$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: hDDFlVakyL53VY/z29WsV3OnEdm3B7krVo9QMq2UHZ4= Subject key identifier: 16:12:4C:57:94:6B:0B:7F:59:F5:4C:91:97:2E:06:40:A0:6D:12:C9 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 3170D0FA0608A18463AAC97FEC47C9E05EB480BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: 0104 Signing time: Tue 17 Mar 2026 09:30:50 +0000 Manifest this update: Tue 17 Mar 2026 09:25:50 +0000 Manifest next update: Fri 20 Mar 2026 11:09:50 +0000 Files and hashes: 1: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) 2: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: XacJ1PvQ+Qq6w95SUtj58pV5mUVjGwreZNIi5mtgsCE=) 3: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: jeWguCwm76CmsJXg1ZgYbmX+MUCuiZr0yr59XcYu9Ow=) 4: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: Q2+L1QHkW+WZ8ylqsVevjwt/6zpxphRcTsrEkEwivMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 11:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:70:d0:fa:06:08:a1:84:63:aa:c9:7f:ec:47:c9:e0:5e:b4:80:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Mar 17 09:25:50 2026 GMT Not After : Mar 20 11:09:50 2026 GMT Subject: CN=16124C57946B0B7F59F54C91972E0640A06D12C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:9a:77:7a:2d:d3:b8:61:bf:57:b3:92:3b: 40:57:89:12:ae:be:7b:f7:14:65:c8:3f:64:1f:59: b6:0a:18:90:11:35:1b:c0:18:88:8f:d8:e7:ec:a4: 0d:f9:85:58:29:6b:77:c9:3b:95:a5:b1:34:18:63: 40:eb:8a:05:d5:d1:86:b7:e8:2e:6a:44:49:1c:a9: 97:37:cb:30:49:cd:3a:a0:5a:c0:ba:0f:d0:28:b9: df:b1:58:9a:91:28:f7:4e:7e:c1:12:48:48:b7:52: 0c:d0:30:ba:1b:3a:e2:0c:24:98:29:49:e6:49:b0: a7:fb:a9:b1:c7:67:33:4e:e6:0d:2a:13:2b:30:60: ee:47:5e:f5:02:6c:86:a3:97:f3:e1:7b:18:dd:ac: 02:aa:88:93:41:58:2e:d2:60:0a:cb:f0:21:36:f6: f8:f7:7f:a7:02:2b:16:ed:c1:9a:6c:1f:67:19:43: 42:12:c1:ba:fb:94:05:a1:12:1d:35:3d:32:6e:17: ac:fb:4d:ed:15:38:15:1f:e7:0d:c9:17:51:35:28: c8:74:06:3c:fd:e4:36:ef:5f:27:5d:d7:33:49:df: 01:94:75:f4:84:84:fa:cb:d4:e1:b2:5a:ef:27:77: ff:f3:21:94:3b:e4:61:53:90:89:9f:b5:5a:8c:8f: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:12:4C:57:94:6B:0B:7F:59:F5:4C:91:97:2E:06:40:A0:6D:12:C9 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9d:22:30:23:9c:5f:07:34:75:72:a0:e6:aa:1f:1c:9c:d9: f9:ed:ce:c0:e4:bf:22:6e:32:93:01:d9:67:65:52:86:dc:b4: 20:f3:53:fe:68:5d:0f:6c:81:d5:63:ac:50:29:14:f8:18:1d: 90:ae:32:23:cd:fa:cc:86:fa:e0:29:57:0d:af:b3:26:ff:07: a2:80:46:93:1c:1a:76:81:b7:7d:81:17:4b:17:e3:75:52:bf: 1d:b1:3a:1f:d5:2a:38:6b:24:54:30:90:10:61:7a:06:68:74: d2:19:81:9b:4e:fb:75:91:4b:8c:cb:aa:82:aa:31:bd:7c:d2: 9e:39:35:3d:fa:0a:ea:f7:b1:4f:3d:09:27:ca:25:d8:d4:f3: 7b:f8:c9:71:a3:bf:98:c7:b1:a4:95:02:4a:55:b3:3f:4b:55: fe:27:63:46:4b:73:11:74:8d:ff:86:36:99:c4:6a:06:24:16: 01:18:de:75:b6:f4:82:c5:82:ea:df:42:31:20:a5:7e:37:72: ea:4f:b6:43:75:eb:6e:76:b3:17:90:03:a9:6f:e2:4e:3e:30: 8f:6d:5d:43:24:79:0e:f5:33:60:d2:ae:c3:5d:18:25:f0:af: 39:f9:51:31:04:c7:e9:57:85:c0:87:33:74:ba:e2:29:dd:60: 76:b7:54:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXDQ+gYIoYRjqsl/7EfJ4F60gLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNjAzMTcwOTI1NTBaFw0yNjAzMjAxMTA5NTBaMDMxMTAvBgNV BAMTKDE2MTI0QzU3OTQ2QjBCN0Y1OUY1NEM5MTk3MkUwNjQwQTA2RDEyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQJp3ei3TuGG/V7OSO0BXiRKu vnv3FGXIP2QfWbYKGJARNRvAGIiP2OfspA35hVgpa3fJO5WlsTQYY0DrigXV0Ya3 6C5qREkcqZc3yzBJzTqgWsC6D9Aoud+xWJqRKPdOfsESSEi3UgzQMLobOuIMJJgp SeZJsKf7qbHHZzNO5g0qEyswYO5HXvUCbIajl/PhexjdrAKqiJNBWC7SYArL8CE2 9vj3f6cCKxbtwZpsH2cZQ0ISwbr7lAWhEh01PTJuF6z7Te0VOBUf5w3JF1E1KMh0 Bjz95DbvXydd1zNJ3wGUdfSEhPrL1OGyWu8nd//zIZQ75GFTkImftVqMj7lvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFhJMV5RrC39Z9UyRly4GQKBtEskwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqdIjAjnF8HNHVyoOaqHxyc2fntzsDkvyJu MpMB2WdlUobctCDzU/5oXQ9sgdVjrFApFPgYHZCuMiPN+syG+uApVw2vsyb/B6KA RpMcGnaBt32BF0sX43VSvx2xOh/VKjhrJFQwkBBhegZodNIZgZtO+3WRS4zLqoKq Mb180p45NT36Cur3sU89CSfKJdjU83v4yXGjv5jHsaSVAkpVsz9LVf4nY0ZLcxF0 jf+GNpnEagYkFgEY3nW29ILFgurfQjEgpX43cupPtkN16252sxeQA6lv4k4+MI9t XUMkeQ71M2DSrsNdGCXwrzn5UTEEx+lXhcCHM3S64indYHa3VI8= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:33 2026 by rpki-client