$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: p3nQ2d8xRAdg6HvZTVSa7MrfjDH2IjXDzjsycWlJ2Lw= Subject key identifier: 96:8F:C4:B8:22:79:DA:EB:5A:82:FF:EC:1F:FD:EE:8E:CD:15:4D:AA Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 02195D2991701D653ADD2A4B9AC82F4D17BC5958 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 0175 Signing time: Thu 26 Mar 2026 02:52:00 +0000 Manifest this update: Thu 26 Mar 2026 02:47:00 +0000 Manifest next update: Sun 29 Mar 2026 06:06:00 +0000 Files and hashes: 1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: 9+ZGHg7N7XanklTBRvxnHTyO3NbPCV1QeC7BhukWjO4=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:19:5d:29:91:70:1d:65:3a:dd:2a:4b:9a:c8:2f:4d:17:bc:59:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Mar 26 02:47:00 2026 GMT Not After : Mar 29 06:06:00 2026 GMT Subject: CN=968FC4B82279DAEB5A82FFEC1FFDEE8ECD154DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:b7:5d:9f:2e:ea:a2:0c:d7:45:3d:c5:36: cf:6a:69:06:3d:c5:ad:1e:fa:c1:74:5f:45:14:c9: d0:a5:7f:9b:6c:4e:59:36:b1:74:8a:3d:be:79:08: f8:a1:b2:d7:63:e5:33:91:7b:7f:30:d6:0a:07:46: 88:03:b8:3c:45:d2:fd:bc:dd:b4:57:67:21:d7:a7: 99:4d:73:2f:9f:12:9f:8b:12:d4:cb:38:17:57:cf: d6:23:ef:3d:14:d8:1f:11:28:a7:a1:00:b0:0e:e5: 9f:02:b1:95:8f:bf:cc:ab:12:12:09:18:52:53:9c: b2:61:95:59:64:56:58:ce:ba:b3:ed:e0:65:36:0f: df:90:44:b7:1c:e1:78:69:e9:ce:35:b3:9c:5a:df: 24:ca:d9:fc:54:a5:fd:7b:58:0a:35:29:ca:5f:87: 7d:ff:6b:0d:62:2e:20:c6:e2:1b:08:87:dd:98:f9: 3c:63:65:d3:05:c2:84:cb:f6:29:66:88:9d:21:9a: ab:43:62:28:bb:6a:a0:d8:bf:68:61:4c:23:84:81: 9a:57:21:43:1e:e1:05:78:42:d5:7a:b0:f8:6a:00: b1:4f:91:e7:c2:5f:1a:74:77:e0:6c:fb:cb:80:50: 69:0c:dd:ce:7f:08:36:37:55:ca:bf:49:2a:3f:a4: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:C4:B8:22:79:DA:EB:5A:82:FF:EC:1F:FD:EE:8E:CD:15:4D:AA X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:39:88:e3:f2:f0:16:7b:f7:81:c3:13:ae:84:a0:77:30:1a: dc:94:b4:33:fc:36:df:51:4f:4a:5b:0e:21:0b:41:ca:b9:55: 1c:fc:8e:ee:c3:e0:32:d3:19:84:1a:2e:b7:85:34:00:cf:10: e8:b6:3e:5c:9c:95:af:35:32:69:9f:d4:ed:c4:75:26:0a:c0: 37:1c:5e:ab:a4:a2:e0:16:ff:2a:d5:35:d5:ab:57:9f:d0:be: bb:3a:5d:73:01:0f:e3:e6:f0:80:04:f7:8e:d8:be:a0:07:ff: 49:36:38:18:5d:cc:39:81:90:b7:e7:76:e9:0a:bb:18:b4:98: c1:4f:91:8e:7e:6b:95:e3:1c:b0:39:f4:20:35:8a:20:60:17: ef:3e:b2:d4:13:46:a0:34:dc:55:24:21:d4:c8:6a:d3:51:d0: 0d:3c:2b:3e:c1:80:0e:30:2c:34:14:37:1a:f3:46:f7:f0:6e: c4:ed:41:92:d8:45:44:f2:ba:92:e5:91:91:bf:56:ed:d1:cb: 70:06:12:35:91:df:b8:95:4e:be:b0:5a:93:74:ab:a0:a8:aa: dd:37:7b:3c:39:e7:52:3e:40:ec:13:db:12:31:b1:2b:47:ca: cf:a2:28:e6:be:e4:6f:d7:9b:7b:ff:c2:a0:0e:16:f9:9b:18: 81:7a:f3:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhldKZFwHWU63SpLmsgvTRe8WVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNjAzMjYwMjQ3MDBaFw0yNjAzMjkwNjA2MDBaMDMxMTAvBgNV BAMTKDk2OEZDNEI4MjI3OURBRUI1QTgyRkZFQzFGRkRFRThFQ0QxNTREQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Kbddny7qogzXRT3FNs9qaQY9 xa0e+sF0X0UUydClf5tsTlk2sXSKPb55CPihstdj5TORe38w1goHRogDuDxF0v28 3bRXZyHXp5lNcy+fEp+LEtTLOBdXz9Yj7z0U2B8RKKehALAO5Z8CsZWPv8yrEhIJ GFJTnLJhlVlkVljOurPt4GU2D9+QRLcc4Xhp6c41s5xa3yTK2fxUpf17WAo1Kcpf h33/aw1iLiDG4hsIh92Y+TxjZdMFwoTL9ilmiJ0hmqtDYii7aqDYv2hhTCOEgZpX IUMe4QV4QtV6sPhqALFPkefCXxp0d+Bs+8uAUGkM3c5/CDY3Vcq/SSo/pOVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlo/EuCJ52utagv/sH/3ujs0VTaowHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEU5iOPy8BZ794HDE66EoHcwGtyUtDP8Nt9R T0pbDiELQcq5VRz8ju7D4DLTGYQaLreFNADPEOi2Plycla81Mmmf1O3EdSYKwDcc XqukouAW/yrVNdWrV5/Qvrs6XXMBD+Pm8IAE947YvqAH/0k2OBhdzDmBkLfndukK uxi0mMFPkY5+a5XjHLA59CA1iiBgF+8+stQTRqA03FUkIdTIatNR0A08Kz7BgA4w LDQUNxrzRvfwbsTtQZLYRUTyupLlkZG/Vu3Ry3AGEjWR37iVTr6wWpN0q6Coqt03 ezw551I+QOwT2xIxsStHys+iKOa+5G/Xm3v/wqAOFvmbGIF683E= -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:22 2026 by rpki-client