$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: xT9s9HgapwAxGZeCy1SohJvwFg0z9BDx6x0zy/0lNkM= Subject key identifier: 59:9E:91:78:E2:EC:19:7C:B9:9E:51:3B:5E:71:CE:A4:A1:F4:AA:83 Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 20B550A226319D12C9DC571A887EF3A6B6527840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: 0137 Signing time: Wed 25 Mar 2026 09:11:04 +0000 Manifest this update: Wed 25 Mar 2026 09:06:04 +0000 Manifest next update: Sat 28 Mar 2026 14:52:04 +0000 Files and hashes: 1: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: SrktD+Erp6eHIg8AXbgcZVS/9PGReLNavqRE1cvmSMQ=) 2: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: se2HXGKNNi7Ek+z5z36cxPafjHtBbEFygmNfu3EQrEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b5:50:a2:26:31:9d:12:c9:dc:57:1a:88:7e:f3:a6:b6:52:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Mar 25 09:06:04 2026 GMT Not After : Mar 28 14:52:04 2026 GMT Subject: CN=599E9178E2EC197CB99E513B5E71CEA4A1F4AA83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:ee:81:21:73:7c:a7:42:f0:f9:e1:9a:96: 5a:08:b4:05:21:a2:5f:e1:17:cb:31:45:fb:4e:ca: 59:df:cc:94:e1:df:0f:a9:e6:4e:3f:6e:3d:3a:80: 9a:12:56:ff:22:3a:a2:89:33:cf:e7:d7:a9:f4:ec: a9:10:db:0b:c9:ad:a4:c4:bd:54:9b:b5:45:68:99: 0f:b6:a8:dd:7e:89:8c:55:c7:d2:7c:40:2f:dc:a9: 6c:26:c8:db:ed:68:5c:67:dd:2b:6c:cf:92:4c:63: 60:29:27:4c:3a:47:e4:9e:32:23:23:c6:01:f2:d4: ab:31:32:f7:4e:0e:74:be:6c:8e:06:f0:bd:32:69: 1c:e9:83:81:ef:2e:8c:84:a1:bd:26:b8:25:c8:18: 66:e4:29:f7:f4:d0:c0:6a:f5:19:cc:de:09:f5:cc: 1f:81:64:75:dd:69:c5:d9:00:1f:55:d4:d4:42:ab: 63:0e:e9:b4:ad:7d:b2:48:09:bd:b2:0b:43:38:a1: d9:62:1a:ea:5e:04:d0:24:4e:42:d5:bc:ee:52:86: 43:e1:e7:d0:2c:d3:c0:f8:aa:9f:91:ef:46:7c:ff: 19:5d:91:b1:1a:fe:49:75:79:0e:ea:f3:08:db:96: ea:2d:e2:9d:a3:8c:78:f6:1a:a8:65:fe:fa:89:5f: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9E:91:78:E2:EC:19:7C:B9:9E:51:3B:5E:71:CE:A4:A1:F4:AA:83 X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d6:30:cb:0e:44:15:2b:26:0c:be:c0:77:71:bc:22:d1:f3: 2c:be:5b:3a:7d:84:e1:67:5f:62:f1:7f:38:30:cc:16:39:35: 44:3c:65:9d:2d:ce:55:d4:4f:c8:41:d2:67:5c:20:33:bc:6b: 77:61:ad:7c:57:2a:8f:dc:d8:10:3e:eb:25:52:87:54:8a:69: b6:62:1e:9d:49:27:5a:a8:8a:04:0c:d4:55:d7:3e:6e:b8:9e: 45:31:5a:e0:49:f1:ea:dd:ae:1d:63:3d:cb:3d:97:98:9e:1b: ab:85:da:51:80:ed:9a:f2:c4:91:47:13:cf:67:5a:f3:8b:e8: 5d:de:16:8c:e9:4d:e9:d0:8d:74:f4:16:cf:2f:8a:6a:43:79: 26:d9:93:a7:1b:3f:81:cf:47:b3:70:b5:ac:8e:24:df:83:e8: 07:94:8c:bc:11:90:dc:2c:3e:ef:d6:6c:1a:ff:fe:72:62:e1: ad:92:48:60:98:1b:e0:b9:af:fa:0f:06:28:63:31:01:e7:f3: 67:23:fd:3c:ca:77:54:85:45:2a:72:6c:b3:12:6b:f6:50:59: 46:aa:4f:57:f5:df:bc:31:a8:02:a2:14:85:00:95:be:6f:04: b2:91:66:c2:71:68:ad:29:cf:4d:fb:b1:2b:79:35:d5:30:89: 46:2e:43:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILVQoiYxnRLJ3FcaiH7zprZSeEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNjAzMjUwOTA2MDRaFw0yNjAzMjgxNDUyMDRaMDMxMTAvBgNV BAMTKDU5OUU5MTc4RTJFQzE5N0NCOTlFNTEzQjVFNzFDRUE0QTFGNEFBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkfe6BIXN8p0Lw+eGalloItAUh ol/hF8sxRftOylnfzJTh3w+p5k4/bj06gJoSVv8iOqKJM8/n16n07KkQ2wvJraTE vVSbtUVomQ+2qN1+iYxVx9J8QC/cqWwmyNvtaFxn3Stsz5JMY2ApJ0w6R+SeMiMj xgHy1KsxMvdODnS+bI4G8L0yaRzpg4HvLoyEob0muCXIGGbkKff00MBq9RnM3gn1 zB+BZHXdacXZAB9V1NRCq2MO6bStfbJICb2yC0M4odliGupeBNAkTkLVvO5ShkPh 59As08D4qp+R70Z8/xldkbEa/kl1eQ7q8wjbluot4p2jjHj2Gqhl/vqJX4NrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZ6ReOLsGXy5nlE7XnHOpKH0qoMwHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPWMMsORBUrJgy+wHdxvCLR8yy+Wzp9hOFn X2LxfzgwzBY5NUQ8ZZ0tzlXUT8hB0mdcIDO8a3dhrXxXKo/c2BA+6yVSh1SKabZi Hp1JJ1qoigQM1FXXPm64nkUxWuBJ8erdrh1jPcs9l5ieG6uF2lGA7ZryxJFHE89n WvOL6F3eFozpTenQjXT0Fs8vimpDeSbZk6cbP4HPR7NwtayOJN+D6AeUjLwRkNws Pu/WbBr//nJi4a2SSGCYG+C5r/oPBihjMQHn82cj/TzKd1SFRSpybLMSa/ZQWUaq T1f137wxqAKiFIUAlb5vBLKRZsJxaK0pz037sSt5NdUwiUYuQ58= -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:01 2026 by rpki-client