$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: obKmF3Anx2ttma+Woa95xushD/AczHJiQDqDV2RnCvY= Subject key identifier: E6:B1:A6:D9:BE:47:CC:41:A0:D3:05:82:91:14:64:55:0C:CC:68:5F Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 49FC5FADE9F8C79D675B597C9B1B944BC8DFB562 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 0574 Signing time: Tue 24 Mar 2026 22:22:33 +0000 Manifest this update: Tue 24 Mar 2026 22:17:33 +0000 Manifest next update: Sat 28 Mar 2026 01:26:33 +0000 Files and hashes: 1: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 2WIOYX46p74zIiYunJq4TWtX4WOqlO2yPDX3Ww98WUc=) 2: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=) 3: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: aj+bOepaLEdKcy35Vkx+DLSzWZ6QEw0FecOHXmo+MG8=) 4: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: heGyyo+ETT8V3dgjREKU/fLp6uNkHbiH2GVik5PI5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fc:5f:ad:e9:f8:c7:9d:67:5b:59:7c:9b:1b:94:4b:c8:df:b5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Mar 24 22:17:33 2026 GMT Not After : Mar 28 01:26:33 2026 GMT Subject: CN=E6B1A6D9BE47CC41A0D30582911464550CCC685F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:ef:71:ad:91:fe:90:3b:69:10:40:6d:39: 9a:f8:21:57:48:00:4c:d0:19:c8:37:ca:d6:cb:d0: d2:ff:2e:32:e2:f7:7d:fe:de:a9:3b:a1:b8:8e:f3: 75:33:c4:33:fd:8b:85:72:75:12:e3:e6:4c:42:94: e3:d3:78:9f:4e:0b:80:98:e3:31:47:b7:fb:06:a1: e5:62:a3:0c:7e:62:41:4c:14:7c:09:1c:19:ec:c1: 3d:f0:fd:85:71:1d:df:94:93:16:f9:f1:19:c6:4f: 73:09:a2:be:aa:e4:d3:2d:e7:3b:78:c9:15:82:40: f7:f8:6c:ee:5f:7f:ec:85:b4:04:02:a3:ab:6d:28: 50:a0:08:e4:8f:fd:36:9b:45:65:e0:f2:c6:bd:28: 6c:1d:a1:b6:a5:a1:b9:6d:43:00:48:f4:fc:96:62: f2:b1:be:a4:94:cc:6a:b2:f5:76:9e:9c:1a:9b:7f: 40:cf:7d:b5:fe:2c:35:34:7c:28:18:06:14:aa:b0: de:7a:b3:5c:32:bf:74:87:ab:72:53:d2:e6:28:73: 95:32:f9:51:a2:1d:61:5f:b1:19:31:3d:cc:39:67: 9e:df:27:1f:05:ab:13:bd:4a:c9:e7:f5:33:db:af: 33:fa:f3:63:c7:b9:c4:97:3b:da:82:b0:0a:50:95: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B1:A6:D9:BE:47:CC:41:A0:D3:05:82:91:14:64:55:0C:CC:68:5F X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d4:41:18:ae:a1:25:a3:ce:a5:a4:41:0a:3c:2d:cc:b9:46: 58:b9:8e:cd:e4:0d:3e:28:6b:47:89:39:81:67:8f:bc:e1:c6: 9a:77:46:dd:87:ce:f0:c1:91:2e:d9:fe:59:1c:20:2c:21:00: 6d:db:bd:88:a7:5e:f6:cf:67:22:83:bb:5e:21:ab:61:96:d9: 9a:15:20:02:bb:91:5b:af:3a:a1:84:65:90:7f:c5:a5:c3:a0: a1:1a:19:cb:d6:17:6c:87:e9:56:d6:4c:d1:23:52:a5:df:04: 2b:a1:9c:3e:71:38:09:88:89:b1:d8:ce:13:1b:48:01:8e:41: c2:aa:97:d3:24:a7:e2:df:41:a6:66:4f:8c:9b:ca:1f:21:f0: 95:43:49:51:0d:cc:65:5e:d8:4c:0d:69:f6:a6:58:e8:6b:7a: d1:70:c8:e7:57:08:cb:08:2b:1e:48:5b:c5:6b:d3:de:e1:4a: 54:07:3b:28:c9:b0:3e:8f:93:20:81:96:12:05:a3:10:cb:4b: 71:18:4b:b1:cb:da:28:f4:14:fb:1f:ad:1a:6a:db:6f:97:e3: 89:2f:38:b6:4e:d0:3e:10:4f:d2:9c:76:cb:ae:92:0e:97:03: c6:35:a5:48:d7:dd:27:98:6e:89:a5:1e:2b:70:0d:c6:72:c4: 86:7c:8a:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSfxfren4x51nW1l8mxuUS8jftWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNjAzMjQyMjE3MzNaFw0yNjAzMjgwMTI2MzNaMDMxMTAvBgNV BAMTKEU2QjFBNkQ5QkU0N0NDNDFBMEQzMDU4MjkxMTQ2NDU1MENDQzY4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7O9xrZH+kDtpEEBtOZr4IVdI AEzQGcg3ytbL0NL/LjLi933+3qk7obiO83UzxDP9i4VydRLj5kxClOPTeJ9OC4CY 4zFHt/sGoeViowx+YkFMFHwJHBnswT3w/YVxHd+Ukxb58RnGT3MJor6q5NMt5zt4 yRWCQPf4bO5ff+yFtAQCo6ttKFCgCOSP/TabRWXg8sa9KGwdobalobltQwBI9PyW YvKxvqSUzGqy9XaenBqbf0DPfbX+LDU0fCgYBhSqsN56s1wyv3SHq3JT0uYoc5Uy +VGiHWFfsRkxPcw5Z57fJx8FqxO9Ssnn9TPbrzP682PHucSXO9qCsApQlXl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5rGm2b5HzEGg0wWCkRRkVQzMaF8wHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfUQRiuoSWjzqWkQQo8Lcy5Rli5js3kDT4o a0eJOYFnj7zhxpp3Rt2HzvDBkS7Z/lkcICwhAG3bvYinXvbPZyKDu14hq2GW2ZoV IAK7kVuvOqGEZZB/xaXDoKEaGcvWF2yH6VbWTNEjUqXfBCuhnD5xOAmIibHYzhMb SAGOQcKql9Mkp+LfQaZmT4ybyh8h8JVDSVENzGVe2EwNafamWOhretFwyOdXCMsI Kx5IW8Vr097hSlQHOyjJsD6PkyCBlhIFoxDLS3EYS7HL2ij0FPsfrRpq22+X44kv OLZO0D4QT9Kcdsuukg6XA8Y1pUjX3SeYbomlHitwDcZyxIZ8ilQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:31:53 2026 by rpki-client