$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: EWv5ojOFFwKnYAZDzBndqCT/Qc/aUzZuqfQS2tcpmRA= Subject key identifier: DD:A1:A7:E2:05:2E:AC:31:7B:A7:B6:1C:DD:90:10:41:6F:79:9C:2E Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 4E3DBAF88A10591E3DF4A6A72BEF784F2D3AF1CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 0397 Signing time: Sun 01 Mar 2026 05:01:57 +0000 Manifest this update: Sun 01 Mar 2026 04:56:57 +0000 Manifest next update: Wed 04 Mar 2026 12:44:57 +0000 Files and hashes: 1: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) 2: 323430343a326363303a32343a3a2f34362d3436203d3e20313331373336.roa (hash: pNNOikD6VzRUPv7yZG6Cg3KiGof++IQqkIf9l+Tqx7M=) 3: 323430343a326363303a3a2f34332d3433203d3e20313331373336.roa (hash: FOu7z+lFtPq+cQCxDqirVfbm+xQEfu1NcMOm+058Mco=) 4: 323430343a326363303a32633a3a2f34362d3436203d3e20313331373336.roa (hash: t4c93T36jMt5VZmXd/bp2z8IhiNgox8OFSWiaBbxAhQ=) 5: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) 6: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: aNXcqoGylocaKBvZREeNKcK4Ym8aq9a/GwJMci6/x5c=) 7: 323430343a326363303a32303a3a2f34362d3436203d3e20313331373336.roa (hash: AL79go4QRK47TgrAmtQGB5fYfJRAvCqPrZVQAqwDWT4=) 8: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) 9: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 10: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (hash: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:ba:f8:8a:10:59:1e:3d:f4:a6:a7:2b:ef:78:4f:2d:3a:f1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Mar 1 04:56:57 2026 GMT Not After : Mar 4 12:44:57 2026 GMT Subject: CN=DDA1A7E2052EAC317BA7B61CDD9010416F799C2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:5e:75:e1:f9:f9:6d:10:d5:f0:a6:02:3e: e5:5d:3f:49:85:7d:b1:aa:41:ff:a5:cc:ba:47:dc: bb:5d:28:91:f7:18:ff:7b:0e:a9:92:62:4a:9c:c1: c0:24:6c:2b:69:9b:7c:a2:70:56:a3:ed:07:75:22: 51:b3:35:ce:cb:4c:c0:e2:d9:21:9a:96:5b:ac:1c: d6:43:2e:0a:83:bb:61:25:56:a0:3a:62:8b:66:eb: 94:f0:b8:30:e7:40:0c:13:01:2f:dd:a7:03:fe:a0: 9b:ab:22:31:da:a0:e6:b1:9d:62:4f:57:10:b6:0a: 93:a9:36:ed:67:7d:04:45:b8:9f:62:8a:61:1d:64: 57:51:ec:b3:d4:3d:2a:b4:29:ae:39:38:af:d1:9f: 26:28:f4:d5:fb:90:33:83:7d:28:33:c5:9c:f6:f3: f8:20:20:cd:77:2c:0f:b8:b2:4c:52:d6:75:26:45: b0:2f:f2:7e:8b:44:f4:bb:9f:46:27:bc:8b:87:e9: 44:59:d4:9a:47:2c:fc:a8:36:60:c5:cb:35:0a:e7: 89:d0:57:47:2b:35:07:c7:0d:82:e1:e6:e3:52:65: d0:5c:83:eb:a9:eb:11:17:a9:22:20:ad:4e:bf:bb: 66:4d:9a:c4:70:95:2a:eb:30:c5:c9:7c:f6:75:fa: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:A7:E2:05:2E:AC:31:7B:A7:B6:1C:DD:90:10:41:6F:79:9C:2E X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a9:ab:94:f7:c5:ff:d0:81:f8:02:fb:0d:da:80:a1:fb:09: a2:87:6f:f6:28:98:91:79:8d:f0:ae:b0:aa:7a:c3:6a:13:b4: 09:24:9d:76:04:6e:8f:b2:fb:b9:2c:2e:1e:86:c3:88:2b:25: e6:dd:4a:ea:14:d7:03:3a:d6:4b:57:c9:ad:28:a9:a0:a2:25: c8:14:ca:63:22:30:dd:b7:98:00:11:85:a7:1a:1e:ae:d1:99: ef:44:bc:77:0c:96:e0:12:4a:0c:1a:43:78:90:55:d8:ad:b9: 0f:df:46:2d:a5:6b:ac:f7:97:3f:81:17:e3:e4:1a:d4:bf:43: 49:86:e8:e8:22:70:98:99:75:46:41:61:82:1c:d0:0c:72:52: 58:02:0a:0d:7d:6b:3b:4a:4a:0c:66:b0:93:b7:95:d2:5c:78: 00:dd:5c:7e:f8:b8:e5:72:a0:16:be:84:b7:82:b4:8a:e3:b8: e0:bc:34:4f:40:49:15:e7:53:f1:81:52:12:12:fe:4c:81:2e: ff:87:83:f1:94:a0:04:9e:45:fe:db:2b:d2:b6:2c:23:35:8a: 02:24:7e:6e:6d:2a:5b:c3:2c:d2:37:fc:5f:66:2a:b1:98:98: 8f:7c:3a:40:60:c8:01:82:d0:00:85:9c:e3:23:5a:a7:21:a4: c8:2d:c4:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTj26+IoQWR499KanK+94Ty068c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNjAzMDEwNDU2NTdaFw0yNjAzMDQxMjQ0NTdaMDMxMTAvBgNV BAMTKEREQTFBN0UyMDUyRUFDMzE3QkE3QjYxQ0REOTAxMDQxNkY3OTlDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhl514fn5bRDV8KYCPuVdP0mF fbGqQf+lzLpH3LtdKJH3GP97DqmSYkqcwcAkbCtpm3yicFaj7Qd1IlGzNc7LTMDi 2SGallusHNZDLgqDu2ElVqA6Yotm65TwuDDnQAwTAS/dpwP+oJurIjHaoOaxnWJP VxC2CpOpNu1nfQRFuJ9iimEdZFdR7LPUPSq0Ka45OK/RnyYo9NX7kDODfSgzxZz2 8/ggIM13LA+4skxS1nUmRbAv8n6LRPS7n0YnvIuH6URZ1JpHLPyoNmDFyzUK54nQ V0crNQfHDYLh5uNSZdBcg+up6xEXqSIgrU6/u2ZNmsRwlSrrMMXJfPZ1+ioPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3aGn4gUurDF7p7Yc3ZAQQW95nC4wHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJapq5T3xf/QgfgC+w3agKH7CaKHb/YomJF5 jfCusKp6w2oTtAkknXYEbo+y+7ksLh6Gw4grJebdSuoU1wM61ktXya0oqaCiJcgU ymMiMN23mAARhacaHq7Rme9EvHcMluASSgwaQ3iQVdituQ/fRi2la6z3lz+BF+Pk GtS/Q0mG6OgicJiZdUZBYYIc0AxyUlgCCg19aztKSgxmsJO3ldJceADdXH74uOVy oBa+hLeCtIrjuOC8NE9ASRXnU/GBUhIS/kyBLv+Hg/GUoASeRf7bK9K2LCM1igIk fm5tKlvDLNI3/F9mKrGYmI98OkBgyAGC0ACFnOMjWqchpMgtxCU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:51 2026 by rpki-client