$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: iIEWDmP8NQ0zrt94H82Lfr3X/2pal5xPmVm4ydyZ6ME= Subject key identifier: 41:C7:97:84:8B:1E:66:C0:B1:C5:F8:1B:E9:14:A3:E6:67:AD:3A:BF Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 5C180F3ED6199E39F3B7A94D1FC221986CDCCF43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 016A Signing time: Sun 01 Mar 2026 07:31:56 +0000 Manifest this update: Sun 01 Mar 2026 07:26:56 +0000 Manifest next update: Wed 04 Mar 2026 09:55:56 +0000 Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=) 2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: 0iNeY33zk5u7ACtn1ZrmD99E4S/oIMtBWbNAl5KjVZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:18:0f:3e:d6:19:9e:39:f3:b7:a9:4d:1f:c2:21:98:6c:dc:cf:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Mar 1 07:26:56 2026 GMT Not After : Mar 4 09:55:56 2026 GMT Subject: CN=41C797848B1E66C0B1C5F81BE914A3E667AD3ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:0f:c5:86:1a:95:65:64:79:18:71:7b:ec: c9:78:f5:3f:a9:36:c4:08:e1:0d:7d:5e:f4:f8:f3: e6:68:23:2f:18:2e:7f:d0:83:49:74:6a:b5:a6:53: 11:e2:12:b4:06:50:7c:3d:cd:87:bc:d5:08:59:d2: 1d:ef:82:ba:45:af:fe:a9:bd:f3:e1:8c:36:21:25: 08:46:5d:30:ac:29:e2:39:60:b0:2c:09:cb:5b:1a: bd:92:1e:e8:46:4e:f2:e7:a0:31:25:69:07:2e:b1: 41:a2:4f:20:3e:b6:9d:ce:c8:19:c5:50:21:5e:87: a2:56:e8:a1:3c:60:7d:08:0a:4a:3e:d4:42:b0:77: 9c:14:46:b5:f7:3d:73:a5:9d:9d:6c:3b:47:80:b5: 31:d9:a7:f9:2a:ad:0c:40:d4:a3:5c:de:da:60:26: be:94:e9:da:8c:df:5f:2e:d9:54:aa:c8:0a:37:20: 29:bb:ed:2e:7f:8c:a4:9a:8e:09:a1:37:9e:32:eb: 39:33:c2:3d:14:c1:5e:29:ac:7c:74:61:f2:b5:7e: a6:e4:99:6d:84:6e:be:82:08:8e:3c:e8:a2:5d:67: f7:8e:6f:a3:0d:25:90:bb:db:57:7d:42:bf:94:58: 65:5a:be:88:8d:c6:eb:54:22:6a:26:84:f3:0e:59: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C7:97:84:8B:1E:66:C0:B1:C5:F8:1B:E9:14:A3:E6:67:AD:3A:BF X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:41:22:81:99:37:21:90:b0:43:c8:42:6d:c7:ca:f2:9f:03: aa:c1:4c:43:f6:1f:9a:8f:52:ad:4a:1f:72:5f:0d:28:fe:cc: a0:89:6e:78:c4:aa:aa:dd:50:9a:65:ad:71:75:99:c7:c2:89: 37:43:27:f2:f1:cc:f3:db:69:cb:39:f7:d0:2b:a3:a6:1b:95: 13:76:8c:4f:1d:90:73:7e:6d:4d:48:6b:71:30:99:56:e0:45: 9c:d2:f0:b4:8b:1c:cf:87:d6:36:71:a3:ba:b3:9a:28:c6:bc: 41:97:6a:be:02:1b:94:29:ab:08:d8:c2:2c:96:c4:ae:75:71: b4:92:99:2d:c9:8c:9e:58:be:29:d9:21:f3:01:8b:31:05:58: ab:bf:7a:10:3a:7b:f0:0b:8c:34:0b:9e:f8:13:e4:29:36:77: 1f:be:7f:54:07:3b:e9:22:75:e3:ba:08:fb:50:df:7c:28:c9: 71:72:6d:59:f7:21:e4:4b:62:69:b0:80:15:1a:64:f3:8a:dc: a9:90:4c:52:56:de:8e:43:07:1e:a1:85:97:e9:95:36:56:3e: 71:1f:76:08:f4:39:78:2c:0e:8a:ea:8f:13:30:f6:8f:a1:8d: 6c:a2:f6:ea:06:31:c5:3f:20:cc:0e:56:95:a9:5b:ae:45:7e: eb:e4:60:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBgPPtYZnjnzt6lNH8IhmGzcz0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNjAzMDEwNzI2NTZaFw0yNjAzMDQwOTU1NTZaMDMxMTAvBgNV BAMTKDQxQzc5Nzg0OEIxRTY2QzBCMUM1RjgxQkU5MTRBM0U2NjdBRDNBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Lw/FhhqVZWR5GHF77Ml49T+p NsQI4Q19XvT48+ZoIy8YLn/Qg0l0arWmUxHiErQGUHw9zYe81QhZ0h3vgrpFr/6p vfPhjDYhJQhGXTCsKeI5YLAsCctbGr2SHuhGTvLnoDElaQcusUGiTyA+tp3OyBnF UCFeh6JW6KE8YH0ICko+1EKwd5wURrX3PXOlnZ1sO0eAtTHZp/kqrQxA1KNc3tpg Jr6U6dqM318u2VSqyAo3ICm77S5/jKSajgmhN54y6zkzwj0UwV4prHx0YfK1fqbk mW2Ebr6CCI486KJdZ/eOb6MNJZC721d9Qr+UWGVavoiNxutUImomhPMOWfhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQceXhIseZsCxxfgb6RSj5metOr8wHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJBIoGZNyGQsEPIQm3HyvKfA6rBTEP2H5qP Uq1KH3JfDSj+zKCJbnjEqqrdUJplrXF1mcfCiTdDJ/LxzPPbacs599Aro6YblRN2 jE8dkHN+bU1Ia3EwmVbgRZzS8LSLHM+H1jZxo7qzmijGvEGXar4CG5QpqwjYwiyW xK51cbSSmS3JjJ5YvinZIfMBizEFWKu/ehA6e/ALjDQLnvgT5Ck2dx++f1QHO+ki deO6CPtQ33woyXFybVn3IeRLYmmwgBUaZPOK3KmQTFJW3o5DBx6hhZfplTZWPnEf dgj0OXgsDorqjxMw9o+hjWyi9uoGMcU/IMwOVpWpW65FfuvkYJ4= -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:07 2026 by rpki-client