$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: LdF9J9RPnNghL5h22GkXb6sqbzrht7CqH4OVIjT1IUc= Subject key identifier: 91:EA:50:78:CA:34:16:99:62:11:88:EB:2F:C1:2B:D0:83:53:7C:C7 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 5626AD923F0663C638841EB922E863AFBBB26036 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: 0112 Signing time: Mon 02 Mar 2026 17:30:43 +0000 Manifest this update: Mon 02 Mar 2026 17:25:43 +0000 Manifest next update: Thu 05 Mar 2026 23:27:43 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: tCzUVvG1k1iSWwz5PGWgQmXr2YU4f7LW2Wk4KuwHC4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 23:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:26:ad:92:3f:06:63:c6:38:84:1e:b9:22:e8:63:af:bb:b2:60:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Mar 2 17:25:43 2026 GMT Not After : Mar 5 23:27:43 2026 GMT Subject: CN=91EA5078CA341699621188EB2FC12BD083537CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:84:9d:87:16:1b:c2:79:23:91:56:7d:dc: 6f:ee:4d:27:17:ff:ae:42:85:08:17:f3:0d:37:59: cf:b0:da:8d:d0:14:b6:95:0f:1d:f4:15:46:10:e0: c7:ce:a2:bf:7a:d2:c4:11:0b:7d:10:c1:2c:26:d0: e3:a9:4c:85:2b:52:71:6c:57:a6:66:c0:ef:38:e9: c8:51:3b:5b:01:67:88:d4:93:b2:ca:cf:cc:3c:78: 6b:b2:8d:4e:4e:4c:85:ca:6d:44:b8:04:7d:dd:77: 47:3e:ce:cc:1f:77:1d:2d:e7:50:da:cc:74:22:f8: b6:ba:32:46:4a:4e:07:37:79:7c:92:b9:d4:50:17: 73:2f:e1:62:a7:e0:d9:c0:f4:46:27:f4:c6:53:d6: b0:a4:5d:72:5a:ed:5b:89:ef:62:f1:17:5d:a6:cd: 74:2d:61:f0:6a:90:90:8e:5d:e7:74:d2:05:d8:f6: 40:b9:73:d0:17:04:82:16:ca:15:cb:be:2d:92:58: 47:92:1a:8a:24:e4:94:30:ef:e8:d9:db:63:32:20: c2:97:26:72:dc:a5:10:be:77:64:86:24:12:28:b0: 73:66:65:a1:8b:d5:2c:17:44:ff:41:da:e2:1b:02: 67:59:20:2f:58:37:ee:95:05:3c:32:5e:12:26:ee: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EA:50:78:CA:34:16:99:62:11:88:EB:2F:C1:2B:D0:83:53:7C:C7 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7c:de:b2:48:a1:96:b7:b5:57:f7:94:2f:40:95:de:ce:cc: a9:30:82:93:21:ea:15:1a:2f:d4:29:ab:44:d5:a3:67:86:4b: 50:e9:00:75:09:8c:c4:dd:5e:47:f2:8f:aa:5a:65:1d:01:22: 1a:69:52:b9:65:9c:5d:34:21:da:a2:55:93:07:28:7c:68:21: 05:51:68:d6:27:87:0c:f7:91:a6:c7:74:ba:26:5c:06:25:12: 5d:a1:af:de:91:b8:7c:2b:a4:4c:a4:1e:17:e4:bb:08:5e:b5: 0b:17:d7:49:00:9d:d0:3c:7b:0e:8e:4a:6f:9e:21:d6:30:ae: ad:1b:f3:35:c0:b5:c4:40:75:b3:2e:48:ae:67:32:51:5c:73: a6:14:7a:c0:dd:fc:67:35:a8:ef:ad:8e:2c:1e:19:c4:74:6f: 47:5a:f2:9c:f1:d0:2b:5c:9a:3b:d7:d8:49:48:dd:9f:fd:5a: 04:df:83:03:b4:36:4b:25:64:d8:07:c2:f6:54:76:cc:21:13: cf:2a:ef:12:63:10:3f:de:c5:be:16:66:ae:fb:21:75:4e:87: c6:19:44:7c:ad:30:69:13:d6:20:54:3f:89:1b:ec:de:97:c1: 77:f5:52:58:6f:9e:c6:b8:e1:b3:49:a5:82:51:a0:8b:c0:28: b1:c7:0c:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViatkj8GY8Y4hB65Iuhjr7uyYDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNjAzMDIxNzI1NDNaFw0yNjAzMDUyMzI3NDNaMDMxMTAvBgNV BAMTKDkxRUE1MDc4Q0EzNDE2OTk2MjExODhFQjJGQzEyQkQwODM1MzdDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oISdhxYbwnkjkVZ93G/uTScX /65ChQgX8w03Wc+w2o3QFLaVDx30FUYQ4MfOor960sQRC30QwSwm0OOpTIUrUnFs V6ZmwO846chRO1sBZ4jUk7LKz8w8eGuyjU5OTIXKbUS4BH3dd0c+zswfdx0t51Da zHQi+La6MkZKTgc3eXySudRQF3Mv4WKn4NnA9EYn9MZT1rCkXXJa7VuJ72LxF12m zXQtYfBqkJCOXed00gXY9kC5c9AXBIIWyhXLvi2SWEeSGook5JQw7+jZ22MyIMKX JnLcpRC+d2SGJBIosHNmZaGL1SwXRP9B2uIbAmdZIC9YN+6VBTwyXhIm7gC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkepQeMo0FpliEYjrL8Er0INTfMcwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZ83rJIoZa3tVf3lC9Ald7OzKkwgpMh6hUa L9Qpq0TVo2eGS1DpAHUJjMTdXkfyj6paZR0BIhppUrllnF00IdqiVZMHKHxoIQVR aNYnhwz3kabHdLomXAYlEl2hr96RuHwrpEykHhfkuwhetQsX10kAndA8ew6OSm+e IdYwrq0b8zXAtcRAdbMuSK5nMlFcc6YUesDd/Gc1qO+tjiweGcR0b0da8pzx0Ctc mjvX2ElI3Z/9WgTfgwO0NkslZNgHwvZUdswhE88q7xJjED/exb4WZq77IXVOh8YZ RHytMGkT1iBUP4kb7N6XwXf1Ulhvnsa44bNJpYJRoIvAKLHHDEs= -----END CERTIFICATE-----Generated at Tue Mar 3 05:29:59 2026 by rpki-client