$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: xmTm0KzyrgYPO/Bsbt+JDk86U9t4ySA0Gemc5ti+b3w= Subject key identifier: 7C:2E:E7:20:1D:58:1E:DB:C3:86:26:B1:E4:92:9E:C8:52:6E:31:7E Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 666DB6B94FBABD94ED6444406D89E2CAFF3C92A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 024A Signing time: Wed 25 Mar 2026 03:42:29 +0000 Manifest this update: Wed 25 Mar 2026 03:37:29 +0000 Manifest next update: Sat 28 Mar 2026 10:28:29 +0000 Files and hashes: 1: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=) 2: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: wAGU7IpNQOd9yuX+0T6OMQGcnNifLd9ThN9mKC40zPo=) 3: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=) 4: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6d:b6:b9:4f:ba:bd:94:ed:64:44:40:6d:89:e2:ca:ff:3c:92:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Mar 25 03:37:29 2026 GMT Not After : Mar 28 10:28:29 2026 GMT Subject: CN=7C2EE7201D581EDBC38626B1E4929EC8526E317E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:de:3e:f5:8e:c9:69:87:e0:a8:86:82:45: 1b:4c:c1:37:e8:73:7c:18:e5:8c:cf:c0:bc:c4:b2: 12:c2:7c:e0:34:82:e2:c3:01:18:15:51:f4:26:a5: 8a:c8:e4:e7:55:de:0b:62:5b:22:5b:0b:86:20:ad: 7f:95:17:df:eb:f4:d9:cc:46:b7:22:42:4e:05:aa: d0:c0:c5:f7:5a:b6:62:0f:62:ef:65:29:9f:44:a4: 88:a0:1d:b4:09:82:50:b1:35:5c:84:aa:d5:4e:a4: fa:1f:4e:02:42:92:d0:bf:f2:e9:c8:e3:34:4c:6d: 31:cb:92:84:19:56:ce:43:45:15:29:34:fd:48:40: eb:24:7b:36:4b:e4:f5:82:68:43:a4:ab:a6:cb:a9: ea:7f:8b:d5:3f:56:b4:4f:1b:b0:17:80:ad:70:00: 1a:a8:2a:66:65:32:42:ec:8b:26:f2:4d:ce:f5:ca: 7e:8d:6a:4a:cf:cc:c8:28:35:ce:00:a4:57:d5:72: a8:f5:69:33:e9:92:39:9b:6b:6f:60:92:f9:80:eb: 38:73:65:65:b4:06:62:b2:a9:07:e3:fa:bc:e4:32: 0c:cd:87:17:40:48:2f:24:df:48:cc:68:ea:57:88: f7:03:de:f8:68:28:52:c6:da:40:8c:22:d4:f8:43: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2E:E7:20:1D:58:1E:DB:C3:86:26:B1:E4:92:9E:C8:52:6E:31:7E X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d0:eb:50:aa:c9:ca:5e:13:cc:e4:87:df:db:9e:3c:12:d9: 24:f0:9a:ec:26:50:fc:56:a5:bb:7b:06:b6:15:b5:a5:7c:fb: 55:ac:10:96:45:b9:05:bf:fa:1a:c0:a9:b4:0f:96:a3:7f:40: c7:39:a8:d0:f3:4d:99:ec:53:60:07:ca:08:a0:7e:12:2b:46: 42:62:bd:28:fa:23:64:67:51:be:04:96:fe:a5:a7:91:6e:d8: fa:9e:8d:9b:d8:fa:1e:94:a2:3a:8b:27:b9:89:8e:8b:6a:55: fa:f0:b0:74:a7:07:11:35:10:6f:d6:f1:55:a7:4f:5e:b1:da: 50:06:3b:89:6c:f7:32:a8:f2:84:9f:b9:1e:7f:bd:c6:d0:d3: f3:ee:ae:24:72:d3:61:7e:49:ce:a3:ac:16:6e:72:77:e8:f5: 32:ee:59:e8:b8:66:e0:ab:6f:4b:67:2c:05:9c:82:69:03:3a: 17:a1:a4:4a:e5:ff:9d:46:8a:99:d1:60:f5:da:69:1c:de:98: ff:6b:27:de:62:9e:e4:2f:de:8c:76:e5:9b:b8:cd:51:c4:e9: 53:8c:48:2b:c4:4e:ef:03:91:84:33:12:ff:11:96:7a:cb:2f: 56:dd:37:4a:ae:0b:0a:e0:07:af:85:42:a0:a9:c5:8c:d6:20: 8c:c2:68:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZm22uU+6vZTtZERAbYniyv88kqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNjAzMjUwMzM3MjlaFw0yNjAzMjgxMDI4MjlaMDMxMTAvBgNV BAMTKDdDMkVFNzIwMUQ1ODFFREJDMzg2MjZCMUU0OTI5RUM4NTI2RTMxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/94+9Y7JaYfgqIaCRRtMwTfo c3wY5YzPwLzEshLCfOA0guLDARgVUfQmpYrI5OdV3gtiWyJbC4YgrX+VF9/r9NnM RrciQk4FqtDAxfdatmIPYu9lKZ9EpIigHbQJglCxNVyEqtVOpPofTgJCktC/8unI 4zRMbTHLkoQZVs5DRRUpNP1IQOskezZL5PWCaEOkq6bLqep/i9U/VrRPG7AXgK1w ABqoKmZlMkLsiybyTc71yn6NakrPzMgoNc4ApFfVcqj1aTPpkjmba29gkvmA6zhz ZWW0BmKyqQfj+rzkMgzNhxdASC8k30jMaOpXiPcD3vhoKFLG2kCMItT4Q00xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfC7nIB1YHtvDhiax5JKeyFJuMX4wHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbQ61CqycpeE8zkh9/bnjwS2STwmuwmUPxW pbt7BrYVtaV8+1WsEJZFuQW/+hrAqbQPlqN/QMc5qNDzTZnsU2AHygigfhIrRkJi vSj6I2RnUb4Elv6lp5Fu2PqejZvY+h6UojqLJ7mJjotqVfrwsHSnBxE1EG/W8VWn T16x2lAGO4ls9zKo8oSfuR5/vcbQ0/PuriRy02F+Sc6jrBZucnfo9TLuWei4ZuCr b0tnLAWcgmkDOhehpErl/51GipnRYPXaaRzemP9rJ95inuQv3ox25Zu4zVHE6VOM SCvETu8DkYQzEv8RlnrLL1bdN0quCwrgB6+FQqCpxYzWIIzCaB0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:26 2026 by rpki-client