$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: 7FYR/3YWwswwP3gy+czdxPgUrNQ8bfcHG969nbWDvUo= Subject key identifier: 85:B6:68:FA:DC:1F:1F:13:8E:03:EC:EA:2B:7B:6E:1D:1D:0E:CB:74 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 0BBBC002B916A05810AA8E83BD0749D5BD9DF390 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: C4 Signing time: Thu 26 Mar 2026 09:32:11 +0000 Manifest this update: Thu 26 Mar 2026 09:27:11 +0000 Manifest next update: Sun 29 Mar 2026 19:22:11 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: gP6dAzMR/WXv6bwbVfa+d+Rc9Y0EVWXjuXcT3Exr1xI=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: Nt7DCwqmSo6hdtCIBO1O3EI136GfdZn3wfW4p32v3eA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bb:c0:02:b9:16:a0:58:10:aa:8e:83:bd:07:49:d5:bd:9d:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Mar 26 09:27:11 2026 GMT Not After : Mar 29 19:22:11 2026 GMT Subject: CN=85B668FADC1F1F138E03ECEA2B7B6E1D1D0ECB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:17:fd:f5:72:12:05:ae:ad:7c:50:ae:c9: f9:30:1a:f6:83:a5:db:89:5b:0b:d1:c3:81:8a:95: 06:c6:63:df:65:53:d1:90:7e:71:2d:4f:23:e4:c2: 1d:33:f3:7b:61:4d:0e:8b:f8:c6:88:d0:86:bb:40: f6:2c:15:99:b7:6d:f3:24:f9:2b:73:f3:74:4b:e6: 8f:97:92:c4:b4:41:f3:a0:ea:16:89:80:f2:b4:6c: be:8b:76:1e:c3:d3:35:73:2f:0c:12:85:e7:3d:5d: 6a:58:71:7a:59:41:91:4a:45:62:d8:b5:06:2b:93: cc:b2:29:d1:00:72:ef:29:26:57:3f:22:13:75:48: 29:bc:33:9b:7d:7f:d3:05:36:42:68:af:8b:af:4c: 44:45:1a:26:43:b6:19:6e:86:4c:77:c7:cf:3f:8d: 46:a4:e6:7a:51:e8:d4:5b:dd:46:2f:f9:6c:41:79: 71:a6:95:57:dd:bb:87:3c:0f:6e:c8:3d:67:01:b7: 5b:a0:71:7b:32:e1:cc:07:e8:a3:d0:7e:b2:82:d2: 16:09:08:3e:9a:bb:ee:e1:e6:cf:0a:17:2d:e0:ea: f2:b8:0e:27:06:5d:29:8e:02:83:53:4b:da:3b:09: 6b:9f:45:14:b1:55:95:b7:76:02:07:da:be:f9:2f: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B6:68:FA:DC:1F:1F:13:8E:03:EC:EA:2B:7B:6E:1D:1D:0E:CB:74 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:b0:9d:ae:94:61:2d:7c:dd:8c:e7:45:28:58:c7:c0:7e:bb: 71:ed:50:5e:60:b9:d3:98:36:85:11:de:9b:53:bb:70:bd:b2: cd:b5:ae:42:1c:7b:36:d4:2c:55:1a:25:08:22:6c:a7:ac:d8: 02:c1:48:1d:5c:42:d2:83:fb:97:69:4d:e1:e7:b0:5c:8c:de: dc:a1:1d:1c:38:fb:5d:cd:01:34:5f:d3:cd:33:2a:6f:0a:16: 21:07:1d:49:a7:97:d6:ac:0c:88:88:c6:c1:4c:51:c1:ea:bd: 2a:bb:73:03:5e:c5:f1:c3:dc:5b:7d:3e:0c:31:20:81:8f:fa: d9:94:4f:95:86:29:01:8c:f6:32:bc:85:d3:a4:64:26:c7:31: 8e:1a:da:a8:ee:50:45:15:0b:74:bc:65:24:f5:6f:66:55:83: a9:ad:2f:bd:9d:78:87:f6:0e:e3:35:ea:5e:12:d7:9d:55:95: fb:b9:b1:34:a9:77:ec:be:88:67:9c:8f:9b:88:dc:00:da:4e: 22:c9:63:f9:22:65:44:4f:20:c9:6e:c0:a6:61:74:92:4e:ec: 7a:c0:79:29:82:ec:b9:b4:e6:be:a5:86:7f:01:60:b0:d8:ce: 3f:a6:0c:bc:86:61:38:0e:c9:ed:30:c0:e6:08:97:78:81:70: f8:54:bd:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7vAArkWoFgQqo6DvQdJ1b2d85AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNjAzMjYwOTI3MTFaFw0yNjAzMjkxOTIyMTFaMDMxMTAvBgNV BAMTKDg1QjY2OEZBREMxRjFGMTM4RTAzRUNFQTJCN0I2RTFEMUQwRUNCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrhf99XISBa6tfFCuyfkwGvaD pduJWwvRw4GKlQbGY99lU9GQfnEtTyPkwh0z83thTQ6L+MaI0Ia7QPYsFZm3bfMk +Stz83RL5o+XksS0QfOg6haJgPK0bL6Ldh7D0zVzLwwShec9XWpYcXpZQZFKRWLY tQYrk8yyKdEAcu8pJlc/IhN1SCm8M5t9f9MFNkJor4uvTERFGiZDthluhkx3x88/ jUak5npR6NRb3UYv+WxBeXGmlVfdu4c8D27IPWcBt1ugcXsy4cwH6KPQfrKC0hYJ CD6au+7h5s8KFy3g6vK4DicGXSmOAoNTS9o7CWufRRSxVZW3dgIH2r75L5QjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhbZo+twfHxOOA+zqK3tuHR0Oy3QwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOKwna6UYS183YznRShYx8B+u3HtUF5gudOY NoUR3ptTu3C9ss21rkIcezbULFUaJQgibKes2ALBSB1cQtKD+5dpTeHnsFyM3tyh HRw4+13NATRf080zKm8KFiEHHUmnl9asDIiIxsFMUcHqvSq7cwNexfHD3Ft9Pgwx IIGP+tmUT5WGKQGM9jK8hdOkZCbHMY4a2qjuUEUVC3S8ZST1b2ZVg6mtL72deIf2 DuM16l4S151Vlfu5sTSpd+y+iGecj5uI3ADaTiLJY/kiZURPIMluwKZhdJJO7HrA eSmC7Lm05r6lhn8BYLDYzj+mDLyGYTgOye0wwOYIl3iBcPhUvbM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:16 2026 by rpki-client