$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: Ibcv04baawC4SKpUOOClWRZ4bFUT9l0MzvOlPLCTFZw= Subject key identifier: 53:5A:59:FE:4A:EF:DF:CA:2C:66:A6:3B:79:B0:00:38:36:15:23:4F Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 6F7AADAFE87B257D0B6C6D092F4257FF3FD55B1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 02B8 Signing time: Sun 01 Mar 2026 15:21:17 +0000 Manifest this update: Sun 01 Mar 2026 15:16:17 +0000 Manifest next update: Wed 04 Mar 2026 17:55:17 +0000 Files and hashes: 1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: gNS9Ey/iYut6cBmvNEYdoQ9samK/rHj6hB6gHCIx9g8=) 2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7a:ad:af:e8:7b:25:7d:0b:6c:6d:09:2f:42:57:ff:3f:d5:5b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Mar 1 15:16:17 2026 GMT Not After : Mar 4 17:55:17 2026 GMT Subject: CN=535A59FE4AEFDFCA2C66A63B79B000383615234F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:03:a5:85:ba:d6:ef:5a:9d:bf:73:21:34: 1b:1c:81:dd:d2:57:b1:ef:25:d7:ef:56:64:46:04: 56:e2:15:85:c4:4d:b6:48:d3:1c:7d:c9:30:24:6c: 65:2c:29:90:39:61:64:0d:22:98:31:a8:5d:e8:d4: cf:4a:38:26:98:3a:60:ac:64:b9:a2:ee:22:22:4b: 99:df:fb:06:01:13:b1:7d:d7:e8:b9:ed:2d:27:e1: b5:78:7a:c7:6c:25:34:ae:14:ba:e2:0d:3a:c0:28: 2d:7b:29:6b:ae:11:63:f4:f5:89:11:fd:12:0c:8c: ac:aa:25:bf:5c:75:da:e0:58:b5:77:64:27:cd:ae: 19:9f:69:f3:b9:a7:fd:a2:51:fe:70:bc:f9:05:69: f4:71:74:49:a1:37:4b:3a:02:ed:0c:76:76:71:69: 44:53:b9:dc:c7:7a:38:09:16:53:7d:17:5a:19:a1: c0:50:f6:08:3e:60:4b:c0:be:42:98:af:ff:5a:04: ae:b5:8e:cd:40:8f:a0:29:7d:4d:db:b5:be:c4:e5: 6f:cb:7f:32:77:13:85:51:15:d6:fe:fd:71:f9:65: a8:b7:d5:1c:fd:cc:90:52:cf:20:3d:b9:3c:8b:d8: 15:a9:bb:8f:fc:bc:75:2a:aa:16:1e:e7:a7:43:16: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:59:FE:4A:EF:DF:CA:2C:66:A6:3B:79:B0:00:38:36:15:23:4F X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ef:d1:81:37:79:91:3d:d3:09:ba:7b:e3:ae:0a:82:e4:c7: 19:b3:5f:92:0c:c7:e5:ce:b1:f1:1c:c3:db:cc:91:23:f9:da: 92:bb:bd:4a:08:7c:49:71:b3:b0:3a:ec:1c:0e:da:52:f3:35: 64:16:cf:e2:94:a6:d2:f7:fd:1d:57:2a:93:20:14:f4:3c:c5: df:d9:34:4c:20:06:39:4e:7a:97:36:0b:b0:c0:f1:d8:23:a2: 6f:8c:12:0a:49:28:30:36:fb:77:7a:b9:98:62:1f:85:a4:31: cb:f6:19:a0:f1:85:49:d4:89:d5:c1:3c:6f:92:f2:a7:0a:55: 1c:26:b6:23:e0:7f:38:df:28:d7:64:57:a0:49:8e:1f:93:e4: 98:23:d2:6b:ef:2b:12:c1:db:51:80:3a:97:17:4e:bb:f9:73: 1a:e0:62:45:7b:68:c0:53:0c:7e:30:8e:22:92:94:ca:d1:7e: 8e:85:63:50:0a:f7:6a:35:2b:e4:08:6c:4a:a2:8c:c1:62:45: e7:49:f6:5d:b1:e3:d5:19:d8:d0:4d:bf:1f:6d:4e:42:c7:e4: 9b:d3:ac:34:db:f1:8b:52:90:3e:31:17:94:9c:10:8e:83:a2: e6:66:5a:66:9f:ba:ec:4b:59:da:c5:a3:4c:de:2b:5b:18:f1: cb:50:86:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3qtr+h7JX0LbG0JL0JX/z/VWxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNjAzMDExNTE2MTdaFw0yNjAzMDQxNzU1MTdaMDMxMTAvBgNV BAMTKDUzNUE1OUZFNEFFRkRGQ0EyQzY2QTYzQjc5QjAwMDM4MzYxNTIzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpAOlhbrW71qdv3MhNBscgd3S V7HvJdfvVmRGBFbiFYXETbZI0xx9yTAkbGUsKZA5YWQNIpgxqF3o1M9KOCaYOmCs ZLmi7iIiS5nf+wYBE7F91+i57S0n4bV4esdsJTSuFLriDTrAKC17KWuuEWP09YkR /RIMjKyqJb9cddrgWLV3ZCfNrhmfafO5p/2iUf5wvPkFafRxdEmhN0s6Au0MdnZx aURTudzHejgJFlN9F1oZocBQ9gg+YEvAvkKYr/9aBK61js1Aj6ApfU3btb7E5W/L fzJ3E4VRFdb+/XH5Zai31Rz9zJBSzyA9uTyL2BWpu4/8vHUqqhYe56dDFiN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU1pZ/krv38osZqY7ebAAODYVI08wHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHv0YE3eZE90wm6e+OuCoLkxxmzX5IMx+XO sfEcw9vMkSP52pK7vUoIfElxs7A67BwO2lLzNWQWz+KUptL3/R1XKpMgFPQ8xd/Z NEwgBjlOepc2C7DA8dgjom+MEgpJKDA2+3d6uZhiH4WkMcv2GaDxhUnUidXBPG+S 8qcKVRwmtiPgfzjfKNdkV6BJjh+T5Jgj0mvvKxLB21GAOpcXTrv5cxrgYkV7aMBT DH4wjiKSlMrRfo6FY1AK92o1K+QIbEqijMFiRedJ9l2x49UZ2NBNvx9tTkLH5JvT rDTb8YtSkD4xF5ScEI6DouZmWmafuuxLWdrFo0zeK1sY8ctQhsQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:14 2026 by rpki-client