$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: 1TSahMK3w+Vkc++Rj0HxDWxWxKmy1/2Ii+LZGLoBgU4= Subject key identifier: 37:51:B1:81:2D:F3:7B:EB:C2:A9:76:30:FF:18:65:7F:AB:0D:BB:4F Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 0A78E175970D37235A9E230DE02783A6B9A77D4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 01C7 Signing time: Sat 28 Feb 2026 13:11:52 +0000 Manifest this update: Sat 28 Feb 2026 13:06:52 +0000 Manifest next update: Tue 03 Mar 2026 18:46:52 +0000 Files and hashes: 1: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: 1xg/qAFYNJB10+oBO4TCyy/FjVWQCcCc5DSkSPbGns0=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: bOMw2z/DqljmPFskG2vsYIuUCGDr+Iq+bzXjTNV2cFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:78:e1:75:97:0d:37:23:5a:9e:23:0d:e0:27:83:a6:b9:a7:7d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Feb 28 13:06:52 2026 GMT Not After : Mar 3 18:46:52 2026 GMT Subject: CN=3751B1812DF37BEBC2A97630FF18657FAB0DBB4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:ac:0a:43:1c:c3:fb:7a:f5:ed:1b:2e:53: 15:c0:d5:09:5e:de:14:06:9b:9d:f6:36:2a:1d:fb: 57:34:a3:78:d0:f9:5a:5b:41:e4:e6:0e:fa:fa:99: 30:15:ec:eb:9b:48:3b:26:34:d5:c5:ff:6f:b3:2c: 72:e7:3c:bb:c8:14:cd:ea:1b:0e:c8:8c:e0:8d:7d: b3:09:4b:ac:9a:7f:d0:8b:89:8a:cf:16:20:78:dd: 98:35:5c:6d:85:59:6b:e6:e5:bc:f7:24:d3:b7:07: 64:c2:a4:7a:1c:53:34:20:58:88:4e:64:38:d7:87: a5:42:c3:b9:4f:36:5f:06:c5:a1:90:75:71:0b:15: 1e:0f:81:48:65:f5:4b:96:87:98:b5:9c:b0:7f:dd: 8a:a9:c1:d1:19:11:3d:87:95:60:c2:44:14:38:99: d6:25:2e:ad:76:13:0c:48:8c:ef:de:67:69:40:4d: 60:4c:9f:dd:a9:f3:2f:77:c6:4f:78:77:d9:76:f7: d6:24:75:df:0b:c4:bf:41:54:3a:f8:e7:a6:cc:b5: c8:8c:6c:1e:16:bc:c3:99:ff:2a:0a:26:d6:4e:27: cb:6d:28:78:ce:9d:93:fb:5f:e8:b3:92:23:4b:f3: d9:5d:77:e1:9c:8f:01:02:3e:33:fb:bd:54:4c:9c: 20:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:51:B1:81:2D:F3:7B:EB:C2:A9:76:30:FF:18:65:7F:AB:0D:BB:4F X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4f:ab:31:96:ab:1d:fd:56:3b:2f:2b:a9:c2:88:a4:43:22: da:f4:34:5f:bb:28:08:30:60:89:ef:e8:47:5d:75:45:05:4a: d5:98:a1:0b:e0:db:b6:e5:dd:25:6f:f9:85:70:fd:7d:ce:e1: 39:8b:36:c6:bd:12:05:dd:c8:7c:9a:c5:93:b7:97:1d:9c:ad: 7c:08:b3:04:f6:95:d8:14:34:33:ff:f8:38:82:5e:49:b5:49: 81:b1:d0:73:2b:ec:86:fc:cf:e6:10:bb:96:b9:b2:78:d5:be: 9e:aa:9b:2b:28:f9:47:9b:d1:2f:5b:7b:c5:a8:ed:b9:19:48: d0:4d:5f:68:b7:1d:5d:67:9d:e0:5d:d4:02:d9:17:be:13:c7: 68:83:59:fa:2a:c6:a2:b9:d5:45:34:5d:77:d9:12:02:4a:57: 31:3f:9d:8e:44:a8:6c:39:cb:76:a0:28:5f:a4:8e:6e:d3:53: bb:6e:43:be:f2:46:64:98:1a:ac:c7:d8:39:73:01:88:b6:8b: 0a:3e:a0:75:c9:23:4a:d0:6a:1f:f1:28:9f:12:bb:ed:de:0a: 35:9e:eb:0d:47:ae:f9:87:52:88:49:b5:8d:0b:84:0f:89:ca: fb:70:3c:fb:3d:85:61:8c:bf:25:c9:44:cd:88:d3:7b:37:2a: b4:df:7a:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnjhdZcNNyNaniMN4CeDprmnfU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNjAyMjgxMzA2NTJaFw0yNjAzMDMxODQ2NTJaMDMxMTAvBgNV BAMTKDM3NTFCMTgxMkRGMzdCRUJDMkE5NzYzMEZGMTg2NTdGQUIwREJCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkK6wKQxzD+3r17RsuUxXA1Qle 3hQGm532Niod+1c0o3jQ+VpbQeTmDvr6mTAV7OubSDsmNNXF/2+zLHLnPLvIFM3q Gw7IjOCNfbMJS6yaf9CLiYrPFiB43Zg1XG2FWWvm5bz3JNO3B2TCpHocUzQgWIhO ZDjXh6VCw7lPNl8GxaGQdXELFR4PgUhl9UuWh5i1nLB/3YqpwdEZET2HlWDCRBQ4 mdYlLq12EwxIjO/eZ2lATWBMn92p8y93xk94d9l299Ykdd8LxL9BVDr456bMtciM bB4WvMOZ/yoKJtZOJ8ttKHjOnZP7X+izkiNL89ldd+GcjwECPjP7vVRMnCANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1GxgS3ze+vCqXYw/xhlf6sNu08wHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZPqzGWqx39VjsvK6nCiKRDItr0NF+7KAgw YInv6EdddUUFStWYoQvg27bl3SVv+YVw/X3O4TmLNsa9EgXdyHyaxZO3lx2crXwI swT2ldgUNDP/+DiCXkm1SYGx0HMr7Ib8z+YQu5a5snjVvp6qmyso+Ueb0S9be8Wo 7bkZSNBNX2i3HV1nneBd1ALZF74Tx2iDWfoqxqK51UU0XXfZEgJKVzE/nY5EqGw5 y3agKF+kjm7TU7tuQ77yRmSYGqzH2DlzAYi2iwo+oHXJI0rQah/xKJ8Su+3eCjWe 6w1HrvmHUohJtY0LhA+JyvtwPPs9hWGMvyXJRM2I03s3KrTfelk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:37 2026 by rpki-client