$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: lDN7nSFYaKj5lhmMCS1ZmsxJtgfTVm75FDl4v+fd22s= Subject key identifier: 9B:DA:8B:11:70:75:C0:E8:CD:EC:97:FA:4C:27:B1:5B:C0:56:F6:2C Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 75573CFE55433DE009F4A6F570388CE067818E29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 039E Signing time: Sun 01 Mar 2026 19:30:42 +0000 Manifest this update: Sun 01 Mar 2026 19:25:41 +0000 Manifest next update: Thu 05 Mar 2026 02:19:41 +0000 Files and hashes: 1: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) 2: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=) 3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 4: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: 3QFY5q6d7z+H+sV+BXaWkbu1MZr30lxX9h8tbRVjxew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:57:3c:fe:55:43:3d:e0:09:f4:a6:f5:70:38:8c:e0:67:81:8e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Mar 1 19:25:41 2026 GMT Not After : Mar 5 02:19:41 2026 GMT Subject: CN=9BDA8B117075C0E8CDEC97FA4C27B15BC056F62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:23:4b:20:d3:24:dc:6b:84:3e:40:64:7c: 6b:7e:5b:dc:06:fe:14:42:8d:e7:5b:ee:4f:54:d8: 77:7c:14:39:ed:c8:0d:15:56:65:84:e1:f6:60:02: cb:6e:ba:b2:af:c7:21:5b:62:30:da:96:89:ea:0b: 85:63:a8:ab:81:ee:38:f7:13:ec:7c:b2:d1:6b:31: 3d:43:f2:f5:9c:f3:f1:4f:ab:ee:33:25:b2:bf:dd: 6d:7d:7b:a3:23:26:65:71:dc:94:ef:6d:ab:38:74: 63:a1:e0:41:78:2c:64:b3:4b:d8:1e:9f:8f:dc:b8: 62:2c:52:09:e4:1b:6a:65:d5:7d:0f:d7:c8:80:fc: 8e:a4:d0:67:5f:a1:d0:a8:18:7c:e2:d4:4b:39:ec: 47:13:eb:3c:b6:6f:4e:83:8e:df:43:50:46:a0:68: 34:0a:2d:d5:dc:b6:e1:82:86:9c:b9:4f:2d:6d:ba: c9:93:5f:18:38:a1:1c:78:71:7f:c8:a8:35:c5:bc: ba:f5:ea:43:3b:de:9e:82:4b:02:ce:60:b3:c2:fc: 4f:d1:76:01:93:91:bb:62:67:77:19:33:20:30:67: f2:40:1f:0b:1f:42:37:ed:61:cb:66:f4:81:27:29: 3b:75:b7:6c:c1:b3:60:46:e5:92:cf:38:8b:c2:6a: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:8B:11:70:75:C0:E8:CD:EC:97:FA:4C:27:B1:5B:C0:56:F6:2C X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5f:df:0b:21:2e:23:50:c0:d2:8d:4f:57:7f:01:00:f8:dc: 98:78:6c:80:4d:53:23:66:b8:d8:47:38:24:7a:7e:27:5e:6d: d3:d4:05:9a:59:a8:42:3d:5f:7f:d3:a3:47:fa:7d:7b:e0:40: 8e:7e:03:5b:69:61:76:e9:a0:bc:b1:b9:9a:03:3f:89:e7:13: f7:1f:b3:2e:43:38:49:f3:46:b3:46:f7:69:b3:11:85:bf:b7: 34:0e:8a:91:99:aa:ff:05:7a:81:5c:6c:b9:ea:52:23:16:45: 76:e9:84:29:1c:28:5a:fd:93:8f:17:a8:18:d2:5d:73:cd:6e: 09:7f:a1:1a:2d:ea:ef:32:5b:3b:26:51:dc:20:31:a1:84:30: c6:5e:6d:55:14:a2:19:68:fa:d6:75:8b:e0:47:c3:8b:7a:92: 19:10:a3:31:32:89:65:52:f9:a3:75:7d:cc:46:13:87:e4:86: 09:53:4f:e1:33:63:ad:8b:47:e5:47:cc:7f:7a:64:90:c3:3c: 39:b8:bd:24:34:9d:6e:1f:e8:b6:56:91:17:6f:33:1c:90:8e: 6d:cc:ce:a2:4f:ce:7c:41:57:5a:98:12:c1:c4:be:1f:83:60: bd:fe:03:fa:cc:0d:f4:d0:9b:3b:50:ed:d8:6d:3f:62:c0:82: 54:1c:00:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVc8/lVDPeAJ9Kb1cDiM4GeBjikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNjAzMDExOTI1NDFaFw0yNjAzMDUwMjE5NDFaMDMxMTAvBgNV BAMTKDlCREE4QjExNzA3NUMwRThDREVDOTdGQTRDMjdCMTVCQzA1NkY2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzyNLINMk3GuEPkBkfGt+W9wG /hRCjedb7k9U2Hd8FDntyA0VVmWE4fZgAstuurKvxyFbYjDalonqC4VjqKuB7jj3 E+x8stFrMT1D8vWc8/FPq+4zJbK/3W19e6MjJmVx3JTvbas4dGOh4EF4LGSzS9ge n4/cuGIsUgnkG2pl1X0P18iA/I6k0GdfodCoGHzi1Es57EcT6zy2b06Djt9DUEag aDQKLdXctuGChpy5Ty1tusmTXxg4oRx4cX/IqDXFvLr16kM73p6CSwLOYLPC/E/R dgGTkbtiZ3cZMyAwZ/JAHwsfQjftYctm9IEnKTt1t2zBs2BG5ZLPOIvCamiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9qLEXB1wOjN7Jf6TCexW8BW9iwwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtf3wshLiNQwNKNT1d/AQD43Jh4bIBNUyNm uNhHOCR6fidebdPUBZpZqEI9X3/To0f6fXvgQI5+A1tpYXbpoLyxuZoDP4nnE/cf sy5DOEnzRrNG92mzEYW/tzQOipGZqv8FeoFcbLnqUiMWRXbphCkcKFr9k48XqBjS XXPNbgl/oRot6u8yWzsmUdwgMaGEMMZebVUUohlo+tZ1i+BHw4t6khkQozEyiWVS +aN1fcxGE4fkhglTT+EzY62LR+VHzH96ZJDDPDm4vSQ0nW4f6LZWkRdvMxyQjm3M zqJPznxBV1qYEsHEvh+DYL3+A/rMDfTQmztQ7dhtP2LAglQcAHA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:55:27 2026 by rpki-client