$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: mJrMUwHZfLJhT7xmWCDLoJnd1mnD4zjp81gkJ36EuxE= Subject key identifier: 3C:32:82:52:C2:1F:C0:CF:89:90:69:44:E3:F7:4A:86:8C:58:4F:D4 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 7AEC0D4C355277F2C06EBB32ECBE36F772AA53CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 0259 Signing time: Thu 26 Mar 2026 04:43:34 +0000 Manifest this update: Thu 26 Mar 2026 04:38:34 +0000 Manifest next update: Sun 29 Mar 2026 08:50:34 +0000 Files and hashes: 1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: w24qg4o41FXQYWot+3W+eC5LQEZQ3DhJe0gbAWXv7Zc=) 2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: KM1ESBIXGbFNSPLyYnNSMBK3OGLkTwlOBU29jEyxfKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ec:0d:4c:35:52:77:f2:c0:6e:bb:32:ec:be:36:f7:72:aa:53:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Mar 26 04:38:34 2026 GMT Not After : Mar 29 08:50:34 2026 GMT Subject: CN=3C328252C21FC0CF89906944E3F74A868C584FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:96:6e:13:5e:7d:08:e7:fe:13:57:cf:70: 3c:75:6e:8e:25:0a:00:86:55:22:c4:6b:bf:0d:dd: ab:29:ac:f9:39:97:f5:01:9f:8d:b1:13:aa:5c:f8: f4:33:d9:92:24:1b:c5:12:79:8f:b3:bc:4e:6d:de: c9:2a:05:e9:aa:40:dd:f3:00:28:28:99:23:e7:f4: cd:48:73:cf:5a:1a:dd:9f:b7:24:b3:07:15:e1:a3: 33:f0:8f:ba:f4:8c:9d:c0:11:1e:4e:8b:ea:03:92: 73:18:7e:2a:64:ac:33:1b:c5:c7:36:a7:37:d1:bf: 64:8b:78:bd:fa:3a:10:8a:bb:a8:57:2a:6b:f9:04: 86:2a:bb:a0:b2:3b:8d:5c:cf:93:3e:19:3b:39:46: 86:97:9a:c1:b6:9e:9a:37:e7:7f:70:14:c1:a6:79: ab:2e:e3:33:29:61:3b:e4:da:b7:93:6a:e4:0a:eb: 66:a9:23:9f:57:6d:4c:1b:bf:76:69:b1:0e:da:0d: df:d0:66:86:b6:64:6f:9e:d1:44:51:f8:8a:60:d4: ce:4c:7a:14:a1:80:a5:69:37:7e:44:6a:6d:9f:5d: fc:d1:5b:15:4f:bb:72:15:e3:ba:87:49:95:8d:6d: 18:1f:19:f0:f9:d2:68:fd:22:90:43:ab:26:35:97: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:82:52:C2:1F:C0:CF:89:90:69:44:E3:F7:4A:86:8C:58:4F:D4 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:69:fe:11:e5:b0:96:8f:66:75:76:cb:5f:71:67:9a:77:19: 3e:07:9a:6b:e4:a5:d2:d7:b2:91:da:20:0a:8d:92:14:d7:25: e1:ed:4f:02:0f:6f:c1:89:69:ae:a7:0e:8b:9e:65:55:48:ac: 9f:a3:40:08:7a:4c:84:55:4b:ce:f6:06:1b:99:6e:96:7e:5c: ed:a5:0c:82:d0:ff:58:39:ce:e5:cf:12:ec:43:61:9c:39:5e: 62:d0:fa:6c:af:d3:79:c3:9c:e1:d7:e4:e0:05:94:96:bf:65: 9b:20:1b:df:4e:4f:b8:ac:d4:42:8b:a5:ad:9a:11:12:71:dd: 9f:7c:1c:f4:cb:22:45:61:ba:f7:c7:fa:cd:0b:4c:6e:94:d2: 8b:dc:33:b1:1c:35:f8:aa:10:48:8e:8d:61:1b:7a:56:b9:94: a9:16:91:46:35:a2:a3:cc:68:39:f4:12:fb:92:f8:5c:38:83: cc:53:34:13:c7:e5:22:19:5a:49:c1:f0:49:c2:3e:65:d0:3d: 6b:b8:a3:99:5a:5b:97:07:d8:bc:89:df:f5:0d:f7:d4:69:66: 82:bf:7c:a9:a9:fb:47:50:01:d3:d4:4a:bf:6f:b6:e9:21:25: 86:f6:09:fd:03:e8:14:87:6a:b5:15:ce:b9:15:19:1a:2c:24: 2a:ba:2c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuwNTDVSd/LAbrsy7L4293KqU80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNjAzMjYwNDM4MzRaFw0yNjAzMjkwODUwMzRaMDMxMTAvBgNV BAMTKDNDMzI4MjUyQzIxRkMwQ0Y4OTkwNjk0NEUzRjc0QTg2OEM1ODRGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgJZuE159COf+E1fPcDx1bo4l CgCGVSLEa78N3asprPk5l/UBn42xE6pc+PQz2ZIkG8USeY+zvE5t3skqBemqQN3z ACgomSPn9M1Ic89aGt2ftySzBxXhozPwj7r0jJ3AER5Oi+oDknMYfipkrDMbxcc2 pzfRv2SLeL36OhCKu6hXKmv5BIYqu6CyO41cz5M+GTs5RoaXmsG2npo3539wFMGm easu4zMpYTvk2reTauQK62apI59XbUwbv3ZpsQ7aDd/QZoa2ZG+e0URR+Ipg1M5M ehShgKVpN35Eam2fXfzRWxVPu3IV47qHSZWNbRgfGfD50mj9IpBDqyY1l1epAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPDKCUsIfwM+JkGlE4/dKhoxYT9QwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5p/hHlsJaPZnV2y19xZ5p3GT4HmmvkpdLX spHaIAqNkhTXJeHtTwIPb8GJaa6nDoueZVVIrJ+jQAh6TIRVS872BhuZbpZ+XO2l DILQ/1g5zuXPEuxDYZw5XmLQ+myv03nDnOHX5OAFlJa/ZZsgG99OT7is1EKLpa2a ERJx3Z98HPTLIkVhuvfH+s0LTG6U0ovcM7EcNfiqEEiOjWEbela5lKkWkUY1oqPM aDn0EvuS+Fw4g8xTNBPH5SIZWknB8EnCPmXQPWu4o5laW5cH2LyJ3/UN99RpZoK/ fKmp+0dQAdPUSr9vtukhJYb2Cf0D6BSHarUVzrkVGRosJCq6LAI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:50 2026 by rpki-client