$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: Nqck8lRav7XPYuGHVGyaByo09S9JSkb8GZVqN4k4a40= Subject key identifier: 9D:42:16:1B:A3:63:D5:1C:FE:45:4D:FB:4B:64:1E:73:E4:DD:B4:E5 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 7E65C6597D1A8C8922CCE681077658281883FECD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01D7 Signing time: Sun 01 Mar 2026 01:31:49 +0000 Manifest this update: Sun 01 Mar 2026 01:26:49 +0000 Manifest next update: Wed 04 Mar 2026 12:33:49 +0000 Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: SLkdP+W5sZl2nJok4HET9dKPTonztbQAc36liEIM4L8=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: XpfKRKn/aePFL2Um700oqFvEnzDkELByApcE+JeDEyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:65:c6:59:7d:1a:8c:89:22:cc:e6:81:07:76:58:28:18:83:fe:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Mar 1 01:26:49 2026 GMT Not After : Mar 4 12:33:49 2026 GMT Subject: CN=9D42161BA363D51CFE454DFB4B641E73E4DDB4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:c5:ab:93:1d:60:59:3a:1a:c2:bd:92:e0: 41:52:5e:3e:17:73:58:45:bc:84:53:d3:07:d0:a2: 2a:4a:3d:e8:a3:75:59:ee:1c:27:6d:5b:fa:75:04: e9:95:7d:d9:5c:10:49:7e:22:f6:a4:f7:42:af:39: 9c:c3:63:aa:49:c3:1d:a3:fb:9c:8d:51:93:8b:97: 00:c8:03:f6:e8:70:97:51:68:cf:5e:95:6c:0b:66: d1:83:0f:6d:64:25:8a:27:35:43:f2:59:bf:a7:78: 3e:eb:c2:28:72:87:fd:47:c1:ef:24:20:6f:71:68: bd:1b:cd:15:2a:42:a4:41:37:23:8b:5b:71:3d:87: 88:a1:fb:58:eb:1d:f0:62:be:37:cb:3b:3a:7c:25: d3:cc:82:9b:9a:7c:7e:1c:fe:e2:99:dc:aa:eb:c5: cf:73:4a:11:7e:9c:38:c1:86:19:04:28:1b:6f:f5: f0:35:3f:ba:c6:19:91:bf:1d:27:0d:cf:c2:3d:6a: 83:c6:93:f9:72:74:a6:c8:02:0e:fc:34:c0:5f:17: 3f:fa:5f:5b:17:b9:3d:d9:a8:bd:73:6f:ef:03:30: ea:b3:cb:12:78:72:b1:ba:3f:76:d9:68:4c:e5:18: 0c:27:15:bf:18:26:5a:73:b2:c6:2d:3e:f6:17:c3: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:42:16:1B:A3:63:D5:1C:FE:45:4D:FB:4B:64:1E:73:E4:DD:B4:E5 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:94:a5:65:e8:35:42:ae:d5:ac:58:dc:6d:c8:63:b7:da:ee: 7b:e1:63:d1:b9:4a:ac:ae:4f:1e:0b:a5:08:89:4f:ed:ae:56: de:37:d2:b9:89:9e:73:d6:6e:09:ab:41:82:4d:c9:35:e6:95: 99:b5:2b:f5:4b:57:18:3f:90:a4:e4:60:53:04:c7:4e:74:78: 62:24:24:8f:b1:b8:6c:e4:91:aa:0c:bc:e6:20:39:b5:82:c3: 2d:bf:aa:61:c6:eb:06:19:82:59:8d:3d:f4:57:50:ae:15:5c: 45:7e:90:ad:ea:54:1d:2e:08:fd:41:cd:0f:e7:e4:e2:2d:42: a4:d9:eb:f0:c4:30:d7:ac:65:64:d3:d2:9b:7b:2d:5f:26:17: ba:ef:2b:e2:65:78:ac:52:cc:1d:3d:23:64:99:04:c9:38:41: bd:6e:93:d4:ab:59:6a:f0:0b:49:5e:83:1d:0a:73:1b:dd:e0: 52:9b:dd:f1:2f:e3:b9:a8:8a:db:7a:72:47:67:d2:a6:ec:24: 0e:56:d0:b0:9c:b9:4d:cc:6d:b2:88:0a:ff:a4:fd:89:66:32: 03:3a:7f:7d:31:c9:0b:91:e2:39:16:0f:3c:f6:29:f7:f0:ca: 27:5a:4a:67:1b:d7:4f:0e:bc:60:07:c2:07:9b:c1:30:77:2f: 3d:cf:54:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmXGWX0ajIkizOaBB3ZYKBiD/s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNjAzMDEwMTI2NDlaFw0yNjAzMDQxMjMzNDlaMDMxMTAvBgNV BAMTKDlENDIxNjFCQTM2M0Q1MUNGRTQ1NERGQjRCNjQxRTczRTREREI0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwcWrkx1gWToawr2S4EFSXj4X c1hFvIRT0wfQoipKPeijdVnuHCdtW/p1BOmVfdlcEEl+Ivak90KvOZzDY6pJwx2j +5yNUZOLlwDIA/bocJdRaM9elWwLZtGDD21kJYonNUPyWb+neD7rwihyh/1Hwe8k IG9xaL0bzRUqQqRBNyOLW3E9h4ih+1jrHfBivjfLOzp8JdPMgpuafH4c/uKZ3Krr xc9zShF+nDjBhhkEKBtv9fA1P7rGGZG/HScNz8I9aoPGk/lydKbIAg78NMBfFz/6 X1sXuT3ZqL1zb+8DMOqzyxJ4crG6P3bZaEzlGAwnFb8YJlpzssYtPvYXw6mPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUIWG6Nj1Rz+RU37S2Qec+TdtOUwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWUpWXoNUKu1axY3G3IY7fa7nvhY9G5Sqyu Tx4LpQiJT+2uVt430rmJnnPWbgmrQYJNyTXmlZm1K/VLVxg/kKTkYFMEx050eGIk JI+xuGzkkaoMvOYgObWCwy2/qmHG6wYZglmNPfRXUK4VXEV+kK3qVB0uCP1BzQ/n 5OItQqTZ6/DEMNesZWTT0pt7LV8mF7rvK+JleKxSzB09I2SZBMk4Qb1uk9SrWWrw C0legx0Kcxvd4FKb3fEv47moitt6ckdn0qbsJA5W0LCcuU3MbbKICv+k/YlmMgM6 f30xyQuR4jkWDzz2KffwyidaSmcb108OvGAHwgebwTB3Lz3PVM0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:15 2026 by rpki-client