818305CB1B6B603 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: 0117 Signing time: Sat 07 Mar 2026 10:40:46 +0000 Manifest this update: Sat 07 Mar 2026 10:35:46 +0000 Manifest next update: Tue 10 Mar 2026 12:52:46 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: XGp+k4c0QK5OnwRaFy1uglFqaUUZvoZS1vSkY1WlmkQ=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e2:74:85:b7:7f:a1:2c:3b:87:f2:84:a8:18:30:5c:b1:b6:b6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Mar 7 10:35:46 2026 GMT Not After : Mar 10 12:52:46 2026 GMT Subject: CN=27AE32B25E76FA6A33FCA93631992EF4BB055308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:cd:d0:16:77:c7:5c:e3:6a:2c:0d:b7:45: 41:c5:68:f0:e2:b7:d1:7b:53:8d:dc:e0:62:93:23: bd:1c:46:a6:1f:11:ee:bd:1c:d8:b3:44:2f:70:6d: fc:db:64:bc:18:f7:77:4c:74:c3:d1:4d:3d:8b:49: 68:47:b0:2e:cb:f5:bf:b1:a3:4a:5c:69:82:80:2c: f4:73:f8:83:1e:af:73:c4:c8:d7:22:28:49:ed:2c: 50:80:7a:bf:7f:81:b6:49:62:15:f3:e7:6f:62:c5: 1e:b3:92:1d:60:34:ad:d7:4c:a5:8a:fb:04:2b:da: c4:f4:5a:c5:92:a3:59:90:d0:98:39:90:a9:c9:fa: 78:97:66:1a:e7:09:81:d5:83:4d:8d:9b:af:69:2c: 40:ed:e0:27:0f:41:00:3c:e0:a2:a9:e2:b7:ef:0b: f3:31:1f:db:23:ca:8b:7b:26:e1:f1:d0:d2:1a:13: 16:bb:d8:73:9d:40:11:fc:45:66:21:68:ee:6e:b1: 8a:bd:3a:28:43:23:99:0b:2d:14:4e:9a:d3:1d:b7: 81:b9:c5:c2:f4:4c:9f:d0:fb:9c:e9:a8:7f:71:97: 70:b9:95:c3:f7:83:bf:b7:90:7e:08:4d:1e:e9:08: a9:18:5e:12:30:25:db:34:90:98:61:ed:91:06:7c: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:32:B2:5E:76:FA:6A:33:FC:A9:36:31:99:2E:F4:BB:05:53:08 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:30:30:20:4b:bb:73:54:e0:68:5d:fe:85:2e:06:a2:c5:42: 81:a7:94:5e:3e:0d:25:05:a0:77:9e:f1:e9:e2:51:97:45:cb: 3b:18:2e:ac:a7:a9:cc:88:e2:74:a3:ce:58:a1:32:ee:7f:d6: 3d:3a:ef:f3:4e:dc:cb:fa:62:4c:e3:4e:9a:d7:18:6f:98:36: cb:16:21:17:97:48:e3:80:34:b2:8e:91:76:39:14:fa:e9:eb: 70:61:85:cf:60:6e:38:c3:42:32:1e:e9:29:ff:59:37:4b:5e: e3:af:cb:4c:78:8a:06:9e:9c:d4:3b:de:ee:17:b0:55:d0:b5: 91:17:29:9c:de:03:7b:43:5f:94:2c:44:5c:8d:31:12:56:7a: c1:46:9b:42:5f:31:06:19:ed:0b:dc:de:45:11:07:7b:6e:f1: 2d:93:6e:0c:5d:87:43:5e:e8:b6:81:c3:7b:ab:17:b2:e0:4f: a1:2c:e4:56:6b:8f:eb:f6:79:85:ac:4f:0f:2b:f7:37:85:e0: 61:04:db:f5:66:ff:75:1d:22:32:81:be:5f:1c:48:cc:60:59: e3:96:b4:c9:2c:d9:dc:8e:cc:e8:e8:b6:14:7a:cc:e1:03:14: 07:0b:5e:86:c5:af:ff:03:64:bb:df:ef:28:7f:9b:6f:af:19: c8:ac:e5:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuJ0hbd/oSw7h/KEqBgwXLG2tgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNjAzMDcxMDM1NDZaFw0yNjAzMTAxMjUyNDZaMDMxMTAvBgNV BAMTKDI3QUUzMkIyNUU3NkZBNkEzM0ZDQTkzNjMxOTkyRUY0QkIwNTUzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnc3QFnfHXONqLA23RUHFaPDi t9F7U43c4GKTI70cRqYfEe69HNizRC9wbfzbZLwY93dMdMPRTT2LSWhHsC7L9b+x o0pcaYKALPRz+IMer3PEyNciKEntLFCAer9/gbZJYhXz529ixR6zkh1gNK3XTKWK +wQr2sT0WsWSo1mQ0Jg5kKnJ+niXZhrnCYHVg02Nm69pLEDt4CcPQQA84KKp4rfv C/MxH9sjyot7JuHx0NIaExa72HOdQBH8RWYhaO5usYq9OihDI5kLLRROmtMdt4G5 xcL0TJ/Q+5zpqH9xl3C5lcP3g7+3kH4ITR7pCKkYXhIwJds0kJhh7ZEGfEd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ64ysl52+moz/Kk2MZku9LsFUwgwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8wMCBLu3NU4Ghd/oUuBqLFQoGnlF4+DSUF oHee8eniUZdFyzsYLqynqcyI4nSjzlihMu5/1j067/NO3Mv6YkzjTprXGG+YNssW IReXSOOANLKOkXY5FPrp63Bhhc9gbjjDQjIe6Sn/WTdLXuOvy0x4igaenNQ73u4X sFXQtZEXKZzeA3tDX5QsRFyNMRJWesFGm0JfMQYZ7Qvc3kURB3tu8S2Tbgxdh0Ne 6LaBw3urF7LgT6Es5FZrj+v2eYWsTw8r9zeF4GEE2/Vm/3UdIjKBvl8cSMxgWeOW tMks2dyOzOjothR6zOEDFAcLXobFr/8DZLvf7yh/m2+vGcis5WY= -----END CERTIFICATE-----Generated at Sat Mar 7 17:52:18 2026 by rpki-client