$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: IxZ4wngnPLuNRfgqBInmhZd0P/OksBfdEOID7+m8ECE= Subject key identifier: DC:71:79:2A:E4:A3:23:F9:00:85:FF:B2:96:96:BE:AD:93:F1:FD:90 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 57A5F37ADC95D771E341E31CF86DA02BF5EBDB75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 03F1 Signing time: Wed 25 Mar 2026 01:51:59 +0000 Manifest this update: Wed 25 Mar 2026 01:46:59 +0000 Manifest next update: Sat 28 Mar 2026 03:07:59 +0000 Files and hashes: 1: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: revNCchCnJ1v2CE7h5Yq1Ro/DtQoOLa202GdbSnc9dU=) 2: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: 8uslDq+EkJlCY+MtyQFy4AEhhci2PaD2xXMS8hJIQuw=) 3: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: I5lMCHW/0VM2snh5gMHMreCjKGcwb2psDVtNsfQ2Q0o=) 4: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: 24/NhCGBGOt7WZwcmBT+s4GINfQM7GC17qrWB072MSU=) 5: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: i/wE9/DDpdlCjm0NM2UFIdi5f16OPBgnoC1WNngZprI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a5:f3:7a:dc:95:d7:71:e3:41:e3:1c:f8:6d:a0:2b:f5:eb:db:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Mar 25 01:46:59 2026 GMT Not After : Mar 28 03:07:59 2026 GMT Subject: CN=DC71792AE4A323F90085FFB29696BEAD93F1FD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:df:e9:0e:99:2d:af:65:61:c0:10:aa:f7:14: 4d:9f:87:00:ff:60:69:af:99:1e:ce:86:ce:dd:b4: 2c:62:11:d6:2f:16:01:da:28:f8:7d:3e:0a:90:09: b4:be:67:ba:88:e1:da:cf:6a:73:67:31:96:1a:23: fa:bf:b8:6f:16:d0:ca:f6:74:97:7c:29:15:c9:2f: 51:65:cd:f7:25:58:00:90:d2:e8:93:f0:a9:c0:3f: f6:b7:bf:1d:e3:22:b0:78:e1:7b:7f:f2:e6:54:82: 8c:d6:04:23:c5:9f:56:38:31:3f:27:ea:e9:09:3b: c5:bd:2b:c9:5a:53:00:60:65:e6:ea:a4:97:2a:98: ae:06:87:5e:92:f4:22:8d:d4:56:7d:47:c8:75:7a: a8:02:3a:0a:9b:1c:e1:6d:13:2a:a3:f6:3a:1f:07: 9e:52:2a:6a:11:c5:6d:08:13:3d:64:0c:00:e6:65: 5b:78:3c:3b:90:39:23:f3:bd:1b:ce:09:95:27:f1: db:2f:e2:e4:dd:c8:f6:e7:d3:7d:a5:e4:88:ad:bf: 63:d5:1d:bb:86:94:d3:76:61:a4:75:1c:59:60:1a: 5f:3c:b1:a8:53:c1:9b:40:75:68:7f:7d:49:a6:47: 73:b9:62:9c:09:87:d1:4a:b7:d2:8d:a9:9c:4b:e4: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:79:2A:E4:A3:23:F9:00:85:FF:B2:96:96:BE:AD:93:F1:FD:90 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:34:86:2b:8f:d5:73:27:e8:4d:43:22:56:cd:f7:91:01:fa: f5:86:cf:c8:20:7e:2f:91:7b:c9:1e:0f:30:43:12:04:79:be: 86:36:28:34:27:16:c8:b1:2b:a6:7f:e4:81:5c:e5:34:cc:91: 5a:31:03:f6:b7:a9:00:2d:e5:04:c8:6a:74:af:23:56:bb:63: b6:77:54:88:ae:c6:6b:16:06:60:92:00:94:68:c8:18:62:44: 48:8c:4f:c0:94:03:4e:a8:d0:90:8a:b5:5a:34:fa:35:8e:bc: f8:47:d5:9f:9d:e6:9e:eb:bd:68:73:c7:83:8c:68:88:5d:cb: b9:8b:3a:f0:7a:ee:7f:53:49:b2:1c:f1:16:97:bc:ab:32:a5: b0:00:9e:e9:30:15:6c:74:d6:7f:e3:d3:7b:39:85:e6:56:d0: ad:b3:e0:34:2e:f6:d1:b0:6c:c0:3c:cf:82:10:b8:9d:59:47: e6:24:1e:30:b3:53:cd:5f:be:a0:62:2b:62:ae:37:01:20:25: 52:fb:13:cc:da:fd:96:3c:37:0b:5b:b3:21:44:50:3d:db:3e: f1:ce:3f:c5:2c:30:94:b1:89:e1:62:3a:8f:3d:0f:ca:4d:c9: b2:39:b6:9a:cd:7a:53:4a:e7:7e:64:ef:cd:bf:d3:2b:0d:47: b3:86:5c:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6XzetyV13HjQeMc+G2gK/Xr23UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNjAzMjUwMTQ2NTlaFw0yNjAzMjgwMzA3NTlaMDMxMTAvBgNV BAMTKERDNzE3OTJBRTRBMzIzRjkwMDg1RkZCMjk2OTZCRUFEOTNGMUZEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD23+kOmS2vZWHAEKr3FE2fhwD/ YGmvmR7Ohs7dtCxiEdYvFgHaKPh9PgqQCbS+Z7qI4drPanNnMZYaI/q/uG8W0Mr2 dJd8KRXJL1FlzfclWACQ0uiT8KnAP/a3vx3jIrB44Xt/8uZUgozWBCPFn1Y4MT8n 6ukJO8W9K8laUwBgZebqpJcqmK4Gh16S9CKN1FZ9R8h1eqgCOgqbHOFtEyqj9jof B55SKmoRxW0IEz1kDADmZVt4PDuQOSPzvRvOCZUn8dsv4uTdyPbn032l5Iitv2PV HbuGlNN2YaR1HFlgGl88sahTwZtAdWh/fUmmR3O5YpwJh9FKt9KNqZxL5BLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3HF5KuSjI/kAhf+ylpa+rZPx/ZAwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGA0hiuP1XMn6E1DIlbN95EB+vWGz8ggfi+R e8keDzBDEgR5voY2KDQnFsixK6Z/5IFc5TTMkVoxA/a3qQAt5QTIanSvI1a7Y7Z3 VIiuxmsWBmCSAJRoyBhiREiMT8CUA06o0JCKtVo0+jWOvPhH1Z+d5p7rvWhzx4OM aIhdy7mLOvB67n9TSbIc8RaXvKsypbAAnukwFWx01n/j03s5heZW0K2z4DQu9tGw bMA8z4IQuJ1ZR+YkHjCzU81fvqBiK2KuNwEgJVL7E8za/ZY8NwtbsyFEUD3bPvHO P8UsMJSxieFiOo89D8pNybI5tprNelNK535k782/0ysNR7OGXM8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:57 2026 by rpki-client