$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: 9w84NR1StgkTXsJHlO4VByxsCI1Ijg43BxAn2hqs6zg= Subject key identifier: 4A:C5:40:0F:C3:8B:36:48:C7:8A:34:4F:2F:4B:27:4D:D2:2C:0B:0F Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 25F06EF4F638A32C599D70E508D1F00499793DC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 028A Signing time: Tue 24 Mar 2026 20:42:42 +0000 Manifest this update: Tue 24 Mar 2026 20:37:42 +0000 Manifest next update: Sat 28 Mar 2026 07:48:42 +0000 Files and hashes: 1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: 1Delb6kICYbzXwguoVaLbuxYHPSJr+8+AYvuVf/qXZc=) 2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: HSvccbcXy7k9kPjMD6mXV/KFzh471F30ZXh1rABYDjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f0:6e:f4:f6:38:a3:2c:59:9d:70:e5:08:d1:f0:04:99:79:3d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Mar 24 20:37:42 2026 GMT Not After : Mar 28 07:48:42 2026 GMT Subject: CN=4AC5400FC38B3648C78A344F2F4B274DD22C0B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:78:02:14:1b:3c:9b:76:2e:3e:f4:92:e1: 8b:ed:d0:1f:81:52:bb:6d:e9:9e:a7:41:9c:0f:a6: 84:f0:77:48:17:37:44:72:a0:af:e9:3f:bb:48:f3: b4:d1:23:06:b9:03:0d:32:b7:78:90:5b:c5:a5:5f: 62:63:cc:c0:f5:e7:19:15:8b:b5:53:5d:11:0a:6c: 4d:75:66:59:65:3b:59:a8:96:5b:bb:f6:a0:38:0a: 98:d1:1a:66:f5:b4:03:7e:e6:02:f5:4c:9c:2d:25: 80:3b:5e:20:e2:a8:fb:30:e7:a2:cf:77:e1:7a:ff: 3b:cc:7f:63:40:bb:47:54:5b:7c:f0:f4:1a:7f:c1: 30:e9:89:50:74:f9:41:30:19:bc:7c:c8:c1:3e:df: c5:5f:71:48:3d:4a:78:a5:dd:fd:a8:1b:d5:4e:94: d0:b7:97:c0:cd:76:99:45:a9:fc:9d:9e:8b:36:0e: f8:27:97:fc:81:f7:28:f3:80:8b:c8:61:7a:a8:b9: 6f:0f:f4:a9:ee:9c:00:17:1d:43:6e:9e:42:51:1c: 98:9c:8b:2c:61:9b:59:8e:26:26:9c:c5:90:c3:10: df:96:82:76:63:02:ed:06:ea:82:cf:e2:5b:a1:53: 01:eb:24:53:07:22:8c:f6:b7:5d:86:36:a4:25:c1: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:40:0F:C3:8B:36:48:C7:8A:34:4F:2F:4B:27:4D:D2:2C:0B:0F X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9e:d9:b5:b3:db:e2:9d:24:63:86:2d:09:8d:3e:fa:1f:2f: 5d:e1:0b:2b:74:59:42:b5:5a:a0:5e:ce:6d:21:59:04:96:9c: ac:4f:c2:41:a8:c4:b7:a2:cf:90:dd:39:0d:82:46:ec:93:29: 78:f0:07:53:df:8d:46:8a:1e:8a:a0:5b:34:51:df:68:02:a6: e5:4c:97:d1:78:67:8b:f0:52:ea:2b:da:d6:f0:42:f9:65:09: 41:66:2c:6d:70:fa:fc:4c:22:04:51:bd:0d:ab:b5:a4:cd:f5: 0c:31:b5:1c:6b:81:8a:df:d5:7f:7a:0d:7d:cf:7d:9e:b3:23: 9d:93:6e:ff:01:96:21:6c:cf:17:2c:8c:de:b8:4c:94:b6:ca: 89:1f:fa:d1:8b:e6:c9:60:0c:c3:ed:88:3e:ae:6c:9c:79:e6: 95:a2:0e:8c:c7:c8:87:a1:28:a6:6b:0d:1b:9b:ad:66:53:63: 90:65:e6:fc:39:2b:8c:a0:49:e1:de:6b:e6:a1:6f:4b:19:61: d4:c5:8d:cb:2b:90:3e:30:4f:c1:1b:90:86:f8:c5:0e:0e:57: 92:5d:eb:99:15:1b:4b:af:04:71:0b:8f:75:06:26:31:28:69: 91:6d:ef:c6:53:fd:a5:29:b2:87:66:84:1c:01:34:51:f6:22: 81:bc:e8:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfBu9PY4oyxZnXDlCNHwBJl5PcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNjAzMjQyMDM3NDJaFw0yNjAzMjgwNzQ4NDJaMDMxMTAvBgNV BAMTKDRBQzU0MDBGQzM4QjM2NDhDNzhBMzQ0RjJGNEIyNzRERDIyQzBCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzngCFBs8m3YuPvSS4Yvt0B+B Urtt6Z6nQZwPpoTwd0gXN0RyoK/pP7tI87TRIwa5Aw0yt3iQW8WlX2JjzMD15xkV i7VTXREKbE11ZlllO1mollu79qA4CpjRGmb1tAN+5gL1TJwtJYA7XiDiqPsw56LP d+F6/zvMf2NAu0dUW3zw9Bp/wTDpiVB0+UEwGbx8yME+38VfcUg9Snil3f2oG9VO lNC3l8DNdplFqfydnos2Dvgnl/yB9yjzgIvIYXqouW8P9KnunAAXHUNunkJRHJic iyxhm1mOJiacxZDDEN+WgnZjAu0G6oLP4luhUwHrJFMHIoz2t12GNqQlweRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsVAD8OLNkjHijRPL0snTdIsCw8wHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGe2bWz2+KdJGOGLQmNPvofL13hCyt0WUK1 WqBezm0hWQSWnKxPwkGoxLeiz5DdOQ2CRuyTKXjwB1PfjUaKHoqgWzRR32gCpuVM l9F4Z4vwUuor2tbwQvllCUFmLG1w+vxMIgRRvQ2rtaTN9QwxtRxrgYrf1X96DX3P fZ6zI52Tbv8BliFszxcsjN64TJS2yokf+tGL5slgDMPtiD6ubJx55pWiDozHyIeh KKZrDRubrWZTY5Bl5vw5K4ygSeHea+ahb0sZYdTFjcsrkD4wT8EbkIb4xQ4OV5Jd 65kVG0uvBHELj3UGJjEoaZFt78ZT/aUpsodmhBwBNFH2IoG86G8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:13 2026 by rpki-client