$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: BEIVaoOFQ+6oHFMARkaZBa2eL6LvQLUdOuWd7wHe4ss= Subject key identifier: F5:92:19:90:4E:C4:20:82:F2:AA:97:F0:A0:92:1B:8B:8E:FC:01:E5 Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 770144F5748BAD0E60611B116F4EC919A557EB23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 03AB Signing time: Wed 25 Mar 2026 03:11:40 +0000 Manifest this update: Wed 25 Mar 2026 03:06:40 +0000 Manifest next update: Sat 28 Mar 2026 08:58:40 +0000 Files and hashes: 1: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) 2: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) 3: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: jxQN606LB8wBRtKX18/OVy8eoId8J7SIgF2QRP9cmho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:01:44:f5:74:8b:ad:0e:60:61:1b:11:6f:4e:c9:19:a5:57:eb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Mar 25 03:06:40 2026 GMT Not After : Mar 28 08:58:40 2026 GMT Subject: CN=F59219904EC42082F2AA97F0A0921B8B8EFC01E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:15:cd:d6:5f:af:39:69:9a:7b:b1:3e:51: d2:35:50:16:58:54:7e:27:f2:da:1d:85:4a:6f:28: 89:a0:cd:0d:ee:c5:dd:f9:ae:4b:7c:3a:16:58:e1: 65:ef:16:fa:c2:70:8a:fc:cb:d8:90:7a:2f:be:59: e8:78:ab:d7:42:df:96:32:3d:83:f2:b3:6a:10:76: fa:02:94:ea:4d:2e:14:de:cc:e3:2a:a7:3c:33:27: ab:fb:09:a9:8b:c9:b0:48:da:53:e3:9f:43:89:dd: 1d:43:84:f9:71:ca:6e:44:60:84:83:48:01:2a:25: 40:59:15:05:83:b7:f1:75:68:2e:b4:a9:a6:e0:01: 4d:69:c2:c5:07:e0:35:88:d3:95:65:e3:51:a6:b2: c5:a1:01:55:c3:f9:f4:21:14:70:91:58:60:1b:f7: 24:14:d5:36:23:62:9e:bf:8b:ca:a6:da:cd:8f:a2: e7:51:68:8d:8a:0e:8b:51:61:94:4a:a9:96:04:b4: 99:85:7f:cd:6b:1c:05:4a:7f:b8:87:bb:6e:a2:b4: 72:6a:20:c5:ac:b0:1d:8c:6f:84:04:11:db:d9:0f: 1a:54:d9:92:af:49:e8:f4:ab:a4:75:bd:3f:45:d8: 7f:68:cf:15:f4:a9:49:a2:40:5e:f3:ca:9c:bd:14: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:92:19:90:4E:C4:20:82:F2:AA:97:F0:A0:92:1B:8B:8E:FC:01:E5 X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fd:31:dc:21:f3:62:4d:00:51:70:bc:3e:05:f6:0d:c4:88: 76:c4:4b:e2:ca:95:e8:b9:80:06:0e:99:ae:3d:af:bc:52:e3: 5d:eb:0d:87:dc:e4:20:78:80:d3:41:1e:b8:85:2b:cf:15:3a: 9b:09:43:12:53:09:3f:ad:9e:6b:45:0b:47:8b:45:88:a7:90: cd:20:c3:65:5e:d2:40:70:ea:0f:a4:4b:f6:14:2b:72:64:d1: 6a:85:1e:dc:9b:05:4b:03:60:10:e9:4c:66:14:e5:1b:f6:75: 3d:9a:a4:5e:62:b2:79:df:af:73:d7:c6:d6:a3:0c:43:e5:02: 9b:db:86:bb:b7:5d:31:9c:eb:d0:45:23:b1:d1:0e:77:2a:79: 79:54:16:3e:a0:a0:bd:0b:90:e8:64:9a:22:e2:7b:08:9d:62: af:66:88:c6:4a:39:0e:c6:9b:12:80:0e:5e:c1:17:e0:47:a9: 97:47:48:68:d6:04:f1:24:91:51:5d:cc:3a:05:e0:a5:44:f9: fb:3d:1d:93:dc:a8:bd:ff:86:70:5a:3e:c6:98:38:06:e0:25: 3e:d6:44:0a:82:d3:b4:a3:35:ed:60:b0:53:6c:f4:4a:ce:63: ac:d1:0d:ba:e8:44:d7:b9:21:b9:7b:bb:7b:9f:d9:da:2e:a1: d2:b7:7e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwFE9XSLrQ5gYRsRb07JGaVX6yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNjAzMjUwMzA2NDBaFw0yNjAzMjgwODU4NDBaMDMxMTAvBgNV BAMTKEY1OTIxOTkwNEVDNDIwODJGMkFBOTdGMEEwOTIxQjhCOEVGQzAxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjxXN1l+vOWmae7E+UdI1UBZY VH4n8todhUpvKImgzQ3uxd35rkt8OhZY4WXvFvrCcIr8y9iQei++Weh4q9dC35Yy PYPys2oQdvoClOpNLhTezOMqpzwzJ6v7CamLybBI2lPjn0OJ3R1DhPlxym5EYISD SAEqJUBZFQWDt/F1aC60qabgAU1pwsUH4DWI05Vl41GmssWhAVXD+fQhFHCRWGAb 9yQU1TYjYp6/i8qm2s2PoudRaI2KDotRYZRKqZYEtJmFf81rHAVKf7iHu26itHJq IMWssB2Mb4QEEdvZDxpU2ZKvSej0q6R1vT9F2H9ozxX0qUmiQF7zypy9FOYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ZIZkE7EIILyqpfwoJIbi478AeUwHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/9Mdwh82JNAFFwvD4F9g3EiHbES+LKlei5 gAYOma49r7xS413rDYfc5CB4gNNBHriFK88VOpsJQxJTCT+tnmtFC0eLRYinkM0g w2Ve0kBw6g+kS/YUK3Jk0WqFHtybBUsDYBDpTGYU5Rv2dT2apF5isnnfr3PXxtaj DEPlApvbhru3XTGc69BFI7HRDncqeXlUFj6goL0LkOhkmiLiewidYq9miMZKOQ7G mxKADl7BF+BHqZdHSGjWBPEkkVFdzDoF4KVE+fs9HZPcqL3/hnBaPsaYOAbgJT7W RAqC07SjNe1gsFNs9ErOY6zRDbroRNe5Ibl7u3uf2douodK3fno= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:29 2026 by rpki-client