$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: 4+Pqf7/E+xeWf15nQlEa4HGxLlgy8b3R528zWRwonGA= Subject key identifier: 1F:C4:27:09:AC:0D:B5:FC:DC:38:CA:B8:03:7C:37:C1:1B:50:2E:F1 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 26C3982359F240962083E3026EA0B0D708B4C19D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 056E Signing time: Sun 26 Apr 2026 08:10:46 +0000 Manifest this update: Sun 26 Apr 2026 08:05:46 +0000 Manifest next update: Wed 29 Apr 2026 14:31:46 +0000 Files and hashes: 1: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: aDCNwTx4+/wreTlDABxLCHNvMsYlGQvZ9qBNMNYjgZg=) 2: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 3: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: WplBo0t4YQUSTapJFHuCcxT7BO6LGqlHNCkF8lt5eD0=) 4: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) 5: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 6: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 7: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 8: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 9: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 14:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c3:98:23:59:f2:40:96:20:83:e3:02:6e:a0:b0:d7:08:b4:c1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Apr 26 08:05:46 2026 GMT Not After : Apr 29 14:31:46 2026 GMT Subject: CN=1FC42709AC0DB5FCDC38CAB8037C37C11B502EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:71:19:fc:7d:1e:10:99:37:df:e2:1c:ed: e1:af:91:d1:b8:c6:9f:fe:fa:dd:bd:3f:6d:b8:a2: 16:7d:2f:08:75:81:d9:46:b8:97:7d:a9:c3:04:a4: de:0a:63:35:e1:da:3a:1e:02:be:4b:b4:ea:d3:cf: b4:4c:46:e3:90:99:cb:f0:56:09:aa:c7:3f:82:e2: b5:be:7a:e9:d4:11:ce:e9:81:bd:a6:10:c8:b6:b7: d5:c0:aa:37:0f:50:75:19:94:b9:6a:eb:74:71:39: fc:ca:a1:30:30:cc:a9:25:15:69:52:bd:d0:31:80: c5:cc:f4:2a:dd:c5:6c:1a:43:4d:8a:9e:55:da:8e: ea:ea:b7:50:f6:a6:b3:5e:94:39:52:5a:3b:08:ee: 23:3d:f2:85:c3:8f:79:1a:11:0a:34:59:c9:81:4e: 81:2b:e3:dd:d0:72:87:96:53:e6:68:da:0a:23:78: 16:fb:30:4f:16:0b:91:02:3f:24:c8:ad:b6:3c:4d: 51:a5:10:a7:d1:fa:e8:15:3e:4f:84:af:32:59:96: 3e:d6:99:23:57:db:a6:6c:14:91:08:13:74:c0:bc: df:9e:7b:b2:bd:94:a1:c4:02:9c:49:6b:d2:6e:d5: 5f:1f:6f:7d:44:91:bd:24:4c:e4:a1:7a:65:54:c8: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:27:09:AC:0D:B5:FC:DC:38:CA:B8:03:7C:37:C1:1B:50:2E:F1 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1f:ea:99:73:f6:d2:aa:d3:e6:95:ff:43:ab:d5:55:f4:5b: 8a:37:85:b5:9e:72:16:a3:5e:d9:e2:14:c7:ee:28:f7:03:66: 27:82:8e:88:f9:75:10:01:a9:89:d2:c1:24:b7:0a:62:f4:ba: 1a:19:7c:30:97:fb:0b:0c:0a:c4:4e:8f:b6:64:94:11:cc:6b: b7:a5:89:6b:3e:b2:71:1d:b0:f0:8c:92:27:a1:ea:80:88:c5: 08:01:a6:dc:5c:94:44:04:01:5a:93:5f:18:df:98:14:01:b2: aa:42:69:5b:ea:3c:72:fb:dd:e8:ea:09:37:7f:4f:00:d9:03: 0d:31:a4:3f:eb:85:ca:78:bf:64:61:59:65:36:e9:cd:b4:20: 1b:92:e0:c9:26:b6:b4:e5:c0:49:0e:9f:0b:ed:44:74:88:3f: 87:1b:ef:03:b0:fe:a0:55:8b:50:d7:8c:43:0c:77:13:10:ab: 9e:4d:20:a5:62:2f:26:97:d3:7d:70:4e:6f:46:4f:e0:da:bf: 45:4b:74:0f:24:83:a0:e2:10:dd:c8:54:7f:b1:da:d8:2f:9f: 71:f4:8c:80:90:7b:ba:6e:3b:76:23:6f:ca:69:08:50:7d:25: 88:2e:50:00:bd:b4:ad:46:34:12:61:49:67:10:09:16:b5:1f: 58:3f:c9:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsOYI1nyQJYgg+MCbqCw1wi0wZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNjA0MjYwODA1NDZaFw0yNjA0MjkxNDMxNDZaMDMxMTAvBgNV BAMTKDFGQzQyNzA5QUMwREI1RkNEQzM4Q0FCODAzN0MzN0MxMUI1MDJFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMnEZ/H0eEJk33+Ic7eGvkdG4 xp/++t29P224ohZ9Lwh1gdlGuJd9qcMEpN4KYzXh2joeAr5LtOrTz7RMRuOQmcvw Vgmqxz+C4rW+eunUEc7pgb2mEMi2t9XAqjcPUHUZlLlq63RxOfzKoTAwzKklFWlS vdAxgMXM9CrdxWwaQ02KnlXajurqt1D2prNelDlSWjsI7iM98oXDj3kaEQo0WcmB ToEr493QcoeWU+Zo2gojeBb7ME8WC5ECPyTIrbY8TVGlEKfR+ugVPk+ErzJZlj7W mSNX26ZsFJEIE3TAvN+ee7K9lKHEApxJa9Ju1V8fb31Ekb0kTOShemVUyOonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH8QnCawNtfzcOMq4A3w3wRtQLvEwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcf6plz9tKq0+aV/0Or1VX0W4o3hbWechaj XtniFMfuKPcDZieCjoj5dRABqYnSwSS3CmL0uhoZfDCX+wsMCsROj7ZklBHMa7el iWs+snEdsPCMkieh6oCIxQgBptxclEQEAVqTXxjfmBQBsqpCaVvqPHL73ejqCTd/ TwDZAw0xpD/rhcp4v2RhWWU26c20IBuS4MkmtrTlwEkOnwvtRHSIP4cb7wOw/qBV i1DXjEMMdxMQq55NIKViLyaX031wTm9GT+Dav0VLdA8kg6DiEN3IVH+x2tgvn3H0 jICQe7puO3Yjb8ppCFB9JYguUAC9tK1GNBJhSWcQCRa1H1g/yXU= -----END CERTIFICATE-----Generated at Mon Apr 27 23:18:28 2026 by rpki-client