$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: bsynJnJvLZV2ltZs5LIKcLhIisMCoKtU4YUJBHXj4t8= Subject key identifier: 96:D9:77:6B:09:87:E1:3C:18:19:4C:E9:AD:10:DD:F7:BC:79:E5:3C Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 29E1F196BC2B1D2FD7399B2A6AE1181E122DB91E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 026D Signing time: Wed 25 Mar 2026 18:02:14 +0000 Manifest this update: Wed 25 Mar 2026 17:57:14 +0000 Manifest next update: Sun 29 Mar 2026 01:59:14 +0000 Files and hashes: 1: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: HjBdGNd6Sc51PWTKEOwMChS3N3Sgma2LZbJnM7rQl44=) 2: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: jGSXnam6DTjQTk2NoKq9v4pdRtdWmDLD2M+pWYJ1VAc=) 3: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: McguPk4QHLcDxRwNr42V+vtlP9d5Qo3oQeRqEn6egIo=) 4: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: xQDobBUWeU1Hu6QGna8EC5Z5unLxEbqVdGU1COX+/Xs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e1:f1:96:bc:2b:1d:2f:d7:39:9b:2a:6a:e1:18:1e:12:2d:b9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Mar 25 17:57:14 2026 GMT Not After : Mar 29 01:59:14 2026 GMT Subject: CN=96D9776B0987E13C18194CE9AD10DDF7BC79E53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:f3:58:f9:2a:c1:b9:b7:92:8b:ae:0a:c4: 98:07:f1:22:69:61:2b:9e:98:f3:32:e8:88:fc:73: f3:0d:7a:9e:04:23:a4:9d:4e:ff:e8:87:3d:37:a2: 08:4b:7c:8b:54:cd:8e:ba:ce:7f:56:d7:a0:08:73: 34:e7:81:59:0e:db:73:04:d9:96:d7:44:18:ca:d7: b8:51:b0:78:97:2d:17:d0:2e:06:19:fe:e0:40:0b: 06:1d:0a:10:ba:39:c4:30:81:5a:c6:7c:2c:6e:f1: 54:fc:c2:21:de:63:44:92:b7:8c:22:1f:87:55:7e: 86:ed:14:b3:d3:ef:77:55:a5:58:e9:d0:5d:f0:04: d7:19:d1:9f:15:ad:08:78:58:70:09:11:51:46:30: f4:9b:1b:fc:e9:38:78:71:e8:f0:1f:60:7f:07:c4: a4:9c:7c:14:c6:2d:e3:6b:b6:8f:a5:63:76:21:6c: 15:5b:32:e3:db:1b:05:ae:07:07:dd:75:d7:b5:84: 0a:6d:fe:ad:86:80:57:e1:5e:29:77:bb:1b:ad:ba: bb:0b:c8:cb:6c:ce:59:70:16:3a:c7:34:6a:67:1c: 48:24:9f:e0:4f:ef:0c:35:be:5c:54:50:bb:30:67: 0e:1a:89:05:6d:78:27:5d:bf:df:8e:7f:17:df:93: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D9:77:6B:09:87:E1:3C:18:19:4C:E9:AD:10:DD:F7:BC:79:E5:3C X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6b:07:12:68:15:d7:20:1e:ac:1f:67:de:fa:76:d5:25:82: 9a:da:a4:ad:3f:5e:9b:25:23:7e:cb:4f:90:1a:2d:f6:34:47: 5c:97:9b:f8:42:70:00:3d:4d:5a:b5:d9:6b:19:3c:cc:45:de: 80:69:28:5c:60:56:18:48:91:f0:e3:55:50:30:2c:5c:53:22: d2:b9:0b:fd:fb:06:08:fa:57:be:c4:b7:d6:d3:57:82:77:6e: 2b:0f:5d:9c:10:f4:f8:84:c0:1d:84:77:c6:46:f4:58:af:2b: a2:aa:68:d4:97:c0:70:48:41:7a:3c:5a:8b:d7:d9:03:a0:29: 23:e0:63:7c:d9:5e:60:8c:44:df:77:39:a2:63:80:b9:37:3f: 6c:5c:b8:b5:76:f9:a2:f6:dd:13:0b:a2:32:60:ae:95:38:d6: 87:a6:b0:72:e8:3e:f0:9a:93:75:24:e8:7a:34:e6:36:ed:67: 82:69:ef:d7:a4:8e:8f:ce:51:b7:3d:ab:dc:aa:c3:07:4c:98: 76:62:2c:01:58:b6:44:a6:8c:23:b9:9a:d0:f6:fd:4f:b7:58: 33:04:8b:c0:72:d6:2f:5f:00:04:60:17:c3:f0:c9:8f:d6:c0: e7:c2:d4:ef:22:85:cf:59:db:34:77:16:b1:84:cf:1b:ed:3f: da:8a:7f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKeHxlrwrHS/XOZsqauEYHhItuR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNjAzMjUxNzU3MTRaFw0yNjAzMjkwMTU5MTRaMDMxMTAvBgNV BAMTKDk2RDk3NzZCMDk4N0UxM0MxODE5NENFOUFEMTBEREY3QkM3OUU1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGfNY+SrBubeSi64KxJgH8SJp YSuemPMy6Ij8c/MNep4EI6SdTv/ohz03oghLfItUzY66zn9W16AIczTngVkO23ME 2ZbXRBjK17hRsHiXLRfQLgYZ/uBACwYdChC6OcQwgVrGfCxu8VT8wiHeY0SSt4wi H4dVfobtFLPT73dVpVjp0F3wBNcZ0Z8VrQh4WHAJEVFGMPSbG/zpOHhx6PAfYH8H xKScfBTGLeNrto+lY3YhbBVbMuPbGwWuBwfddde1hApt/q2GgFfhXil3uxutursL yMtszllwFjrHNGpnHEgkn+BP7ww1vlxUULswZw4aiQVteCddv9+Ofxffk/8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUltl3awmH4TwYGUzprRDd97x55TwwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxrBxJoFdcgHqwfZ976dtUlgprapK0/Xpsl I37LT5AaLfY0R1yXm/hCcAA9TVq12WsZPMxF3oBpKFxgVhhIkfDjVVAwLFxTItK5 C/37Bgj6V77Et9bTV4J3bisPXZwQ9PiEwB2Ed8ZG9FivK6KqaNSXwHBIQXo8WovX 2QOgKSPgY3zZXmCMRN93OaJjgLk3P2xcuLV2+aL23RMLojJgrpU41oemsHLoPvCa k3Uk6Ho05jbtZ4Jp79ekjo/OUbc9q9yqwwdMmHZiLAFYtkSmjCO5mtD2/U+3WDME i8By1i9fAARgF8PwyY/WwOfC1O8ihc9Z2zR3FrGEzxvtP9qKf58= -----END CERTIFICATE-----Generated at Thu Mar 26 15:57:56 2026 by rpki-client