$ rpki-client -vvf repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft File: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft (raw, json) Hash identifier: Eg87tLG296a5ZsLf8MmNBwLWe0NWkOcpJKI7X1EF2so= Subject key identifier: 68:9A:66:AE:AA:01:24:95:EF:AD:16:13:7D:46:E9:FB:54:4F:4E:C2 Authority key identifier: DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F Certificate issuer: /CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F Certificate serial: 644BBDE80F10F98C8FCA2C515B29A5FB1E623889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft Manifest number: 025C Signing time: Thu 26 Mar 2026 11:22:39 +0000 Manifest this update: Thu 26 Mar 2026 11:17:39 +0000 Manifest next update: Sun 29 Mar 2026 18:43:39 +0000 Files and hashes: 1: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl (hash: elxKJQSEmQIb/cCbwrDXqep7ctikm7Ce5Fpz792pvro=) 2: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: mRpYafT5yxgT8WclK281BLVGzkgjdaJIpnzZSxWdW88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 18:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4b:bd:e8:0f:10:f9:8c:8f:ca:2c:51:5b:29:a5:fb:1e:62:38:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F Validity Not Before: Mar 26 11:17:39 2026 GMT Not After : Mar 29 18:43:39 2026 GMT Subject: CN=689A66AEAA012495EFAD16137D46E9FB544F4EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c0:df:cf:9c:a7:4d:54:35:49:2e:a2:43:9a: 74:6a:48:e9:b4:79:d9:2a:fe:6b:2e:21:dd:cd:c7: 6b:b3:3c:93:07:3a:5d:26:68:c2:c8:15:a7:b3:56: 27:26:8f:83:eb:ca:41:a7:c3:06:1b:f3:60:fe:a5: b1:4d:f3:02:b6:f4:c1:d1:51:a2:09:b8:a6:65:73: 33:56:2e:6c:12:55:30:74:8a:04:e2:e2:e1:bb:72: a4:be:2a:e5:42:92:1c:63:46:55:11:ec:b4:b9:4a: e1:7e:c0:bd:f8:62:76:6f:e5:77:7c:f4:af:ae:9e: 08:b5:26:35:0d:b2:e4:c7:0e:5b:0f:e3:b6:52:25: c8:5e:17:84:60:e5:34:f0:27:6f:6c:65:67:33:a0: a8:20:44:a6:b5:19:63:f4:0a:fe:2d:a2:01:06:e9: c7:ff:47:13:ae:3f:06:99:99:07:68:a9:cd:0c:14: 4a:cb:f2:2d:f6:4f:fa:a9:00:8d:f3:d2:68:d1:4c: 51:bf:6a:ad:0c:f0:07:17:a3:b1:b0:ff:79:ba:86: 9f:6d:57:e8:ad:a6:6c:d1:dd:f8:7c:c0:23:0f:50: 92:70:a9:f7:b9:c2:e5:83:7d:72:6c:e5:56:a3:05: 1f:b6:1e:9a:e3:ac:9e:a8:13:b2:96:58:2f:d9:ff: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9A:66:AE:AA:01:24:95:EF:AD:16:13:7D:46:E9:FB:54:4F:4E:C2 X509v3 Authority Key Identifier: keyid:DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8b:65:72:de:40:62:c2:a7:4d:b0:1a:a3:70:6c:ce:d1:42: d7:78:16:78:bf:d2:f0:58:d4:51:96:fd:71:de:c9:b7:ac:fa: d7:a5:bd:4e:35:07:11:7d:ca:06:46:f6:19:7c:a9:0f:a5:10: 1a:7f:78:72:08:ef:3f:a8:a0:9c:ca:48:f4:f0:d6:64:c4:9c: da:74:e7:6f:53:02:79:23:21:9e:98:99:1e:ab:ac:c1:6f:75: 5d:af:bc:2a:97:ad:ff:f4:87:bb:ec:ce:6f:cf:34:89:2f:1b: 45:b7:24:ad:8c:b0:92:c8:bc:be:9a:81:17:0d:f7:f6:00:74: b9:42:72:a5:24:ab:8a:48:e6:38:12:27:d2:90:01:9e:66:12: 2e:45:86:f4:1d:2b:db:8d:09:f7:3e:0b:1d:46:8a:ef:02:db: 50:44:e0:e2:6c:f1:15:6e:73:51:2a:c6:fb:50:6c:8b:29:99: 27:8d:a1:5e:c5:32:1e:56:ec:16:31:62:bf:86:90:84:40:e3: 04:6a:b5:4c:84:27:7f:ff:42:da:7a:b2:77:29:48:20:05:60: b7:e5:e4:77:fe:bb:2b:da:d0:bf:de:6f:1b:07:8c:5c:8e:ea: 50:c6:c5:4f:a5:3b:c2:ab:e2:2b:91:be:22:ca:6f:05:70:8a: 3c:51:55:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEu96A8Q+YyPyixRWyml+x5iOIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNBRDI3 OEQyNzM4RjAeFw0yNjAzMjYxMTE3MzlaFw0yNjAzMjkxODQzMzlaMDMxMTAvBgNV BAMTKDY4OUE2NkFFQUEwMTI0OTVFRkFEMTYxMzdENDZFOUZCNTQ0RjRFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwN/PnKdNVDVJLqJDmnRqSOm0 edkq/msuId3Nx2uzPJMHOl0maMLIFaezVicmj4PrykGnwwYb82D+pbFN8wK29MHR UaIJuKZlczNWLmwSVTB0igTi4uG7cqS+KuVCkhxjRlUR7LS5SuF+wL34YnZv5Xd8 9K+ungi1JjUNsuTHDlsP47ZSJcheF4Rg5TTwJ29sZWczoKggRKa1GWP0Cv4togEG 6cf/RxOuPwaZmQdoqc0MFErL8i32T/qpAI3z0mjRTFG/aq0M8AcXo7Gw/3m6hp9t V+itpmzR3fh8wCMPUJJwqfe5wuWDfXJs5VajBR+2HprjrJ6oE7KWWC/Z/2m3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJpmrqoBJJXvrRYTfUbp+1RPTsIwHwYDVR0j BBgwFoAU3lePTkEEvAsX7yx1+w460njSc48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWNkNGE2Ny1iYzhiLTRhZDctODFhMS1jMDI0YzVhNjJkMzAvMC9ERTU3OEY0RTQx MDRCQzBCMTdFRjJDNzVGQjBFM0FEMjc4RDI3MzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNBRDI3OEQy NzM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFjZDRhNjctYmM4Yi00YWQ3LTgx YTEtYzAyNGM1YTYyZDMwLzAvREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNB RDI3OEQyNzM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmLZXLeQGLCp02wGqNwbM7RQtd4Fni/0vBY 1FGW/XHeybes+telvU41BxF9ygZG9hl8qQ+lEBp/eHII7z+ooJzKSPTw1mTEnNp0 529TAnkjIZ6YmR6rrMFvdV2vvCqXrf/0h7vszm/PNIkvG0W3JK2MsJLIvL6agRcN 9/YAdLlCcqUkq4pI5jgSJ9KQAZ5mEi5FhvQdK9uNCfc+Cx1Giu8C21BE4OJs8RVu c1EqxvtQbIspmSeNoV7FMh5W7BYxYr+GkIRA4wRqtUyEJ3//Qtp6sncpSCAFYLfl 5Hf+uyva0L/ebxsHjFyO6lDGxU+lO8Kr4iuRviLKbwVwijxRVV8= -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:24 2026 by rpki-client