$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: kqbE4hRgX3Tyh4D6Kf2/fHGluBV5Y7+m5YRTsn1Cj+I= Subject key identifier: 03:BF:EA:AA:B8:B4:0F:0A:90:24:9F:4C:49:35:CD:23:D6:C6:06:18 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 2224CB6D70882D024A96C0ABFA0157DB92A73B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 0110 Signing time: Wed 18 Mar 2026 14:20:58 +0000 Manifest this update: Wed 18 Mar 2026 14:15:58 +0000 Manifest next update: Sat 21 Mar 2026 16:35:58 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: ey/IHS6r0uBp3NxeFSQuNvhMOZ2DWhEQ22OkPZTsDs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 16:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:24:cb:6d:70:88:2d:02:4a:96:c0:ab:fa:01:57:db:92:a7:3b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Mar 18 14:15:58 2026 GMT Not After : Mar 21 16:35:58 2026 GMT Subject: CN=03BFEAAAB8B40F0A90249F4C4935CD23D6C60618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:ab:b3:b6:d0:5b:b0:9e:d0:f9:17:04:70: 25:91:af:4d:78:58:cf:b7:05:0a:82:e9:fe:98:9e: 3b:c7:4f:1e:5b:17:a9:f5:28:f3:42:be:f6:c0:7d: d5:85:66:a7:5d:5a:fa:07:93:3c:d8:b9:e1:f3:16: 48:c5:ec:25:58:2d:b5:f9:ea:31:60:79:d5:d8:57: 46:a1:d0:31:43:53:4c:c1:4c:65:d3:b8:08:77:da: ab:6d:7f:b1:51:af:c3:28:f9:62:c6:20:3d:d3:37: 20:75:16:f1:7b:bf:40:d3:fb:de:19:12:66:fb:07: 1c:ac:11:74:e3:6b:2a:15:42:83:8f:c2:d6:98:96: 44:4d:0f:e6:83:25:a9:ad:51:f2:46:50:a1:e5:84: 76:8c:a8:42:61:84:e8:f7:0b:49:60:4d:d7:0c:ed: 11:e9:ee:40:4e:8a:4a:6f:ca:2a:4d:0c:03:92:20: 73:3e:92:21:10:f5:b9:2a:fe:6d:10:7f:5d:73:b1: 5a:05:ff:18:67:1e:55:01:ff:43:fe:58:1d:92:a5: 87:20:0d:1b:7e:77:38:f7:e0:66:47:aa:15:9a:26: 4a:5e:d4:db:54:b4:75:8d:d7:7e:40:4a:1c:33:93: d7:48:ac:98:58:93:8b:66:66:ef:90:86:18:c3:80: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BF:EA:AA:B8:B4:0F:0A:90:24:9F:4C:49:35:CD:23:D6:C6:06:18 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:38:bb:bb:61:2d:90:a8:93:a2:d2:a7:15:6a:fa:d2:7d:21: ee:1e:6c:3a:35:9b:eb:93:3f:fe:7b:81:44:7f:b7:94:f8:2b: 1e:fa:76:c1:84:f4:e1:f3:d1:1b:2b:ae:bb:50:39:0f:f3:b2: bf:cf:7b:1c:c1:a7:a7:bd:5d:c0:3d:8f:81:d5:a8:ea:5f:9d: 6a:5e:88:a7:c9:a1:1a:f1:17:e0:2b:2f:ec:e1:ad:ab:01:b7: e4:57:c2:28:12:9a:c1:f2:71:93:39:dd:37:ba:17:89:98:1c: f9:c5:5b:7a:49:24:ad:ac:3c:95:94:82:5f:f3:3c:7f:4b:e3: fc:28:e1:b6:0b:73:71:96:cb:e1:b9:e7:01:b2:b6:98:78:7f: b1:a1:46:c1:68:f7:4f:ca:d8:6a:d8:f7:07:df:c2:61:f6:cd: 13:f4:f8:c2:16:20:66:2f:7b:8b:6f:0b:f3:ee:e6:0c:2e:f1: e1:7c:d7:41:be:88:77:ce:99:1c:9f:82:ce:94:d9:1b:dd:fe: 28:b9:21:cb:3d:08:f1:6d:c0:1f:fa:ee:98:00:e5:4f:25:2f: ee:71:2a:f1:90:b8:8b:02:62:b2:e0:8d:49:30:cf:fe:20:ee: f6:a9:08:c3:50:76:da:ac:58:d9:d2:f2:26:4a:d1:71:83:9e: f2:d8:f1:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiTLbXCILQJKlsCr+gFX25KnOxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNjAzMTgxNDE1NThaFw0yNjAzMjExNjM1NThaMDMxMTAvBgNV BAMTKDAzQkZFQUFBQjhCNDBGMEE5MDI0OUY0QzQ5MzVDRDIzRDZDNjA2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhKuzttBbsJ7Q+RcEcCWRr014 WM+3BQqC6f6YnjvHTx5bF6n1KPNCvvbAfdWFZqddWvoHkzzYueHzFkjF7CVYLbX5 6jFgedXYV0ah0DFDU0zBTGXTuAh32qttf7FRr8Mo+WLGID3TNyB1FvF7v0DT+94Z Emb7BxysEXTjayoVQoOPwtaYlkRND+aDJamtUfJGUKHlhHaMqEJhhOj3C0lgTdcM 7RHp7kBOikpvyipNDAOSIHM+kiEQ9bkq/m0Qf11zsVoF/xhnHlUB/0P+WB2SpYcg DRt+dzj34GZHqhWaJkpe1NtUtHWN135AShwzk9dIrJhYk4tmZu+QhhjDgNa3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7/qqri0DwqQJJ9MSTXNI9bGBhgwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg4u7thLZCok6LSpxVq+tJ9Ie4ebDo1m+uT P/57gUR/t5T4Kx76dsGE9OHz0RsrrrtQOQ/zsr/PexzBp6e9XcA9j4HVqOpfnWpe iKfJoRrxF+ArL+zhrasBt+RXwigSmsHycZM53Te6F4mYHPnFW3pJJK2sPJWUgl/z PH9L4/wo4bYLc3GWy+G55wGytph4f7GhRsFo90/K2GrY9wffwmH2zRP0+MIWIGYv e4tvC/Pu5gwu8eF810G+iHfOmRyfgs6U2Rvd/ii5Ics9CPFtwB/67pgA5U8lL+5x KvGQuIsCYrLgjUkwz/4g7vapCMNQdtqsWNnS8iZK0XGDnvLY8RU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:54 2026 by rpki-client