$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: tKE/SkhGCTUBKGq1lYoorLbSVo0GIFgmO+zki+bhxH8= Subject key identifier: B9:FC:46:F6:76:EE:CF:86:50:7D:0B:FC:FC:04:EC:48:FA:D8:4E:03 Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 412ED2DE6EB2D375643C972E27AB48F58C655B87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 02B3 Signing time: Thu 26 Mar 2026 05:31:55 +0000 Manifest this update: Thu 26 Mar 2026 05:26:55 +0000 Manifest next update: Sun 29 Mar 2026 11:09:55 +0000 Files and hashes: 1: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: 7mSy93JyGfuZLtTA89nmtcGQjqdRbUslrbNWczBJpGo=) 2: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: /TmK17nBQLef3LeNICrlxh70NTHLDOFtoR7fUhtLOgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2e:d2:de:6e:b2:d3:75:64:3c:97:2e:27:ab:48:f5:8c:65:5b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Mar 26 05:26:55 2026 GMT Not After : Mar 29 11:09:55 2026 GMT Subject: CN=B9FC46F676EECF86507D0BFCFC04EC48FAD84E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:2e:b7:94:5f:4f:53:6e:c0:17:2b:da:07: 1a:25:af:f5:10:56:3b:e0:3e:11:1f:cf:25:0a:6e: a9:c9:e2:06:b8:75:dd:a0:d7:fe:ea:9a:3a:38:3d: a8:13:a4:84:05:5c:d7:c5:1a:5e:9a:df:51:93:e8: 74:98:39:52:2e:f6:4c:55:c6:14:a3:3b:bb:28:f4: 9e:84:e8:6a:c8:33:19:55:59:06:9d:83:06:04:ef: f2:c8:2e:15:a2:c1:94:f9:5a:88:3d:20:9a:22:f2: 27:40:ca:0b:a8:3d:f7:ba:00:6d:d8:ad:3b:cf:79: 6d:8f:62:39:8d:43:d7:51:2b:bb:fe:22:ae:05:4c: af:4a:af:54:5c:9c:f4:f6:03:c6:d6:c6:d5:f5:11: 88:0b:65:dd:12:96:e9:8f:48:c5:32:d3:ef:94:fb: a7:68:63:bf:73:9e:51:c0:fc:1f:43:4c:64:6c:b8: 63:52:44:9f:02:b2:28:7a:11:84:ef:e3:ff:6f:24: 01:79:ac:ba:59:45:50:6d:6e:78:7c:c4:7a:64:40: 30:d4:d0:b7:ee:35:58:77:10:91:4a:e9:5c:c8:cd: 15:9d:cd:85:e3:62:c3:08:eb:84:c3:19:82:5a:38: 6e:76:4f:f8:65:74:71:d2:73:f7:68:20:36:74:78: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FC:46:F6:76:EE:CF:86:50:7D:0B:FC:FC:04:EC:48:FA:D8:4E:03 X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:46:40:74:e5:66:06:b0:fa:3e:67:0b:e1:a5:37:a9:f8:9f: c6:ee:d2:f4:ec:97:fa:a0:d5:c0:00:fe:8c:90:5c:a3:71:a2: 6f:15:63:ad:93:fe:c5:e5:42:2f:96:d1:5c:dc:44:16:87:bb: 05:aa:d0:1d:73:e1:3f:0e:06:31:61:0e:27:eb:bc:36:e4:8d: d8:9e:97:5d:ad:56:35:1c:1f:87:53:6e:0c:f3:f3:8c:e6:d2: b4:75:11:08:4c:f4:18:56:95:42:ae:ee:82:fb:9d:fb:48:fb: e4:3b:2b:0e:29:ce:cf:01:6d:12:fe:8e:98:b0:92:c2:9a:79: 3f:20:49:a9:ab:0f:38:20:0f:d4:4c:ff:27:9f:ce:d5:4b:54: 78:f2:8f:19:f1:6e:65:04:68:29:f3:10:5f:0e:84:8e:bb:36: 66:a2:31:9c:4c:a0:01:56:f5:c3:9d:63:65:8f:f2:8e:ea:a6: 70:19:6c:16:2f:46:bc:11:a0:29:01:b3:df:1d:47:50:68:67: e2:c3:bc:01:e8:5f:0b:d8:a0:9d:c0:81:89:b9:49:31:cb:8c: e6:f8:dc:f9:10:71:09:6a:9f:49:74:63:fb:60:53:5f:f2:a6: b4:33:81:e6:c2:7f:e7:8a:23:75:49:b7:c2:2f:56:3f:60:b3: c9:52:84:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQS7S3m6y03VkPJcuJ6tI9YxlW4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNjAzMjYwNTI2NTVaFw0yNjAzMjkxMTA5NTVaMDMxMTAvBgNV BAMTKEI5RkM0NkY2NzZFRUNGODY1MDdEMEJGQ0ZDMDRFQzQ4RkFEODRFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXy63lF9PU27AFyvaBxolr/UQ VjvgPhEfzyUKbqnJ4ga4dd2g1/7qmjo4PagTpIQFXNfFGl6a31GT6HSYOVIu9kxV xhSjO7so9J6E6GrIMxlVWQadgwYE7/LILhWiwZT5Wog9IJoi8idAyguoPfe6AG3Y rTvPeW2PYjmNQ9dRK7v+Iq4FTK9Kr1RcnPT2A8bWxtX1EYgLZd0SlumPSMUy0++U +6doY79znlHA/B9DTGRsuGNSRJ8Csih6EYTv4/9vJAF5rLpZRVBtbnh8xHpkQDDU 0LfuNVh3EJFK6VzIzRWdzYXjYsMI64TDGYJaOG52T/hldHHSc/doIDZ0eJwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufxG9nbuz4ZQfQv8/ATsSPrYTgMwHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFGQHTlZgaw+j5nC+GlN6n4n8bu0vTsl/qg 1cAA/oyQXKNxom8VY62T/sXlQi+W0VzcRBaHuwWq0B1z4T8OBjFhDifrvDbkjdie l12tVjUcH4dTbgzz84zm0rR1EQhM9BhWlUKu7oL7nftI++Q7Kw4pzs8BbRL+jpiw ksKaeT8gSamrDzggD9RM/yefztVLVHjyjxnxbmUEaCnzEF8OhI67NmaiMZxMoAFW 9cOdY2WP8o7qpnAZbBYvRrwRoCkBs98dR1BoZ+LDvAHoXwvYoJ3AgYm5STHLjOb4 3PkQcQlqn0l0Y/tgU1/yprQzgebCf+eKI3VJt8IvVj9gs8lShB4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:20 2026 by rpki-client