$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: ckyPXsVWUvv9ao+gJ42LMuamBSTHdqwH2cKnPqf4Aqc= Subject key identifier: CE:97:A0:35:DD:AA:8A:4A:52:C7:EA:91:26:F9:A3:9B:95:82:62:1C Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 1257D8689A72DD5B943F03196B01778BCB31D7DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 0292 Signing time: Sat 28 Feb 2026 05:12:04 +0000 Manifest this update: Sat 28 Feb 2026 05:07:04 +0000 Manifest next update: Tue 03 Mar 2026 08:36:04 +0000 Files and hashes: 1: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: 2lTJuwgktOu4lo9SNeOCA4rDFu8XBUgqcawUv+9j6hA=) 2: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: 9+ulDX9vMOdxvEOWTb23sXJwcQ0aqQ8TS2lUzygp45Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 08:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:57:d8:68:9a:72:dd:5b:94:3f:03:19:6b:01:77:8b:cb:31:d7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Feb 28 05:07:04 2026 GMT Not After : Mar 3 08:36:04 2026 GMT Subject: CN=CE97A035DDAA8A4A52C7EA9126F9A39B9582621C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:72:3c:2e:4b:72:4c:bc:f8:c8:f9:bf:14:a1: 91:4a:eb:e0:7a:0a:16:81:42:a3:66:18:d2:8e:b0: 2a:dc:13:29:c7:e5:8a:1f:9f:eb:0a:b7:80:e1:03: 63:0b:6c:3a:5c:19:25:d3:a7:fe:e4:bf:8f:0d:1d: 2c:80:ae:fa:87:ae:a6:50:fb:6a:c3:71:8f:86:71: df:10:58:42:4a:60:b9:fe:ad:39:be:0d:bd:68:6e: 28:9a:12:82:a3:01:2c:cf:56:a7:8e:16:14:eb:bc: 31:e2:00:9e:bf:e7:01:d2:02:4f:58:fd:f9:e4:30: a7:a5:bb:ba:bc:bb:fa:36:ff:b2:86:a3:2d:f2:87: 35:96:ac:ce:83:a5:22:7a:fd:e2:89:81:9c:ad:6d: 9f:4d:2a:7e:66:38:19:5a:ce:9c:7c:79:ce:a6:6b: a4:cf:10:59:7f:fd:3a:cc:6f:e5:60:d1:cf:59:3c: 06:40:b7:7e:db:c4:70:07:d2:14:94:44:6a:49:64: 73:78:2d:33:85:2d:19:91:d9:11:dc:12:95:0f:34: 7e:c3:97:e0:af:28:a7:ea:c5:48:3e:a1:43:72:9a: f7:92:08:2a:99:dd:43:fe:86:0c:3d:af:49:68:c8: 1c:eb:f5:7b:2a:c1:30:d7:f3:60:21:69:27:ca:38: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:97:A0:35:DD:AA:8A:4A:52:C7:EA:91:26:F9:A3:9B:95:82:62:1C X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4f:8f:cf:01:4a:fa:b6:3f:ca:5d:e6:aa:11:cf:53:fb:be: 03:4b:46:b5:04:57:33:48:96:0d:05:bc:8e:5d:6d:5a:77:f6: 5a:c3:56:33:02:a3:31:08:d3:8f:4d:8b:59:14:39:4e:cc:be: 56:32:07:c5:e9:3d:18:11:77:10:45:bc:8f:86:73:70:83:c1: 5a:97:1e:df:38:5d:53:93:d0:74:27:e1:0d:d5:36:75:6d:75: 27:a4:97:42:ae:03:b5:2b:cd:6b:ef:1c:14:58:5e:a3:37:bb: 2c:ee:d4:52:01:1c:fe:fa:b4:71:31:22:c1:fa:eb:05:c0:ce: a8:fe:b4:da:e3:7f:bd:0c:48:7a:88:b6:a1:42:3d:1c:4b:71: 12:49:67:11:c9:13:5a:33:04:4e:e4:6b:ba:dc:a2:b9:48:94: 3a:37:e2:46:0e:29:e9:d6:38:ea:ec:56:c8:8f:a4:ca:d1:6e: cf:fb:37:f7:af:cc:5d:d6:be:3e:1f:8a:e0:30:cd:cf:df:ee: 02:78:39:c0:aa:b5:52:3c:7e:d3:ec:5c:fa:df:89:fa:84:4c: fd:1e:c7:99:88:32:24:55:d6:1b:ad:23:53:60:85:df:44:b9: d8:4d:f9:50:24:75:54:25:db:42:e2:98:3b:94:ae:c1:87:b3: 8c:b8:e9:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElfYaJpy3VuUPwMZawF3i8sx19swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNjAyMjgwNTA3MDRaFw0yNjAzMDMwODM2MDRaMDMxMTAvBgNV BAMTKENFOTdBMDM1RERBQThBNEE1MkM3RUE5MTI2RjlBMzlCOTU4MjYyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcjwuS3JMvPjI+b8UoZFK6+B6 ChaBQqNmGNKOsCrcEynH5Yofn+sKt4DhA2MLbDpcGSXTp/7kv48NHSyArvqHrqZQ +2rDcY+Gcd8QWEJKYLn+rTm+Db1obiiaEoKjASzPVqeOFhTrvDHiAJ6/5wHSAk9Y /fnkMKelu7q8u/o2/7KGoy3yhzWWrM6DpSJ6/eKJgZytbZ9NKn5mOBlazpx8ec6m a6TPEFl//TrMb+Vg0c9ZPAZAt37bxHAH0hSURGpJZHN4LTOFLRmR2RHcEpUPNH7D l+CvKKfqxUg+oUNymveSCCqZ3UP+hgw9r0loyBzr9XsqwTDX82AhaSfKOIflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpegNd2qikpSx+qRJvmjm5WCYhwwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFPj88BSvq2P8pd5qoRz1P7vgNLRrUEVzNI lg0FvI5dbVp39lrDVjMCozEI049Ni1kUOU7MvlYyB8XpPRgRdxBFvI+Gc3CDwVqX Ht84XVOT0HQn4Q3VNnVtdSekl0KuA7UrzWvvHBRYXqM3uyzu1FIBHP76tHExIsH6 6wXAzqj+tNrjf70MSHqItqFCPRxLcRJJZxHJE1ozBE7ka7rcorlIlDo34kYOKenW OOrsVsiPpMrRbs/7N/evzF3Wvj4fiuAwzc/f7gJ4OcCqtVI8ftPsXPrfifqETP0e x5mIMiRV1hutI1Nghd9EudhN+VAkdVQl20LimDuUrsGHs4y46Vc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:33 2026 by rpki-client