$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: fT4uAiYE5g036tbPk9zmLJsehITcgo/zNMCZZWiPoB4= Subject key identifier: EA:B3:AA:A3:15:CA:47:75:80:B1:BC:72:77:4E:26:14:B7:95:89:F0 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 092F3C9F6D7B353164F9410FFCF207FA7CF71498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 02:21:06 +0000 Manifest this update: Sun 01 Mar 2026 02:16:06 +0000 Manifest next update: Wed 04 Mar 2026 07:53:06 +0000 Files and hashes: 1: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: HgcFpkA8tbJ/UJxu/2QI9fE2Vy1q/OVTxvw4wqGJpXU=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2f:3c:9f:6d:7b:35:31:64:f9:41:0f:fc:f2:07:fa:7c:f7:14:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Mar 1 02:16:06 2026 GMT Not After : Mar 4 07:53:06 2026 GMT Subject: CN=EAB3AAA315CA477580B1BC72774E2614B79589F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:74:0e:b0:71:ea:39:ba:d2:2b:55:f1:24: 83:df:26:86:4d:0a:90:44:dd:1f:db:3b:29:de:71: ae:dc:de:1a:e7:e7:7e:31:94:c3:5e:cb:16:a4:fc: d5:c9:63:bc:e7:57:27:3f:7c:e9:9d:19:ec:0c:9e: b2:52:3d:2c:14:81:cf:f7:12:94:3d:dd:aa:0f:d5: 0d:8c:1a:36:6e:28:40:c4:ff:1c:18:45:cd:46:9c: 26:40:13:66:68:2c:16:89:1f:c1:11:55:bf:2e:b2: f6:6b:0d:09:22:e9:3f:3f:40:dd:81:ee:2c:cc:8c: ed:73:df:fb:66:d0:12:77:b9:dc:bf:96:ae:9b:ad: f1:17:5b:88:8b:22:3f:d2:11:2e:08:37:3e:88:e7: 51:e1:52:14:fa:ec:2c:9d:ce:7f:05:69:91:34:69: 0f:6b:06:15:29:e2:ed:d3:79:c4:33:72:41:1d:54: ff:7e:09:91:97:b8:05:d8:1f:60:e6:7f:4b:ad:75: 46:dd:5f:45:0e:29:79:ec:4c:31:3b:ad:7d:b1:68: 08:04:c7:39:72:28:40:40:32:e8:c7:d9:d1:84:90: 9e:21:aa:26:d2:53:65:76:77:50:ec:51:96:45:fc: 02:9b:ce:af:65:50:a1:04:b1:6a:03:a8:37:e3:79: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:AA:A3:15:CA:47:75:80:B1:BC:72:77:4E:26:14:B7:95:89:F0 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:d9:ce:ca:b5:ad:2f:3e:92:d3:ec:b6:7b:b2:e7:af:3f: 2d:d6:c4:fb:09:4f:2e:6b:04:a4:7f:d9:6b:d8:ea:4e:ec:6f: 30:5e:34:a1:cf:e5:67:03:c8:8f:cb:28:85:2f:e6:39:ad:c3: cf:f4:92:bc:97:d7:f8:35:15:9e:33:aa:4f:de:c5:40:1c:4b: 1b:09:d3:53:ce:30:ac:2d:cb:fd:2c:0a:78:80:62:67:9e:57: 6d:d2:29:3c:d0:8b:d4:bb:ea:22:e7:bb:71:08:b7:06:c3:bd: 66:64:30:d1:65:20:5c:60:64:43:1c:05:99:16:1e:b3:30:02: 6b:34:38:c0:f8:e6:d5:8e:b0:f2:ff:8f:fa:76:c7:13:17:f5: 36:cd:0a:3a:a6:03:bb:2e:0e:ee:00:d2:50:0a:a0:f5:2d:d1: 53:7c:e2:ad:79:5b:5e:91:4a:64:a5:ee:88:0d:f2:aa:ee:3f: 1f:d1:0f:1a:03:2d:85:1d:cb:b7:22:25:e6:97:74:77:12:ba: 19:8a:b2:1a:40:55:44:e1:3b:92:c0:bb:10:3e:48:c3:8b:5d: 7c:1f:85:2e:52:ef:47:57:1f:ae:7b:93:aa:b6:3f:cb:2a:7b: b4:de:07:b2:18:0c:b6:9d:0e:fc:99:7a:0c:af:46:bb:9c:c2: a2:b2:35:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCS88n217NTFk+UEP/PIH+nz3FJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNjAzMDEwMjE2MDZaFw0yNjAzMDQwNzUzMDZaMDMxMTAvBgNV BAMTKEVBQjNBQUEzMTVDQTQ3NzU4MEIxQkM3Mjc3NEUyNjE0Qjc5NTg5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJHQOsHHqObrSK1XxJIPfJoZN CpBE3R/bOyneca7c3hrn534xlMNeyxak/NXJY7znVyc/fOmdGewMnrJSPSwUgc/3 EpQ93aoP1Q2MGjZuKEDE/xwYRc1GnCZAE2ZoLBaJH8ERVb8usvZrDQki6T8/QN2B 7izMjO1z3/tm0BJ3udy/lq6brfEXW4iLIj/SES4INz6I51HhUhT67Cydzn8FaZE0 aQ9rBhUp4u3TecQzckEdVP9+CZGXuAXYH2Dmf0utdUbdX0UOKXnsTDE7rX2xaAgE xzlyKEBAMujH2dGEkJ4hqibSU2V2d1DsUZZF/AKbzq9lUKEEsWoDqDfjeZ1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6rOqoxXKR3WAsbxyd04mFLeVifAwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9S2c7Kta0vPpLT7LZ7suevPy3WxPsJTy5r BKR/2WvY6k7sbzBeNKHP5WcDyI/LKIUv5jmtw8/0kryX1/g1FZ4zqk/exUAcSxsJ 01POMKwty/0sCniAYmeeV23SKTzQi9S76iLnu3EItwbDvWZkMNFlIFxgZEMcBZkW HrMwAms0OMD45tWOsPL/j/p2xxMX9TbNCjqmA7suDu4A0lAKoPUt0VN84q15W16R SmSl7ogN8qruPx/RDxoDLYUdy7ciJeaXdHcSuhmKshpAVUThO5LAuxA+SMOLXXwf hS5S70dXH657k6q2P8sqe7TeB7IYDLadDvyZegyvRrucwqKyNe0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:55 2026 by rpki-client