$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: gm+0sWOtbMN+Oq3K5eaHBNw6vvYXW1xrw7RqeQYDZK8= Subject key identifier: 0D:68:95:9F:62:E5:A2:39:C3:83:5E:51:4B:EB:31:D7:C8:17:BC:E7 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 50E80E4E907B1BD075A88F8D15CED976F51AB58F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 055E Signing time: Wed 25 Mar 2026 13:10:06 +0000 Manifest this update: Wed 25 Mar 2026 13:05:06 +0000 Manifest next update: Sat 28 Mar 2026 14:58:06 +0000 Files and hashes: 1: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 2: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) 3: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: MnchyaYpU0C3uoYE3IjozliZQg+tvl7WPsVfe194/es=) 4: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e8:0e:4e:90:7b:1b:d0:75:a8:8f:8d:15:ce:d9:76:f5:1a:b5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Mar 25 13:05:06 2026 GMT Not After : Mar 28 14:58:06 2026 GMT Subject: CN=0D68959F62E5A239C3835E514BEB31D7C817BCE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:2d:ec:c4:24:e7:37:75:c6:08:45:8c:df: d2:25:00:15:35:6f:2c:e4:4f:91:fb:e0:a5:2e:72: 12:0a:22:2d:72:f6:a0:d3:d5:5d:a1:e1:4a:d9:1f: b3:80:88:0c:72:52:74:1d:fa:b3:03:2f:b5:48:83: af:d0:ed:27:ca:9f:65:07:1a:4e:4c:3b:2a:44:75: 11:02:5a:d3:f1:10:46:bf:43:10:cc:66:ea:57:68: 94:58:49:b6:ab:93:d5:67:3d:20:db:5e:a3:f0:63: 71:a5:47:15:23:23:ae:46:16:75:72:76:eb:8d:24: 70:a4:60:3a:63:8d:d5:f9:f2:c1:fa:5a:a8:f4:9c: 47:4a:dc:d1:aa:cb:36:4a:46:75:dc:f1:60:24:51: 0e:72:10:df:a2:f0:da:f1:0e:a4:de:8a:77:3c:8c: 25:ee:91:81:c4:29:32:49:d9:c4:b1:14:e4:5b:16: 06:ab:7b:55:d9:3b:cd:a5:5d:76:f8:94:d9:27:fe: 5c:a8:4a:2a:46:3e:45:d9:6c:11:a4:55:b3:47:5d: d8:c1:ac:57:11:f6:23:1b:6e:0c:27:bc:06:38:17: 75:cf:39:1b:be:4d:5a:b4:6f:ca:cb:00:10:be:36: 2f:b7:7b:d8:22:d8:01:c1:c3:cd:59:fc:60:1d:57: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:68:95:9F:62:E5:A2:39:C3:83:5E:51:4B:EB:31:D7:C8:17:BC:E7 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:eb:01:38:3a:64:98:9f:cc:ad:85:ec:31:71:4f:a9:6d:db: 82:fb:39:df:55:6a:20:09:8c:7e:ca:fd:d3:06:97:fc:ee:8a: 26:f3:62:67:93:f4:32:f8:b9:92:02:7f:d9:cf:cd:cf:c3:89: 7c:5c:45:ad:a9:24:9e:c6:13:5a:6a:83:e0:3e:e8:fa:99:55: c2:f0:0a:4a:10:66:45:fd:ce:5b:c4:bd:4d:aa:db:c9:ea:e0: b1:b9:53:23:e3:b5:5c:b2:f8:d5:a3:27:99:28:3f:c5:5b:ce: e6:a9:fb:08:52:00:9b:ec:8c:9c:7c:5c:fd:b0:fc:56:03:3f: 2e:c2:5c:dd:fb:b7:c5:fd:ab:81:f7:ff:9a:c0:11:7a:89:1a: d9:39:d7:be:51:09:a7:55:f4:cc:74:17:a6:2a:cd:ef:71:79: 5d:81:f6:cb:c6:fa:ac:21:37:a2:4d:1a:5a:e2:ae:8a:7f:b2: 17:bd:f6:97:11:7e:d2:33:02:2f:71:26:7d:4f:32:95:73:c6: 17:5b:c6:7b:20:54:99:c2:7e:2c:43:91:81:b5:86:0c:e1:8b: f1:b1:f3:31:87:ae:b9:49:8c:f8:23:3f:aa:95:7e:2e:c2:fd: 1d:20:71:07:b7:1f:fb:6e:cf:93:7e:dd:c2:79:bd:df:39:9c: 1e:e5:d3:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOgOTpB7G9B1qI+NFc7ZdvUatY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNjAzMjUxMzA1MDZaFw0yNjAzMjgxNDU4MDZaMDMxMTAvBgNV BAMTKDBENjg5NTlGNjJFNUEyMzlDMzgzNUU1MTRCRUIzMUQ3QzgxN0JDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpi3sxCTnN3XGCEWM39IlABU1 byzkT5H74KUuchIKIi1y9qDT1V2h4UrZH7OAiAxyUnQd+rMDL7VIg6/Q7SfKn2UH Gk5MOypEdRECWtPxEEa/QxDMZupXaJRYSbark9VnPSDbXqPwY3GlRxUjI65GFnVy duuNJHCkYDpjjdX58sH6Wqj0nEdK3NGqyzZKRnXc8WAkUQ5yEN+i8NrxDqTeinc8 jCXukYHEKTJJ2cSxFORbFgare1XZO82lXXb4lNkn/lyoSipGPkXZbBGkVbNHXdjB rFcR9iMbbgwnvAY4F3XPORu+TVq0b8rLABC+Ni+3e9gi2AHBw81Z/GAdV92nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWiVn2LlojnDg15RS+sx18gXvOcwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3rATg6ZJifzK2F7DFxT6lt24L7Od9VaiAJ jH7K/dMGl/zuiibzYmeT9DL4uZICf9nPzc/DiXxcRa2pJJ7GE1pqg+A+6PqZVcLw CkoQZkX9zlvEvU2q28nq4LG5UyPjtVyy+NWjJ5koP8Vbzuap+whSAJvsjJx8XP2w /FYDPy7CXN37t8X9q4H3/5rAEXqJGtk5175RCadV9Mx0F6Yqze9xeV2B9svG+qwh N6JNGlrirop/she99pcRftIzAi9xJn1PMpVzxhdbxnsgVJnCfixDkYG1hgzhi/Gx 8zGHrrlJjPgjP6qVfi7C/R0gcQe3H/tuz5N+3cJ5vd85nB7l0xo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:38 2026 by rpki-client