$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: X8tSnScWYvthsZi7Ve9iTqWqLuLrmCJmPVEaObAZC/8= Subject key identifier: C7:8D:54:6C:83:4A:62:AF:B3:C1:ED:8F:2E:18:C8:A1:BF:FE:09:94 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 09875986F6374DFB9268DD275AB1254C1E8127C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 01D2 Signing time: Wed 25 Mar 2026 00:31:51 +0000 Manifest this update: Wed 25 Mar 2026 00:26:51 +0000 Manifest next update: Sat 28 Mar 2026 04:47:51 +0000 Files and hashes: 1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: bOMw2z/DqljmPFskG2vsYIuUCGDr+Iq+bzXjTNV2cFE=) 2: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: uTvEgnz1+Ox/eXJb5ryDdlCaiqodi7E0mU71RnEbxng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:87:59:86:f6:37:4d:fb:92:68:dd:27:5a:b1:25:4c:1e:81:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Mar 25 00:26:51 2026 GMT Not After : Mar 28 04:47:51 2026 GMT Subject: CN=C78D546C834A62AFB3C1ED8F2E18C8A1BFFE0994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:77:08:20:71:51:2b:10:1e:cc:20:9b:2e:bf: 08:40:fa:ec:62:a0:6c:6e:3c:8c:ca:23:6b:e8:91: e5:0d:09:4a:00:f0:c4:2b:05:0c:b7:f8:79:f8:e5: 7d:e0:41:1b:bb:ad:ba:a6:39:af:78:2f:10:73:c3: b3:d5:8e:a0:e2:be:4c:d1:8c:4f:f4:41:93:bd:4c: 6c:b0:8c:64:1a:d2:36:27:a8:37:04:2f:b7:56:1d: 19:ad:b8:51:66:fe:27:83:ba:13:8c:16:1f:8a:15: 5b:70:cf:ab:7f:d9:64:d4:08:4c:79:13:db:97:ef: e8:4e:39:56:47:bb:ba:47:75:d7:48:be:ad:6e:b7: 21:d8:93:af:11:f5:0e:36:63:b2:ab:bc:3b:af:06: 1c:fb:c7:8f:26:2a:a3:b2:b9:29:03:f9:53:39:61: 99:c9:9e:b0:2c:c3:f4:e7:35:04:82:5f:ba:cb:af: 42:ce:c0:1f:66:2f:da:7b:d2:af:7e:20:55:b5:cf: 8e:63:a9:06:a3:0a:a8:19:0c:9f:53:09:b3:1f:a2: 25:bd:97:d0:90:82:db:f5:84:58:63:e0:a5:0c:86: 99:21:e3:d3:2b:2d:5a:32:66:1d:d3:9e:32:4b:48: d9:fa:1d:ad:eb:b8:a7:5d:ee:e6:56:38:62:f5:0a: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8D:54:6C:83:4A:62:AF:B3:C1:ED:8F:2E:18:C8:A1:BF:FE:09:94 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c7:96:3a:dc:da:61:12:30:c5:2b:2b:31:14:35:68:d5:03: 1e:87:21:7e:9d:a5:a4:c7:86:3a:7c:ac:4b:c9:99:9b:a5:ea: 04:54:3d:6d:38:b8:e9:ce:d7:8f:70:70:cb:c5:b3:ed:18:60: 76:f5:a0:45:6f:e4:3c:28:45:5a:73:55:68:89:53:45:a2:61: 66:91:0f:c2:64:98:61:b4:e1:f5:f6:11:0d:c5:4c:8a:3a:83: 5f:09:01:fd:df:b8:17:41:dd:17:be:a6:1a:12:4c:e1:2a:5d: 71:81:e9:a8:ac:b4:f4:ee:75:84:46:b2:16:05:e4:e0:9f:f6: 49:22:ef:d5:0c:39:bc:4d:5c:e3:ca:a8:e7:3e:ff:43:ff:42: e7:b7:81:51:ce:95:ac:43:00:a4:6a:67:5a:31:1e:15:a0:fe: 8b:62:10:d8:49:c1:4b:96:74:f7:91:69:40:28:ab:7b:30:be: ff:9b:47:01:72:09:42:59:99:91:75:1e:61:9f:f5:2e:4c:05: f5:92:39:b6:8b:04:cd:dd:c9:1f:63:c4:bf:ba:5c:d3:fd:50: 55:d5:5a:7c:4d:62:88:36:a7:00:26:e5:e9:a1:1e:c5:74:91: 1f:40:e8:22:93:74:05:5e:58:a3:dc:ab:17:0e:74:6b:e9:4e: 9f:7c:40:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYdZhvY3TfuSaN0nWrElTB6BJ8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNjAzMjUwMDI2NTFaFw0yNjAzMjgwNDQ3NTFaMDMxMTAvBgNV BAMTKEM3OEQ1NDZDODM0QTYyQUZCM0MxRUQ4RjJFMThDOEExQkZGRTA5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdwggcVErEB7MIJsuvwhA+uxi oGxuPIzKI2vokeUNCUoA8MQrBQy3+Hn45X3gQRu7rbqmOa94LxBzw7PVjqDivkzR jE/0QZO9TGywjGQa0jYnqDcEL7dWHRmtuFFm/ieDuhOMFh+KFVtwz6t/2WTUCEx5 E9uX7+hOOVZHu7pHdddIvq1utyHYk68R9Q42Y7KrvDuvBhz7x48mKqOyuSkD+VM5 YZnJnrAsw/TnNQSCX7rLr0LOwB9mL9p70q9+IFW1z45jqQajCqgZDJ9TCbMfoiW9 l9CQgtv1hFhj4KUMhpkh49MrLVoyZh3TnjJLSNn6Ha3ruKdd7uZWOGL1Chz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx41UbINKYq+zwe2PLhjIob/+CZQwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/Hljrc2mESMMUrKzEUNWjVAx6HIX6dpaTH hjp8rEvJmZul6gRUPW04uOnO149wcMvFs+0YYHb1oEVv5DwoRVpzVWiJU0WiYWaR D8JkmGG04fX2EQ3FTIo6g18JAf3fuBdB3Re+phoSTOEqXXGB6aistPTudYRGshYF 5OCf9kki79UMObxNXOPKqOc+/0P/Que3gVHOlaxDAKRqZ1oxHhWg/otiENhJwUuW dPeRaUAoq3swvv+bRwFyCUJZmZF1HmGf9S5MBfWSObaLBM3dyR9jxL+6XNP9UFXV WnxNYog2pwAm5emhHsV0kR9A6CKTdAVeWKPcqxcOdGvpTp98QFw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:06:35 2026 by rpki-client