$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: q7xcRqAbdVx+dDaMS8lX4U8Q0N4CNSVVBK2B/gjiNDA= Subject key identifier: C3:AA:C8:FD:97:8F:53:02:97:A4:A9:10:5B:E4:AB:E6:12:D1:C1:D5 Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 6643E3119FDC8096AAB147545A210CA0A35E53C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 020C Signing time: Mon 02 Mar 2026 10:11:37 +0000 Manifest this update: Mon 02 Mar 2026 10:06:37 +0000 Manifest next update: Thu 05 Mar 2026 19:21:37 +0000 Files and hashes: 1: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: RBCUyIlbR603FGNUA7MPR40dEaS/GrRPa9FLcaChdUY=) 2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: WbgcAemfUr/WaWV4NJzSBFx+o8EoJ/udbhhfWwBxR6I=) 3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: wXTznUQArBkuy9DW6FChuphpm7A6SXPjvzN1WzF38y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:43:e3:11:9f:dc:80:96:aa:b1:47:54:5a:21:0c:a0:a3:5e:53:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Mar 2 10:06:37 2026 GMT Not After : Mar 5 19:21:37 2026 GMT Subject: CN=C3AAC8FD978F530297A4A9105BE4ABE612D1C1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:c7:08:d1:5a:ea:57:64:b1:f6:2a:10:16: 26:c9:86:cb:f5:45:78:a2:e1:26:04:bf:78:65:55: 2a:b3:10:01:9b:5a:75:1c:22:de:82:65:7e:2c:81: 12:41:2f:b1:89:7e:c3:b9:e7:61:c3:06:39:47:73: 22:e4:e4:0c:76:66:fc:9b:eb:fd:35:dc:a6:03:16: 7a:26:36:2c:10:b0:22:e8:65:18:53:31:17:ab:b3: 71:03:72:c9:8a:ca:23:f7:d8:a7:36:49:5e:96:cd: ca:3a:8d:d6:46:80:1a:93:39:ac:9b:56:9d:ef:59: 3b:a7:1c:cb:1b:78:a1:d9:07:c0:77:7c:11:ec:ff: 62:c9:cd:96:f7:9e:a4:20:78:b0:a2:a2:10:96:1f: 42:e2:17:84:1f:38:32:ef:7d:e6:4c:90:3f:6c:c3: 52:20:f7:42:70:58:68:42:1e:81:15:b7:d3:4b:19: 19:33:a1:ea:8a:b1:ab:91:cd:33:50:5e:cd:66:75: 35:1d:ec:b6:76:81:aa:48:c9:7c:19:45:98:9f:6d: 55:a6:72:1e:e2:09:b4:a4:c7:a0:ca:30:fe:2d:c9: 16:4a:04:b4:2d:6c:f0:fc:ed:a8:06:4c:07:7f:c2: 91:63:07:e2:38:de:79:a1:67:23:d1:24:1a:83:8a: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:C8:FD:97:8F:53:02:97:A4:A9:10:5B:E4:AB:E6:12:D1:C1:D5 X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:10:44:e1:58:20:ba:e3:6e:0f:4b:f5:49:32:22:05:5e:94: 53:32:76:7f:be:8a:26:d6:4f:dc:79:ba:80:e0:45:a8:78:b0: d3:f4:a4:01:75:cd:65:6e:77:83:44:d4:21:47:f7:cc:58:e6: 9a:76:db:5e:ca:b0:42:0d:5a:27:af:eb:5c:07:95:c4:ac:f9: 7a:ef:74:8d:80:a4:65:0c:55:f1:41:f7:75:56:bf:db:e0:93: 6d:9b:17:86:f6:4f:4e:07:77:85:e8:e2:f2:2a:33:81:5d:be: 52:8f:41:47:f5:d3:43:f6:fe:5f:b0:62:d9:34:b2:2c:ac:fe: 91:79:4d:b7:ba:4f:d0:72:aa:9c:6b:9c:4c:34:76:94:81:23: a0:32:8e:de:34:fa:87:fe:d4:05:3c:37:76:58:22:fb:e1:78: b2:0c:8e:c7:55:0e:23:83:f4:1b:33:81:7f:40:2f:ed:fb:35: a1:b5:ed:00:c7:83:c2:b1:a5:f1:ca:99:f8:6d:84:f4:c4:1a: 9b:a4:d9:0c:ef:47:4e:72:c6:ab:55:ef:36:65:7f:a6:e2:b0: 3e:b8:24:7a:65:e0:d2:5a:61:bf:c9:d1:2a:b1:85:c7:2d:3e: f3:b8:ef:37:49:f1:10:0d:39:30:98:3e:ab:74:cd:a8:4f:71: 01:fc:99:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkPjEZ/cgJaqsUdUWiEMoKNeU8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNjAzMDIxMDA2MzdaFw0yNjAzMDUxOTIxMzdaMDMxMTAvBgNV BAMTKEMzQUFDOEZEOTc4RjUzMDI5N0E0QTkxMDVCRTRBQkU2MTJEMUMxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0ccI0VrqV2Sx9ioQFibJhsv1 RXii4SYEv3hlVSqzEAGbWnUcIt6CZX4sgRJBL7GJfsO552HDBjlHcyLk5Ax2Zvyb 6/013KYDFnomNiwQsCLoZRhTMRers3EDcsmKyiP32Kc2SV6Wzco6jdZGgBqTOayb Vp3vWTunHMsbeKHZB8B3fBHs/2LJzZb3nqQgeLCiohCWH0LiF4QfODLvfeZMkD9s w1Ig90JwWGhCHoEVt9NLGRkzoeqKsauRzTNQXs1mdTUd7LZ2gapIyXwZRZifbVWm ch7iCbSkx6DKMP4tyRZKBLQtbPD87agGTAd/wpFjB+I43nmhZyPRJBqDih/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw6rI/ZePUwKXpKkQW+Sr5hLRwdUwHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYQROFYILrjbg9L9UkyIgVelFMydn++iibW T9x5uoDgRah4sNP0pAF1zWVud4NE1CFH98xY5pp2217KsEINWiev61wHlcSs+Xrv dI2ApGUMVfFB93VWv9vgk22bF4b2T04Hd4Xo4vIqM4FdvlKPQUf100P2/l+wYtk0 siys/pF5Tbe6T9ByqpxrnEw0dpSBI6Ayjt40+of+1AU8N3ZYIvvheLIMjsdVDiOD 9BszgX9AL+37NaG17QDHg8KxpfHKmfhthPTEGpuk2QzvR05yxqtV7zZlf6bisD64 JHpl4NJaYb/J0SqxhcctPvO47zdJ8RANOTCYPqt0zahPcQH8mVw= -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:06 2026 by rpki-client