$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: I4Tyn1hvuZRHsp/qsw5+kWCoHPLJWptGkjVw6EW13i8= Subject key identifier: 3C:28:63:20:83:00:75:3B:97:59:7D:40:B5:2A:E7:D1:6F:BC:A0:A2 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 52C4AF100266FA76F82D3371CB5136F82989395E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0160 Signing time: Fri 06 Mar 2026 04:30:00 +0000 Manifest this update: Fri 06 Mar 2026 04:25:00 +0000 Manifest next update: Mon 09 Mar 2026 08:53:00 +0000 Files and hashes: 1: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: n7QV/SEB1cQMoZsTtXN5FkoaiiZIE4lWs6WbTmCFLqY=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c4:af:10:02:66:fa:76:f8:2d:33:71:cb:51:36:f8:29:89:39:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Mar 6 04:25:00 2026 GMT Not After : Mar 9 08:53:00 2026 GMT Subject: CN=3C2863208300753B97597D40B52AE7D16FBCA0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:04:96:56:cb:29:ff:e5:9e:2f:e8:22:2a: c2:04:a1:da:06:7f:96:cb:70:76:ad:0d:f6:83:e7: 5f:0a:cb:4e:bb:87:c4:0a:68:e6:4d:d0:fb:a2:e3: bb:f9:c8:09:7a:d8:86:29:92:02:97:54:4d:ce:63: d2:07:e8:4d:69:d6:c4:76:71:ab:b7:3d:31:89:69: 75:cf:38:4c:67:11:97:2f:2b:b0:e8:5a:e3:ec:d7: 37:b8:4e:0c:c9:87:d3:00:e1:aa:93:6e:af:ac:c8: fb:17:1e:35:5c:e5:1e:11:b4:ad:b4:fd:7b:2f:6e: b1:92:f9:4e:46:76:34:11:3e:57:af:81:0c:03:5b: 3e:2d:ba:f4:9b:02:d0:e7:b2:1d:33:16:90:d9:a2: 39:f3:2e:36:4b:ff:5c:bc:a7:af:87:4e:3b:4f:1b: ec:81:f1:d0:42:36:22:fd:69:5e:9f:35:d4:21:80: ea:9e:35:47:c3:df:bf:f2:a5:25:ea:bf:eb:f6:95: 8c:61:9f:98:e9:70:d3:22:30:0a:c3:f3:c0:fc:43: 34:c5:ff:83:c1:5e:49:1e:eb:c3:76:c6:2c:b3:3d: 92:f8:77:48:33:61:c4:6a:b5:1d:7f:d9:b8:32:d0: fc:85:b5:21:a2:64:7d:fa:af:68:76:25:15:cf:a3: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:28:63:20:83:00:75:3B:97:59:7D:40:B5:2A:E7:D1:6F:BC:A0:A2 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b4:27:b4:c1:06:6a:19:13:df:f9:f9:af:b6:a8:c4:0b:8a: 6f:63:09:40:ff:b5:d3:73:9a:e9:2f:e3:a9:2a:fb:35:52:cc: a6:7d:ac:52:de:e6:b9:1b:63:c5:09:30:86:d8:91:cb:1c:e2: d8:8f:8a:d9:c6:49:ee:5e:4b:12:df:68:d5:f7:61:80:96:de: 91:92:c1:a7:5e:ec:ae:02:e3:18:bc:48:7c:1f:22:10:ea:ae: f9:e5:e7:0f:ca:a9:f0:22:6f:5f:81:73:4c:2a:a2:38:64:46: a3:61:a1:29:e9:98:a3:a1:fc:85:38:e1:e6:da:37:6b:74:0b: 0e:86:7b:49:4f:35:85:74:dc:13:ee:23:99:01:56:12:44:89: fb:9a:6d:1c:73:43:8d:7c:25:e9:70:34:a0:03:cd:2d:c5:ac: 74:6e:c7:0f:9d:5d:2c:ea:06:c4:15:a9:e8:53:c1:f7:c6:c4: 76:c8:a8:62:50:1b:98:87:c0:67:57:e9:b7:de:48:a4:e3:f6: 22:72:23:21:65:ac:d4:cb:40:80:4b:90:c6:59:86:c2:5a:0d: c6:15:4e:86:70:79:46:3a:50:c3:17:25:45:4c:7e:92:80:15: c2:41:80:c6:2d:d5:bf:53:68:7b:ac:aa:fc:bf:33:7a:56:37: 64:e6:36:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsSvEAJm+nb4LTNxy1E2+CmJOV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNjAzMDYwNDI1MDBaFw0yNjAzMDkwODUzMDBaMDMxMTAvBgNV BAMTKDNDMjg2MzIwODMwMDc1M0I5NzU5N0Q0MEI1MkFFN0QxNkZCQ0EwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCregSWVssp/+WeL+giKsIEodoG f5bLcHatDfaD518Ky067h8QKaOZN0Pui47v5yAl62IYpkgKXVE3OY9IH6E1p1sR2 cau3PTGJaXXPOExnEZcvK7DoWuPs1ze4TgzJh9MA4aqTbq+syPsXHjVc5R4RtK20 /XsvbrGS+U5GdjQRPlevgQwDWz4tuvSbAtDnsh0zFpDZojnzLjZL/1y8p6+HTjtP G+yB8dBCNiL9aV6fNdQhgOqeNUfD37/ypSXqv+v2lYxhn5jpcNMiMArD88D8QzTF /4PBXkke68N2xiyzPZL4d0gzYcRqtR1/2bgy0PyFtSGiZH36r2h2JRXPowmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPChjIIMAdTuXWX1AtSrn0W+8oKIwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe0J7TBBmoZE9/5+a+2qMQLim9jCUD/tdNz mukv46kq+zVSzKZ9rFLe5rkbY8UJMIbYkcsc4tiPitnGSe5eSxLfaNX3YYCW3pGS wade7K4C4xi8SHwfIhDqrvnl5w/KqfAib1+Bc0wqojhkRqNhoSnpmKOh/IU44eba N2t0Cw6Ge0lPNYV03BPuI5kBVhJEifuabRxzQ418JelwNKADzS3FrHRuxw+dXSzq BsQVqehTwffGxHbIqGJQG5iHwGdX6bfeSKTj9iJyIyFlrNTLQIBLkMZZhsJaDcYV ToZweUY6UMMXJUVMfpKAFcJBgMYt1b9TaHusqvy/M3pWN2TmNso= -----END CERTIFICATE-----Generated at Sun Mar 8 00:26:51 2026 by rpki-client