$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: +qsBOBPGUZH7+nXF+o1ckbW/XC1bFVGAYucs3ug+aS4= Subject key identifier: 17:68:98:C5:4B:CA:D0:A8:9D:0A:58:FE:48:E0:0C:48:75:8A:0E:0D Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 1CB9FDE57F00736C2C22258F95D13B734505BA70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 04D6 Signing time: Sat 28 Feb 2026 15:31:46 +0000 Manifest this update: Sat 28 Feb 2026 15:26:46 +0000 Manifest next update: Wed 04 Mar 2026 02:29:46 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: gatUNDACKCDF2+y9QnQovFwKQSBbBEmotU7VWLmeJ/U=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b9:fd:e5:7f:00:73:6c:2c:22:25:8f:95:d1:3b:73:45:05:ba:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Feb 28 15:26:46 2026 GMT Not After : Mar 4 02:29:46 2026 GMT Subject: CN=176898C54BCAD0A89D0A58FE48E00C48758A0E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:72:df:d9:b0:cf:8a:b0:00:aa:98:40:bc: 95:9b:26:53:3b:b1:42:6f:60:dd:73:bc:de:34:59: f4:44:2c:3e:ec:81:22:e0:35:f2:58:9a:15:9f:59: ee:0b:d7:fc:78:65:1b:f7:da:cf:4f:ff:74:a9:47: 67:8b:54:aa:af:59:33:88:27:ac:55:14:d9:69:d5: cb:d7:9f:2b:34:0a:12:63:63:fc:8c:c2:34:dd:8c: 28:43:9b:b5:83:3c:dc:a0:bd:cc:6f:bd:9a:4b:d7: a3:0e:c3:86:68:84:51:b0:49:58:3c:94:a4:7a:ac: cf:a8:bd:10:15:f0:fc:e8:1b:6b:93:41:1f:ec:14: 88:ee:55:f4:00:ef:2b:dd:d1:b6:df:55:7c:df:07: ac:8c:d4:0d:4c:35:fa:5d:b3:d7:c2:52:1e:c8:d2: ec:5e:af:f3:17:f0:99:65:70:f6:07:c2:66:80:3c: e2:74:4e:94:c9:8c:06:c2:33:9d:7e:90:3b:16:4d: 54:c1:2f:57:87:4a:1d:42:fe:cf:5d:41:38:8c:bb: a3:25:b6:5e:bd:52:da:6d:df:56:40:0c:55:4a:54: d8:46:fd:a2:1d:8a:34:4e:b2:42:ab:0e:97:74:00: 06:63:4c:46:0d:5e:43:23:46:60:49:a7:a7:6e:6e: f3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:68:98:C5:4B:CA:D0:A8:9D:0A:58:FE:48:E0:0C:48:75:8A:0E:0D X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:20:1e:89:3a:e6:7c:22:91:cb:cb:1f:aa:1d:37:00:ea:51: 2b:d5:87:1a:29:c4:3a:ea:96:03:c5:12:ad:16:5d:45:2d:9a: 3b:b7:f9:35:d8:e9:24:26:91:0b:3c:6a:c7:b6:d8:2b:b3:6e: b2:15:e3:79:c9:62:31:25:b2:34:74:fe:b7:c0:c0:9c:2b:19: 1b:e6:e7:94:38:e9:30:62:13:8f:de:89:c0:1f:4f:b7:90:df: 00:3a:79:ac:f4:ff:0e:3c:8f:f0:7c:e0:8e:2d:4f:75:45:a6: d7:c4:bb:8e:6c:9b:a3:a2:34:ad:6b:44:af:c2:22:17:03:d6: 9d:a9:2e:4e:6d:6c:d5:e6:48:48:88:e3:0c:35:6e:28:77:e4: 6f:6a:6f:04:59:fa:a6:dc:79:69:66:7a:b4:2c:aa:0d:82:b8: 6c:0e:c2:c2:9e:d9:f2:e8:44:4e:a1:fd:ad:dd:79:46:20:d8: 73:20:bb:b3:56:62:e3:9a:d8:d7:b8:87:23:19:bf:01:9c:e9: ea:d9:02:14:1d:0d:93:aa:7c:c7:67:e5:b4:c1:f6:c1:41:69: 9f:d7:b0:59:f3:b3:6c:0e:81:b1:89:d5:ed:03:1c:6a:2c:e7: b2:0a:a9:af:c0:9b:6e:65:5d:f4:2d:8e:0a:70:5f:7f:50:da: 4a:18:93:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLn95X8Ac2wsIiWPldE7c0UFunAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNjAyMjgxNTI2NDZaFw0yNjAzMDQwMjI5NDZaMDMxMTAvBgNV BAMTKDE3Njg5OEM1NEJDQUQwQTg5RDBBNThGRTQ4RTAwQzQ4NzU4QTBFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrnLf2bDPirAAqphAvJWbJlM7 sUJvYN1zvN40WfRELD7sgSLgNfJYmhWfWe4L1/x4ZRv32s9P/3SpR2eLVKqvWTOI J6xVFNlp1cvXnys0ChJjY/yMwjTdjChDm7WDPNygvcxvvZpL16MOw4ZohFGwSVg8 lKR6rM+ovRAV8PzoG2uTQR/sFIjuVfQA7yvd0bbfVXzfB6yM1A1MNfpds9fCUh7I 0uxer/MX8JllcPYHwmaAPOJ0TpTJjAbCM51+kDsWTVTBL1eHSh1C/s9dQTiMu6Ml tl69Utpt31ZADFVKVNhG/aIdijROskKrDpd0AAZjTEYNXkMjRmBJp6dubvO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF2iYxUvK0KidClj+SOAMSHWKDg0wHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkgHok65nwikcvLH6odNwDqUSvVhxopxDrq lgPFEq0WXUUtmju3+TXY6SQmkQs8ase22CuzbrIV43nJYjElsjR0/rfAwJwrGRvm 55Q46TBiE4/eicAfT7eQ3wA6eaz0/w48j/B84I4tT3VFptfEu45sm6OiNK1rRK/C IhcD1p2pLk5tbNXmSEiI4ww1bih35G9qbwRZ+qbceWlmerQsqg2CuGwOwsKe2fLo RE6h/a3deUYg2HMgu7NWYuOa2Ne4hyMZvwGc6erZAhQdDZOqfMdn5bTB9sFBaZ/X sFnzs2wOgbGJ1e0DHGos57IKqa/Am25lXfQtjgpwX39Q2koYk5Q= -----END CERTIFICATE-----Generated at Mon Mar 2 04:45:08 2026 by rpki-client