$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: i4G6PddHCyuLRUvuZ+M0G0a/8+MgDYLL9+ggOF3nBmw= Subject key identifier: 52:F7:BA:BD:C1:1E:AC:AB:70:F4:31:B5:3F:2B:8B:E7:B4:DB:84:F7 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 14CCAC04FD7457CE6C453F977963E825067F0CF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: FD Signing time: Sun 01 Mar 2026 14:40:51 +0000 Manifest this update: Sun 01 Mar 2026 14:35:51 +0000 Manifest next update: Wed 04 Mar 2026 18:50:51 +0000 Files and hashes: 1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: vOg0zUqf+QTlugGDo69h3vkWWOd5aJzEMelWk5VzpZc=) 2: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) 3: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: jeWguCwm76CmsJXg1ZgYbmX+MUCuiZr0yr59XcYu9Ow=) 4: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: XacJ1PvQ+Qq6w95SUtj58pV5mUVjGwreZNIi5mtgsCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cc:ac:04:fd:74:57:ce:6c:45:3f:97:79:63:e8:25:06:7f:0c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Mar 1 14:35:51 2026 GMT Not After : Mar 4 18:50:51 2026 GMT Subject: CN=52F7BABDC11EACAB70F431B53F2B8BE7B4DB84F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:08:de:67:2b:c7:e4:1b:d7:34:0a:0d:68: 0c:ca:cb:58:13:63:db:fe:46:6e:73:98:ed:5e:3f: 52:89:8a:ab:a5:b7:57:b1:35:8a:67:d9:39:10:0c: bb:25:f4:48:5a:0c:16:57:64:7d:f3:45:bb:c1:66: ee:64:f6:bf:e9:7f:25:f7:b2:e1:bf:92:bf:c0:4f: 35:f5:d8:4f:a2:f0:44:e0:89:6f:a0:24:81:20:9f: ba:a7:89:d9:07:7f:72:19:ae:20:b7:b7:2d:fe:92: 6b:44:08:08:e8:39:ff:87:23:e9:d9:57:32:06:8f: 30:d4:f0:1b:f7:b4:fd:35:43:89:96:3f:52:65:0c: b4:d3:18:35:a4:04:c8:19:51:5c:52:4f:73:a3:95: c5:c3:4b:c7:2d:e3:2a:c4:9b:9c:80:7e:6c:2c:ff: 33:13:ed:4e:a4:dc:be:ce:2f:89:88:f2:14:6a:fc: 5e:62:00:47:db:64:5a:3d:4f:b6:d6:6f:ab:77:c4: 86:0b:79:08:ab:2f:68:74:8c:06:ac:48:46:f1:f9: 3e:f5:1e:22:bb:3c:8c:25:5d:8b:aa:4a:5f:90:9c: ab:38:00:d3:92:a5:41:25:c9:d8:d8:c8:29:d3:ed: da:d7:0a:cd:65:49:ad:1e:18:65:43:3c:ef:1d:a3: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:BA:BD:C1:1E:AC:AB:70:F4:31:B5:3F:2B:8B:E7:B4:DB:84:F7 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e2:87:4a:22:2b:17:55:0d:d0:ca:aa:6b:32:fa:d6:bc:fa: 81:7a:14:77:8f:4e:14:48:90:63:6c:3e:fa:2b:db:22:df:12: 89:d3:e8:d4:80:a3:76:aa:ca:66:68:1f:51:f2:35:f6:be:8a: 0a:15:5e:d9:cd:7a:21:96:cf:88:8c:4e:dc:e9:10:e8:69:df: ed:ae:e0:e1:31:97:2b:f0:e3:2c:56:02:fb:e6:c2:ee:8d:70: 12:3a:27:36:4f:e3:8b:0c:5b:90:fd:0d:50:ea:94:01:4d:b0: 45:b9:e8:64:36:6f:bf:f2:84:50:f7:4e:8e:ee:36:51:57:e8: 0c:b4:ed:c4:68:38:fc:a5:2c:24:74:9c:63:b1:13:41:03:93: 78:d2:2f:35:1d:a4:19:dd:66:00:57:89:18:fc:3d:dd:57:b3: 32:80:cf:12:ca:be:60:1e:86:ac:f2:cd:f5:d0:e3:4e:72:4a: f0:b6:31:bf:af:bf:ae:86:09:c4:21:71:3b:f8:0f:8a:17:d1: 1f:87:61:23:81:8e:02:6a:55:f4:45:e4:1f:08:ab:14:eb:5e: e5:2e:09:13:64:77:a5:92:4b:95:5a:54:23:2e:53:76:a8:c2: 74:40:93:e6:99:44:41:c3:79:8f:9d:ce:1a:ad:55:b1:64:da: 45:59:7f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFMysBP10V85sRT+XeWPoJQZ/DPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNjAzMDExNDM1NTFaFw0yNjAzMDQxODUwNTFaMDMxMTAvBgNV BAMTKDUyRjdCQUJEQzExRUFDQUI3MEY0MzFCNTNGMkI4QkU3QjREQjg0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0wjeZyvH5BvXNAoNaAzKy1gT Y9v+Rm5zmO1eP1KJiqult1exNYpn2TkQDLsl9EhaDBZXZH3zRbvBZu5k9r/pfyX3 suG/kr/ATzX12E+i8ETgiW+gJIEgn7qnidkHf3IZriC3ty3+kmtECAjoOf+HI+nZ VzIGjzDU8Bv3tP01Q4mWP1JlDLTTGDWkBMgZUVxST3OjlcXDS8ct4yrEm5yAfmws /zMT7U6k3L7OL4mI8hRq/F5iAEfbZFo9T7bWb6t3xIYLeQirL2h0jAasSEbx+T71 HiK7PIwlXYuqSl+QnKs4ANOSpUElydjYyCnT7drXCs1lSa0eGGVDPO8dow8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUve6vcEerKtw9DG1PyuL57TbhPcwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrih0oiKxdVDdDKqmsy+ta8+oF6FHePThRI kGNsPvor2yLfEonT6NSAo3aqymZoH1HyNfa+igoVXtnNeiGWz4iMTtzpEOhp3+2u 4OExlyvw4yxWAvvmwu6NcBI6JzZP44sMW5D9DVDqlAFNsEW56GQ2b7/yhFD3To7u NlFX6Ay07cRoOPylLCR0nGOxE0EDk3jSLzUdpBndZgBXiRj8Pd1XszKAzxLKvmAe hqzyzfXQ405ySvC2Mb+vv66GCcQhcTv4D4oX0R+HYSOBjgJqVfRF5B8IqxTrXuUu CRNkd6WSS5VaVCMuU3aownRAk+aZREHDeY+dzhqtVbFk2kVZf+4= -----END CERTIFICATE-----Generated at Mon Mar 2 18:37:07 2026 by rpki-client