$ rpki-client -vvf repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft File: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft (raw, json) Hash identifier: jDI+2UVDsKcKlczY/K0NvNWJYdIvlsD4PX1AgddvsoM= Subject key identifier: F0:2E:EF:9D:39:72:AF:CE:2B:ED:95:D3:85:99:88:E6:B0:BD:01:21 Authority key identifier: DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F Certificate issuer: /CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F Certificate serial: 6593737AD42DF431F3DB605BA136D370908E6B2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft Manifest number: 0251 Signing time: Mon 02 Mar 2026 10:02:38 +0000 Manifest this update: Mon 02 Mar 2026 09:57:38 +0000 Manifest next update: Thu 05 Mar 2026 13:21:38 +0000 Files and hashes: 1: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: e4g62pWwoA6jmsCl2EWNbqG1RW6FRJlq4B+h5MuMaQY=) 2: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl (hash: 4PC+14hiBRd2WezpODE+930FNaD6RgUraATtxZrsZMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:93:73:7a:d4:2d:f4:31:f3:db:60:5b:a1:36:d3:70:90:8e:6b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F Validity Not Before: Mar 2 09:57:38 2026 GMT Not After : Mar 5 13:21:38 2026 GMT Subject: CN=F02EEF9D3972AFCE2BED95D3859988E6B0BD0121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:03:3a:14:a6:4a:a6:f1:75:7d:33:2b:35: a1:29:94:b6:b3:dc:6f:86:e4:6a:7c:d1:cc:10:12: 05:a1:3e:22:24:99:e4:4a:0a:0a:dd:22:68:e8:3e: d2:75:67:fa:da:74:cd:25:34:67:5a:e6:88:60:67: 80:8f:45:bd:06:fe:5f:12:bb:88:c4:c5:35:24:e1: e8:c4:13:6f:41:3f:02:7b:a3:78:34:33:93:ed:ad: 5e:9c:f7:b1:fb:b0:c8:ba:73:f6:8f:d6:e6:37:6a: 2f:c8:a7:d2:1b:b2:bd:f5:cd:56:f2:a6:2b:81:e9: c9:fb:08:7a:8f:e3:52:1f:54:aa:40:44:23:b5:30: 0b:0d:a7:bd:10:20:af:de:92:96:d0:3e:29:43:1c: cd:3c:3f:35:e4:1d:46:99:23:3a:b4:3d:cd:13:0d: 6a:6a:48:dc:b1:ed:9b:29:1c:56:23:58:b5:35:21: 5a:0c:09:32:9f:cf:6d:84:e7:1a:4e:01:f6:83:20: 91:b3:8b:4e:b2:84:41:d1:2e:2a:2f:ae:9f:38:78: d4:27:a7:1e:3d:cb:c1:f8:c4:be:b2:5e:dc:63:6d: a9:f4:79:ff:85:fe:c2:08:64:25:1a:c0:f3:2c:d3: b5:0b:eb:7a:81:28:46:dc:b1:6a:77:72:0b:c0:67: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:EF:9D:39:72:AF:CE:2B:ED:95:D3:85:99:88:E6:B0:BD:01:21 X509v3 Authority Key Identifier: keyid:DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f1:5f:b6:39:be:dd:4d:4d:c9:51:54:e8:7c:a9:d3:e0:f1: 87:d3:95:6e:0a:87:76:01:3c:ae:7c:4c:bc:69:d1:3c:98:88: 17:11:be:91:e7:24:66:15:e6:74:2f:36:39:3c:b7:2f:3a:89: d2:11:cb:83:32:a6:95:96:8c:e7:f9:67:68:f8:0d:f4:a4:17: b7:1f:fe:dd:78:c2:72:65:37:54:38:58:5c:ee:f9:71:4f:28: c2:6c:35:35:50:1f:95:b7:0a:6a:fb:f5:2a:26:89:43:54:34: 98:9b:c2:ce:7e:30:58:cd:f3:b8:13:e0:3b:ed:fa:fa:0c:8e: 35:82:18:b2:ef:1f:32:98:1e:34:9d:a7:db:12:11:d1:59:49: d6:85:5e:6e:47:d5:e5:80:c7:15:72:9a:63:1f:39:69:b6:63: 00:8d:a8:d7:d3:14:2e:83:1f:ea:62:1d:ba:f7:95:f1:9a:7e: 11:c2:b5:0a:46:8b:1a:5b:ea:4c:3c:be:25:e4:df:2f:fe:85: 6d:c0:34:e2:3b:9e:6d:e1:6e:63:cc:2c:b2:94:05:40:51:f7: 86:c7:5f:78:1a:39:52:ca:e5:e6:57:a6:19:49:cc:b2:2f:6b: aa:91:38:79:4e:fd:e5:64:95:22:3c:1a:37:bd:7b:6d:e7:4c: f1:52:9c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZNzetQt9DHz22BboTbTcJCOay0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNBRDI3 OEQyNzM4RjAeFw0yNjAzMDIwOTU3MzhaFw0yNjAzMDUxMzIxMzhaMDMxMTAvBgNV BAMTKEYwMkVFRjlEMzk3MkFGQ0UyQkVEOTVEMzg1OTk4OEU2QjBCRDAxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejAM6FKZKpvF1fTMrNaEplLaz 3G+G5Gp80cwQEgWhPiIkmeRKCgrdImjoPtJ1Z/radM0lNGda5ohgZ4CPRb0G/l8S u4jExTUk4ejEE29BPwJ7o3g0M5PtrV6c97H7sMi6c/aP1uY3ai/Ip9Ibsr31zVby piuB6cn7CHqP41IfVKpARCO1MAsNp70QIK/ekpbQPilDHM08PzXkHUaZIzq0Pc0T DWpqSNyx7ZspHFYjWLU1IVoMCTKfz22E5xpOAfaDIJGzi06yhEHRLiovrp84eNQn px49y8H4xL6yXtxjban0ef+F/sIIZCUawPMs07UL63qBKEbcsWp3cgvAZ7/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8C7vnTlyr84r7ZXThZmI5rC9ASEwHwYDVR0j BBgwFoAU3lePTkEEvAsX7yx1+w460njSc48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWNkNGE2Ny1iYzhiLTRhZDctODFhMS1jMDI0YzVhNjJkMzAvMC9ERTU3OEY0RTQx MDRCQzBCMTdFRjJDNzVGQjBFM0FEMjc4RDI3MzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNBRDI3OEQy NzM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFjZDRhNjctYmM4Yi00YWQ3LTgx YTEtYzAyNGM1YTYyZDMwLzAvREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNB RDI3OEQyNzM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnxX7Y5vt1NTclRVOh8qdPg8YfTlW4Kh3YB PK58TLxp0TyYiBcRvpHnJGYV5nQvNjk8ty86idIRy4MyppWWjOf5Z2j4DfSkF7cf /t14wnJlN1Q4WFzu+XFPKMJsNTVQH5W3Cmr79SomiUNUNJibws5+MFjN87gT4Dvt +voMjjWCGLLvHzKYHjSdp9sSEdFZSdaFXm5H1eWAxxVymmMfOWm2YwCNqNfTFC6D H+piHbr3lfGafhHCtQpGixpb6kw8viXk3y/+hW3ANOI7nm3hbmPMLLKUBUBR94bH X3gaOVLK5eZXphlJzLIva6qROHlO/eVklSI8Gje9e23nTPFSnKI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:33 2026 by rpki-client