$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: wbD3kHvTSKfnMk+hhQ6sM1AxekeWlLw3Q+bBpBeKscg= Subject key identifier: 97:23:A0:C8:71:BC:59:71:D5:B1:32:72:36:05:6A:D6:9B:F8:30:DF Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 3B89D950D487E356F744162E9BB3F041BB76936C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: 015D Signing time: Tue 24 Mar 2026 19:51:10 +0000 Manifest this update: Tue 24 Mar 2026 19:46:10 +0000 Manifest next update: Sat 28 Mar 2026 03:46:10 +0000 Files and hashes: 1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: TKSuxv+G1JZ+U4xuzrOfLR9m18UyCAQL4fzu7TVQdYk=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: 8MQEMqhN7Q9xL1VnnFKndGDw/o7VojjkZHwwL7Jl284=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:89:d9:50:d4:87:e3:56:f7:44:16:2e:9b:b3:f0:41:bb:76:93:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Mar 24 19:46:10 2026 GMT Not After : Mar 28 03:46:10 2026 GMT Subject: CN=9723A0C871BC5971D5B1327236056AD69BF830DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:d4:ad:9d:f4:35:0d:5a:a9:4f:c3:2f:4f: 92:39:bc:98:dd:12:83:0c:b5:d0:ed:44:89:22:a9: cb:62:08:62:79:7e:9f:c1:b0:32:41:a8:d8:c0:e5: 68:9e:93:73:7b:e9:1f:4a:a2:9c:4d:31:2c:c7:2d: 75:02:cf:99:45:96:06:99:5a:50:e6:32:7c:6f:56: 59:87:27:26:33:20:c8:75:7c:1a:9b:80:ae:39:3b: 83:e0:85:fc:5e:25:6e:ab:52:8b:88:ee:7b:d9:08: 89:14:0c:ae:4f:67:ef:fc:ad:49:dd:82:a6:5e:23: 2e:1d:0c:5f:cf:a4:f8:3f:e2:fb:ad:bf:3d:a7:27: e1:65:c5:f7:4a:c2:4b:03:6f:30:4e:97:e3:18:4f: 3f:6d:aa:1b:62:12:33:f2:57:09:92:26:14:66:57: 20:7b:56:5c:20:75:8a:00:00:30:ab:b9:29:9d:76: 74:03:31:cf:12:d0:6a:53:61:72:d4:58:6e:0d:72: 88:0d:d5:1c:07:1b:fa:71:b7:50:51:78:25:25:92: 38:cc:48:3d:d9:f3:b9:05:35:23:42:f5:f6:67:ca: 65:db:1e:99:35:b7:99:b5:9c:76:56:e1:6e:d9:75: 0b:b1:5a:da:32:be:28:4f:b6:b5:a9:e3:4d:6e:d7: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:23:A0:C8:71:BC:59:71:D5:B1:32:72:36:05:6A:D6:9B:F8:30:DF X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e0:4d:c8:24:e0:4a:5e:66:55:f5:7e:47:19:c0:f2:25:11: ae:70:71:42:e4:81:59:17:d1:e7:d2:ba:4f:f0:b4:a4:ff:70: e1:07:1f:78:3d:57:04:9c:cc:d4:04:cf:e7:ce:ba:ce:71:59: 21:40:41:67:65:f0:30:26:ad:3c:86:12:c6:75:11:78:62:79: e8:e7:f2:b7:1c:5d:87:0c:30:18:15:f9:f0:67:f4:90:28:93: cc:05:fb:fe:b3:da:12:05:63:57:9e:5b:5a:ed:68:db:5d:5b: 56:6e:4a:4b:9a:c3:ae:e9:ca:f3:ff:c5:9a:41:c1:a6:97:ff: 45:b4:c8:b3:c0:24:ee:25:f5:f0:88:08:94:98:0e:2f:e8:9a: a8:df:98:04:0f:d5:7b:68:37:21:99:55:b2:38:88:fc:95:26: b9:ad:e1:ac:92:a1:bc:66:b7:19:ba:14:15:ea:a1:74:ff:61: 37:00:26:6e:49:23:86:68:a9:37:c6:0b:71:4f:02:f8:fb:c0: c1:f9:88:a4:7a:54:d7:89:29:d0:84:26:45:6e:52:3a:79:9d: 22:74:52:8e:14:79:c1:e0:2d:5d:1a:cb:b2:76:4b:a1:9c:4f: 71:0a:4c:82:62:9d:d3:6a:e5:e6:c2:ce:d3:64:5c:06:98:12: cf:be:45:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4nZUNSH41b3RBYum7PwQbt2k2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNjAzMjQxOTQ2MTBaFw0yNjAzMjgwMzQ2MTBaMDMxMTAvBgNV BAMTKDk3MjNBMEM4NzFCQzU5NzFENUIxMzI3MjM2MDU2QUQ2OUJGODMwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hNStnfQ1DVqpT8MvT5I5vJjd EoMMtdDtRIkiqctiCGJ5fp/BsDJBqNjA5Wiek3N76R9KopxNMSzHLXUCz5lFlgaZ WlDmMnxvVlmHJyYzIMh1fBqbgK45O4PghfxeJW6rUouI7nvZCIkUDK5PZ+/8rUnd gqZeIy4dDF/PpPg/4vutvz2nJ+FlxfdKwksDbzBOl+MYTz9tqhtiEjPyVwmSJhRm VyB7VlwgdYoAADCruSmddnQDMc8S0GpTYXLUWG4NcogN1RwHG/pxt1BReCUlkjjM SD3Z87kFNSNC9fZnymXbHpk1t5m1nHZW4W7ZdQuxWtoyvihPtrWp401u12E/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlyOgyHG8WXHVsTJyNgVq1pv4MN8wHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIngTcgk4EpeZlX1fkcZwPIlEa5wcULkgVkX 0efSuk/wtKT/cOEHH3g9VwSczNQEz+fOus5xWSFAQWdl8DAmrTyGEsZ1EXhieejn 8rccXYcMMBgV+fBn9JAok8wF+/6z2hIFY1eeW1rtaNtdW1ZuSkuaw67pyvP/xZpB waaX/0W0yLPAJO4l9fCICJSYDi/omqjfmAQP1XtoNyGZVbI4iPyVJrmt4aySobxm txm6FBXqoXT/YTcAJm5JI4ZoqTfGC3FPAvj7wMH5iKR6VNeJKdCEJkVuUjp5nSJ0 Uo4UecHgLV0ay7J2S6GcT3EKTIJindNq5ebCztNkXAaYEs++RUU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:41 2026 by rpki-client