$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: KEf8CDxf60suoTFEU8UWcQxGrksn/oqirHoY02gCFaY= Subject key identifier: 6E:24:A3:30:A2:DE:34:8D:06:55:BA:D7:04:08:F3:8B:6D:E8:DB:0F Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 7D54B7520CDC2C7E2296AE29323C8C79DFF76F7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 0254 Signing time: Mon 02 Mar 2026 00:31:02 +0000 Manifest this update: Mon 02 Mar 2026 00:26:01 +0000 Manifest next update: Thu 05 Mar 2026 05:53:01 +0000 Files and hashes: 1: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: le0R6n1HrJgCczZCsVImem7/vAAIjoYQGoQqzSH8bm4=) 2: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:54:b7:52:0c:dc:2c:7e:22:96:ae:29:32:3c:8c:79:df:f7:6f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Mar 2 00:26:01 2026 GMT Not After : Mar 5 05:53:01 2026 GMT Subject: CN=6E24A330A2DE348D0655BAD70408F38B6DE8DB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:f2:13:cb:05:95:e8:34:7e:c1:76:05:61: 7e:c7:e0:d5:e7:b1:c9:14:67:60:69:cc:06:9f:e5: 57:f3:4c:40:0b:ac:e1:2a:5f:5d:69:fb:19:9b:7e: ee:b6:b2:1d:3c:2d:09:93:91:2e:ae:a9:be:37:0a: 9e:f1:c3:54:bc:97:f9:5c:f5:e4:43:fe:69:92:ed: 1a:94:37:be:a2:19:2a:9a:86:36:52:e8:89:75:a0: 8b:c2:00:76:ec:f7:bf:ab:b8:15:d7:cd:fd:86:67: a6:74:88:20:5d:1d:e2:2d:3b:d4:73:33:ca:83:e4: 17:d8:85:60:66:ec:08:8c:cc:8c:c8:32:5e:72:49: ec:e3:f3:fe:ca:6f:dd:b9:89:ba:38:6c:6c:4b:0c: 98:a3:12:c2:d0:93:a6:27:b0:62:81:59:30:18:a7: 30:d7:3a:24:17:9a:96:73:ad:5f:0b:68:b8:9f:9a: 74:7f:ca:ef:0b:ec:3b:83:b1:d6:50:c2:2a:9a:6b: e9:a1:33:2d:2c:03:79:fd:6e:86:0c:93:bf:b5:88: 11:26:92:bc:d9:97:44:9a:72:d8:58:fa:25:26:9d: 97:56:17:b8:19:b5:2f:66:71:a6:66:9c:1a:ea:fb: e1:9e:b4:64:23:fd:c1:0f:cb:c4:86:de:4a:d8:3d: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:24:A3:30:A2:DE:34:8D:06:55:BA:D7:04:08:F3:8B:6D:E8:DB:0F X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c9:96:14:70:3d:c4:46:2c:79:1b:3f:15:0a:c6:57:42:15: 99:1a:85:a9:fb:a5:d8:96:45:92:3c:82:95:18:c9:39:51:be: 30:1f:a2:0a:0d:fb:bb:1d:ba:96:7c:1d:01:2d:36:f1:2c:4b: 09:a8:60:e8:18:87:07:27:b4:fa:e2:92:73:f6:41:a9:31:32: 8b:21:a4:ae:a6:3c:52:78:51:11:33:b3:83:ac:b3:8a:8d:65: 6b:43:dd:60:bd:88:97:b3:b7:36:e9:f7:4c:4b:83:d8:f2:87: 0e:1c:62:f0:56:1d:0a:19:ef:26:4c:99:0e:1a:68:ed:39:a1: 5c:d7:77:ea:0a:dc:6e:f4:07:56:6f:72:cf:e7:b9:b4:ef:6e: 0e:e8:5a:41:99:42:b5:62:63:bc:74:b2:9e:52:5c:2c:f6:77: f0:4d:6c:26:f4:b3:81:fa:ae:ff:13:36:48:31:31:6e:40:8a: fb:b4:96:08:9b:cb:af:1a:52:75:65:bd:16:41:7a:a3:68:4d: f7:0a:9b:0e:e8:8b:3c:f7:8c:18:fc:9d:0d:b6:8a:8f:91:6b: bc:be:46:96:4b:9c:75:c2:ed:c2:56:5c:ba:ba:6b:8f:cb:2c: e8:ea:c2:56:c3:05:42:a8:b4:e0:8b:e9:26:21:90:4e:95:ba: 6b:9a:d0:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVS3UgzcLH4ilq4pMjyMed/3b3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNjAzMDIwMDI2MDFaFw0yNjAzMDUwNTUzMDFaMDMxMTAvBgNV BAMTKDZFMjRBMzMwQTJERTM0OEQwNjU1QkFENzA0MDhGMzhCNkRFOERCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3N/ITywWV6DR+wXYFYX7H4NXn sckUZ2BpzAaf5VfzTEALrOEqX11p+xmbfu62sh08LQmTkS6uqb43Cp7xw1S8l/lc 9eRD/mmS7RqUN76iGSqahjZS6Il1oIvCAHbs97+ruBXXzf2GZ6Z0iCBdHeItO9Rz M8qD5BfYhWBm7AiMzIzIMl5ySezj8/7Kb925ibo4bGxLDJijEsLQk6YnsGKBWTAY pzDXOiQXmpZzrV8LaLifmnR/yu8L7DuDsdZQwiqaa+mhMy0sA3n9boYMk7+1iBEm krzZl0SacthY+iUmnZdWF7gZtS9mcaZmnBrq++GetGQj/cEPy8SG3krYPXyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbiSjMKLeNI0GVbrXBAjzi23o2w8wHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzJlhRwPcRGLHkbPxUKxldCFZkahan7pdiW RZI8gpUYyTlRvjAfogoN+7sdupZ8HQEtNvEsSwmoYOgYhwcntPriknP2QakxMosh pK6mPFJ4UREzs4Oss4qNZWtD3WC9iJeztzbp90xLg9jyhw4cYvBWHQoZ7yZMmQ4a aO05oVzXd+oK3G70B1Zvcs/nubTvbg7oWkGZQrViY7x0sp5SXCz2d/BNbCb0s4H6 rv8TNkgxMW5Aivu0lgiby68aUnVlvRZBeqNoTfcKmw7oizz3jBj8nQ22io+Ra7y+ RpZLnHXC7cJWXLq6a4/LLOjqwlbDBUKotOCL6SYhkE6Vumua0F8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:07 2026 by rpki-client