$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: p+faB+aFThgNxGIPRESlUdcuTUf26nTXvPZPA2g+flo= Subject key identifier: 99:ED:4F:7F:66:1C:26:39:63:83:DF:01:FE:75:A8:17:9F:0F:77:6A Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 3AD769C2FD878BB56B5595B8EB982159638396BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 028B Signing time: Wed 25 Mar 2026 03:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:55:04 +0000 Manifest next update: Sat 28 Mar 2026 07:05:04 +0000 Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 9C6JxChFeHLhz/hiGucLeF7/o+dBMXRfwa1cbKwCRWc=) 2: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: /RPwKgWFZuqJjpuQ8NfrsF1ayr//Ivu2YzcZ6VFg/a4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d7:69:c2:fd:87:8b:b5:6b:55:95:b8:eb:98:21:59:63:83:96:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Mar 25 02:55:04 2026 GMT Not After : Mar 28 07:05:04 2026 GMT Subject: CN=99ED4F7F661C26396383DF01FE75A8179F0F776A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:75:46:ce:39:86:ba:57:ab:d6:63:d0:fd: fc:86:26:ad:df:b1:53:f2:3e:62:9c:7d:95:e1:4c: 99:b4:c3:72:a1:69:ce:bc:7a:1b:fa:f9:8c:ef:bd: 52:86:e0:aa:4b:4a:c3:19:49:86:a9:a3:ce:71:7a: 19:2a:34:4d:93:dd:de:68:87:e6:be:17:49:80:a4: 96:6f:83:b0:ad:fb:27:09:ae:e5:6d:b8:e1:18:c6: bb:6b:34:44:a1:76:6e:a1:18:c8:1f:16:27:0f:ca: 81:5e:44:2f:cc:93:64:63:b0:c2:67:87:a1:27:ff: 0a:53:94:5f:de:45:34:e5:e8:8f:be:5d:45:d7:09: 99:f6:88:be:95:01:43:57:12:95:12:7e:84:36:9e: bf:55:f7:aa:af:6b:dd:ff:40:95:c1:09:e0:f5:c7: c7:65:53:b2:b2:1a:7c:22:2a:54:50:96:a8:2c:45: e1:7f:d0:b4:22:09:40:fb:57:48:01:bf:af:d7:a8: 8d:f9:84:e7:c5:95:0a:d8:f0:b2:52:0e:d5:08:a1: 63:24:75:7f:96:5c:a1:dd:bd:23:0a:ca:9e:e4:c8: 9a:0d:d6:71:47:90:9b:f5:01:13:12:96:19:9d:d2: fe:30:b4:e0:af:e7:77:a3:b3:9e:68:6f:67:5e:f1: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:4F:7F:66:1C:26:39:63:83:DF:01:FE:75:A8:17:9F:0F:77:6A X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a2:5e:48:9b:39:80:0b:28:4a:b0:e1:4e:d4:50:82:31:99: 89:a6:b1:05:3d:8f:09:1f:54:61:d9:51:a5:a8:d1:d1:cc:01: f4:9b:99:26:10:37:e1:a6:16:97:fe:98:77:fe:97:dd:18:86: 35:f9:f1:48:fa:03:16:35:92:f0:6c:9e:67:ff:3e:02:74:e9: 8a:ef:04:5a:5c:af:9b:90:95:56:38:ee:bc:aa:dc:23:41:1c: c4:45:2e:b5:f4:e4:01:cc:76:f5:8a:52:63:69:96:2a:a4:05: 45:7f:45:af:a6:46:29:40:84:91:1e:6d:3e:87:3b:46:61:be: 48:51:38:fc:8d:d1:59:74:c9:7e:af:6d:14:41:8f:63:70:db: 67:92:6c:43:f6:4c:ff:09:aa:4a:8e:3d:9c:18:35:37:09:5c: 0b:eb:98:be:9a:95:1e:85:38:5d:06:d4:94:6d:01:5d:e1:f2: 6a:9e:ba:be:4a:42:62:57:a8:ab:1a:8b:44:e4:b7:fa:08:9d: 91:66:af:b7:2d:71:93:12:13:60:13:46:c7:04:44:25:93:52: 80:e6:08:c8:a3:36:3a:04:f8:1b:d9:13:4b:51:ff:df:af:ec: 98:c7:e9:01:df:4f:70:3a:68:45:18:60:3e:45:9d:19:1b:93: 72:87:59:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtdpwv2Hi7VrVZW465ghWWODlr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNjAzMjUwMjU1MDRaFw0yNjAzMjgwNzA1MDRaMDMxMTAvBgNV BAMTKDk5RUQ0RjdGNjYxQzI2Mzk2MzgzREYwMUZFNzVBODE3OUYwRjc3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTHVGzjmGuler1mPQ/fyGJq3f sVPyPmKcfZXhTJm0w3Khac68ehv6+YzvvVKG4KpLSsMZSYapo85xehkqNE2T3d5o h+a+F0mApJZvg7Ct+ycJruVtuOEYxrtrNEShdm6hGMgfFicPyoFeRC/Mk2RjsMJn h6En/wpTlF/eRTTl6I++XUXXCZn2iL6VAUNXEpUSfoQ2nr9V96qva93/QJXBCeD1 x8dlU7KyGnwiKlRQlqgsReF/0LQiCUD7V0gBv6/XqI35hOfFlQrY8LJSDtUIoWMk dX+WXKHdvSMKyp7kyJoN1nFHkJv1ARMSlhmd0v4wtOCv53ejs55ob2de8WOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUme1Pf2YcJjljg98B/nWoF58Pd2owHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuiXkibOYALKEqw4U7UUIIxmYmmsQU9jwkf VGHZUaWo0dHMAfSbmSYQN+GmFpf+mHf+l90YhjX58Uj6AxY1kvBsnmf/PgJ06Yrv BFpcr5uQlVY47ryq3CNBHMRFLrX05AHMdvWKUmNpliqkBUV/Ra+mRilAhJEebT6H O0ZhvkhROPyN0Vl0yX6vbRRBj2Nw22eSbEP2TP8JqkqOPZwYNTcJXAvrmL6alR6F OF0G1JRtAV3h8mqeur5KQmJXqKsai0Tkt/oInZFmr7ctcZMSE2ATRscERCWTUoDm CMijNjoE+BvZE0tR/9+v7JjH6QHfT3A6aEUYYD5FnRkbk3KHWdc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:17:28 2026 by rpki-client