$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: kdz21Ee8mZhxDLXfwYJgGwJ4XVeSim3Fsr+5/Qb/uB0= Subject key identifier: 29:F2:F0:0C:3F:73:09:91:BF:E8:2A:95:83:68:EC:3A:A6:E2:67:F7 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 31552058E26D183BEB5EE6082C630AA57F8F8C8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: 0108 Signing time: Thu 26 Mar 2026 07:00:50 +0000 Manifest this update: Thu 26 Mar 2026 06:55:50 +0000 Manifest next update: Sun 29 Mar 2026 15:45:50 +0000 Files and hashes: 1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: RShdRpkTE8mnMdgvJzARgNCtghvmd96pCBloq3H+PQQ=) 2: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: XacJ1PvQ+Qq6w95SUtj58pV5mUVjGwreZNIi5mtgsCE=) 3: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: jeWguCwm76CmsJXg1ZgYbmX+MUCuiZr0yr59XcYu9Ow=) 4: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:55:20:58:e2:6d:18:3b:eb:5e:e6:08:2c:63:0a:a5:7f:8f:8c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Mar 26 06:55:50 2026 GMT Not After : Mar 29 15:45:50 2026 GMT Subject: CN=29F2F00C3F730991BFE82A958368EC3AA6E267F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:83:7b:a7:cb:c4:c6:f7:95:5e:7d:e2:c7:95: fd:e4:d3:ac:79:7a:09:cf:b2:48:30:17:0a:34:7f: d3:35:9f:58:81:db:6f:bf:d9:35:e7:e5:24:33:f2: 5f:29:e8:28:16:ab:13:5a:48:52:39:12:26:8b:c0: cd:fe:1a:f3:5a:1f:a8:37:5f:64:24:6e:d1:ee:13: 0e:90:c2:d7:b2:43:be:0c:1e:ef:af:66:89:93:22: db:0e:b4:9f:6a:d8:06:9c:8b:3f:2d:c1:60:91:d5: 1c:09:35:3f:03:37:d9:70:c9:d3:f0:08:2e:91:d9: 68:d8:05:93:55:7d:6a:e9:38:5e:7f:cb:46:ca:23: ab:fb:e4:b3:e4:5c:64:03:d1:68:bb:58:31:f5:cc: 2a:1d:fe:5d:76:ca:c0:8d:ec:2a:28:3b:d2:de:73: ff:b0:1e:20:1a:c9:6b:09:5b:53:a9:a6:12:7a:32: 2a:9e:c0:59:fa:ed:69:a4:5f:47:3f:7c:72:a7:34: 2c:2d:0e:1e:83:21:9f:74:0d:23:fc:74:48:00:57: 9e:32:16:43:93:a3:bd:73:83:0a:bd:60:9e:73:31: 66:41:0d:18:06:aa:46:d2:c3:32:d2:0f:1b:84:f4: 70:7d:ff:b3:28:ac:fa:67:e3:8b:d2:8e:1d:e6:cb: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F2:F0:0C:3F:73:09:91:BF:E8:2A:95:83:68:EC:3A:A6:E2:67:F7 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:57:67:88:84:f4:b5:58:f0:87:c3:ce:3e:a9:ac:9f:58:8b: f1:8c:03:1c:ef:7e:f5:0e:64:20:7f:90:96:69:ad:71:42:81: 53:dd:91:d9:8a:d6:fa:ec:06:2e:fb:50:25:f1:05:e3:90:88: 52:31:8d:16:f6:34:de:bb:c4:3e:a2:ec:c0:88:1b:08:66:9d: 33:b2:6f:3a:26:b5:bf:a6:3f:b9:fa:53:16:70:cf:00:db:8d: 15:88:41:b0:96:1d:bf:0a:a7:fa:b3:d3:fc:17:32:a1:86:43: 22:2c:d7:8e:87:0e:5f:db:ab:38:9a:19:37:0e:55:59:d3:e3: 37:39:a7:a7:7d:13:a7:03:fe:13:af:d6:9c:a8:21:73:93:9d: 42:46:9b:65:53:91:64:a7:18:bc:e9:bc:30:1c:0a:0e:be:b3: 9f:92:0e:a7:ff:04:ce:c3:db:9f:d0:1a:af:56:30:6c:83:aa: 3d:e6:40:d1:15:ae:78:a4:21:1d:f6:ec:fa:f7:8c:46:0c:8f: cf:3f:95:d5:48:ce:88:6e:f8:c7:bd:7d:20:a8:38:a9:87:cf: 10:50:25:4f:88:81:60:bd:c3:0b:37:b7:d3:17:31:b0:4e:eb: 70:63:9d:56:cc:ee:bc:6e:7b:92:98:5a:a3:aa:2e:a8:e3:14: 5d:c2:57:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVUgWOJtGDvrXuYILGMKpX+PjI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNjAzMjYwNjU1NTBaFw0yNjAzMjkxNTQ1NTBaMDMxMTAvBgNV BAMTKDI5RjJGMDBDM0Y3MzA5OTFCRkU4MkE5NTgzNjhFQzNBQTZFMjY3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDng3uny8TG95VefeLHlf3k06x5 egnPskgwFwo0f9M1n1iB22+/2TXn5SQz8l8p6CgWqxNaSFI5EiaLwM3+GvNaH6g3 X2QkbtHuEw6QwteyQ74MHu+vZomTItsOtJ9q2Aaciz8twWCR1RwJNT8DN9lwydPw CC6R2WjYBZNVfWrpOF5/y0bKI6v75LPkXGQD0Wi7WDH1zCod/l12ysCN7CooO9Le c/+wHiAayWsJW1OpphJ6MiqewFn67WmkX0c/fHKnNCwtDh6DIZ90DSP8dEgAV54y FkOTo71zgwq9YJ5zMWZBDRgGqkbSwzLSDxuE9HB9/7MorPpn44vSjh3my9NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfLwDD9zCZG/6CqVg2jsOqbiZ/cwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClXZ4iE9LVY8IfDzj6prJ9Yi/GMAxzvfvUO ZCB/kJZprXFCgVPdkdmK1vrsBi77UCXxBeOQiFIxjRb2NN67xD6i7MCIGwhmnTOy bzomtb+mP7n6UxZwzwDbjRWIQbCWHb8Kp/qz0/wXMqGGQyIs146HDl/bqziaGTcO VVnT4zc5p6d9E6cD/hOv1pyoIXOTnUJGm2VTkWSnGLzpvDAcCg6+s5+SDqf/BM7D 25/QGq9WMGyDqj3mQNEVrnikIR327Pr3jEYMj88/ldVIzohu+Me9fSCoOKmHzxBQ JU+IgWC9wws3t9MXMbBO63BjnVbM7rxue5KYWqOqLqjjFF3CV5g= -----END CERTIFICATE-----Generated at Thu Mar 26 20:00:52 2026 by rpki-client