$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: 8mAeaP3CK2ig6atFC9KsBdlm2d4QuGViCR8M77717O8= Subject key identifier: B7:BA:96:79:A5:7C:48:7F:91:92:F4:F4:83:97:58:92:81:20:07:48 Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 72E384DAF34EBA94CB5F61F1DD4A1B7EC623762D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 055F Signing time: Wed 25 Mar 2026 01:51:37 +0000 Manifest this update: Wed 25 Mar 2026 01:46:37 +0000 Manifest next update: Sat 28 Mar 2026 12:29:37 +0000 Files and hashes: 1: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: DOlg8/LY/J8VlLg8q8vs0YMPL93NGt0bpyLPSkqCW/A=) 2: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: bpgsTBDQuob3GFVyXD81sM4IGkpNJFZujGq+DG/+x6o=) 3: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: CPeh5pcKIP6qJ3Jzx7KUROvLf3APBLJFmjl0GUWh3r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e3:84:da:f3:4e:ba:94:cb:5f:61:f1:dd:4a:1b:7e:c6:23:76:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Mar 25 01:46:37 2026 GMT Not After : Mar 28 12:29:37 2026 GMT Subject: CN=B7BA9679A57C487F9192F4F48397589281200748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:9d:35:bb:6b:92:58:a2:af:6c:b0:f0:f4: 86:87:97:e8:18:d6:08:c2:76:eb:07:c5:db:b5:28: 7d:e0:bc:a8:17:76:88:ee:6a:19:0d:b0:ff:94:67: 3e:01:56:b5:02:e9:22:1a:80:fc:ed:68:75:93:71: fd:22:ca:27:6f:ae:c8:a5:41:60:9e:65:ee:20:cd: 37:d4:a4:34:27:69:b7:2a:89:6f:7f:b6:89:eb:48: 95:98:f0:c5:90:22:06:ff:ba:53:26:0d:b6:43:82: 7f:a5:b8:83:70:40:d6:c0:e8:fc:45:88:69:c0:04: 78:8f:3e:2d:20:0b:c0:a4:f7:28:0f:d2:41:58:22: 75:b3:af:1d:b8:eb:1d:fb:10:70:af:6f:e2:6d:37: 55:e9:4c:16:70:ac:bf:2e:3b:45:22:d5:4a:4f:ab: ec:a7:8e:d3:bf:3d:d9:fd:26:6a:f0:b2:07:79:eb: d1:bc:8f:1c:f7:6d:ae:d4:c8:fc:09:1b:1b:5e:67: 95:36:67:6b:3f:b4:e7:73:37:f4:71:2a:83:4e:8e: a4:c0:83:7a:14:8a:ca:f9:58:fb:97:82:70:d0:21: b3:22:9e:3c:d8:e7:39:64:40:cd:bb:f0:7f:dd:74: 04:e2:b9:cb:cf:82:88:7f:d9:a2:70:3c:b0:1b:17: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:96:79:A5:7C:48:7F:91:92:F4:F4:83:97:58:92:81:20:07:48 X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5e:33:51:76:df:68:de:00:41:2b:cd:ce:03:32:41:66:e7: 2b:bd:bc:ff:22:e5:af:f9:c5:35:d1:70:64:6d:b6:26:43:c3: b5:53:67:de:12:8d:1e:16:3d:7d:56:97:84:0e:55:42:04:cf: 8e:3b:d8:4f:c6:b1:3c:15:2e:67:a2:b9:13:9e:a5:f6:60:b0: d2:d8:aa:23:18:6b:cf:52:fc:c8:33:9b:4c:2e:bf:12:b9:7b: 8d:a1:9d:3d:6a:82:fb:0c:d0:e7:19:12:53:bf:df:19:31:05: e3:8b:89:7a:5d:d0:a8:4b:a7:bb:ef:6a:29:f2:3d:c3:1c:52: f5:15:27:ef:5d:ba:c2:96:cc:58:63:fe:1e:77:8d:b3:66:f6: 02:4f:6b:c3:09:a4:95:03:b4:67:d5:25:49:7b:d6:41:82:43: 93:73:1c:58:69:37:25:ad:a8:cc:6c:11:b1:3d:09:5c:d7:9e: 00:16:65:37:a4:87:42:2b:3f:96:32:c0:cb:3d:27:2c:ee:51: 35:7e:49:5d:43:71:bc:d4:52:92:8b:d7:4d:f8:02:48:38:0a: 35:3b:dc:c2:f1:e1:97:34:1a:3f:a3:76:ba:65:48:8e:ff:95: f2:ee:59:6c:5d:c9:1e:5e:7b:13:54:01:c9:42:72:16:b8:9a: 95:14:1f:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuOE2vNOupTLX2Hx3UobfsYjdi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNjAzMjUwMTQ2MzdaFw0yNjAzMjgxMjI5MzdaMDMxMTAvBgNV BAMTKEI3QkE5Njc5QTU3QzQ4N0Y5MTkyRjRGNDgzOTc1ODkyODEyMDA3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pp01u2uSWKKvbLDw9IaHl+gY 1gjCdusHxdu1KH3gvKgXdojuahkNsP+UZz4BVrUC6SIagPztaHWTcf0iyidvrsil QWCeZe4gzTfUpDQnabcqiW9/tonrSJWY8MWQIgb/ulMmDbZDgn+luINwQNbA6PxF iGnABHiPPi0gC8Ck9ygP0kFYInWzrx246x37EHCvb+JtN1XpTBZwrL8uO0Ui1UpP q+ynjtO/Pdn9Jmrwsgd569G8jxz3ba7UyPwJGxteZ5U2Z2s/tOdzN/RxKoNOjqTA g3oUisr5WPuXgnDQIbMinjzY5zlkQM278H/ddATiucvPgoh/2aJwPLAbF7DPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7qWeaV8SH+RkvT0g5dYkoEgB0gwHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNeM1F232jeAEErzc4DMkFm5yu9vP8i5a/5 xTXRcGRttiZDw7VTZ94SjR4WPX1Wl4QOVUIEz4472E/GsTwVLmeiuROepfZgsNLY qiMYa89S/Mgzm0wuvxK5e42hnT1qgvsM0OcZElO/3xkxBeOLiXpd0KhLp7vvainy PcMcUvUVJ+9dusKWzFhj/h53jbNm9gJPa8MJpJUDtGfVJUl71kGCQ5NzHFhpNyWt qMxsEbE9CVzXngAWZTekh0IrP5YywMs9JyzuUTV+SV1DcbzUUpKL1034Akg4CjU7 3MLx4Zc0Gj+jdrplSI7/lfLuWWxdyR5eexNUAclCcha4mpUUH1k= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:14 2026 by rpki-client