$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: sHqZJznF4IKmj2Ymu+wDyD8IexPyD/zimFojjLklrXs= Subject key identifier: B4:2C:AC:0B:35:05:95:CC:BA:F0:EA:80:1F:9B:E0:53:D5:41:3B:C1 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 043A954D54E6E019E245BDB53D40BD08B694D277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01DA Signing time: Sat 07 Mar 2026 21:31:47 +0000 Manifest this update: Sat 07 Mar 2026 21:26:47 +0000 Manifest next update: Wed 11 Mar 2026 00:51:47 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: XpfKRKn/aePFL2Um700oqFvEnzDkELByApcE+JeDEyc=) 2: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: e1kgKLQWxCN2WS1oUnTk2afyUgHI6GGRhi7Epl0ZMDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3a:95:4d:54:e6:e0:19:e2:45:bd:b5:3d:40:bd:08:b6:94:d2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Mar 7 21:26:47 2026 GMT Not After : Mar 11 00:51:47 2026 GMT Subject: CN=B42CAC0B350595CCBAF0EA801F9BE053D5413BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:8a:5e:99:e4:97:d0:fc:f3:40:67:58:35: 09:22:38:f2:81:a7:89:7e:c1:3e:22:a0:af:38:1d: d2:a1:0b:f1:d7:6d:3d:e0:d3:89:dd:93:1f:01:cd: 04:07:d4:64:1e:9f:5e:6d:d7:0d:ba:66:30:bb:b2: eb:f8:53:b6:0b:1e:94:ef:91:c3:0b:8a:e7:46:97: d2:5d:44:d7:d4:75:7e:b7:e1:98:88:ca:fe:5f:d4: eb:18:3c:43:7a:2f:0b:5e:e9:f6:66:22:77:35:27: 2a:54:ae:6b:5d:f8:b1:43:0c:d6:73:9b:c4:7b:4a: da:a4:cb:3c:8a:2e:07:dd:67:14:98:d2:db:8a:ce: 77:35:4c:0c:ba:39:83:84:71:5e:5f:15:3b:8b:12: 31:4d:c0:02:32:f1:58:ea:b1:c4:24:da:ad:fc:f7: 21:1a:3d:09:13:d1:2b:5a:17:87:2d:fd:33:83:26: ee:35:43:b5:2f:1d:26:ae:a0:0f:1c:85:0d:6a:4a: fa:51:0c:a0:fc:87:e0:5e:f3:1e:4c:17:1b:fb:ce: fa:1b:72:4c:53:2f:71:28:bc:51:20:88:0a:85:9a: 21:7b:25:37:0f:62:c1:e6:4b:47:58:d2:e8:b1:ff: b2:5d:12:08:1f:49:49:af:8c:7f:6f:fc:64:d3:25: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2C:AC:0B:35:05:95:CC:BA:F0:EA:80:1F:9B:E0:53:D5:41:3B:C1 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4d:be:3a:64:7f:a8:23:b9:9d:b4:26:1e:6e:d5:1e:67:66: 40:4d:0b:bb:0d:bc:05:9e:cd:96:5c:9a:f4:3f:8d:a4:47:1c: 9b:e4:b3:f5:a6:12:5d:e5:f9:07:56:76:dd:5a:98:28:66:a6: 9d:3f:b5:2d:56:30:1c:c5:80:4c:cb:d9:7c:57:92:29:62:df: 78:92:7a:00:b2:6b:7d:8a:73:79:57:53:d3:9b:82:d7:64:2d: d0:51:d3:97:d8:03:e1:b8:59:77:ba:06:10:10:60:6b:4e:3a: ca:6c:6e:88:8f:a8:fe:99:6a:ff:07:98:49:53:73:f1:34:3d: 63:55:4e:5b:57:43:3e:fd:5c:7d:ca:cb:60:5b:c7:7c:de:80: d3:ba:b6:14:55:18:ea:fc:cf:99:12:68:0e:b2:fd:d8:58:23: d0:1d:35:4f:b2:4c:d0:fa:49:e8:b6:20:10:9d:52:54:d0:f6: 11:af:a5:b2:4a:cd:13:ef:ca:ec:60:1c:ae:e8:1b:e1:ec:df: 20:bd:9f:59:48:2f:70:2b:6b:a4:91:49:73:8a:df:8c:5b:2c: 6d:a2:a9:3b:4f:5a:d0:aa:9c:a4:78:eb:2d:96:73:bf:b6:e0: 72:55:00:13:dd:24:65:4b:9f:30:37:cf:0f:e8:85:42:7b:b1: 7b:b0:38:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDqVTVTm4BniRb21PUC9CLaU0ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNjAzMDcyMTI2NDdaFw0yNjAzMTEwMDUxNDdaMDMxMTAvBgNV BAMTKEI0MkNBQzBCMzUwNTk1Q0NCQUYwRUE4MDFGOUJFMDUzRDU0MTNCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqYpemeSX0PzzQGdYNQkiOPKB p4l+wT4ioK84HdKhC/HXbT3g04ndkx8BzQQH1GQen15t1w26ZjC7suv4U7YLHpTv kcMLiudGl9JdRNfUdX634ZiIyv5f1OsYPEN6Lwte6fZmInc1JypUrmtd+LFDDNZz m8R7StqkyzyKLgfdZxSY0tuKznc1TAy6OYOEcV5fFTuLEjFNwAIy8VjqscQk2q38 9yEaPQkT0StaF4ct/TODJu41Q7UvHSauoA8chQ1qSvpRDKD8h+Be8x5MFxv7zvob ckxTL3EovFEgiAqFmiF7JTcPYsHmS0dY0uix/7JdEggfSUmvjH9v/GTTJbbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCysCzUFlcy68OqAH5vgU9VBO8EwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFNvjpkf6gjuZ20Jh5u1R5nZkBNC7sNvAWe zZZcmvQ/jaRHHJvks/WmEl3l+QdWdt1amChmpp0/tS1WMBzFgEzL2XxXkili33iS egCya32Kc3lXU9ObgtdkLdBR05fYA+G4WXe6BhAQYGtOOspsboiPqP6Zav8HmElT c/E0PWNVTltXQz79XH3Ky2Bbx3zegNO6thRVGOr8z5kSaA6y/dhYI9AdNU+yTND6 Sei2IBCdUlTQ9hGvpbJKzRPvyuxgHK7oG+Hs3yC9n1lIL3Ara6SRSXOK34xbLG2i qTtPWtCqnKR46y2Wc7+24HJVABPdJGVLnzA3zw/ohUJ7sXuwOKI= -----END CERTIFICATE-----Generated at Sun Mar 8 00:36:57 2026 by rpki-client