$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: Q6rUMSsqH8IsSWRw+7i2Nk5LtPffaEa+bvjTbP/I3ko= Subject key identifier: AD:A9:6D:B2:75:86:24:A7:89:72:F1:25:46:22:33:71:CD:4B:28:55 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 3EF05045158673E08323CCDDA63A9860509A2001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 0109 Signing time: Mon 02 Mar 2026 14:30:59 +0000 Manifest this update: Mon 02 Mar 2026 14:25:59 +0000 Manifest next update: Thu 05 Mar 2026 23:15:59 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: VpsDeEuaGAkcKP6bTI1xEkRjBXlzXn2+0RPkiNdfTrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f0:50:45:15:86:73:e0:83:23:cc:dd:a6:3a:98:60:50:9a:20:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Mar 2 14:25:59 2026 GMT Not After : Mar 5 23:15:59 2026 GMT Subject: CN=ADA96DB2758624A78972F12546223371CD4B2855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:a2:5b:fc:45:6c:34:f3:a3:97:e2:5b:29: 2f:69:af:89:5f:69:cb:9d:18:bd:22:ef:a0:72:95: 04:67:15:b9:de:1c:db:61:a4:b3:e2:2e:a7:7b:bd: 03:8d:1a:27:34:91:4d:bd:24:b8:f0:6d:e6:c5:b2: c9:e7:de:7b:12:84:57:f8:28:19:7a:da:19:e9:c6: c9:83:a3:40:0b:31:28:48:7b:56:f0:b3:dd:3b:fe: 52:99:64:71:0b:97:71:c9:78:6b:07:1c:60:f4:61: 64:7d:f0:5e:f0:26:47:94:a5:41:7e:5d:03:60:2e: 04:a2:40:c8:b1:d4:6f:77:d7:b0:4a:39:7e:95:02: 82:d3:69:c9:d9:f7:dd:33:29:33:2f:d7:f0:91:b5: 02:39:50:89:b4:1e:f1:9a:ac:c6:59:b2:3e:b0:93: 92:c4:f4:e3:dc:08:60:d4:4a:89:0e:1a:70:b1:b9: e1:9b:67:06:85:26:ee:46:93:32:20:3f:b4:a7:89: 8f:eb:f7:e4:e0:f4:95:a1:3f:59:e8:b4:d5:48:b1: 7d:82:04:73:0d:44:47:af:fb:d7:f6:1f:6a:01:39: c2:b8:12:60:5e:cb:8a:b6:03:7a:01:5a:e0:25:3b: e4:a9:f8:24:56:f2:18:ea:ca:06:34:72:7c:6e:e6: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:6D:B2:75:86:24:A7:89:72:F1:25:46:22:33:71:CD:4B:28:55 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ba:61:87:1d:e2:0c:e0:c7:38:1a:69:da:bf:a5:4c:c3:7f: 65:1d:c9:a5:66:85:6f:77:e8:a3:fe:9f:a3:ee:28:c6:5b:cb: 89:cd:96:91:14:71:9e:62:22:70:51:5a:46:7d:e4:ad:97:5d: f2:5b:01:39:5c:e3:dc:2e:0a:38:18:d3:34:c3:39:c1:20:77: 93:c4:91:53:99:63:3b:85:15:73:50:1d:2f:61:b5:c0:f9:75: 6d:36:f0:9e:b9:f4:03:63:ee:0b:4c:1f:86:3b:5d:06:13:4b: f1:29:ed:ed:94:be:d3:be:fc:32:c7:a9:9a:c4:a1:06:86:84: 0c:15:2b:96:91:2d:08:b9:01:f2:1e:73:16:c4:00:af:f4:2f: d4:93:bf:d7:a2:fd:60:6a:f8:9d:20:a0:ae:48:33:b2:a1:d2: 52:d6:3f:a5:3f:34:48:0d:00:94:6a:ea:ff:c9:8b:3e:db:65: 70:a1:e3:89:43:03:94:bb:9d:e5:c3:00:a6:22:70:4f:5a:fc: 60:92:10:73:4d:51:d6:12:49:ee:5f:92:bb:9d:cb:fb:f5:41: 3c:9e:0f:a3:f2:b8:d8:0e:d3:97:c2:e1:8c:b0:98:f1:e7:b8: 71:3e:67:ac:a9:70:4f:eb:74:ab:b0:e3:fe:91:70:f3:21:8c: be:fb:72:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvBQRRWGc+CDI8zdpjqYYFCaIAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNjAzMDIxNDI1NTlaFw0yNjAzMDUyMzE1NTlaMDMxMTAvBgNV BAMTKEFEQTk2REIyNzU4NjI0QTc4OTcyRjEyNTQ2MjIzMzcxQ0Q0QjI4NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxaJb/EVsNPOjl+JbKS9pr4lf acudGL0i76BylQRnFbneHNthpLPiLqd7vQONGic0kU29JLjwbebFssnn3nsShFf4 KBl62hnpxsmDo0ALMShIe1bws907/lKZZHELl3HJeGsHHGD0YWR98F7wJkeUpUF+ XQNgLgSiQMix1G9317BKOX6VAoLTacnZ990zKTMv1/CRtQI5UIm0HvGarMZZsj6w k5LE9OPcCGDUSokOGnCxueGbZwaFJu5GkzIgP7SniY/r9+Tg9JWhP1notNVIsX2C BHMNREev+9f2H2oBOcK4EmBey4q2A3oBWuAlO+Sp+CRW8hjqygY0cnxu5sy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraltsnWGJKeJcvElRiIzcc1LKFUwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD26YYcd4gzgxzgaadq/pUzDf2UdyaVmhW93 6KP+n6PuKMZby4nNlpEUcZ5iInBRWkZ95K2XXfJbATlc49wuCjgY0zTDOcEgd5PE kVOZYzuFFXNQHS9htcD5dW028J659ANj7gtMH4Y7XQYTS/Ep7e2UvtO+/DLHqZrE oQaGhAwVK5aRLQi5AfIecxbEAK/0L9STv9ei/WBq+J0goK5IM7Kh0lLWP6U/NEgN AJRq6v/Jiz7bZXCh44lDA5S7neXDAKYicE9a/GCSEHNNUdYSSe5fkrudy/v1QTye D6PyuNgO05fC4YywmPHnuHE+Z6ypcE/rdKuw4/6RcPMhjL77ci4= -----END CERTIFICATE-----Generated at Mon Mar 2 20:18:25 2026 by rpki-client