$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: 40kWeULYtZcEg5l8drKQKoRC52SnyqqmyDP2k0cLPv0= Subject key identifier: 4B:2D:D8:33:64:12:EE:F4:7D:34:B8:6F:4A:71:55:92:21:73:58:9C Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 2A472FB86203672F28EABE6C7D0ED49D1CD15D54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 025F Signing time: Wed 25 Mar 2026 16:41:02 +0000 Manifest this update: Wed 25 Mar 2026 16:36:02 +0000 Manifest next update: Sun 29 Mar 2026 03:07:02 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: tg7oTYGEZ2y6EAZnzLfwX6fiXnxgi/X70lPZSwsCDsU=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: 3Req+sfWER9LLZ1R+BgeRnKyEpba1OvUkICubSehbvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:47:2f:b8:62:03:67:2f:28:ea:be:6c:7d:0e:d4:9d:1c:d1:5d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Mar 25 16:36:02 2026 GMT Not After : Mar 29 03:07:02 2026 GMT Subject: CN=4B2DD8336412EEF47D34B86F4A7155922173589C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:85:11:b6:33:24:7f:b2:f9:f9:1a:be:9d:7b: 59:d0:d7:67:fe:2e:94:5b:0f:a7:cf:a5:0a:91:e7: 4c:b5:92:fa:33:6c:d4:54:26:2d:74:e9:d2:47:97: 05:52:87:b6:66:1e:5f:29:3f:1d:05:ca:32:a1:19: 4f:5d:76:cd:a0:d9:1d:0d:07:c9:85:38:0f:65:f7: 33:d7:fb:2f:f8:e9:87:6b:ab:1f:ac:f0:66:c0:c6: 8e:a0:dc:63:d5:2b:cd:91:60:16:d9:05:fb:d7:97: 99:be:6d:d4:5a:be:f3:b9:30:82:5e:aa:1f:e6:5b: b1:0f:64:ea:29:18:81:a4:9d:4b:f8:e8:c2:5e:00: a0:59:ca:0b:d6:6a:f0:99:01:0a:4f:48:57:a1:91: 16:3c:ad:b7:5a:1b:ee:69:28:84:b6:a4:ff:91:e1: 9f:04:ed:0c:89:76:34:7f:5e:09:27:e3:a4:b4:bc: 50:d6:d1:df:2c:19:71:fc:1a:bd:c0:c5:a3:ae:32: bd:56:c3:7f:65:9b:67:be:9e:c9:19:b9:f9:d4:b8: 88:dd:87:30:67:d2:1c:65:06:7e:fc:8c:90:a0:8f: b3:2d:23:21:ff:72:81:cc:7c:04:f3:27:fa:6a:32: fe:6f:42:21:eb:77:ce:c8:c4:1c:d9:1a:83:76:8e: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:D8:33:64:12:EE:F4:7D:34:B8:6F:4A:71:55:92:21:73:58:9C X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0c:86:46:2d:cb:8c:74:ca:76:8e:34:47:45:e7:b3:1e:20: 0c:61:95:9d:47:62:b9:d4:7d:fe:3b:e4:82:17:c4:97:bd:f8: d2:2b:7c:d3:16:de:6d:71:b3:fb:41:02:da:8c:de:c7:9f:20: a7:ff:36:29:57:ab:18:1e:db:bb:c9:30:8f:6f:eb:ea:a5:12: 48:9e:0d:12:a1:33:5c:df:3e:e3:9c:f6:b7:41:12:3f:6a:c8: 10:47:64:1b:21:23:40:52:51:f1:c6:7c:65:c7:77:1c:68:ff: 0b:a8:01:e6:23:d1:59:fe:9e:f3:a4:17:35:27:30:c1:ec:1d: 2f:02:76:11:81:ef:ac:6a:17:05:69:2a:7f:16:27:45:83:b0: 3d:d6:99:5c:a2:d9:bd:5d:35:8f:93:46:1b:da:26:eb:ba:e7: 3b:41:9f:b5:fa:ed:54:53:9d:ca:be:ba:01:39:51:e7:36:7f: 05:b0:b3:b5:27:f5:ab:5d:e2:a2:65:71:e1:1f:50:5a:23:96: c3:e5:da:3c:c5:be:a2:94:58:9e:fa:5c:de:30:4c:97:17:7f: 96:9a:de:53:45:92:7e:49:b2:d9:af:a3:43:3c:21:83:49:56: ab:22:ee:44:5b:db:81:66:7c:c0:19:70:f8:4b:b6:98:4d:64: 0e:f8:29:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkcvuGIDZy8o6r5sfQ7UnRzRXVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNjAzMjUxNjM2MDJaFw0yNjAzMjkwMzA3MDJaMDMxMTAvBgNV BAMTKDRCMkREODMzNjQxMkVFRjQ3RDM0Qjg2RjRBNzE1NTkyMjE3MzU4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDthRG2MyR/svn5Gr6de1nQ12f+ LpRbD6fPpQqR50y1kvozbNRUJi106dJHlwVSh7ZmHl8pPx0FyjKhGU9dds2g2R0N B8mFOA9l9zPX+y/46Ydrqx+s8GbAxo6g3GPVK82RYBbZBfvXl5m+bdRavvO5MIJe qh/mW7EPZOopGIGknUv46MJeAKBZygvWavCZAQpPSFehkRY8rbdaG+5pKIS2pP+R 4Z8E7QyJdjR/Xgkn46S0vFDW0d8sGXH8Gr3AxaOuMr1Ww39lm2e+nskZufnUuIjd hzBn0hxlBn78jJCgj7MtIyH/coHMfATzJ/pqMv5vQiHrd87IxBzZGoN2ju29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSy3YM2QS7vR9NLhvSnFVkiFzWJwwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMMhkYty4x0ynaONEdF57MeIAxhlZ1HYrnU ff475IIXxJe9+NIrfNMW3m1xs/tBAtqM3sefIKf/NilXqxge27vJMI9v6+qlEkie DRKhM1zfPuOc9rdBEj9qyBBHZBshI0BSUfHGfGXHdxxo/wuoAeYj0Vn+nvOkFzUn MMHsHS8CdhGB76xqFwVpKn8WJ0WDsD3WmVyi2b1dNY+TRhvaJuu65ztBn7X67VRT ncq+ugE5Uec2fwWws7Un9atd4qJlceEfUFojlsPl2jzFvqKUWJ76XN4wTJcXf5aa 3lNFkn5Jstmvo0M8IYNJVqsi7kRb24FmfMAZcPhLtphNZA74KW0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:48 2026 by rpki-client