$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: pUSZjnBjlfiHBLP8F5e6k661vUbDzN0d/ikbaZ4b3rY= Subject key identifier: F6:12:C2:DF:0C:C4:9E:57:60:3A:4C:9E:FD:3B:65:D9:5C:14:97:0F Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 0A4259AFF412856E4561439B4586796352797D74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0564 Signing time: Wed 25 Mar 2026 05:41:57 +0000 Manifest this update: Wed 25 Mar 2026 05:36:57 +0000 Manifest next update: Sat 28 Mar 2026 12:40:57 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa (hash: xUH6hBErmhVIAC7hqy3cXz0kV3U+6cg7ogjiBk1mZyg=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa (hash: otTw7cTD+7X2MD76zWvi6+MqPArwOlTIQa8qqypdI0I=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 4: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: qWAwua980uIjkX98COw4EiG800wMBycl2y3DpLVQPWA=) 5: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:42:59:af:f4:12:85:6e:45:61:43:9b:45:86:79:63:52:79:7d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Mar 25 05:36:57 2026 GMT Not After : Mar 28 12:40:57 2026 GMT Subject: CN=F612C2DF0CC49E57603A4C9EFD3B65D95C14970F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:f9:82:2a:ac:5f:7b:99:f6:63:5b:fa:69: fc:20:09:2c:aa:d7:4c:38:68:3c:89:e8:64:ff:75: 28:0a:ab:ab:32:8b:12:37:13:31:2b:7c:44:41:06: 18:32:d2:b1:83:3a:cb:f5:f5:e2:31:79:75:df:1e: e1:1e:59:a4:68:fb:9e:f5:e4:ef:ad:e9:94:b9:ea: 00:d7:3d:b9:df:54:8c:da:8b:33:63:3e:83:c6:08: 3e:16:d5:93:7c:c8:63:f4:77:00:5f:8f:b1:0e:f2: cf:b7:80:a5:b9:7f:5f:a6:0d:b4:8c:da:dc:61:fb: 09:11:bc:27:0e:f2:ef:3d:4e:b1:52:8f:74:06:e7: 5b:4a:cf:0e:bc:7f:15:bb:ce:ae:ca:39:7b:89:3c: 0b:2e:a5:84:c3:4e:86:61:a3:33:15:1c:4b:8b:de: ff:ed:b5:ee:22:9b:b3:8d:72:2d:19:ad:64:db:78: b5:36:4f:15:74:d5:6e:f5:34:69:88:bc:43:b7:88: 6a:97:d3:d7:f8:83:2e:e7:43:ef:57:7f:e4:63:88: 78:53:24:ce:3f:16:b2:49:73:48:8c:7e:30:e2:cb: 51:a4:8d:50:1e:d4:dc:30:2a:6f:9b:88:b9:a3:b9: 44:3b:76:77:36:c0:83:34:a8:7e:55:b8:5c:10:eb: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:12:C2:DF:0C:C4:9E:57:60:3A:4C:9E:FD:3B:65:D9:5C:14:97:0F X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d5:03:09:2c:4e:c7:a9:87:a0:f8:d3:12:b3:35:07:1b:99: 02:81:4c:ec:4d:0f:18:53:8d:c2:8a:29:06:f5:a6:e7:18:cb: f9:26:f0:92:17:84:fe:77:77:de:0d:1c:ae:d4:ec:4a:52:fa: 04:2b:a2:66:4a:70:54:e1:2d:3f:64:a2:64:23:05:1e:5a:dc: fd:4e:1d:a7:e2:a4:50:35:72:3f:fb:07:e9:b1:7a:cf:09:27: 55:12:6a:c2:25:92:e7:d6:60:2f:6f:f0:e9:9b:b5:5d:14:08: c5:81:56:82:23:7c:38:81:c8:32:40:2d:36:cb:19:60:5e:26: a4:4b:b2:7e:b5:91:ed:93:f2:e4:f9:90:8c:5d:65:97:5d:50: 87:97:a0:63:0f:fd:5c:e9:23:2d:8f:00:e5:ee:37:3c:60:52: d7:43:55:08:cb:2e:cc:c9:33:17:dc:c6:29:f6:9c:93:96:c2: 3c:0a:a4:37:6e:b9:1c:9c:a2:4d:40:6e:e3:3a:b0:92:5d:9b: 28:6d:73:a9:43:74:f4:2a:1e:e8:e1:08:2d:37:5e:22:9f:49: 87:92:82:34:45:ad:2d:86:d5:d5:72:b7:f6:af:d7:7e:b4:7a: 70:71:82:12:73:02:2a:13:88:03:bc:0b:04:93:0c:0f:52:fa: 56:3c:2b:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkJZr/QShW5FYUObRYZ5Y1J5fXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNjAzMjUwNTM2NTdaFw0yNjAzMjgxMjQwNTdaMDMxMTAvBgNV BAMTKEY2MTJDMkRGMENDNDlFNTc2MDNBNEM5RUZEM0I2NUQ5NUMxNDk3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXvmCKqxfe5n2Y1v6afwgCSyq 10w4aDyJ6GT/dSgKq6syixI3EzErfERBBhgy0rGDOsv19eIxeXXfHuEeWaRo+571 5O+t6ZS56gDXPbnfVIzaizNjPoPGCD4W1ZN8yGP0dwBfj7EO8s+3gKW5f1+mDbSM 2txh+wkRvCcO8u89TrFSj3QG51tKzw68fxW7zq7KOXuJPAsupYTDToZhozMVHEuL 3v/tte4im7ONci0ZrWTbeLU2TxV01W71NGmIvEO3iGqX09f4gy7nQ+9Xf+RjiHhT JM4/FrJJc0iMfjDiy1GkjVAe1NwwKm+biLmjuUQ7dnc2wIM0qH5VuFwQ6+NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hLC3wzEnldgOkye/Ttl2VwUlw8wHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXVAwksTseph6D40xKzNQcbmQKBTOxNDxhT jcKKKQb1pucYy/km8JIXhP53d94NHK7U7EpS+gQromZKcFThLT9komQjBR5a3P1O HafipFA1cj/7B+mxes8JJ1USasIlkufWYC9v8OmbtV0UCMWBVoIjfDiByDJALTbL GWBeJqRLsn61ke2T8uT5kIxdZZddUIeXoGMP/VzpIy2PAOXuNzxgUtdDVQjLLszJ Mxfcxin2nJOWwjwKpDduuRycok1AbuM6sJJdmyhtc6lDdPQqHujhCC03XiKfSYeS gjRFrS2G1dVyt/av1360enBxghJzAioTiAO8CwSTDA9S+lY8K8o= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:08 2026 by rpki-client