$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: kl8mbbk7ex0oYgrgFcRjToeE+bekPWLRrF+AcZI/3Ak= Subject key identifier: C5:4F:86:2D:BC:69:96:1E:E0:B3:8A:9D:8A:4A:45:A6:B4:9E:DF:6D Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 71AE45E8882926B054918865BBC4A1AF548101F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 01B5 Signing time: Sun 01 Mar 2026 22:52:36 +0000 Manifest this update: Sun 01 Mar 2026 22:47:36 +0000 Manifest next update: Thu 05 Mar 2026 08:31:36 +0000 Files and hashes: 1: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: YGbTPZEN4ZU+DR0WHgN4nOSoyzo6gsK4zEQAX3JJYLs=) 2: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) 3: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) 4: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ae:45:e8:88:29:26:b0:54:91:88:65:bb:c4:a1:af:54:81:01:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Mar 1 22:47:36 2026 GMT Not After : Mar 5 08:31:36 2026 GMT Subject: CN=C54F862DBC69961EE0B38A9D8A4A45A6B49EDF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:20:eb:07:4a:02:1e:c4:8f:0a:ba:44:ae: 66:cb:b4:67:5e:05:a1:b3:3b:fe:d6:f2:13:e3:38: 02:91:cc:a8:bc:a6:49:47:57:51:4a:5b:9a:30:52: 80:3e:37:6f:7b:4d:ef:22:e2:31:5f:cf:ba:5b:82: 04:96:07:2b:60:97:80:55:0c:62:c5:60:9a:17:be: 7b:d5:dc:b4:c1:df:61:61:dc:c5:39:86:5d:55:03: 29:a0:49:bd:c8:d4:2e:42:ad:35:8b:0c:54:f1:d0: 23:c3:8e:d2:39:11:20:ba:ba:3f:b8:3c:d2:e3:0b: 47:54:71:34:f7:1c:fc:1c:1c:21:32:c7:fd:c0:4a: b7:64:6b:95:19:79:86:7a:48:a6:ba:76:98:39:a8: d9:eb:94:2a:a6:c1:ca:57:76:57:84:24:66:3c:da: e9:75:70:52:c7:d2:ff:16:ec:c9:35:f2:b6:5c:10: ee:fc:b6:b6:da:fc:97:f4:ad:fc:13:58:08:01:d4: 9d:7b:81:00:2c:2a:04:7e:1d:d6:71:61:18:fa:96: 73:f9:83:00:1f:6d:74:15:d8:3a:5e:3e:71:a4:a2: 45:33:85:b8:1f:14:e9:3b:ac:36:ae:bf:fd:ac:c3: 41:1c:17:2c:7d:c1:02:5f:46:3a:39:8c:fd:3b:18: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:86:2D:BC:69:96:1E:E0:B3:8A:9D:8A:4A:45:A6:B4:9E:DF:6D X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0c:99:1b:54:c3:cf:33:3b:89:8b:a9:bf:21:c2:84:c0:33: 2f:ca:11:47:d2:6a:bd:79:b7:b5:5a:fd:9e:83:80:a4:f4:02: 9d:83:b4:c6:56:84:44:f4:84:70:4a:23:28:df:55:ee:f6:61: e8:33:ab:2b:12:02:0e:12:72:18:ae:49:44:f0:b0:bd:1e:b5: 64:6b:d5:9d:16:37:df:7a:e1:93:cc:b1:be:3c:1f:94:43:86: d1:8b:d4:17:4a:9f:e1:ce:6b:70:38:18:c7:e4:d3:8f:7b:03: d7:b2:71:0b:2b:87:da:6f:b1:01:00:56:b7:8d:8e:de:18:60: 07:f4:57:74:4f:8e:dd:99:70:41:4a:57:55:bd:f4:45:bd:e7: b7:36:d1:25:cd:40:84:40:c8:da:ed:04:5c:2f:68:c2:3e:29: 51:a0:15:79:f7:6e:4d:61:f5:56:1f:1c:79:e0:9e:c1:93:a4: ea:48:c0:8e:d7:ac:8f:24:8a:fd:f2:95:b6:b3:54:79:9a:58: fb:b4:d7:e1:ec:31:68:06:95:6d:bc:e1:a2:5d:44:05:db:bd: 77:0c:a2:65:9f:61:22:48:6e:33:ad:6a:1d:77:32:0f:20:72: 23:2c:4a:ce:2b:6b:7c:04:38:1d:80:95:30:64:f5:19:f4:b6: d1:53:07:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca5F6IgpJrBUkYhlu8Shr1SBAfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNjAzMDEyMjQ3MzZaFw0yNjAzMDUwODMxMzZaMDMxMTAvBgNV BAMTKEM1NEY4NjJEQkM2OTk2MUVFMEIzOEE5RDhBNEE0NUE2QjQ5RURGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDyDrB0oCHsSPCrpErmbLtGde BaGzO/7W8hPjOAKRzKi8pklHV1FKW5owUoA+N297Te8i4jFfz7pbggSWBytgl4BV DGLFYJoXvnvV3LTB32Fh3MU5hl1VAymgSb3I1C5CrTWLDFTx0CPDjtI5ESC6uj+4 PNLjC0dUcTT3HPwcHCEyx/3ASrdka5UZeYZ6SKa6dpg5qNnrlCqmwcpXdleEJGY8 2ul1cFLH0v8W7Mk18rZcEO78trba/Jf0rfwTWAgB1J17gQAsKgR+HdZxYRj6lnP5 gwAfbXQV2DpePnGkokUzhbgfFOk7rDauv/2sw0EcFyx9wQJfRjo5jP07GJqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxU+GLbxplh7gs4qdikpFprSe320wHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYMmRtUw88zO4mLqb8hwoTAMy/KEUfSar15 t7Va/Z6DgKT0Ap2DtMZWhET0hHBKIyjfVe72YegzqysSAg4SchiuSUTwsL0etWRr 1Z0WN9964ZPMsb48H5RDhtGL1BdKn+HOa3A4GMfk0497A9eycQsrh9pvsQEAVreN jt4YYAf0V3RPjt2ZcEFKV1W99EW957c20SXNQIRAyNrtBFwvaMI+KVGgFXn3bk1h 9VYfHHngnsGTpOpIwI7XrI8kiv3ylbazVHmaWPu01+HsMWgGlW284aJdRAXbvXcM omWfYSJIbjOtah13Mg8gciMsSs4ra3wEOB2AlTBk9Rn0ttFTB38= -----END CERTIFICATE-----Generated at Mon Mar 2 11:55:06 2026 by rpki-client