$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: gPLFcuEmSFUfOge0qbepEkLgZN3GFzhg8Oj6ml7c7cg= Subject key identifier: E8:45:D1:7C:90:2D:1C:C7:D4:98:EC:C5:32:DA:EB:70:0D:BB:49:6E Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 5D56AD13E772795E922418B8A934D4FF95EA9D0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 01F9 Signing time: Thu 26 Mar 2026 03:42:12 +0000 Manifest this update: Thu 26 Mar 2026 03:37:12 +0000 Manifest next update: Sun 29 Mar 2026 03:57:12 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: HBxRWpU9UxNaur/fN7OnEQ2zNN7tIsIYx0jyEz2ZSOU=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: XcmiTK4lbXwTUsCM0a8uD99kDHrKe3SuEWNxjOChLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:56:ad:13:e7:72:79:5e:92:24:18:b8:a9:34:d4:ff:95:ea:9d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Mar 26 03:37:12 2026 GMT Not After : Mar 29 03:57:12 2026 GMT Subject: CN=E845D17C902D1CC7D498ECC532DAEB700DBB496E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:ab:ab:55:ea:c4:b3:2f:4b:0d:01:53:b3: 62:82:a9:71:5b:c4:8c:68:3b:06:ef:28:aa:86:4b: 04:a5:b6:db:9f:d1:0a:78:3c:97:8a:0b:e8:74:18: 9a:20:55:ba:9a:0d:07:b2:a6:40:74:71:d3:f7:39: 23:45:e7:39:3b:f5:11:91:21:3f:3e:49:bc:d0:7d: d4:56:c4:ee:6c:66:f3:07:3d:f6:f1:b3:27:4b:55: d0:35:d8:f6:05:2d:d4:bf:50:09:65:47:5c:85:cb: 4f:e4:3b:fa:52:13:4f:36:78:89:29:d7:6d:af:4c: 51:7e:5f:24:06:84:58:4a:29:fb:49:c1:68:1f:70: 92:0e:4a:96:aa:e3:98:77:d7:16:96:31:31:40:71: 54:c8:41:e0:f6:53:59:44:d3:78:bd:2a:61:ce:ad: a3:4e:00:32:8b:fe:43:c0:49:95:7e:ef:b6:a4:bd: 04:71:27:72:6d:ba:8b:11:dc:7e:41:27:1b:95:f7: c7:56:1e:d5:88:d4:ce:7f:a9:ab:ea:eb:1e:81:22: 05:ed:c3:31:48:e7:bd:8f:9c:2a:ac:43:33:35:24: 73:f2:64:1c:48:35:26:ee:25:a5:e9:ad:00:e2:fe: cb:70:fc:13:7e:ac:e9:e5:3f:ee:bc:3b:5b:a4:43: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:45:D1:7C:90:2D:1C:C7:D4:98:EC:C5:32:DA:EB:70:0D:BB:49:6E X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e1:88:b9:fe:f2:ee:ec:dd:e5:61:d8:c7:ea:51:7d:89:6d: 98:8e:b7:c2:9a:2f:4e:72:8b:16:c4:2e:fe:a3:50:12:22:29: 87:26:95:86:1f:e3:40:42:59:db:13:9e:32:f8:e3:50:e4:be: 21:2c:9d:41:4b:d6:fb:ad:27:14:56:14:16:47:fc:de:a4:09: 0f:23:42:e0:36:02:6e:1a:99:ff:ee:2e:d0:c2:81:6f:4e:61: bf:d6:53:83:7d:8a:81:25:9a:61:51:15:ef:9f:9e:08:b9:8e: 73:24:7e:61:05:cd:df:d2:36:b2:68:69:67:8d:e4:10:81:37: e7:4f:be:5d:f3:84:4e:fc:7d:20:0d:57:b5:70:e0:21:8b:2c: 43:63:1f:71:b9:0a:76:c8:c9:0b:e2:df:ab:b5:ae:99:20:6d: cf:ed:94:9e:c9:1f:93:4a:84:d7:35:3f:a0:a9:0f:85:2e:6d: 7b:c8:b6:ca:0c:1c:07:77:dc:e6:36:fa:03:eb:ac:f2:16:6d: 70:c8:62:b2:3e:4c:b3:93:00:06:b2:e0:cf:60:8c:80:19:4e: 28:4e:57:e9:f1:78:57:76:eb:d2:d8:30:4c:2f:47:03:21:4c: 83:ef:60:ac:c9:8e:5e:ea:cc:81:da:dc:a9:ff:ad:15:cd:ac: f8:ca:a1:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVatE+dyeV6SJBi4qTTU/5XqnQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNjAzMjYwMzM3MTJaFw0yNjAzMjkwMzU3MTJaMDMxMTAvBgNV BAMTKEU4NDVEMTdDOTAyRDFDQzdENDk4RUNDNTMyREFFQjcwMERCQjQ5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/KurVerEsy9LDQFTs2KCqXFb xIxoOwbvKKqGSwSlttuf0Qp4PJeKC+h0GJogVbqaDQeypkB0cdP3OSNF5zk79RGR IT8+SbzQfdRWxO5sZvMHPfbxsydLVdA12PYFLdS/UAllR1yFy0/kO/pSE082eIkp 122vTFF+XyQGhFhKKftJwWgfcJIOSpaq45h31xaWMTFAcVTIQeD2U1lE03i9KmHO raNOADKL/kPASZV+77akvQRxJ3JtuosR3H5BJxuV98dWHtWI1M5/qavq6x6BIgXt wzFI572PnCqsQzM1JHPyZBxINSbuJaXprQDi/stw/BN+rOnlP+68O1ukQ54LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6EXRfJAtHMfUmOzFMtrrcA27SW4wHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbhiLn+8u7s3eVh2MfqUX2JbZiOt8KaL05y ixbELv6jUBIiKYcmlYYf40BCWdsTnjL441DkviEsnUFL1vutJxRWFBZH/N6kCQ8j QuA2Am4amf/uLtDCgW9OYb/WU4N9ioElmmFRFe+fngi5jnMkfmEFzd/SNrJoaWeN 5BCBN+dPvl3zhE78fSANV7Vw4CGLLENjH3G5CnbIyQvi36u1rpkgbc/tlJ7JH5NK hNc1P6CpD4UubXvItsoMHAd33OY2+gPrrPIWbXDIYrI+TLOTAAay4M9gjIAZTihO V+nxeFd269LYMEwvRwMhTIPvYKzJjl7qzIHa3Kn/rRXNrPjKofE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:58 2026 by rpki-client