$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: QxxCAMkbse+N2bx3x+1n7XrguAXwl0EzZk39G8YszVM= Subject key identifier: D1:58:C3:30:A9:11:AA:18:B8:F4:AB:CD:C0:DE:97:FE:FF:93:26:36 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 49B250F267A5916FE88A5DEDC08B7DBBB30B1FA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 0262 Signing time: Sat 28 Feb 2026 17:52:11 +0000 Manifest this update: Sat 28 Feb 2026 17:47:11 +0000 Manifest next update: Wed 04 Mar 2026 01:34:11 +0000 Files and hashes: 1: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: THW+KsnIFr8UqOWcuLwCa3iaD6mWsYL7ctnju/3oc5M=) 2: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: xQDobBUWeU1Hu6QGna8EC5Z5unLxEbqVdGU1COX+/Xs=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: HjBdGNd6Sc51PWTKEOwMChS3N3Sgma2LZbJnM7rQl44=) 4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: jGSXnam6DTjQTk2NoKq9v4pdRtdWmDLD2M+pWYJ1VAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b2:50:f2:67:a5:91:6f:e8:8a:5d:ed:c0:8b:7d:bb:b3:0b:1f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Feb 28 17:47:11 2026 GMT Not After : Mar 4 01:34:11 2026 GMT Subject: CN=D158C330A911AA18B8F4ABCDC0DE97FEFF932636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:70:8f:fa:71:ef:1e:db:65:9e:02:ba:b6:03: 1b:d4:2c:73:bd:2f:9e:7e:4f:1e:d0:6f:31:47:dc: aa:a8:04:c3:ad:90:2d:62:d7:0f:a7:e0:1e:e3:75: c2:cb:6e:8f:da:40:a0:99:54:60:b7:d6:99:1f:2e: 10:31:5e:a9:5e:88:56:78:64:3f:42:26:68:33:f4: 00:a1:16:8b:e9:8f:cb:88:97:f7:20:67:95:04:bb: 2b:64:bc:e6:4a:3b:70:a8:5b:b2:1b:1b:28:b9:1f: 8e:db:c1:b2:c2:dd:9e:3e:07:bd:89:8f:74:10:04: cc:09:ed:3a:69:1f:f1:73:c2:b5:ba:be:bf:05:85: 86:6b:e2:4e:06:d1:6f:a1:1d:74:56:01:f4:49:c6: 33:a5:0b:c7:07:10:0a:5e:ca:ab:8f:46:d6:3f:3d: 76:e2:55:7a:e2:92:e1:16:bc:3e:0d:40:bb:3e:f0: 6f:d8:8d:4d:d2:bb:a4:50:c9:a0:97:07:20:98:a2: 55:6f:a3:eb:aa:6c:b2:ca:2a:8e:c3:b3:ba:33:33: e3:62:5c:12:ae:c1:5f:99:31:af:21:da:13:9e:50: 1f:88:a5:9f:7f:5c:34:2b:38:20:4e:0c:81:22:b4: d3:69:f8:86:6b:43:00:ff:f6:62:a7:2f:82:29:a6: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:C3:30:A9:11:AA:18:B8:F4:AB:CD:C0:DE:97:FE:FF:93:26:36 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:78:c3:2d:fd:27:e7:72:ae:6a:32:e2:5c:e5:69:46:d3:ff: ca:ab:5e:22:10:3d:b6:c2:fd:07:fc:6c:a3:77:82:dc:48:4f: 51:93:5d:f4:72:19:c2:3f:29:07:39:4a:8d:52:64:c6:6c:9f: 1c:5b:d8:c0:c4:43:d3:a4:a6:50:4f:0e:03:92:d2:a8:d4:af: e6:af:56:74:40:43:71:ce:32:b2:a6:9a:37:35:f9:19:0a:a8: 57:3c:f6:e8:50:34:af:5e:1c:9f:c3:d7:1e:ed:5b:76:2a:ed: 2b:85:9e:c8:16:54:4e:5f:4c:b1:bb:7d:3c:d4:40:c5:aa:40: df:a2:73:04:6b:32:74:71:67:c8:c4:d9:52:d0:82:cc:9e:67: 7d:79:31:5b:dd:9e:01:59:17:cc:b2:9a:e2:cb:52:64:3f:45: b9:b9:28:97:93:ce:14:4a:80:fd:ca:e9:63:66:c7:98:e4:ee: 63:0f:01:71:bd:66:57:81:eb:a8:7f:ec:46:d5:42:ad:ce:dc: 54:9a:42:ee:47:1b:b5:a9:83:17:7a:ec:fc:73:9f:2d:a0:05: 71:c0:e9:f7:4e:22:cb:7b:9c:f5:c7:1f:cf:81:62:e2:69:74: 23:06:bb:3d:f9:09:cb:3f:36:35:af:ee:61:eb:8f:9d:90:f2: 50:2f:05:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbJQ8melkW/oil3twIt9u7MLH6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNjAyMjgxNzQ3MTFaFw0yNjAzMDQwMTM0MTFaMDMxMTAvBgNV BAMTKEQxNThDMzMwQTkxMUFBMThCOEY0QUJDREMwREU5N0ZFRkY5MzI2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1cI/6ce8e22WeArq2AxvULHO9 L55+Tx7QbzFH3KqoBMOtkC1i1w+n4B7jdcLLbo/aQKCZVGC31pkfLhAxXqleiFZ4 ZD9CJmgz9AChFovpj8uIl/cgZ5UEuytkvOZKO3CoW7IbGyi5H47bwbLC3Z4+B72J j3QQBMwJ7TppH/FzwrW6vr8FhYZr4k4G0W+hHXRWAfRJxjOlC8cHEApeyquPRtY/ PXbiVXrikuEWvD4NQLs+8G/YjU3Su6RQyaCXByCYolVvo+uqbLLKKo7Ds7ozM+Ni XBKuwV+ZMa8h2hOeUB+IpZ9/XDQrOCBODIEitNNp+IZrQwD/9mKnL4IppuGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0VjDMKkRqhi49KvNwN6X/v+TJjYwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADN4wy39J+dyrmoy4lzlaUbT/8qrXiIQPbbC /Qf8bKN3gtxIT1GTXfRyGcI/KQc5So1SZMZsnxxb2MDEQ9OkplBPDgOS0qjUr+av VnRAQ3HOMrKmmjc1+RkKqFc89uhQNK9eHJ/D1x7tW3Yq7SuFnsgWVE5fTLG7fTzU QMWqQN+icwRrMnRxZ8jE2VLQgsyeZ315MVvdngFZF8yymuLLUmQ/Rbm5KJeTzhRK gP3K6WNmx5jk7mMPAXG9ZleB66h/7EbVQq3O3FSaQu5HG7Wpgxd67Pxzny2gBXHA 6fdOIst7nPXHH8+BYuJpdCMGuz35Ccs/NjWv7mHrj52Q8lAvBeM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:40:48 2026 by rpki-client