$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: B2oK7dAuxmpoNtNACWbMH2sBcP2gZ6jewSbyYn61RGs= Subject key identifier: 90:E1:E5:7D:F8:AB:C0:C1:35:57:32:87:94:C9:DF:39:54:B6:7C:B6 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 3C07942E97F03073BCEACB1B07E1CB7DEF8C0CC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 02C3 Signing time: Wed 25 Mar 2026 09:11:15 +0000 Manifest this update: Wed 25 Mar 2026 09:06:15 +0000 Manifest next update: Sat 28 Mar 2026 19:43:15 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) 2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) 3: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: GIwXikVyvy+gISioVKuhampXSJlr3UG5Id5IUCJqim0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:07:94:2e:97:f0:30:73:bc:ea:cb:1b:07:e1:cb:7d:ef:8c:0c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Mar 25 09:06:15 2026 GMT Not After : Mar 28 19:43:15 2026 GMT Subject: CN=90E1E57DF8ABC0C13557328794C9DF3954B67CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:c0:ca:d0:79:3a:c2:d9:73:30:e0:b5:e1: ca:2c:d6:e9:b8:6a:e1:79:ce:dd:45:75:8b:1a:91: 46:48:be:48:77:ce:60:ca:c5:fc:eb:28:b1:19:c2: a6:6a:74:9a:9f:99:1c:41:d3:46:20:4e:c5:64:fc: 65:8d:36:8a:4f:14:80:61:76:2f:48:93:db:09:7e: e6:24:d0:ac:9d:42:67:18:98:f0:3b:50:21:76:33: 97:f3:e7:41:21:ae:98:c8:a9:8b:80:62:89:21:cf: 91:53:52:bc:bf:5a:c2:1c:37:48:9d:46:91:61:a9: 84:8b:f8:a5:a4:0f:15:7a:f9:f3:cb:5c:c6:a9:28: cf:de:df:6e:85:5d:21:7d:4f:d7:97:02:e6:ec:29: 94:3e:96:0c:90:7a:3a:67:29:00:8c:4d:e5:e9:b5: a7:ef:e6:0f:17:a7:1b:c4:13:e8:f0:fb:03:2b:4c: 60:9b:f4:24:89:7f:d9:41:e0:f5:1e:af:54:9c:d4: 39:e7:4b:94:88:73:9a:06:9c:3b:bd:e9:47:43:f3: 3a:f6:3f:f7:0f:79:bf:4d:f1:6d:8b:ce:68:91:5f: 67:3a:b4:c3:56:70:ae:63:df:05:e4:ac:b6:a2:1b: 67:bf:aa:d6:dc:85:a6:22:cd:b2:b1:b3:db:6c:ee: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E1:E5:7D:F8:AB:C0:C1:35:57:32:87:94:C9:DF:39:54:B6:7C:B6 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e8:0e:eb:62:34:8b:36:7b:6b:f0:91:54:9d:59:57:f8:24: 38:75:d1:93:ef:85:41:bb:77:3d:bc:ef:c4:51:96:52:5d:86: 22:8c:b3:eb:3a:eb:6e:38:5d:54:d4:42:0e:4e:27:04:e4:d0: a0:d0:a0:76:bf:f5:ec:a5:5f:5d:b3:61:72:55:19:1f:03:ac: 97:af:bb:25:43:6c:8e:57:be:6e:0b:e5:69:ed:c6:c3:86:aa: da:a5:14:30:7e:a3:20:2a:0e:29:66:a3:d2:1d:b6:db:d2:03: 5d:16:3b:f4:6b:5d:d0:9f:c2:2d:ea:62:67:0b:ce:67:50:d8: e5:20:ca:55:ea:a8:8e:eb:e5:ca:23:f0:27:33:69:07:a6:1c: 24:53:9e:62:b0:92:49:75:57:3a:0a:32:d8:b8:0b:3e:21:0b: e8:56:7e:57:28:b4:1d:8c:5e:a8:d0:a1:50:d5:04:e0:0d:f7: 6a:a7:f1:44:72:1a:0e:21:25:cb:e3:f1:78:4d:ce:90:95:fe: 91:5d:8c:63:b6:36:dc:36:32:a5:89:60:ab:3b:e8:50:87:f1: a5:1e:ef:38:d0:d4:dd:0c:76:aa:cf:11:aa:08:c1:24:03:6d: 95:51:04:5b:6c:1b:d2:49:5d:ad:c8:a2:10:e1:fb:ef:0a:c2: 77:60:c6:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAeULpfwMHO86ssbB+HLfe+MDMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNjAzMjUwOTA2MTVaFw0yNjAzMjgxOTQzMTVaMDMxMTAvBgNV BAMTKDkwRTFFNTdERjhBQkMwQzEzNTU3MzI4Nzk0QzlERjM5NTRCNjdDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiMDK0Hk6wtlzMOC14cos1um4 auF5zt1FdYsakUZIvkh3zmDKxfzrKLEZwqZqdJqfmRxB00YgTsVk/GWNNopPFIBh di9Ik9sJfuYk0KydQmcYmPA7UCF2M5fz50EhrpjIqYuAYokhz5FTUry/WsIcN0id RpFhqYSL+KWkDxV6+fPLXMapKM/e326FXSF9T9eXAubsKZQ+lgyQejpnKQCMTeXp tafv5g8XpxvEE+jw+wMrTGCb9CSJf9lB4PUer1Sc1DnnS5SIc5oGnDu96UdD8zr2 P/cPeb9N8W2LzmiRX2c6tMNWcK5j3wXkrLaiG2e/qtbchaYizbKxs9ts7khTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkOHlffirwME1VzKHlMnfOVS2fLYwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/oDutiNIs2e2vwkVSdWVf4JDh10ZPvhUG7 dz2878RRllJdhiKMs+s66244XVTUQg5OJwTk0KDQoHa/9eylX12zYXJVGR8DrJev uyVDbI5Xvm4L5WntxsOGqtqlFDB+oyAqDilmo9IdttvSA10WO/RrXdCfwi3qYmcL zmdQ2OUgylXqqI7r5coj8CczaQemHCRTnmKwkkl1VzoKMti4Cz4hC+hWflcotB2M XqjQoVDVBOAN92qn8URyGg4hJcvj8XhNzpCV/pFdjGO2Ntw2MqWJYKs76FCH8aUe 7zjQ1N0MdqrPEaoIwSQDbZVRBFtsG9JJXa3IohDh++8KwndgxrE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:57 2026 by rpki-client