$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: hNhNonDJcT+53N8XX7ytMla9J8Nms2qv0uLn7LgCwWU= Subject key identifier: C3:F0:C3:B0:DC:9B:33:C9:0F:29:4F:7C:A4:4E:1C:4C:47:A7:C2:5D Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 453819B8CCD153F03E964C7EA1346A04C7296468 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 0559 Signing time: Wed 11 Mar 2026 23:30:46 +0000 Manifest this update: Wed 11 Mar 2026 23:25:46 +0000 Manifest next update: Sun 15 Mar 2026 02:24:46 +0000 Files and hashes: 1: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) 2: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 3: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: QOZ/VRt6+JJj0kNKTfi18Op936w5ueqPV1ER0mBZyxA=) 4: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 5: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 6: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 7: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 8: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 9: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 02:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:38:19:b8:cc:d1:53:f0:3e:96:4c:7e:a1:34:6a:04:c7:29:64:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Mar 11 23:25:46 2026 GMT Not After : Mar 15 02:24:46 2026 GMT Subject: CN=C3F0C3B0DC9B33C90F294F7CA44E1C4C47A7C25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:25:86:eb:0a:ec:73:f1:1a:dc:32:ae:bb:b1: 86:82:a0:5a:68:48:98:c1:56:21:cd:62:48:d1:14: 88:af:b4:99:4b:c0:f7:05:85:b0:4a:1e:5d:da:b3: 24:2f:04:a8:80:ee:f2:12:85:92:3c:da:a9:d2:e2: 18:56:4d:65:ec:49:57:c3:5f:2e:3a:64:3e:37:c9: 06:17:dc:47:96:28:cb:5a:85:28:de:7e:2f:c2:76: 98:5d:1f:75:99:75:5c:5e:3d:61:7b:c9:8c:f3:1f: 2e:03:33:90:97:28:35:d5:cf:ce:1f:fa:0f:8f:fd: e2:9f:e3:72:e9:26:21:8f:7f:26:16:d8:28:77:69: ce:45:a5:92:a5:74:a4:34:00:cc:4e:0a:e1:52:f1: 66:59:29:08:70:e5:e4:ac:8e:db:42:11:f2:d6:cd: 68:bc:7b:87:e1:dc:b9:6c:e4:17:b0:86:f9:35:b2: 5c:11:9f:e6:76:ca:2f:b3:db:1e:d1:93:01:1c:10: ca:41:b7:cb:a2:de:40:ed:fb:90:a6:98:8f:ed:aa: 6d:68:aa:48:d9:c9:a8:e5:2c:35:d4:31:89:30:bb: ef:9e:c7:82:2f:53:10:38:c7:b4:b5:54:7b:c5:52: 6d:f1:b0:6b:18:ec:df:88:cb:13:82:c0:f6:a2:80: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F0:C3:B0:DC:9B:33:C9:0F:29:4F:7C:A4:4E:1C:4C:47:A7:C2:5D X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cd:38:2f:1a:e4:3a:9c:97:73:6a:31:cc:1d:94:b7:55:b3: 26:09:2f:ad:50:30:ce:c7:1a:1f:c0:2d:7e:55:c1:ea:ec:0f: 35:a6:18:6a:c4:91:af:e2:65:ab:3d:f5:99:2a:11:da:7e:bf: c5:64:56:27:c8:6f:33:cf:05:f0:cf:a0:40:45:88:e9:21:8d: 45:e1:14:0c:c8:b4:6b:95:a6:54:c9:8c:63:6d:e0:22:23:f3: 63:94:3b:ae:af:5e:76:6a:19:9d:3e:66:6b:7a:8e:b2:9f:b7: c2:ef:e3:78:2e:90:3c:ce:57:43:1d:25:e4:92:b4:92:41:f8: e1:53:0b:ae:a0:41:9d:75:c9:e1:31:01:c8:cd:79:d4:f8:54: 9a:9c:b0:2d:17:fe:63:39:bd:0b:8e:a9:53:0d:9c:ba:c4:53: 1f:b8:d1:8a:75:22:05:bd:f6:6a:af:62:21:75:a6:bf:33:ed: 79:ec:22:7e:80:96:72:05:c2:cc:9a:be:02:d5:cc:11:30:1f: ce:5f:f3:f0:92:c3:73:fb:64:15:e3:75:29:bb:4c:11:16:5b: 18:4f:cb:52:2e:4e:8d:9e:79:f1:15:a5:ec:42:36:27:a0:b3: 7e:23:ed:35:c5:c7:77:21:6f:6a:dd:b1:e7:53:63:3d:c1:e1: df:f8:85:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTgZuMzRU/A+lkx+oTRqBMcpZGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNjAzMTEyMzI1NDZaFw0yNjAzMTUwMjI0NDZaMDMxMTAvBgNV BAMTKEMzRjBDM0IwREM5QjMzQzkwRjI5NEY3Q0E0NEUxQzRDNDdBN0MyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJYbrCuxz8RrcMq67sYaCoFpo SJjBViHNYkjRFIivtJlLwPcFhbBKHl3asyQvBKiA7vIShZI82qnS4hhWTWXsSVfD Xy46ZD43yQYX3EeWKMtahSjefi/CdphdH3WZdVxePWF7yYzzHy4DM5CXKDXVz84f +g+P/eKf43LpJiGPfyYW2Ch3ac5FpZKldKQ0AMxOCuFS8WZZKQhw5eSsjttCEfLW zWi8e4fh3Lls5Bewhvk1slwRn+Z2yi+z2x7RkwEcEMpBt8ui3kDt+5CmmI/tqm1o qkjZyajlLDXUMYkwu++ex4IvUxA4x7S1VHvFUm3xsGsY7N+IyxOCwPaigMJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/DDsNybM8kPKU98pE4cTEenwl0wHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXNOC8a5Dqcl3NqMcwdlLdVsyYJL61QMM7H Gh/ALX5VwersDzWmGGrEka/iZas99ZkqEdp+v8VkVifIbzPPBfDPoEBFiOkhjUXh FAzItGuVplTJjGNt4CIj82OUO66vXnZqGZ0+Zmt6jrKft8Lv43gukDzOV0MdJeSS tJJB+OFTC66gQZ11yeExAcjNedT4VJqcsC0X/mM5vQuOqVMNnLrEUx+40Yp1IgW9 9mqvYiF1pr8z7XnsIn6AlnIFwsyavgLVzBEwH85f8/CSw3P7ZBXjdSm7TBEWWxhP y1IuTo2eefEVpexCNiegs34j7TXFx3chb2rdsedTYz3B4d/4hQc= -----END CERTIFICATE-----Generated at Fri Mar 13 10:40:00 2026 by rpki-client