$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: gTTAWoV1uPZ92HjKawutOL8LXu0FAKhsBL2APj52LZ4= Subject key identifier: 52:91:E5:99:1E:4B:7C:81:80:F2:FF:57:E6:EC:3A:D3:9C:80:FD:7C Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 5E2AA1C4F6488F70EC69B763206717A1DC72BA98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 015E Signing time: Sun 01 Mar 2026 20:50:00 +0000 Manifest this update: Sun 01 Mar 2026 20:45:00 +0000 Manifest next update: Thu 05 Mar 2026 03:07:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: QMWYxtiLaHHXqUmqjua261eOL2NmY9UPR7GmJyOn/MU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2a:a1:c4:f6:48:8f:70:ec:69:b7:63:20:67:17:a1:dc:72:ba:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Mar 1 20:45:00 2026 GMT Not After : Mar 5 03:07:00 2026 GMT Subject: CN=5291E5991E4B7C8180F2FF57E6EC3AD39C80FD7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:e1:3f:37:d7:d3:41:50:37:dd:fb:5a:39: 67:4a:d0:08:95:96:63:b5:33:11:06:23:6c:fe:8f: 48:5a:49:76:6f:a8:c3:1b:65:75:80:7c:3d:01:8b: 2e:c5:11:7a:c8:4f:9b:30:c5:f2:bc:ed:95:fb:44: bd:b1:3e:e7:d5:1c:48:7f:16:3b:4e:0f:d6:d7:ab: 09:50:0f:de:06:75:be:74:19:c5:fe:fa:a3:0b:80: 5c:2f:30:e9:2f:06:ac:6e:fb:d2:96:66:76:72:0f: 85:2e:f3:6d:9e:12:1f:d8:ae:33:57:45:16:4b:67: c8:8b:ae:32:4b:36:6b:71:f3:53:e2:8e:2a:b1:3c: c8:75:1d:cd:06:6b:d4:67:34:85:4e:d1:53:1e:b9: 1a:67:8e:6e:a6:71:94:98:bf:1f:72:73:fa:1d:ac: 89:59:55:00:dc:84:9c:a4:4c:18:6c:89:b9:d6:43: 10:88:4a:b3:0d:7b:3d:f4:be:55:20:3e:6e:d0:ef: c5:02:9a:65:b9:ea:46:5a:f5:bf:85:9b:a9:28:6f: 2f:33:7a:76:51:c2:04:81:a9:fa:ad:3f:cf:5d:8e: 7f:ac:1e:40:87:14:aa:b6:b0:c8:8d:ad:0d:ff:ab: c8:8a:f0:31:64:03:bd:4d:1a:4d:68:d8:16:35:89: 70:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:91:E5:99:1E:4B:7C:81:80:F2:FF:57:E6:EC:3A:D3:9C:80:FD:7C X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6f:70:46:84:b9:a2:3c:39:6b:5a:75:ea:ac:25:c9:8c:bd: e2:ac:12:9c:dc:7e:1d:99:ab:8f:76:18:a5:fa:17:7a:e0:21: d8:85:41:b2:86:ab:f4:31:31:83:a8:c7:1a:a2:5c:58:0e:2d: 00:3b:cd:9c:47:e4:92:32:08:c0:c1:ab:14:71:a7:c6:73:8c: 63:f3:fc:7b:7a:e1:72:70:69:fe:aa:9f:22:64:eb:c3:06:f5: 5d:f1:34:20:7a:af:4a:1a:74:ad:eb:1b:fa:c2:76:69:c0:05: 6c:52:9d:27:13:8b:c2:97:6d:31:c6:84:9a:d0:3a:ae:2c:91: cf:38:f4:54:48:4f:5c:a8:d0:ca:79:15:6b:69:14:2b:d8:d1: 66:8f:46:5f:20:16:7a:2b:e9:db:ce:df:b9:a0:82:43:52:ae: 94:57:d8:51:c9:30:46:fc:32:a5:7f:26:b6:15:50:64:ad:88: 92:fe:39:86:12:c7:ab:d2:05:6c:ed:c5:bf:ed:10:67:65:40: 5a:e2:bd:75:81:ff:75:7a:4a:7e:29:4a:3d:72:d8:a8:1c:c3: 8c:71:62:ff:54:3c:88:7e:03:de:33:3e:e1:50:68:16:4e:2c: 3d:cb:c0:3c:07:04:d1:3b:f5:bf:1b:2b:3d:0e:f5:d1:10:78: d2:4a:8c:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXiqhxPZIj3DsabdjIGcXodxyupgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNjAzMDEyMDQ1MDBaFw0yNjAzMDUwMzA3MDBaMDMxMTAvBgNV BAMTKDUyOTFFNTk5MUU0QjdDODE4MEYyRkY1N0U2RUMzQUQzOUM4MEZEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LuE/N9fTQVA33ftaOWdK0AiV lmO1MxEGI2z+j0haSXZvqMMbZXWAfD0Biy7FEXrIT5swxfK87ZX7RL2xPufVHEh/ FjtOD9bXqwlQD94Gdb50GcX++qMLgFwvMOkvBqxu+9KWZnZyD4Uu822eEh/YrjNX RRZLZ8iLrjJLNmtx81PijiqxPMh1Hc0Ga9RnNIVO0VMeuRpnjm6mcZSYvx9yc/od rIlZVQDchJykTBhsibnWQxCISrMNez30vlUgPm7Q78UCmmW56kZa9b+Fm6koby8z enZRwgSBqfqtP89djn+sHkCHFKq2sMiNrQ3/q8iK8DFkA71NGk1o2BY1iXB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpHlmR5LfIGA8v9X5uw605yA/XwwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVvcEaEuaI8OWtadeqsJcmMveKsEpzcfh2Z q492GKX6F3rgIdiFQbKGq/QxMYOoxxqiXFgOLQA7zZxH5JIyCMDBqxRxp8ZzjGPz /Ht64XJwaf6qnyJk68MG9V3xNCB6r0oadK3rG/rCdmnABWxSnScTi8KXbTHGhJrQ Oq4skc849FRIT1yo0Mp5FWtpFCvY0WaPRl8gFnor6dvO37mggkNSrpRX2FHJMEb8 MqV/JrYVUGStiJL+OYYSx6vSBWztxb/tEGdlQFrivXWB/3V6Sn4pSj1y2Kgcw4xx Yv9UPIh+A94zPuFQaBZOLD3LwDwHBNE79b8bKz0O9dEQeNJKjGo= -----END CERTIFICATE-----Generated at Mon Mar 2 13:52:40 2026 by rpki-client