$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: EBjwrD4uSzqlynZGopIthLDMmM1xzsF0LAKG7h1odEo= Subject key identifier: 34:B0:B9:37:3C:3C:04:5E:DE:78:F1:13:D5:F2:12:68:30:1C:BD:72 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 01EB50544CE1468AA621B6A797F811BCA3AC4DB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: BB Signing time: Thu 05 Mar 2026 13:52:12 +0000 Manifest this update: Thu 05 Mar 2026 13:47:12 +0000 Manifest next update: Sun 08 Mar 2026 22:15:12 +0000 Files and hashes: 1: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: q0+Lb10iTvgmogcnM/s/GB8t1q4rVqXg3ULOYtO9rEk=) 2: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: gP6dAzMR/WXv6bwbVfa+d+Rc9Y0EVWXjuXcT3Exr1xI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:eb:50:54:4c:e1:46:8a:a6:21:b6:a7:97:f8:11:bc:a3:ac:4d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Mar 5 13:47:12 2026 GMT Not After : Mar 8 22:15:12 2026 GMT Subject: CN=34B0B9373C3C045EDE78F113D5F21268301CBD72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:89:d7:c0:bd:7c:4d:36:2f:5d:9d:58:cf: d9:b2:d9:07:02:7a:02:fb:b4:2b:38:cc:b0:ea:fd: 1d:b6:f5:ac:bf:a3:d0:80:30:6f:5b:fa:d1:f9:38: 4f:a2:ea:e0:87:14:55:8b:b0:d9:7b:d2:47:d7:49: 61:9a:a4:ff:80:fe:fb:ca:7b:77:63:c7:c4:c2:52: 2c:5a:fb:0b:1f:a2:40:c7:cf:bf:3a:81:c0:2d:8a: 6f:ed:35:10:8e:cc:17:ec:eb:2e:8e:71:0d:3a:9f: e2:b3:06:be:01:30:44:e8:84:23:dd:28:c8:15:22: 9a:f2:93:85:e8:18:6d:eb:90:62:2d:87:95:b2:fb: 11:49:09:ac:6b:ed:4d:46:9e:23:a2:14:f6:6a:12: 93:9a:65:b8:4c:f9:3c:4b:17:36:a8:d1:bd:30:f1: 91:7f:40:05:62:42:b2:6a:74:2e:ee:7d:4e:25:9f: 9e:19:00:5d:4e:44:b4:ec:27:af:35:e1:f1:b4:82: 33:e4:aa:54:6e:fc:6f:cc:3d:16:0d:6c:68:02:86: ab:d6:07:03:f2:5d:c5:71:d4:bd:72:ce:50:fd:c2: 88:27:40:b6:ab:2c:bd:17:99:08:ff:e2:71:08:b0: c6:aa:30:69:ff:fe:04:0f:37:9c:07:55:f2:b9:9b: 3c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B0:B9:37:3C:3C:04:5E:DE:78:F1:13:D5:F2:12:68:30:1C:BD:72 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c5:5f:dc:ad:d8:7f:15:01:6d:47:d5:2a:82:04:14:5c:42: b7:36:1a:d4:ef:68:4a:75:b8:d9:91:b1:8c:48:51:8a:59:ed: 2d:7f:88:ed:5e:4e:2a:ec:0a:02:c3:81:12:6e:d7:61:cb:de: e5:9d:b9:cd:22:44:ca:02:10:68:e2:58:05:7d:94:e3:1e:db: 96:30:5c:a7:ed:00:9e:b9:8e:93:45:35:20:c8:17:a3:3a:cd: 7b:85:16:c5:34:e5:14:e4:6b:e4:99:71:70:6d:6d:10:b9:c0: 72:8f:80:bf:8f:ec:cf:61:f2:41:9e:5b:26:11:8c:e3:9e:ff: ee:8b:e9:47:b3:3b:5f:8f:7f:2b:09:4a:95:d1:e6:89:b5:ee: d9:82:8a:d6:70:fa:9c:4e:53:e6:34:b4:7b:52:d0:df:8b:cf: c7:18:32:05:0b:58:f6:a5:7f:3e:45:f2:c3:33:be:56:29:c2: b4:36:75:2c:11:0a:10:ce:63:0a:74:ca:0f:4a:7b:36:f5:52: 14:0c:01:f8:5a:2d:10:f7:8d:f8:73:62:bd:f7:e0:f7:56:07: ac:fe:65:91:fb:57:ae:8a:7e:c4:d1:16:22:b0:e3:04:61:5e: 8a:b8:4f:28:1b:a1:03:95:c7:4d:2b:e7:f7:a5:0b:02:35:b5: 2b:f1:f5:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAetQVEzhRoqmIbanl/gRvKOsTbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNjAzMDUxMzQ3MTJaFw0yNjAzMDgyMjE1MTJaMDMxMTAvBgNV BAMTKDM0QjBCOTM3M0MzQzA0NUVERTc4RjExM0Q1RjIxMjY4MzAxQ0JENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfYnXwL18TTYvXZ1Yz9my2QcC egL7tCs4zLDq/R229ay/o9CAMG9b+tH5OE+i6uCHFFWLsNl70kfXSWGapP+A/vvK e3djx8TCUixa+wsfokDHz786gcAtim/tNRCOzBfs6y6OcQ06n+KzBr4BMETohCPd KMgVIpryk4XoGG3rkGIth5Wy+xFJCaxr7U1GniOiFPZqEpOaZbhM+TxLFzao0b0w 8ZF/QAViQrJqdC7ufU4ln54ZAF1ORLTsJ6814fG0gjPkqlRu/G/MPRYNbGgChqvW BwPyXcVx1L1yzlD9wognQLarLL0XmQj/4nEIsMaqMGn//gQPN5wHVfK5mzzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLC5Nzw8BF7eePET1fISaDAcvXIwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnFX9yt2H8VAW1H1SqCBBRcQrc2GtTvaEp1 uNmRsYxIUYpZ7S1/iO1eTirsCgLDgRJu12HL3uWduc0iRMoCEGjiWAV9lOMe25Yw XKftAJ65jpNFNSDIF6M6zXuFFsU05RTka+SZcXBtbRC5wHKPgL+P7M9h8kGeWyYR jOOe/+6L6UezO1+PfysJSpXR5om17tmCitZw+pxOU+Y0tHtS0N+Lz8cYMgULWPal fz5F8sMzvlYpwrQ2dSwRChDOYwp0yg9Kezb1UhQMAfhaLRD3jfhzYr334PdWB6z+ ZZH7V66KfsTRFiKw4wRhXoq4TygboQOVx00r5/elCwI1tSvx9T8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:02 2026 by rpki-client