$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: K34Rt3CDtreykbbqeyPvyX5Fa402/6uI6tU1NGz6VXU= Subject key identifier: 0A:D4:4C:96:1C:7F:17:E3:82:13:C7:78:5D:93:BE:15:F2:6C:6D:53 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 60772CDB89E41117FD5222B559248ABDEB806477 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: B2 Signing time: Tue 24 Mar 2026 20:12:39 +0000 Manifest this update: Tue 24 Mar 2026 20:07:39 +0000 Manifest next update: Sat 28 Mar 2026 02:24:39 +0000 Files and hashes: 1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: GHcaGTr42pWfKGUiuVyNLpWaKDzXg/CZAXZPmJ6Sx0c=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: FoxdZHJrEp7+nFUQtWkPulj2p2oThQSviqn5PbYR67E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:77:2c:db:89:e4:11:17:fd:52:22:b5:59:24:8a:bd:eb:80:64:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Mar 24 20:07:39 2026 GMT Not After : Mar 28 02:24:39 2026 GMT Subject: CN=0AD44C961C7F17E38213C7785D93BE15F26C6D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:93:ec:a9:c0:97:04:54:f3:b1:70:78:71: aa:b9:3a:f6:b2:90:4f:d0:be:90:20:cc:87:31:2a: 7c:ef:b5:7a:b3:df:7f:88:77:e7:ea:79:00:a7:65: f0:2b:47:b5:e7:42:12:26:cc:91:99:69:4b:9c:11: e3:56:5f:8b:10:b1:2b:5a:e3:a3:ea:4f:34:61:57: ac:30:38:d6:bf:9a:2d:8a:fc:f2:44:f0:f5:4b:d3: b5:8b:e1:b8:d0:2f:19:f6:d3:1d:30:38:2c:c5:61: 4b:e1:5d:22:18:de:c4:7a:99:a7:0b:3b:b9:43:3a: c7:cc:12:04:ca:cb:7f:e7:13:7d:7c:db:74:78:0d: c8:f0:e3:81:25:05:08:cf:1e:f4:83:5d:07:f8:9d: 3a:9d:bd:f1:4f:01:ba:cb:af:d3:5b:40:3c:d6:29: 9b:72:8c:b2:fc:6d:49:84:1f:da:04:f9:08:4f:61: b5:81:b3:54:e9:91:df:1b:43:82:ec:67:df:52:3f: 5e:c2:11:4c:b9:cc:79:41:a8:9a:9c:ea:22:40:3e: 16:3f:9d:48:66:fe:29:66:37:52:75:ca:c9:f2:a5: f1:15:41:64:26:73:0a:5b:f9:1f:c6:5c:ee:94:64: 97:4c:6b:e0:e6:be:1c:43:a2:dc:11:2d:d9:2f:5b: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D4:4C:96:1C:7F:17:E3:82:13:C7:78:5D:93:BE:15:F2:6C:6D:53 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:54:16:f5:5c:41:b3:4d:43:1f:73:e3:42:ff:0b:87:27:24: 58:06:e7:76:5c:ea:52:86:ed:d3:a6:89:f4:61:d5:dd:f3:50: 12:ca:25:64:53:67:01:e8:54:22:9a:92:1b:ec:f8:b2:ca:a4: c8:1e:92:d5:0b:e6:e3:ac:91:08:a6:31:61:c3:54:b8:c6:77: 23:93:f1:b3:bd:7e:4d:e2:e5:44:72:b6:6d:4f:3b:6f:57:82: a7:e0:c4:a6:e8:36:e7:db:7c:97:91:0c:5b:38:1e:28:00:cf: 10:05:f5:50:74:4b:ba:35:3e:45:61:84:af:af:89:f4:53:dc: ba:98:54:b9:1b:05:f6:81:dc:19:67:46:7e:06:60:0f:41:70: e9:9d:50:3c:7d:08:53:16:1b:a0:9d:dd:75:ac:e5:89:e5:5f: 69:3c:fa:be:58:90:2b:0f:91:cd:89:eb:da:be:9e:da:3b:99: 49:4d:7f:c6:4f:5b:ac:8f:2f:a9:21:c8:85:c5:cf:8b:51:7f: 25:6e:db:21:b1:ae:63:c1:b9:bb:03:9d:e0:e5:3a:c4:bf:ac: 16:2b:08:07:57:53:b1:61:3e:1d:02:6f:45:c1:8b:58:f2:bf: 66:79:4c:89:29:80:2b:3b:45:47:31:be:dc:9c:7f:03:c1:4f: 95:c9:04:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHcs24nkERf9UiK1WSSKveuAZHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNjAzMjQyMDA3MzlaFw0yNjAzMjgwMjI0MzlaMDMxMTAvBgNV BAMTKDBBRDQ0Qzk2MUM3RjE3RTM4MjEzQzc3ODVEOTNCRTE1RjI2QzZENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqJPsqcCXBFTzsXB4caq5Ovay kE/QvpAgzIcxKnzvtXqz33+Id+fqeQCnZfArR7XnQhImzJGZaUucEeNWX4sQsSta 46PqTzRhV6wwONa/mi2K/PJE8PVL07WL4bjQLxn20x0wOCzFYUvhXSIY3sR6macL O7lDOsfMEgTKy3/nE31823R4Dcjw44ElBQjPHvSDXQf4nTqdvfFPAbrLr9NbQDzW KZtyjLL8bUmEH9oE+QhPYbWBs1Tpkd8bQ4LsZ99SP17CEUy5zHlBqJqc6iJAPhY/ nUhm/ilmN1J1ysnypfEVQWQmcwpb+R/GXO6UZJdMa+DmvhxDotwRLdkvW0eJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCtRMlhx/F+OCE8d4XZO+FfJsbVMwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1UFvVcQbNNQx9z40L/C4cnJFgG53Zc6lKG 7dOmifRh1d3zUBLKJWRTZwHoVCKakhvs+LLKpMgektUL5uOskQimMWHDVLjGdyOT 8bO9fk3i5URytm1PO29XgqfgxKboNufbfJeRDFs4HigAzxAF9VB0S7o1PkVhhK+v ifRT3LqYVLkbBfaB3BlnRn4GYA9BcOmdUDx9CFMWG6Cd3XWs5YnlX2k8+r5YkCsP kc2J69q+nto7mUlNf8ZPW6yPL6khyIXFz4tRfyVu2yGxrmPBubsDneDlOsS/rBYr CAdXU7FhPh0Cb0XBi1jyv2Z5TIkpgCs7RUcxvtycfwPBT5XJBO4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:27:14 2026 by rpki-client