$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: P8SPM5iEp5FAfE3YcX412NnPRA4Bhy9nvJhinoSSVqI= Subject key identifier: A6:FC:FA:C4:8F:C0:DF:FD:C3:49:66:20:65:E6:59:7D:A2:75:1D:1B Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 6359FB2AD30B013D5575A81DC7CB0A6DC8EF2EB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 04E1 Signing time: Wed 25 Mar 2026 03:31:49 +0000 Manifest this update: Wed 25 Mar 2026 03:26:49 +0000 Manifest next update: Sat 28 Mar 2026 14:35:49 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: E/yyUyQrExjw1Kp1y8FYF2Ho6HCPjGrwMzzunKxUyq4=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:59:fb:2a:d3:0b:01:3d:55:75:a8:1d:c7:cb:0a:6d:c8:ef:2e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Mar 25 03:26:49 2026 GMT Not After : Mar 28 14:35:49 2026 GMT Subject: CN=A6FCFAC48FC0DFFDC349662065E6597DA2751D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:91:8f:38:85:94:00:a0:cc:a1:16:88:90: cd:b9:7a:05:d5:d0:27:44:ed:55:b7:c9:7b:33:b9: c0:c6:18:9a:3d:9b:f5:45:e9:3b:cd:26:b4:5e:24: 18:73:1b:8e:b0:e7:ff:8a:ee:d2:27:bb:ed:5c:31: 47:3e:76:d0:86:27:ac:14:a2:5b:ab:9f:92:60:ba: 6c:dc:5e:5f:8e:e5:85:7f:de:43:4f:4d:39:67:3f: d2:a7:2e:be:d8:9e:3f:79:c5:81:c6:1a:9b:58:10: e6:6e:79:08:97:5e:b1:a2:3a:45:95:19:de:14:f2: a4:f2:f1:56:b1:98:27:27:e4:a0:62:6d:cb:f8:d9: c2:cb:e1:20:45:88:af:18:46:66:47:e9:89:d7:43: 75:d8:c0:54:a0:4e:19:27:d8:3a:63:0e:2e:3c:8b: 3a:7e:a8:30:02:b1:5e:40:9d:12:2e:2f:07:ca:f7: 11:5a:a6:45:eb:38:e8:0b:ad:e5:36:aa:f3:9d:e0: be:54:92:33:9c:43:03:45:2e:0e:fd:82:11:87:88: f1:43:a4:1a:45:f4:1b:43:e6:c2:eb:7c:7c:3f:87: e8:69:bb:aa:d2:b8:9a:57:90:28:0b:26:b8:5f:ed: 87:82:25:9d:9e:71:0d:8e:2a:7e:e8:dc:31:c0:d1: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FC:FA:C4:8F:C0:DF:FD:C3:49:66:20:65:E6:59:7D:A2:75:1D:1B X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:5f:e0:e7:62:59:68:8f:02:e7:f1:ce:89:4c:38:57:30: 85:2f:b7:02:ff:7b:ff:ef:d1:de:cc:0b:69:6e:7d:cf:42:24: 2f:d2:a2:4d:a4:9f:0e:fa:21:a7:af:c4:da:84:35:74:b8:ae: e0:6d:41:b6:63:71:13:66:c8:5b:08:07:39:52:40:59:19:c3: d8:f1:9b:e7:ab:84:65:c7:4a:6c:8c:17:54:89:28:14:2a:f7: b1:70:56:7a:e6:d9:69:0a:40:38:b1:b0:48:4f:41:92:43:b6: 6b:c1:bb:8b:40:ae:5c:3e:46:3a:23:4f:ef:8b:ed:30:ef:68: b2:1a:ac:7a:73:56:fe:dd:85:ea:20:29:37:2a:37:b9:31:e1: 33:88:f0:ea:cc:5e:25:f2:59:4c:28:a5:0b:c4:a4:af:3c:c1: ba:d0:31:c5:c4:bb:b0:9f:d4:57:95:65:40:05:f1:3c:87:d4: 29:3c:83:cc:13:30:42:9d:7e:7f:e4:5a:a1:91:93:0d:39:73: 3f:ab:96:17:a2:0c:ef:0e:f6:19:12:c2:84:3f:70:f2:76:c9: 90:4b:91:01:67:e8:01:b2:2f:f6:f3:ee:80:37:05:01:1d:7a: d5:b0:e8:66:44:af:f2:61:67:f6:a5:f5:20:86:74:b2:c1:01: 4d:77:0c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1n7KtMLAT1Vdagdx8sKbcjvLrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNjAzMjUwMzI2NDlaFw0yNjAzMjgxNDM1NDlaMDMxMTAvBgNV BAMTKEE2RkNGQUM0OEZDMERGRkRDMzQ5NjYyMDY1RTY1OTdEQTI3NTFEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFZGPOIWUAKDMoRaIkM25egXV 0CdE7VW3yXszucDGGJo9m/VF6TvNJrReJBhzG46w5/+K7tInu+1cMUc+dtCGJ6wU olurn5JgumzcXl+O5YV/3kNPTTlnP9KnLr7Ynj95xYHGGptYEOZueQiXXrGiOkWV Gd4U8qTy8VaxmCcn5KBibcv42cLL4SBFiK8YRmZH6YnXQ3XYwFSgThkn2DpjDi48 izp+qDACsV5AnRIuLwfK9xFapkXrOOgLreU2qvOd4L5UkjOcQwNFLg79ghGHiPFD pBpF9BtD5sLrfHw/h+hpu6rSuJpXkCgLJrhf7YeCJZ2ecQ2OKn7o3DHA0Q0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpvz6xI/A3/3DSWYgZeZZfaJ1HRswHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwIX+DnYllojwLn8c6JTDhXMIUvtwL/e//v 0d7MC2lufc9CJC/Sok2knw76IaevxNqENXS4ruBtQbZjcRNmyFsIBzlSQFkZw9jx m+erhGXHSmyMF1SJKBQq97FwVnrm2WkKQDixsEhPQZJDtmvBu4tArlw+RjojT++L 7TDvaLIarHpzVv7dheogKTcqN7kx4TOI8OrMXiXyWUwopQvEpK88wbrQMcXEu7Cf 1FeVZUAF8TyH1Ck8g8wTMEKdfn/kWqGRkw05cz+rlheiDO8O9hkSwoQ/cPJ2yZBL kQFn6AGyL/bz7oA3BQEdetWw6GZEr/JhZ/al9SCGdLLBAU13DH8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:31:03 2026 by rpki-client