$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: 5DylvXMvyKWgW0rt03PqXeqfaZoiRHk7RqfFyziB+Bg= Subject key identifier: 0B:51:28:73:A1:51:AC:39:7E:29:D3:5D:49:DE:04:33:93:AA:37:9E Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 0BF1DEE822F5512120178050B65924279B7B9B83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 0113 Signing time: Tue 24 Mar 2026 22:40:59 +0000 Manifest this update: Tue 24 Mar 2026 22:35:59 +0000 Manifest next update: Sat 28 Mar 2026 07:50:59 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: 34Q6a9gD7wpGBfe9sDRbL1UG+5WGmc9ovY2ifUpwh+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f1:de:e8:22:f5:51:21:20:17:80:50:b6:59:24:27:9b:7b:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Mar 24 22:35:59 2026 GMT Not After : Mar 28 07:50:59 2026 GMT Subject: CN=0B512873A151AC397E29D35D49DE043393AA379E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:12:9b:ec:31:8f:70:cb:3d:a2:f0:cc:c3: 32:64:83:0f:af:d4:7f:99:f3:f5:40:76:de:d8:9c: b8:41:1a:85:42:5d:8a:b6:73:92:b7:68:04:b9:9e: 2c:eb:e2:b9:53:bf:78:04:20:26:f1:c4:6d:b5:0e: a1:0e:75:25:7d:29:9c:d2:3c:c7:63:ea:98:33:37: e5:b7:bc:f3:60:d3:9a:a2:79:55:2f:7a:82:3b:3e: 92:c3:6c:4f:e3:ec:8d:ad:a7:de:62:47:8a:07:cb: a6:20:79:60:18:1c:d3:03:0c:6a:e6:58:16:d2:e0: b0:44:4f:95:4d:79:74:71:17:fa:d4:c5:2c:bb:52: 6a:27:86:a5:e4:3b:8d:a1:0e:57:d8:5d:35:32:7b: 34:da:1d:a3:04:ec:ee:95:fb:29:0d:71:bb:5a:fd: db:93:25:95:ef:a6:15:6e:47:4e:55:12:45:ca:79: 0f:69:26:b9:40:84:a3:2f:ba:96:d1:83:ce:ba:d7: 1a:12:db:92:90:b1:75:47:90:19:7b:30:fa:40:05: 41:0b:f6:33:e1:64:24:7a:f4:05:77:ae:79:0f:3f: e1:3e:d4:3c:c3:a0:a9:9b:d3:ac:3f:24:40:9e:37: 2b:05:49:a2:6c:4d:94:b4:b9:9e:95:7f:8d:98:d3: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:51:28:73:A1:51:AC:39:7E:29:D3:5D:49:DE:04:33:93:AA:37:9E X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e5:60:44:bf:87:01:e8:50:8c:6f:f3:80:15:7c:46:4f:2b: 89:4e:aa:43:42:83:9a:73:ba:d2:31:45:5e:bd:b3:42:30:77: 5a:99:1b:c4:21:21:55:83:56:40:a3:e8:fb:fd:4f:b6:05:c2: 5c:ea:a9:8d:9b:97:45:ba:e0:73:c1:95:4e:56:84:64:7b:b0: fa:1c:0e:4b:c3:fe:8f:69:99:fa:ba:bf:a1:03:2e:27:85:0c: 9b:fa:17:2c:2d:45:6f:ea:ab:2c:be:68:f5:68:7c:eb:4d:9a: bc:b8:5b:83:6d:29:02:96:04:c1:42:24:7f:e9:23:68:20:2e: d6:9a:94:a9:83:47:64:56:38:2c:00:81:18:25:b9:44:3b:6f: 9b:df:55:65:91:19:dc:3c:eb:9e:05:d0:f7:c2:14:68:d8:cf: 59:41:c8:30:02:f2:da:c6:77:2d:94:5f:00:de:55:c6:70:ad: 6c:14:de:81:fd:63:48:44:7c:b9:84:c5:df:d2:b7:65:17:3f: 1d:ac:2c:32:25:05:e3:4f:25:92:23:00:fb:c4:26:18:4a:d8: 32:a5:cd:2f:d4:33:68:02:b3:56:4a:4e:1a:59:43:4f:5c:da: 01:76:85:20:bc:be:e4:8b:5a:44:82:87:48:90:fc:b7:b9:40: d8:ad:81:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/He6CL1USEgF4BQtlkkJ5t7m4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNjAzMjQyMjM1NTlaFw0yNjAzMjgwNzUwNTlaMDMxMTAvBgNV BAMTKDBCNTEyODczQTE1MUFDMzk3RTI5RDM1RDQ5REUwNDMzOTNBQTM3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCRKb7DGPcMs9ovDMwzJkgw+v 1H+Z8/VAdt7YnLhBGoVCXYq2c5K3aAS5nizr4rlTv3gEICbxxG21DqEOdSV9KZzS PMdj6pgzN+W3vPNg05qieVUveoI7PpLDbE/j7I2tp95iR4oHy6YgeWAYHNMDDGrm WBbS4LBET5VNeXRxF/rUxSy7UmonhqXkO42hDlfYXTUyezTaHaME7O6V+ykNcbta /duTJZXvphVuR05VEkXKeQ9pJrlAhKMvupbRg8661xoS25KQsXVHkBl7MPpABUEL 9jPhZCR69AV3rnkPP+E+1DzDoKmb06w/JECeNysFSaJsTZS0uZ6Vf42Y039lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1Eoc6FRrDl+KdNdSd4EM5OqN54wHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHlYES/hwHoUIxv84AVfEZPK4lOqkNCg5pz utIxRV69s0Iwd1qZG8QhIVWDVkCj6Pv9T7YFwlzqqY2bl0W64HPBlU5WhGR7sPoc DkvD/o9pmfq6v6EDLieFDJv6FywtRW/qqyy+aPVofOtNmry4W4NtKQKWBMFCJH/p I2ggLtaalKmDR2RWOCwAgRgluUQ7b5vfVWWRGdw8654F0PfCFGjYz1lByDAC8trG dy2UXwDeVcZwrWwU3oH9Y0hEfLmExd/St2UXPx2sLDIlBeNPJZIjAPvEJhhK2DKl zS/UM2gCs1ZKThpZQ09c2gF2hSC8vuSLWkSCh0iQ/Le5QNitgb8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:37:21 2026 by rpki-client