$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: k2jO5F5hVqBuLAtgmdQr5wab7iaeORIwD/+Jv67XbXQ= Subject key identifier: 29:D7:39:A1:93:18:53:A8:E9:F5:59:4B:24:0E:40:5F:27:CD:B7:4B Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 05778741AE89A7F0232CDA42ABFADE0403BD5349 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: 0144 Signing time: Sat 28 Feb 2026 13:30:02 +0000 Manifest this update: Sat 28 Feb 2026 13:25:02 +0000 Manifest next update: Tue 03 Mar 2026 21:49:02 +0000 Files and hashes: 1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: AALKE1vpELj5kikgyczDaiMyq2EdqCBW/zOYV3RJ7XE=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: nRBlIqwYXob/oYKswh6G4394N7ssEKCORew/z/9Ka8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:77:87:41:ae:89:a7:f0:23:2c:da:42:ab:fa:de:04:03:bd:53:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Feb 28 13:25:02 2026 GMT Not After : Mar 3 21:49:02 2026 GMT Subject: CN=29D739A1931853A8E9F5594B240E405F27CDB74B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:f9:64:81:a6:d7:d8:01:50:cf:a9:a5:40: e6:58:d9:5c:9d:ca:15:b8:62:d7:b5:c3:da:fc:87: 58:c8:73:24:28:65:cd:74:57:c4:42:ca:1c:b1:49: bf:a5:2d:cd:c2:3c:d5:eb:9b:40:c5:c9:3e:0d:f5: 8a:b5:03:4a:4e:01:87:5b:da:55:f2:d2:17:8a:36: 70:c0:a7:25:8b:ae:41:c2:c9:3d:d0:a3:1c:a2:8b: 97:76:b4:84:c2:7d:66:75:96:22:f2:46:87:e0:6c: 89:b4:49:d3:e0:a8:4f:73:bc:57:3f:09:f3:b1:24: 92:a1:65:8d:24:06:f4:fc:06:b2:63:b1:b4:6a:e9: 7e:a1:3c:e4:1d:5f:76:c2:86:08:2c:0d:5b:ef:8f: f3:a2:b1:a2:36:4a:93:24:58:9b:4d:54:a4:98:7d: 1d:9b:b2:59:3d:f8:57:c2:78:a9:2b:42:fb:f3:19: d2:43:15:d8:e2:4d:c3:14:bb:ad:c8:96:ea:70:a3: b7:16:57:3a:a8:62:e2:31:89:0e:fa:91:d8:2a:f8: f6:41:f2:5a:90:d9:45:7a:7b:35:32:64:37:c8:21: c0:d5:03:c8:ea:a4:12:c7:6a:51:22:cf:32:ad:d3: 0a:a7:83:83:e6:e6:69:5c:1c:19:0d:15:3d:ac:29: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:39:A1:93:18:53:A8:E9:F5:59:4B:24:0E:40:5F:27:CD:B7:4B X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:31:c5:88:fd:87:4b:37:e7:c4:87:15:35:29:a2:ee:b7:5c: 6b:ea:05:c1:50:ee:74:43:29:a9:97:5c:13:43:52:b5:5d:69: be:95:29:02:df:f2:ac:81:60:27:f0:93:d4:8c:63:e5:15:18: 3e:4b:57:d5:50:d1:05:c8:f9:52:95:98:83:d0:e0:88:0c:7b: 30:65:a1:7d:91:ac:ed:6f:74:8b:c2:7f:3f:55:81:79:3f:4a: 05:f5:c3:5c:b5:1b:f6:eb:8f:e4:2a:ea:df:3e:9c:38:d5:59: 50:0c:40:02:e5:c4:e0:a1:2d:81:44:15:a2:3b:2a:39:ca:bd: 54:ec:16:ab:c9:af:9c:fe:e6:fd:cd:ae:95:6e:3a:5e:c9:2c: 07:03:68:8d:51:89:b7:be:fe:b8:e5:a8:8b:2a:1f:ca:37:00: cd:3d:e4:ea:d1:0d:f9:62:88:ee:a7:a1:66:bf:38:09:30:64: 84:62:0d:9e:01:ba:02:bd:e3:e7:de:27:d3:c2:2d:8e:76:8a: bb:e4:3d:c0:1c:ad:63:5f:1f:f4:ed:ca:b7:e9:b3:11:08:58: c3:1b:4a:12:b2:63:27:23:a6:92:1b:24:74:5e:9a:de:ee:ee: b3:78:e1:c1:fa:d3:10:15:d8:ed:0b:c5:5e:ec:b3:5a:d9:b6: c0:da:ca:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXeHQa6Jp/AjLNpCq/reBAO9U0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNjAyMjgxMzI1MDJaFw0yNjAzMDMyMTQ5MDJaMDMxMTAvBgNV BAMTKDI5RDczOUExOTMxODUzQThFOUY1NTk0QjI0MEU0MDVGMjdDREI3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCPlkgabX2AFQz6mlQOZY2Vyd yhW4Yte1w9r8h1jIcyQoZc10V8RCyhyxSb+lLc3CPNXrm0DFyT4N9Yq1A0pOAYdb 2lXy0heKNnDApyWLrkHCyT3Qoxyii5d2tITCfWZ1liLyRofgbIm0SdPgqE9zvFc/ CfOxJJKhZY0kBvT8BrJjsbRq6X6hPOQdX3bChggsDVvvj/OisaI2SpMkWJtNVKSY fR2bslk9+FfCeKkrQvvzGdJDFdjiTcMUu63Ilupwo7cWVzqoYuIxiQ76kdgq+PZB 8lqQ2UV6ezUyZDfIIcDVA8jqpBLHalEizzKt0wqng4Pm5mlcHBkNFT2sKZRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKdc5oZMYU6jp9VlLJA5AXyfNt0swHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAxxYj9h0s358SHFTUpou63XGvqBcFQ7nRD KamXXBNDUrVdab6VKQLf8qyBYCfwk9SMY+UVGD5LV9VQ0QXI+VKVmIPQ4IgMezBl oX2RrO1vdIvCfz9VgXk/SgX1w1y1G/brj+Qq6t8+nDjVWVAMQALlxOChLYFEFaI7 KjnKvVTsFqvJr5z+5v3NrpVuOl7JLAcDaI1Ribe+/rjlqIsqH8o3AM095OrRDfli iO6noWa/OAkwZIRiDZ4BugK94+feJ9PCLY52irvkPcAcrWNfH/TtyrfpsxEIWMMb ShKyYycjppIbJHRemt7u7rN44cH60xAV2O0LxV7ss1rZtsDaymo= -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:44 2026 by rpki-client