$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: Iy4M9ocbeHDZaAEZk4ljLqQRUhBwYXdfxaqdGu4G7FA= Subject key identifier: 7F:FB:F5:0A:8B:82:A8:F3:92:B0:F3:DA:44:0B:46:58:F1:3E:3B:33 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 12427393DB68F36808919084D6EA09BA28922C58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 04AB Signing time: Wed 25 Mar 2026 22:00:01 +0000 Manifest this update: Wed 25 Mar 2026 21:55:01 +0000 Manifest next update: Sun 29 Mar 2026 07:02:01 +0000 Files and hashes: 1: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: 2o165ipoUQ5xC+3YJyvZSSnkLXwty1Hk0oFl5RqIxMo=) 2: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: R//rU13s2JPenNUsihOvlbAbpj+HfKGOOTSxdjuipA4=) 3: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: GiJ4k56E3MDf2ebCi987WOhM/Hs6ERUv6R/QPJ7wiYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:42:73:93:db:68:f3:68:08:91:90:84:d6:ea:09:ba:28:92:2c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Mar 25 21:55:01 2026 GMT Not After : Mar 29 07:02:01 2026 GMT Subject: CN=7FFBF50A8B82A8F392B0F3DA440B4658F13E3B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:07:c4:cd:2d:ef:f8:96:4d:8b:5b:e5:71: 2f:9e:f5:e7:8d:e6:d2:6b:a3:e3:90:01:08:10:5b: c6:7f:5f:83:7a:58:5b:0e:01:11:65:2e:92:88:98: 74:99:67:20:b1:9c:0a:d8:7b:49:cb:96:3f:68:90: 49:d3:f6:e1:e6:71:b4:3c:91:95:f3:e6:d3:3c:21: 04:67:6e:d6:fb:5c:25:66:42:c7:a2:b1:d5:e8:26: 74:3b:37:6c:f4:72:7a:9e:2c:2d:21:27:1d:9f:ca: c8:51:be:f5:0e:54:f7:5d:31:c6:92:b8:5b:3e:21: 9e:0b:ec:c5:ad:bd:af:41:af:fc:82:aa:11:cc:ed: dc:95:ce:b8:87:d0:ac:e8:95:91:8f:65:bd:d8:89: 53:26:53:8b:1a:48:59:4d:cc:9d:aa:6a:77:b9:a9: 5e:78:77:12:14:66:ef:f6:48:f0:3f:1e:74:e6:63: 89:c9:a0:d6:ce:da:6f:c6:8e:b3:36:10:7e:db:58: aa:16:fb:20:c1:2d:4b:3d:7f:4d:f8:a3:6b:14:83: 7a:32:df:e3:da:ae:3d:4a:ee:ab:4d:59:2a:b1:5e: 73:46:e6:73:34:d7:45:50:41:dd:6a:a2:c3:1c:35: 8f:e0:1b:41:dd:b9:c4:af:ae:00:e5:93:31:f4:bd: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FB:F5:0A:8B:82:A8:F3:92:B0:F3:DA:44:0B:46:58:F1:3E:3B:33 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a8:41:7c:04:7f:d7:b1:46:27:f6:4d:3a:0d:5c:f2:43:55: 66:90:1b:fb:ed:47:e4:3e:e4:92:94:1d:92:e1:b7:03:91:2a: 3e:19:18:db:6d:18:ea:13:39:f3:e4:20:78:44:ff:a5:7e:33: e8:1f:12:4c:39:10:86:bd:e5:55:d8:ae:7b:55:25:f2:15:b6: 4f:41:78:cb:bd:02:f9:dd:02:18:8b:be:2e:9a:e3:80:62:fc: 88:6b:ce:50:6a:45:a0:f3:bf:fb:1c:a8:2e:96:af:37:cc:12: bc:0c:cc:bf:d9:7d:10:66:4b:cf:cd:d8:6d:6f:bf:ed:27:a2: e4:6f:ee:dc:6e:96:8f:77:29:cb:f1:00:b7:73:9a:01:e4:6a: b8:02:65:d4:8c:57:27:4c:b4:bd:b8:58:02:c7:be:d1:8c:a0: 8a:e2:89:e9:6a:db:c1:56:76:87:00:bb:47:dc:d1:d6:c0:4d: 81:0a:be:3e:10:f4:6b:4f:36:ef:b4:cf:c1:f9:8b:aa:41:f5: 55:c7:14:86:fa:d0:44:2f:19:01:de:ab:f1:16:29:c8:d4:f0: 93:55:14:e4:da:7f:32:6e:ac:7b:5a:06:b7:c4:2f:89:c3:83: e4:61:64:b0:1b:5c:cc:14:17:05:a1:4d:94:95:0a:b6:09:c1: 6d:a3:8f:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkJzk9to82gIkZCE1uoJuiiSLFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNjAzMjUyMTU1MDFaFw0yNjAzMjkwNzAyMDFaMDMxMTAvBgNV BAMTKDdGRkJGNTBBOEI4MkE4RjM5MkIwRjNEQTQ0MEI0NjU4RjEzRTNCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqgfEzS3v+JZNi1vlcS+e9eeN 5tJro+OQAQgQW8Z/X4N6WFsOARFlLpKImHSZZyCxnArYe0nLlj9okEnT9uHmcbQ8 kZXz5tM8IQRnbtb7XCVmQseisdXoJnQ7N2z0cnqeLC0hJx2fyshRvvUOVPddMcaS uFs+IZ4L7MWtva9Br/yCqhHM7dyVzriH0KzolZGPZb3YiVMmU4saSFlNzJ2qane5 qV54dxIUZu/2SPA/HnTmY4nJoNbO2m/GjrM2EH7bWKoW+yDBLUs9f034o2sUg3oy 3+Parj1K7qtNWSqxXnNG5nM010VQQd1qosMcNY/gG0HducSvrgDlkzH0vXSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/v1CouCqPOSsPPaRAtGWPE+OzMwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2oQXwEf9exRif2TToNXPJDVWaQG/vtR+Q+ 5JKUHZLhtwORKj4ZGNttGOoTOfPkIHhE/6V+M+gfEkw5EIa95VXYrntVJfIVtk9B eMu9AvndAhiLvi6a44Bi/IhrzlBqRaDzv/scqC6WrzfMErwMzL/ZfRBmS8/N2G1v v+0nouRv7txulo93KcvxALdzmgHkargCZdSMVydMtL24WALHvtGMoIriielq28FW docAu0fc0dbATYEKvj4Q9GtPNu+0z8H5i6pB9VXHFIb60EQvGQHeq/EWKcjU8JNV FOTafzJurHtaBrfEL4nDg+RhZLAbXMwUFwWhTZSVCrYJwW2jj7g= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:50 2026 by rpki-client