$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: ByLL5U/e4zvEP9DTxWXpWaPHfCWbD/E4QMRvHVxIb/Y= Subject key identifier: 42:0D:BA:3C:8D:FC:E1:2A:44:33:E0:9C:CD:A1:75:18:58:1E:7B:B4 Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 138B87D63BF165E9430B8E7EC00DC7878F7D6166 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: D5 Signing time: Fri 06 Mar 2026 20:21:52 +0000 Manifest this update: Fri 06 Mar 2026 20:16:52 +0000 Manifest next update: Mon 09 Mar 2026 23:37:52 +0000 Files and hashes: 1: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: MULnin5RQl+NkbWrridhIlsZu7cuYWvaEF8Tdq/OfbM=) 2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: Qqyhh99wvN9qzOgai05gzAsYuhy6QSvltygf/7XId1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8b:87:d6:3b:f1:65:e9:43:0b:8e:7e:c0:0d:c7:87:8f:7d:61:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Mar 6 20:16:52 2026 GMT Not After : Mar 9 23:37:52 2026 GMT Subject: CN=420DBA3C8DFCE12A4433E09CCDA17518581E7BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:4b:94:20:02:4f:ee:fd:b4:5b:3d:92:3e: 31:7b:21:3f:8e:9e:5b:58:be:f4:e2:e3:c7:05:b4: 84:48:55:1b:09:18:fd:64:ca:52:12:a5:a6:f5:04: 13:27:56:02:5c:4a:fd:1a:97:f4:9c:45:a9:50:f0: f4:e3:3a:4b:8f:30:b3:b3:c9:c4:02:ff:4c:d5:fe: df:83:e4:41:bd:c6:30:77:6a:ce:ca:f0:ca:96:3e: ae:e8:85:28:2a:0b:62:d1:dc:62:96:5f:9a:ae:a6: 74:99:ad:a6:c5:7a:b1:b8:68:22:f4:16:55:27:90: a8:b6:c2:f1:cd:8e:68:24:85:87:08:99:cd:72:19: d7:5d:fa:26:78:76:54:16:13:3a:f9:cb:e6:dd:4a: 54:11:9b:44:02:37:2f:d1:d0:aa:81:c2:cd:15:16: 2f:c4:3b:c2:3f:ab:71:7c:a0:c0:d6:6d:3f:d4:30: db:34:f5:3b:d3:be:19:f0:b8:9a:d4:0f:f1:8f:e8: a8:91:c4:ef:cd:cd:e2:bd:66:b1:75:77:d0:d9:f5: b5:40:e8:23:86:9e:72:98:7f:b1:b9:9c:7d:d1:6a: c1:8d:eb:5a:ca:de:de:5a:ea:bc:9c:78:e0:b2:29: 72:0c:60:37:ba:02:85:79:67:4f:a2:dd:b3:ed:b7: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:BA:3C:8D:FC:E1:2A:44:33:E0:9C:CD:A1:75:18:58:1E:7B:B4 X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:25:7b:99:c2:61:a3:24:8e:27:df:18:f8:e3:f2:f5:b7:e4: 46:dd:12:07:e1:55:fc:29:9e:50:1d:7f:57:10:c5:9e:6f:33: 49:d1:7b:b1:c9:7c:a6:02:e8:9e:d3:41:4c:d3:b6:41:e7:fd: 6e:9b:5e:15:68:73:30:99:ee:66:49:b8:d1:9b:d5:a1:2a:b2: 9f:e7:fd:5d:e0:78:c8:fd:98:31:8e:15:ca:a9:f6:46:7c:dc: 8a:b0:8c:f9:b8:b6:3d:73:36:1e:f2:59:c9:f3:1e:8b:fc:fe: 30:d1:c4:6f:dc:eb:99:dd:9a:00:2a:76:1f:07:21:f0:8d:86: c1:1e:8e:17:a9:76:1b:5d:c1:aa:ca:76:c1:80:85:9c:c0:e4: 3c:35:b0:18:83:90:90:6a:ad:c7:16:e0:56:d0:92:d7:fd:f4: 99:3c:4d:3e:d1:ed:c7:18:3c:5b:b1:e8:52:56:da:e8:e9:44: 7d:7e:24:b4:19:b6:27:c4:19:b7:e2:65:77:cf:46:44:a5:72: f2:ea:40:dd:7b:0d:73:53:0d:2d:29:26:e6:62:bb:01:80:d0: d3:85:22:d5:ee:17:ed:9e:78:4c:11:df:9c:a7:7e:23:a1:6b: f2:10:52:15:04:cd:28:bd:d4:fb:1d:58:ab:65:e6:3c:8e:5f: e3:73:07:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4uH1jvxZelDC45+wA3Hh499YWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNjAzMDYyMDE2NTJaFw0yNjAzMDkyMzM3NTJaMDMxMTAvBgNV BAMTKDQyMERCQTNDOERGQ0UxMkE0NDMzRTA5Q0NEQTE3NTE4NTgxRTdCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvUuUIAJP7v20Wz2SPjF7IT+O nltYvvTi48cFtIRIVRsJGP1kylISpab1BBMnVgJcSv0al/ScRalQ8PTjOkuPMLOz ycQC/0zV/t+D5EG9xjB3as7K8MqWPq7ohSgqC2LR3GKWX5qupnSZrabFerG4aCL0 FlUnkKi2wvHNjmgkhYcImc1yGddd+iZ4dlQWEzr5y+bdSlQRm0QCNy/R0KqBws0V Fi/EO8I/q3F8oMDWbT/UMNs09TvTvhnwuJrUD/GP6KiRxO/NzeK9ZrF1d9DZ9bVA 6COGnnKYf7G5nH3RasGN61rK3t5a6ryceOCyKXIMYDe6AoV5Z0+i3bPtty9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQg26PI384SpEM+CczaF1GFgee7QwHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIle5nCYaMkjiffGPjj8vW35EbdEgfhVfwp nlAdf1cQxZ5vM0nRe7HJfKYC6J7TQUzTtkHn/W6bXhVoczCZ7mZJuNGb1aEqsp/n /V3geMj9mDGOFcqp9kZ83IqwjPm4tj1zNh7yWcnzHov8/jDRxG/c65ndmgAqdh8H IfCNhsEejhepdhtdwarKdsGAhZzA5Dw1sBiDkJBqrccW4FbQktf99Jk8TT7R7ccY PFux6FJW2ujpRH1+JLQZtifEGbfiZXfPRkSlcvLqQN17DXNTDS0pJuZiuwGA0NOF ItXuF+2eeEwR35ynfiOha/IQUhUEzSi91PsdWKtl5jyOX+NzBwk= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:03 2026 by rpki-client